$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a2aa529-34aa-4a28-a0a2-4f6f80f999d7.roa File: 5a2aa529-34aa-4a28-a0a2-4f6f80f999d7.roa (raw, json) Hash identifier: kgsWDDGiv+UJgJQp2BRrPgHPMbdDgCOhHtgChuQ/72g= Subject key identifier: 5B:29:77:46:C7:11:EA:E2:79:5D:3A:8B:D2:AC:A0:BA:4D:0A:5B:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12E2DACDF888D9BBCB36D37C5E91A7FEBAD9283D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a2aa529-34aa-4a28-a0a2-4f6f80f999d7.roa Signing time: Fri 22 May 2026 17:01:32 +0000 ROA not before: Fri 22 May 2026 17:01:32 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e2:da:cd:f8:88:d9:bb:cb:36:d3:7c:5e:91:a7:fe:ba:d9:28:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:01:32 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=5a59a642b738bb5608d79f64629251f4b4df00d6b9d8b3b7ddbd4842c02ddd4d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:12:d5:17:4a:b7:a5:84:fb:56:fd:18:e6:cd: 4e:45:4a:10:3e:2b:50:d1:10:43:0a:97:95:4d:0d: 2b:9e:bd:36:95:18:07:11:4d:52:a7:1d:01:07:18: 24:f0:89:e4:2a:90:cf:c8:e7:ad:54:15:c0:cb:96: ff:f2:8c:72:85:ec:18:06:f3:68:4c:28:ea:bf:10: ab:31:c8:ec:0d:23:d7:da:55:6f:81:c6:59:8b:17: a0:51:8e:7d:69:d1:0f:ca:6f:fd:a2:47:45:14:a6: 49:63:74:61:1b:e2:f4:b2:03:2b:72:49:ab:fd:5f: 44:21:00:45:a4:18:37:30:f6:9a:87:1d:20:f2:d9: 10:6b:b4:8e:61:43:7c:3a:c1:d8:41:3d:c1:58:af: 59:1b:b5:0e:db:25:c5:2c:00:97:c1:2c:a4:1e:56: 17:4d:0b:0c:b6:06:d9:31:90:ad:91:63:ec:f3:10: 18:07:45:8b:3f:6a:25:10:83:36:30:31:8e:30:34: 45:ce:19:55:08:87:00:56:3d:6f:57:15:84:dc:94: 1f:98:05:4a:d4:07:a4:66:30:59:58:81:7f:2c:cf: c8:34:45:0b:84:d6:01:0c:cc:2f:0c:be:36:8c:eb: 14:95:2e:a6:a3:bc:9e:00:20:3b:d9:9f:8d:a5:de: 88:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:29:77:46:C7:11:EA:E2:79:5D:3A:8B:D2:AC:A0:BA:4D:0A:5B:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a2aa529-34aa-4a28-a0a2-4f6f80f999d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 45:e4:a6:95:a1:03:2d:3e:d8:36:6b:ce:8b:18:c4:9f:97:be: 9a:39:50:1c:52:0b:6d:f0:ca:97:dd:de:7a:33:b7:3d:bd:82: e5:18:f1:07:28:e0:d2:25:fa:93:fa:4a:28:96:63:18:ec:d6: 5b:15:17:82:59:42:4e:cb:f5:4a:96:8c:d3:45:f0:c9:22:26: 61:ce:e9:be:fe:b2:df:36:06:5d:76:28:3a:3c:46:e2:33:61: c1:e1:33:ea:14:a4:7f:a3:ac:cc:2b:af:3a:81:ea:b5:68:30: 49:8d:f4:a3:a7:22:f6:51:dd:43:96:e2:63:5e:8b:5f:07:cc: f6:44:99:da:84:07:b6:69:98:de:78:7d:1d:4b:95:eb:00:3b: 30:3d:a6:d3:52:9a:94:7d:1a:c4:3e:ef:a0:74:75:6c:6c:f4: 51:a9:2d:5f:5c:cf:45:4c:bc:e1:8d:fd:29:c3:33:a3:ed:4a: 25:11:71:86:25:73:85:4a:41:fc:f6:ba:87:ae:6c:0e:f6:ca: fd:3b:61:c4:4a:51:11:b5:c0:43:1f:46:d3:09:86:c9:e7:8c: 88:a2:83:cd:66:23:85:de:95:d5:4c:9d:40:c3:40:da:e6:49: f6:eb:c9:49:d4:f7:63:af:c6:eb:49:84:38:b8:a5:a5:47:f2: b5:5f:96:6a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEuLazfiI2bvLNtN8XpGn/rrZKD0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MDEzMloX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNANWE1OWE2NDJiNzM4YmI1NjA4ZDc5 ZjY0NjI5MjUxZjRiNGRmMDBkNmI5ZDhiM2I3ZGRiZDQ4NDJjMDJkZGQ0ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RLVF0q3pYT7Vv0Y5s1ORUoQPitQ 0RBDCpeVTQ0rnr02lRgHEU1Spx0BBxgk8InkKpDPyOetVBXAy5b/8oxyhewYBvNo TCjqvxCrMcjsDSPX2lVvgcZZixegUY59adEPym/9okdFFKZJY3RhG+L0sgMrckmr /V9EIQBFpBg3MPaahx0g8tkQa7SOYUN8OsHYQT3BWK9ZG7UO2yXFLACXwSykHlYX TQsMtgbZMZCtkWPs8xAYB0WLP2olEIM2MDGOMDRFzhlVCIcAVj1vVxWE3JQfmAVK 1AekZjBZWIF/LM/INEULhNYBDMwvDL42jOsUlS6mo7yeACA72Z+Npd6I2wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFspd0bHEerieV06i9KsoLpNCls9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVhMmFhNTI5LTM0YWEtNGEyOC1hMGEyLTRmNmY4MGY5OTlkNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6AjAMA0GCSqGSIb3DQEBCwUAA4IBAQBF5KaVoQMtPtg2a86L GMSfl76aOVAcUgtt8MqX3d56M7c9vYLlGPEHKODSJfqT+koolmMY7NZbFReCWUJO y/VKlozTRfDJIiZhzum+/rLfNgZddig6PEbiM2HB4TPqFKR/o6zMK686geq1aDBJ jfSjpyL2Ud1DluJjXotfB8z2RJnahAe2aZjeeH0dS5XrADswPabTUpqUfRrEPu+g dHVsbPRRqS1fXM9FTLzhjf0pwzOj7UolEXGGJXOFSkH89rqHrmwO9sr9O2HESlER tcBDH0bTCYbJ54yIooPNZiOF3pXVTJ1Aw0Da5kn268lJ1Pdjr8brSYQ4uKWlR/K1 X5Zq -----END CERTIFICATE-----Generated at Sun May 24 12:19:08 2026 by rpki-client