$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/64f65495-d8de-4492-a38d-c668479818e2.roa File: 64f65495-d8de-4492-a38d-c668479818e2.roa (raw, json) Hash identifier: V7LVFJBIduOwltm4bavSXoCtwEH0gkugPXe3tBxdNrA= Subject key identifier: C2:50:26:37:A9:B7:E0:94:42:B5:26:20:BA:BB:48:15:B0:95:FD:42 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 50196A0B954E7BB157C7E494C8D07C6953818382 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/64f65495-d8de-4492-a38d-c668479818e2.roa Signing time: Tue 19 May 2026 00:01:01 +0000 ROA not before: Tue 19 May 2026 00:01:01 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:19:6a:0b:95:4e:7b:b1:57:c7:e4:94:c8:d0:7c:69:53:81:83:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 00:01:01 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=dd8b198a5d685e9a74c8b088dd07c342baf4e4a16984b5251a92d5f10e6eb49b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6c:37:02:88:18:5a:6d:5b:3a:e2:e1:27:75: 79:7c:39:37:ca:9c:0e:26:50:58:6d:0a:0d:fd:d5: 10:33:a3:b3:dd:b8:cf:9c:11:ad:fc:d5:65:94:69: e3:bd:7d:4a:70:bb:2c:a6:dd:1d:74:af:26:36:6e: 6e:f1:58:80:78:2e:17:46:fe:be:ff:db:ed:c6:98: b0:98:bd:e0:7b:9c:8f:42:06:cd:05:21:13:dc:fd: 43:42:bc:fe:e2:ac:f6:1f:f6:9e:99:53:20:ef:b7: fa:a6:7c:78:44:9b:b6:ba:72:60:36:6a:4f:b6:90: 8b:af:26:18:eb:0b:c5:ce:79:42:af:3d:b0:ca:a7: a0:9b:7e:18:9c:08:d3:3d:e3:ff:38:f0:a0:a7:e9: f6:2b:aa:c6:3a:09:03:08:ff:fa:1d:14:92:af:fc: ed:0a:70:45:45:18:b7:fd:cb:72:30:05:3b:4c:7a: 2e:6d:28:74:ce:04:0e:04:16:e5:3f:05:37:bb:1d: 9f:e0:ca:68:ab:f0:3f:a5:25:1f:4a:30:b0:14:bc: f9:87:d3:99:73:c2:8d:ea:8c:ed:e8:24:11:e2:74: d8:09:51:28:06:26:1f:4f:ad:28:27:ad:bb:6c:b8: 6b:a8:6d:be:c6:53:cf:20:68:9c:af:73:da:3f:fc: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:50:26:37:A9:B7:E0:94:42:B5:26:20:BA:BB:48:15:B0:95:FD:42 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/64f65495-d8de-4492-a38d-c668479818e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:800::/40 Signature Algorithm: sha256WithRSAEncryption b3:d8:83:bc:ca:91:8d:e3:d8:54:c5:11:f0:21:ca:b0:c1:7b: 0f:6d:4a:5c:65:42:fe:62:e1:aa:3e:06:e0:bd:6e:21:39:1d: 72:9f:12:ba:ca:b6:a9:9e:95:ef:86:93:49:6f:2f:4f:10:3d: d4:ee:b5:a5:18:10:6b:41:52:bd:a1:a2:26:c5:0a:1f:e3:a3: 89:06:bd:ab:b8:ec:5a:e3:d2:5e:c3:fb:d8:83:f2:ff:b5:b2: db:3d:41:01:46:d9:f2:eb:90:e5:f1:4c:b4:af:b6:8f:57:be: c4:79:54:ff:3f:5d:a5:ba:27:31:85:fb:e7:44:e5:dd:a4:03: 9e:08:a4:99:44:c9:5e:1b:81:ee:f5:f5:ce:b8:ad:0f:a7:b0: a8:7a:b6:a0:66:35:d2:00:d5:92:2d:a0:93:e1:99:09:e5:2f: fd:2c:2b:e9:1f:45:e6:f6:74:a6:c1:ab:35:00:76:31:80:de: 3e:c8:4a:8e:8e:1e:90:4f:45:4a:83:d0:ae:d0:71:9a:00:7a: 14:a9:db:e5:3d:53:f9:53:93:23:af:ab:a7:34:b4:23:d1:dd: b8:17:09:56:99:3a:c0:62:15:cc:3b:d0:39:db:8e:0a:df:cf: dc:f8:20:8b:ae:28:7b:af:2f:60:db:2b:c0:c2:ab:5d:7d:63: c5:a9:6a:55 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUBlqC5VOe7FXx+SUyNB8aVOBg4IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxOTAwMDEwMVoX DTI2MDgxNzIzNTk1OVowejFJMEcGA1UEBRNAZGQ4YjE5OGE1ZDY4NWU5YTc0Yzhi MDg4ZGQwN2MzNDJiYWY0ZTRhMTY5ODRiNTI1MWE5MmQ1ZjEwZTZlYjQ5YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimw3AogYWm1bOuLhJ3V5fDk3ypwO JlBYbQoN/dUQM6Oz3bjPnBGt/NVllGnjvX1KcLsspt0ddK8mNm5u8ViAeC4XRv6+ /9vtxpiwmL3ge5yPQgbNBSET3P1DQrz+4qz2H/aemVMg77f6pnx4RJu2unJgNmpP tpCLryYY6wvFznlCrz2wyqegm34YnAjTPeP/OPCgp+n2K6rGOgkDCP/6HRSSr/zt CnBFRRi3/ctyMAU7THoubSh0zgQOBBblPwU3ux2f4Mpoq/A/pSUfSjCwFLz5h9OZ c8KN6ozt6CQR4nTYCVEoBiYfT60oJ627bLhrqG2+xlPPIGicr3PaP/yM/QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMJQJjept+CUQrUmILq7SBWwlf1CMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY0ZjY1NDk1LWQ4ZGUtNDQ5Mi1hMzhkLWM2Njg0Nzk4MThlMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7wgwDQYJKoZIhvcNAQELBQADggEBALPYg7zKkY3j2FTFEfAh yrDBew9tSlxlQv5i4ao+BuC9biE5HXKfErrKtqmele+Gk0lvL08QPdTutaUYEGtB Ur2hoibFCh/jo4kGvau47Frj0l7D+9iD8v+1sts9QQFG2fLrkOXxTLSvto9XvsR5 VP8/XaW6JzGF++dE5d2kA54IpJlEyV4bge719c64rQ+nsKh6tqBmNdIA1ZItoJPh mQnlL/0sK+kfReb2dKbBqzUAdjGA3j7ISo6OHpBPRUqD0K7QcZoAehSp2+U9U/lT kyOvq6c0tCPR3bgXCVaZOsBiFcw70Dnbjgrfz9z4IIuuKHuvL2DbK8DCq119Y8Wp alU= -----END CERTIFICATE-----Generated at Fri May 22 14:19:37 2026 by rpki-client