$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a8e93ab-d592-489f-acde-1b4adc6a1b03.roa File: 8a8e93ab-d592-489f-acde-1b4adc6a1b03.roa (raw, json) Hash identifier: Bt1mHDzIGk9Fkg6d8XqLKpfTjTabBoonAg5JOhG+tCY= Subject key identifier: 6B:F7:0D:BE:D0:F8:A9:20:B1:4C:B4:63:6A:A3:D7:A1:64:86:5A:BB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2D3BFB27935EDEF2629CCEC2A5350003CF9554CA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a8e93ab-d592-489f-acde-1b4adc6a1b03.roa Signing time: Fri 22 May 2026 16:53:54 +0000 ROA not before: Fri 22 May 2026 16:53:54 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae2:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3b:fb:27:93:5e:de:f2:62:9c:ce:c2:a5:35:00:03:cf:95:54:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:53:54 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=0c5dca39aba179ef98a9211ba670d80df30c9977cc7fd294f53a7edc6adf9cce, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:39:3d:f4:20:c6:52:13:ac:62:da:4c:0e:76: 23:f2:13:21:1b:40:49:25:58:5c:79:6d:e5:01:c5: 7d:c3:42:37:06:f2:20:88:d9:c7:3f:6e:69:55:ac: a9:dc:44:df:e1:72:9e:68:f8:6f:3a:47:6d:e3:27: 2f:53:ca:5b:38:3a:01:a4:8c:e7:eb:ab:60:dd:c5: 97:24:90:94:bb:22:37:61:13:55:9d:c4:1c:6d:8a: 2f:4a:96:77:1e:1e:7f:69:21:ed:af:0f:3d:de:7c: 5a:d3:ab:cb:ed:2b:25:a3:d4:b0:e2:37:cf:07:a7: 0b:de:8f:ea:74:0e:a0:a1:49:3e:8d:cd:2d:72:30: b7:ab:38:53:d0:f1:c6:d8:5b:46:f3:b4:b0:9d:61: 92:f7:60:60:7a:57:e9:10:5b:84:99:27:ef:a9:eb: e9:58:b5:1f:4b:66:63:f4:c4:a2:b8:c2:ad:05:94: f4:09:32:fa:77:55:b3:db:b9:54:4e:3f:75:5d:12: e0:5c:3c:40:ec:76:b9:9e:ee:8d:fb:da:ba:fd:69: c2:d5:33:97:b0:e3:96:f1:f1:84:06:48:8a:98:8e: 66:0d:38:7e:1a:7b:a6:0a:9d:9c:42:0a:0c:c2:14: 44:60:7e:25:2d:64:32:98:e1:bf:b5:2c:26:95:17: a9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F7:0D:BE:D0:F8:A9:20:B1:4C:B4:63:6A:A3:D7:A1:64:86:5A:BB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a8e93ab-d592-489f-acde-1b4adc6a1b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae2:2000::/40 Signature Algorithm: sha256WithRSAEncryption 6f:62:f8:18:65:c4:9e:78:c0:9d:8d:56:2d:d7:0d:c2:d1:d3: f6:d4:b9:29:0a:bf:b2:54:71:5c:23:b7:05:b9:11:73:15:ec: a0:33:8e:31:cf:5a:2d:0b:cb:01:49:34:e9:a0:60:09:3d:16: 80:e5:89:ed:27:dd:6e:35:c2:c7:c4:ea:1c:5c:4c:3c:e9:48: 31:b6:6b:8f:66:16:f4:8d:0f:e1:4a:6d:f2:5e:38:42:aa:6e: dc:62:34:a6:2f:53:04:b1:73:4c:15:04:73:85:7f:3b:74:af: e1:0b:54:45:cb:f0:1d:17:fd:20:00:a4:59:36:f3:08:42:7f: a8:fb:d9:05:82:2b:da:21:4b:35:77:81:38:6b:9c:31:f6:2f: 3b:4b:05:35:be:58:a9:75:12:af:6c:51:2b:d0:9e:73:84:c3: 1e:26:ad:73:88:09:54:70:90:6f:23:e0:be:46:8a:7f:6e:0e: ac:80:e4:14:41:a5:84:70:3d:a8:aa:0c:a4:2a:12:f5:1b:2a: ad:9f:9e:84:8a:a9:d9:e6:81:a3:ab:b4:2a:60:da:3c:c4:31: 3b:a3:6b:03:fb:da:96:c4:f8:1b:bb:d1:f6:54:30:7c:76:0e: 1d:ab:24:40:d4:75:58:44:2e:76:b2:1d:20:d6:e6:a8:dd:c4: 95:d2:c3:d2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULTv7J5Ne3vJinM7CpTUAA8+VVMowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTM1NFoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAMGM1ZGNhMzlhYmExNzllZjk4YTky MTFiYTY3MGQ4MGRmMzBjOTk3N2NjN2ZkMjk0ZjUzYTdlZGM2YWRmOWNjZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jk99CDGUhOsYtpMDnYj8hMhG0BJ JVhceW3lAcV9w0I3BvIgiNnHP25pVayp3ETf4XKeaPhvOkdt4ycvU8pbODoBpIzn 66tg3cWXJJCUuyI3YRNVncQcbYovSpZ3Hh5/aSHtrw893nxa06vL7Sslo9Sw4jfP B6cL3o/qdA6goUk+jc0tcjC3qzhT0PHG2FtG87SwnWGS92BgelfpEFuEmSfvqevp WLUfS2Zj9MSiuMKtBZT0CTL6d1Wz27lUTj91XRLgXDxA7Ha5nu6N+9q6/WnC1TOX sOOW8fGEBkiKmI5mDTh+GnumCp2cQgoMwhREYH4lLWQymOG/tSwmlRep3wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGv3Db7Q+KkgsUy0Y2qj16Fkhlq7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhhOGU5M2FiLWQ1OTItNDg5Zi1hY2RlLTFiNGFkYzZhMWIwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4iAwDQYJKoZIhvcNAQELBQADggEBAG9i+BhlxJ54wJ2NVi3X DcLR0/bUuSkKv7JUcVwjtwW5EXMV7KAzjjHPWi0LywFJNOmgYAk9FoDlie0n3W41 wsfE6hxcTDzpSDG2a49mFvSND+FKbfJeOEKqbtxiNKYvUwSxc0wVBHOFfzt0r+EL VEXL8B0X/SAApFk28whCf6j72QWCK9ohSzV3gThrnDH2LztLBTW+WKl1Eq9sUSvQ nnOEwx4mrXOICVRwkG8j4L5Gin9uDqyA5BRBpYRwPaiqDKQqEvUbKq2fnoSKqdnm gaOrtCpg2jzEMTujawP72pbE+Bu70fZUMHx2Dh2rJEDUdVhELnayHSDW5qjdxJXS w9I= -----END CERTIFICATE-----Generated at Sun May 24 12:18:51 2026 by rpki-client