$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/671d95a3-c003-4a86-88c6-405cd8ceff9e.roa File: 671d95a3-c003-4a86-88c6-405cd8ceff9e.roa (raw, json) Hash identifier: f5dFYHO7IsQbHYA3SvLs0NQEzqUnLkPIHTTzCgIA9OY= Subject key identifier: 1E:0D:1C:9A:9B:A9:B0:E3:E4:67:EC:C3:0F:77:53:37:72:0D:77:4C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 08806C7827D6CDB888C6333A056DC5C35CF05718 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/671d95a3-c003-4a86-88c6-405cd8ceff9e.roa Signing time: Tue 19 May 2026 00:00:45 +0000 ROA not before: Tue 19 May 2026 00:00:45 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:80:6c:78:27:d6:cd:b8:88:c6:33:3a:05:6d:c5:c3:5c:f0:57:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 00:00:45 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=60c8ea791dfdc1a7e61f4dd290d4eff4f7d815992e96fc5b77a483534a5b0b96, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:b3:04:cd:a9:35:10:c5:61:47:3c:94:c8: fd:3e:bf:a4:85:c6:66:77:c2:51:0a:51:80:93:0c: a2:3b:27:c0:bc:12:c9:ec:6b:ec:df:ba:55:26:17: bd:3d:1f:44:4d:85:39:03:2c:03:d1:7b:10:69:78: a3:5c:36:b3:3d:99:f1:e1:f9:3f:24:c2:e8:7c:93: 02:c5:f2:a7:d0:07:66:8d:dd:3f:84:40:bc:f7:f4: f8:c4:8e:a0:1e:20:3f:34:78:25:82:cd:31:72:a3: aa:cb:57:ed:61:1a:94:23:ec:14:a1:aa:ec:33:c4: 17:8c:9a:95:36:fa:a4:0c:64:de:98:ee:a5:8c:47: de:97:d9:00:18:d4:8c:d0:8c:60:26:07:90:49:16: cc:3e:48:49:2c:eb:af:a5:b5:09:57:8e:05:d4:01: 1b:3d:54:58:d7:ee:70:01:76:da:9d:8b:cd:11:3c: 08:fa:2a:70:94:62:54:71:bd:91:fe:e4:72:f0:cd: 07:80:86:ed:60:0d:19:eb:9f:62:22:9c:89:d4:53: 48:c7:df:cd:be:27:31:d7:ae:e5:c6:d2:4e:e6:87: 21:4b:43:11:59:17:d1:21:7c:de:4c:50:42:4e:d8: 0e:b2:bb:16:31:1e:75:65:ea:a9:77:1e:7e:50:18: ba:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0D:1C:9A:9B:A9:B0:E3:E4:67:EC:C3:0F:77:53:37:72:0D:77:4C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/671d95a3-c003-4a86-88c6-405cd8ceff9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:c800::/40 Signature Algorithm: sha256WithRSAEncryption 31:64:27:8a:ca:b2:e7:c3:b5:d8:cb:31:fe:d9:7d:84:7e:cd: 62:fc:4a:84:62:74:fd:42:30:5b:db:09:71:5a:52:fe:e2:0c: 6d:79:d5:a8:cf:a0:7d:5a:11:6c:55:90:31:91:95:aa:81:da: 5a:a3:c2:b2:0f:4c:be:90:d6:32:14:a8:d8:0c:dc:87:0a:25: d5:bd:26:8b:46:2f:14:b9:b9:c6:c5:81:ea:3f:b3:67:12:01: 4a:8d:7d:73:5e:66:22:57:6a:1b:01:d2:c0:9b:9a:4a:de:f9: d0:2a:5b:2d:1f:6c:30:c3:64:38:22:00:1b:d9:fe:77:9c:fc: a9:d4:ef:02:b0:0d:e1:6a:8f:13:f9:79:55:46:dc:b1:fb:23: c8:ee:a6:91:c7:21:45:e8:55:78:91:65:fa:8f:1e:8e:34:eb: 65:d0:97:83:fb:d4:2a:68:13:34:96:9f:da:75:10:cc:c8:b4: 90:b7:b7:94:db:e6:81:ec:aa:ed:69:e9:f5:e6:ee:e2:9a:b3: 0f:39:07:ee:cd:0b:be:df:fd:03:20:52:a4:a4:46:08:a1:31: 68:b0:ff:b9:66:d2:35:a3:24:7c:3f:e7:cd:9d:ff:1f:77:90: 64:73:b5:14:1f:7a:1d:4e:dd:6a:7f:97:8b:72:27:92:15:ee: bd:ed:b5:27 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCIBseCfWzbiIxjM6BW3Fw1zwVxgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxOTAwMDA0NVoX DTI2MDgxNzIzNTk1OVowejFJMEcGA1UEBRNANjBjOGVhNzkxZGZkYzFhN2U2MWY0 ZGQyOTBkNGVmZjRmN2Q4MTU5OTJlOTZmYzViNzdhNDgzNTM0YTViMGI5NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/GzBM2pNRDFYUc8lMj9Pr+khcZm d8JRClGAkwyiOyfAvBLJ7Gvs37pVJhe9PR9ETYU5AywD0XsQaXijXDazPZnx4fk/ JMLofJMCxfKn0Admjd0/hEC89/T4xI6gHiA/NHglgs0xcqOqy1ftYRqUI+wUoars M8QXjJqVNvqkDGTemO6ljEfel9kAGNSM0IxgJgeQSRbMPkhJLOuvpbUJV44F1AEb PVRY1+5wAXbanYvNETwI+ipwlGJUcb2R/uRy8M0HgIbtYA0Z659iIpyJ1FNIx9/N vicx167lxtJO5ochS0MRWRfRIXzeTFBCTtgOsrsWMR51Zeqpdx5+UBi6XQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB4NHJqbqbDj5Gfsww93UzdyDXdMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY3MWQ5NWEzLWMwMDMtNGE4Ni04OGM2LTQwNWNkOGNlZmY5ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba78gwDQYJKoZIhvcNAQELBQADggEBADFkJ4rKsufDtdjLMf7Z fYR+zWL8SoRidP1CMFvbCXFaUv7iDG151ajPoH1aEWxVkDGRlaqB2lqjwrIPTL6Q 1jIUqNgM3IcKJdW9JotGLxS5ucbFgeo/s2cSAUqNfXNeZiJXahsB0sCbmkre+dAq Wy0fbDDDZDgiABvZ/nec/KnU7wKwDeFqjxP5eVVG3LH7I8juppHHIUXoVXiRZfqP Ho4062XQl4P71CpoEzSWn9p1EMzItJC3t5Tb5oHsqu1p6fXm7uKasw85B+7NC77f /QMgUqSkRgihMWiw/7lm0jWjJHw/582d/x93kGRztRQfeh1O3Wp/l4tyJ5IV7r3t tSc= -----END CERTIFICATE-----Generated at Fri May 22 14:19:12 2026 by rpki-client