$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7a1137f5-50c1-4d81-8627-b56877fde48e.roa File: 7a1137f5-50c1-4d81-8627-b56877fde48e.roa (raw, json) Hash identifier: YqSXBsZKwSpVjpuKubhzJFJA2SFC7QyB2uKAm+CN4qc= Subject key identifier: 88:FA:CC:F4:D6:A0:18:26:5B:28:32:11:4E:70:21:DA:27:B1:45:CE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41AF935CE4BE84C0BB1908750CC1E8FDECB6A593 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7a1137f5-50c1-4d81-8627-b56877fde48e.roa Signing time: Fri 22 May 2026 16:53:58 +0000 ROA not before: Fri 22 May 2026 16:53:58 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae2:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:af:93:5c:e4:be:84:c0:bb:19:08:75:0c:c1:e8:fd:ec:b6:a5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:53:58 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=8027c979211c9c6f9fe6a7324c578f391d4af1f38ebe66c98006420175b0daa1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0d:b1:3b:1e:4f:6f:47:88:6d:d8:c6:90:4f: 40:c8:ed:ca:2e:43:80:89:64:e6:c8:de:73:c9:3a: 81:99:d6:a6:9b:e1:d9:cd:bd:a9:ca:25:62:6d:f6: fa:c8:be:3e:cc:fc:9b:ad:83:a4:29:a2:fe:b5:c3: b0:ad:07:79:f1:fa:d9:cd:6b:0d:77:18:ac:cf:1e: 7a:ab:e8:fa:e3:c7:86:f7:68:b8:67:0f:83:48:38: 80:03:d2:4c:e0:f4:47:85:7d:4c:0f:6c:14:67:d7: 59:f6:f9:6c:61:19:95:cd:76:c2:12:2a:0c:08:1d: 59:b9:b2:95:06:81:86:b7:13:6c:21:b1:06:42:fc: 02:36:e1:5f:49:cb:17:c4:26:05:67:ac:30:50:52: 42:87:0f:bf:d1:b4:aa:6c:a2:a6:5b:5c:15:1d:42: 05:38:c3:75:d7:12:72:c4:19:05:01:71:f9:c8:8e: 0b:9a:8f:94:43:5e:4e:8b:95:e5:e3:ab:64:3b:72: 8f:38:cb:fe:13:4d:30:ff:c6:f2:6a:03:01:1f:f7: fb:8c:69:90:62:d1:fb:98:29:67:a2:e7:f3:2d:1a: 49:0b:30:67:d7:bd:2a:72:6c:50:4c:68:58:4d:f3: 80:f9:fd:7b:e8:ab:f3:1d:12:c2:e5:bc:34:e2:25: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FA:CC:F4:D6:A0:18:26:5B:28:32:11:4E:70:21:DA:27:B1:45:CE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7a1137f5-50c1-4d81-8627-b56877fde48e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae2:8800::/40 Signature Algorithm: sha256WithRSAEncryption c1:4e:4a:98:10:db:ec:ed:8c:c0:d8:e5:b6:7a:3d:cb:1b:b2: 9b:5a:b2:1d:42:aa:00:04:8e:e1:7f:52:7b:c7:43:a6:ab:e4: d0:3f:4a:6b:7f:d2:2f:35:b2:41:89:24:d4:69:fb:38:a1:20: 9f:da:8a:41:d6:15:ba:56:5e:21:9c:c0:78:82:ae:50:a9:81: 6a:5e:c9:1f:d6:d8:45:02:be:79:4c:50:54:eb:89:34:54:fd: 7f:14:68:de:5d:85:4c:60:ca:f0:95:2a:45:08:a8:f1:73:5a: c9:00:9d:52:d1:c8:c6:88:1d:d8:63:08:cb:0e:45:1c:2f:a2: 5a:70:b0:bc:bb:a8:2b:b8:f0:5e:9f:73:71:50:a7:3b:b8:d1: 2e:0a:16:dd:2a:f2:ce:d9:38:74:77:f5:aa:68:61:fd:84:28: db:2f:df:39:62:8a:64:20:06:b9:f9:5c:44:03:25:6a:64:35: bc:e3:c6:ce:b2:67:e0:6e:cb:39:71:65:a7:4f:2b:0b:8d:f2: 42:87:50:c3:d5:a0:8f:f2:c7:1b:42:01:a3:27:6d:83:5a:5e: 0f:dd:16:ea:08:e3:2b:34:32:74:31:ba:b5:df:f2:3a:13:26: ca:4b:d8:bd:a1:08:a5:ee:29:b1:8f:2a:4f:98:0a:0b:42:60: d5:ae:08:13 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQa+TXOS+hMC7GQh1DMHo/ey2pZMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTM1OFoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAODAyN2M5NzkyMTFjOWM2ZjlmZTZh NzMyNGM1NzhmMzkxZDRhZjFmMzhlYmU2NmM5ODAwNjQyMDE3NWIwZGFhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA2xOx5Pb0eIbdjGkE9AyO3KLkOA iWTmyN5zyTqBmdamm+HZzb2pyiVibfb6yL4+zPybrYOkKaL+tcOwrQd58frZzWsN dxiszx56q+j648eG92i4Zw+DSDiAA9JM4PRHhX1MD2wUZ9dZ9vlsYRmVzXbCEioM CB1ZubKVBoGGtxNsIbEGQvwCNuFfScsXxCYFZ6wwUFJChw+/0bSqbKKmW1wVHUIF OMN11xJyxBkFAXH5yI4Lmo+UQ15Oi5Xl46tkO3KPOMv+E00w/8byagMBH/f7jGmQ YtH7mClnoufzLRpJCzBn170qcmxQTGhYTfOA+f176KvzHRLC5bw04iUjiwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIj6zPTWoBgmWygyEU5wIdonsUXOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdhMTEzN2Y1LTUwYzEtNGQ4MS04NjI3LWI1Njg3N2ZkZTQ4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4ogwDQYJKoZIhvcNAQELBQADggEBAMFOSpgQ2+ztjMDY5bZ6 Pcsbsptash1CqgAEjuF/UnvHQ6ar5NA/Smt/0i81skGJJNRp+zihIJ/aikHWFbpW XiGcwHiCrlCpgWpeyR/W2EUCvnlMUFTriTRU/X8UaN5dhUxgyvCVKkUIqPFzWskA nVLRyMaIHdhjCMsORRwvolpwsLy7qCu48F6fc3FQpzu40S4KFt0q8s7ZOHR39apo Yf2EKNsv3zliimQgBrn5XEQDJWpkNbzjxs6yZ+BuyzlxZadPKwuN8kKHUMPVoI/y xxtCAaMnbYNaXg/dFuoI4ys0MnQxurXf8joTJspL2L2hCKXuKbGPKk+YCgtCYNWu CBM= -----END CERTIFICATE-----Generated at Sun May 24 12:19:54 2026 by rpki-client