$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/566746e7-a3c6-4feb-92d3-cb86da2d7cd9.roa File: 566746e7-a3c6-4feb-92d3-cb86da2d7cd9.roa (raw, json) Hash identifier: oCr9eACIyiENfX2Z04a5s4V/JuIv0/NwixKV2NN3l9c= Subject key identifier: B3:33:83:EE:0F:21:70:A1:81:3F:FA:CD:E0:3A:CB:A5:DC:7F:FC:FB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 536CCD93BFEC300B82BA4302EEEBEDEE28877375 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/566746e7-a3c6-4feb-92d3-cb86da2d7cd9.roa Signing time: Fri 22 May 2026 17:03:18 +0000 ROA not before: Fri 22 May 2026 17:03:18 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6c:cd:93:bf:ec:30:0b:82:ba:43:02:ee:eb:ed:ee:28:87:73:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:03:18 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=2c05cff31dac7abf7a51c68742075a7acfb89f14a1d46ecb65ea4c78bd368942, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:02:8c:54:e8:6f:fa:fe:2b:a6:f1:71:81: 74:50:5b:73:de:f2:f8:45:81:ce:00:a6:20:ea:23: 9e:05:b0:7e:c4:a7:fd:bd:3a:be:07:f1:86:44:a0: d4:d6:8d:1e:01:db:4d:1a:03:f3:36:f0:c6:95:a2: 52:30:2e:59:0d:30:d3:f6:f5:d9:dd:19:2e:a3:60: 2e:03:5f:df:45:66:08:0c:41:d9:1d:f8:e5:fb:aa: a8:5c:4d:1f:24:64:e1:83:0d:76:cc:0e:17:4c:34: f2:88:22:1b:d4:cb:9d:28:bf:d6:7e:67:65:e9:10: d7:19:7d:fc:af:ed:30:c3:4b:8d:f6:54:e1:49:61: 3a:d6:c7:69:20:5e:77:24:52:43:4a:50:bc:4f:f5: ba:10:e9:0b:a7:59:6e:ee:84:44:13:a3:d2:fe:74: 5b:a1:4a:33:8d:f7:8b:47:b0:df:1a:b8:c2:90:64: dd:50:1a:75:f7:d8:60:91:79:f8:1d:75:df:58:1c: 8f:0c:d5:a9:01:15:fe:8f:4c:93:6f:df:13:25:55: 5c:82:f0:b3:06:1a:e6:03:5b:52:3f:54:ce:69:d4: cc:37:b3:c7:b5:00:6f:8a:85:41:5d:75:a2:4e:4e: 70:a8:5a:ca:f4:4d:de:a1:63:49:eb:0d:23:6a:46: a5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:33:83:EE:0F:21:70:A1:81:3F:FA:CD:E0:3A:CB:A5:DC:7F:FC:FB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/566746e7-a3c6-4feb-92d3-cb86da2d7cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:e040::/48 Signature Algorithm: sha256WithRSAEncryption 52:b6:a7:17:1f:5f:4a:0b:82:1f:5b:08:44:1f:47:5d:4a:bb: d5:48:c4:13:b5:32:33:84:40:8b:81:8c:07:2a:1d:04:aa:7f: 20:7f:57:1a:4b:f7:ca:d1:52:22:87:74:55:39:c0:82:a3:32: 43:e2:bd:45:ad:42:4f:1c:66:54:1a:78:3d:94:2f:21:dc:51: 48:10:88:13:cc:6f:f8:14:22:b7:b7:9b:b6:12:37:70:db:19: bb:12:7f:d2:8d:ea:9f:bb:19:9e:db:e1:42:42:64:c3:bf:3f: cd:0c:39:56:73:31:a4:bf:d4:4e:64:fd:ce:a4:5b:0f:48:59: b3:c7:68:5b:a6:f3:85:dc:14:16:08:7f:8a:3a:2c:20:92:db: 6a:ac:c6:f7:7d:fd:0d:89:d5:df:fa:a8:cb:f6:b8:95:ab:b8: 7e:31:d7:7b:1b:4f:b5:2d:c8:41:c1:91:3e:83:8b:a5:77:79: b7:5d:5c:9d:28:a7:37:f6:0f:0b:3b:37:5f:81:d8:7f:18:4f: 06:70:91:e3:a1:49:3d:91:4a:95:b8:b5:a6:08:99:b1:a7:0d: 1d:9a:b1:5c:b3:7c:42:ef:5f:03:6a:3d:8b:56:59:68:81:3d: c8:38:a2:91:c0:5e:9c:2e:d1:8a:37:07:56:b2:ad:d3:60:d4: 90:7c:61:a2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUU2zNk7/sMAuCukMC7uvt7iiHc3UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MDMxOFoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAMmMwNWNmZjMxZGFjN2FiZjdhNTFj Njg3NDIwNzVhN2FjZmI4OWYxNGExZDQ2ZWNiNjVlYTRjNzhiZDM2ODk0MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05ECjFTob/r+K6bxcYF0UFtz3vL4 RYHOAKYg6iOeBbB+xKf9vTq+B/GGRKDU1o0eAdtNGgPzNvDGlaJSMC5ZDTDT9vXZ 3Rkuo2AuA1/fRWYIDEHZHfjl+6qoXE0fJGThgw12zA4XTDTyiCIb1MudKL/Wfmdl 6RDXGX38r+0ww0uN9lThSWE61sdpIF53JFJDSlC8T/W6EOkLp1lu7oREE6PS/nRb oUozjfeLR7DfGrjCkGTdUBp199hgkXn4HXXfWByPDNWpARX+j0yTb98TJVVcgvCz BhrmA1tSP1TOadTMN7PHtQBvioVBXXWiTk5wqFrK9E3eoWNJ6w0jakalfwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLMzg+4PIXChgT/6zeA6y6Xcf/z7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2Njc0NmU3LWEzYzYtNGZlYi05MmQzLWNiODZkYTJkN2NkOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6OBAMA0GCSqGSIb3DQEBCwUAA4IBAQBStqcXH19KC4IfWwhE H0ddSrvVSMQTtTIzhECLgYwHKh0Eqn8gf1caS/fK0VIih3RVOcCCozJD4r1FrUJP HGZUGng9lC8h3FFIEIgTzG/4FCK3t5u2Ejdw2xm7En/Sjeqfuxme2+FCQmTDvz/N DDlWczGkv9ROZP3OpFsPSFmzx2hbpvOF3BQWCH+KOiwgkttqrMb3ff0NidXf+qjL 9riVq7h+Mdd7G0+1LchBwZE+g4uld3m3XVydKKc39g8LOzdfgdh/GE8GcJHjoUk9 kUqVuLWmCJmxpw0dmrFcs3xC718Daj2LVllogT3IOKKRwF6cLtGKNwdWsq3TYNSQ fGGi -----END CERTIFICATE-----Generated at Sun May 24 12:18:45 2026 by rpki-client