$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5caef593-3e1a-4239-836f-142b22751593.roa File: 5caef593-3e1a-4239-836f-142b22751593.roa (raw, json) Hash identifier: 8t+DFNggUHi3KYe6KHDD3+BVPb9PHaF71Y6pOKqsRYg= Subject key identifier: 0F:F1:56:A2:F5:CC:25:27:9C:65:18:AE:EE:BD:6F:24:EF:84:C2:2B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 01934DB534A9510F9F2C8D68E1F7CA0544FF56BD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5caef593-3e1a-4239-836f-142b22751593.roa Signing time: Wed 13 May 2026 00:10:48 +0000 ROA not before: Wed 13 May 2026 00:10:48 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:4d:b5:34:a9:51:0f:9f:2c:8d:68:e1:f7:ca:05:44:ff:56:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:10:48 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=bbba2daed66c62b11cc53f3fa09959240553f9921ec0876eed52f193539c4cc4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ae:88:34:11:e4:dc:51:4a:09:3c:0a:50:6c: 58:2c:39:60:bb:18:a0:0f:b5:a9:d7:a5:5e:37:ec: 69:d8:a1:d5:71:62:4c:0e:4d:6f:97:c7:6d:71:50: 91:53:03:5b:36:12:6d:7e:e2:75:60:36:97:69:1a: 0d:a4:df:28:79:58:a5:de:e4:7f:29:d6:ac:a9:dc: f4:de:a4:4b:c3:61:57:31:f6:68:65:d7:a0:68:6f: 6a:8e:2b:21:87:af:e8:2e:2e:25:9d:90:ca:6f:cd: a6:c0:27:23:8c:9e:e5:94:db:24:58:66:b7:38:ea: 8f:a1:88:b1:94:52:03:3c:9a:5f:5e:43:da:0f:63: f1:7c:99:1f:8f:fd:a7:6c:01:c1:d2:c9:a4:af:b6: 65:69:c7:02:08:c6:4b:a0:74:26:aa:22:01:d2:ef: 70:b5:8a:b0:88:c3:59:92:e4:8a:9a:ca:11:99:36: 82:57:bd:98:5e:dd:db:c0:48:21:0e:9d:2e:28:bc: b2:56:63:e8:49:51:77:5d:29:df:e9:30:e5:5a:a5: 5d:78:6d:2c:9e:9f:a1:26:09:65:1a:2f:92:6b:f0: df:9e:8f:e8:d8:77:ec:b4:ac:2f:29:a2:67:c0:d3: 60:89:c4:b0:57:89:09:d6:00:f9:45:bb:a7:da:00: b9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F1:56:A2:F5:CC:25:27:9C:65:18:AE:EE:BD:6F:24:EF:84:C2:2B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5caef593-3e1a-4239-836f-142b22751593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:1000::/40 Signature Algorithm: sha256WithRSAEncryption 80:62:0e:f3:f5:70:e4:cd:a7:86:e0:f7:66:19:bb:54:05:bd: 21:b6:f3:ec:be:75:94:29:df:e6:a0:c4:9a:37:b9:19:fd:b0: c8:f0:a1:94:2b:db:1d:0a:ce:63:c2:ed:76:97:65:f4:fe:1c: 4e:2f:97:4d:ca:58:f3:9b:b7:4b:9c:60:ab:32:67:4b:e3:88: 07:68:37:ea:aa:34:d1:5a:a6:92:7e:93:38:f9:13:6a:72:05: 6c:22:68:6a:01:33:8f:7e:c6:2c:82:f1:58:9b:a9:0a:c1:35: 46:81:b0:02:49:0a:04:3a:02:86:5d:e1:d2:ac:2f:4e:79:66: d1:25:0a:6d:40:1f:f6:9c:10:80:bc:d2:62:bf:fd:d1:ed:d5: 09:f9:b0:6d:1e:5e:9d:fe:dd:57:08:93:15:ba:c2:5d:4c:43: 40:ea:45:90:2e:81:fe:44:fe:32:66:fc:ab:e5:b7:49:20:3a: 68:84:d9:fb:8e:b2:af:58:ea:4a:a0:19:c4:2e:53:69:03:d4: f5:03:97:37:b2:2b:b0:0d:72:af:37:14:ac:82:89:c1:18:0d: db:e8:45:4a:cf:cb:5e:57:f2:04:84:ba:3f:f5:c7:d4:1d:a1: 2d:5d:cc:ad:f8:60:92:cb:b9:72:c7:6a:05:de:9c:c1:83:84: 35:d4:d2:06 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAZNNtTSpUQ+fLI1o4ffKBUT/Vr0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMTA0OFoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAYmJiYTJkYWVkNjZjNjJiMTFjYzUz ZjNmYTA5OTU5MjQwNTUzZjk5MjFlYzA4NzZlZWQ1MmYxOTM1MzljNGNjNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K6INBHk3FFKCTwKUGxYLDlguxig D7Wp16VeN+xp2KHVcWJMDk1vl8dtcVCRUwNbNhJtfuJ1YDaXaRoNpN8oeVil3uR/ Kdasqdz03qRLw2FXMfZoZdegaG9qjishh6/oLi4lnZDKb82mwCcjjJ7llNskWGa3 OOqPoYixlFIDPJpfXkPaD2PxfJkfj/2nbAHB0smkr7ZlaccCCMZLoHQmqiIB0u9w tYqwiMNZkuSKmsoRmTaCV72YXt3bwEghDp0uKLyyVmPoSVF3XSnf6TDlWqVdeG0s np+hJgllGi+Sa/Dfno/o2HfstKwvKaJnwNNgicSwV4kJ1gD5Rbun2gC54wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA/xVqL1zCUnnGUYru69byTvhMIrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVjYWVmNTkzLTNlMWEtNDIzOS04MzZmLTE0MmIyMjc1MTU5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauRAwDQYJKoZIhvcNAQELBQADggEBAIBiDvP1cOTNp4bg92YZ u1QFvSG28+y+dZQp3+agxJo3uRn9sMjwoZQr2x0KzmPC7XaXZfT+HE4vl03KWPOb t0ucYKsyZ0vjiAdoN+qqNNFappJ+kzj5E2pyBWwiaGoBM49+xiyC8VibqQrBNUaB sAJJCgQ6AoZd4dKsL055ZtElCm1AH/acEIC80mK//dHt1Qn5sG0eXp3+3VcIkxW6 wl1MQ0DqRZAugf5E/jJm/Kvlt0kgOmiE2fuOsq9Y6kqgGcQuU2kD1PUDlzeyK7AN cq83FKyCicEYDdvoRUrPy15X8gSEuj/1x9QdoS1dzK34YJLLuXLHagXenMGDhDXU 0gY= -----END CERTIFICATE-----Generated at Tue Jun 9 15:19:27 2026 by rpki-client