$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c7e83b6-54f3-42db-9cfd-29837766b7cb.roa File: 8c7e83b6-54f3-42db-9cfd-29837766b7cb.roa (raw, json) Hash identifier: B0L1bLujcnEoTu6Kr9ncKKGh7zcjrMoKzMT+SSWDVz4= Subject key identifier: 45:61:31:77:1A:2A:30:F6:7F:B2:1D:94:94:C3:05:81:F6:F5:B5:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 26A2D9C5F4B9718D2DE9F6F597CF6987EE903C4E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c7e83b6-54f3-42db-9cfd-29837766b7cb.roa Signing time: Fri 22 May 2026 17:01:32 +0000 ROA not before: Fri 22 May 2026 17:01:32 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a2:d9:c5:f4:b9:71:8d:2d:e9:f6:f5:97:cf:69:87:ee:90:3c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:01:32 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=0e95db8a0553000463bd94daaa50885e9048e3db3d3ea28791c9ccb47615701a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:f9:a0:53:0b:b9:b3:f1:e8:85:83:df:d6: d7:aa:87:05:71:44:a4:c1:23:5e:28:63:5e:32:b3: ad:88:fc:ee:bf:4b:c2:d6:93:e0:5a:0e:15:54:01: 73:e5:63:6d:99:86:61:d3:a7:b9:e9:fc:68:61:af: 9f:08:b9:39:7f:fa:6a:1b:1e:37:c6:24:f6:6b:d5: 6d:00:1e:7e:59:5b:7e:4c:07:06:47:01:a4:e9:2c: 47:b1:d9:62:c9:26:ac:8c:c5:06:56:a0:54:e6:8b: fb:d1:9a:18:d5:1f:14:23:f8:07:85:c4:7f:81:c7: 1b:37:2a:a7:97:c3:a6:cf:87:66:bc:c5:ab:18:1b: 6e:5b:6c:35:52:55:51:fd:29:32:c2:73:13:87:ea: 79:8f:a5:98:b7:2e:58:7d:26:70:68:97:03:5d:b6: 89:05:01:0f:4d:3e:c3:21:79:cf:36:75:80:84:bc: 66:a3:2c:a5:25:0a:0a:2f:dc:dd:de:e1:d1:08:64: 72:4a:09:1b:91:db:d0:67:01:de:3a:d6:17:1f:e7: 23:bb:5c:e5:65:ea:f2:a2:14:9d:8f:81:48:68:e9: a0:5b:0d:a3:bc:6b:23:40:53:bb:0c:9c:3f:02:55: f1:dd:e7:ff:1c:22:b8:b0:c7:de:ac:08:ba:33:2f: 91:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:61:31:77:1A:2A:30:F6:7F:B2:1D:94:94:C3:05:81:F6:F5:B5:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c7e83b6-54f3-42db-9cfd-29837766b7cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:9040::/48 Signature Algorithm: sha256WithRSAEncryption 64:d7:ba:64:a6:2f:f1:4a:27:43:30:a4:00:a4:c8:b1:4e:7a: 0e:2c:50:ac:da:e4:41:68:db:5a:a9:b2:92:e9:9c:1d:d0:62: 98:35:ab:c3:fe:5b:00:27:6c:b2:71:e8:e7:81:43:f2:64:c3: 8d:a0:0e:4a:2b:ce:a4:6c:fb:1d:0c:10:f5:1e:cb:6a:22:c4: 2a:fa:a7:6e:80:5b:c1:35:6d:70:26:3c:8a:da:d6:24:9c:e6: 80:28:1d:b5:c1:67:4b:6e:36:ed:7c:f4:4b:71:d0:e0:4f:62: d2:a6:61:bf:7e:3c:2f:37:c1:85:ee:4e:df:c0:6e:73:ab:45: 91:85:7b:f7:99:d1:eb:0f:64:d4:4e:c9:3b:bb:80:b8:ab:06: 0b:9d:bd:f0:63:c1:58:b3:ac:a3:ba:c3:70:31:65:8a:46:13: 4d:dd:7c:35:90:06:92:b5:ea:da:5d:82:87:a5:e4:93:fd:fd: d5:9a:33:ee:aa:85:1e:c4:5b:65:1d:ec:98:31:c4:40:ea:05: 60:85:e7:da:60:8e:bc:67:03:dd:87:65:74:2f:7a:e0:fe:8a: fe:01:f8:ad:07:91:6b:a8:4f:06:3d:da:c0:a1:83:3e:19:6d: cc:02:67:f7:05:18:21:56:b3:e0:11:46:bd:83:be:96:50:55: 72:c0:db:1a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJqLZxfS5cY0t6fb1l89ph+6QPE4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MDEzMloX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAMGU5NWRiOGEwNTUzMDAwNDYzYmQ5 NGRhYWE1MDg4NWU5MDQ4ZTNkYjNkM2VhMjg3OTFjOWNjYjQ3NjE1NzAxYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq375oFMLubPx6IWD39bXqocFcUSk wSNeKGNeMrOtiPzuv0vC1pPgWg4VVAFz5WNtmYZh06e56fxoYa+fCLk5f/pqGx43 xiT2a9VtAB5+WVt+TAcGRwGk6SxHsdliySasjMUGVqBU5ov70ZoY1R8UI/gHhcR/ gccbNyqnl8Omz4dmvMWrGBtuW2w1UlVR/SkywnMTh+p5j6WYty5YfSZwaJcDXbaJ BQEPTT7DIXnPNnWAhLxmoyylJQoKL9zd3uHRCGRySgkbkdvQZwHeOtYXH+cju1zl ZeryohSdj4FIaOmgWw2jvGsjQFO7DJw/AlXx3ef/HCK4sMferAi6My+RjwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEVhMXcaKjD2f7IdlJTDBYH29bWrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhjN2U4M2I2LTU0ZjMtNDJkYi05Y2ZkLTI5ODM3NzY2YjdjYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6JBAMA0GCSqGSIb3DQEBCwUAA4IBAQBk17pkpi/xSidDMKQA pMixTnoOLFCs2uRBaNtaqbKS6Zwd0GKYNavD/lsAJ2yycejngUPyZMONoA5KK86k bPsdDBD1HstqIsQq+qdugFvBNW1wJjyK2tYknOaAKB21wWdLbjbtfPRLcdDgT2LS pmG/fjwvN8GF7k7fwG5zq0WRhXv3mdHrD2TUTsk7u4C4qwYLnb3wY8FYs6yjusNw MWWKRhNN3Xw1kAaSteraXYKHpeST/f3VmjPuqoUexFtlHeyYMcRA6gVghefaYI68 ZwPdh2V0L3rg/or+AfitB5FrqE8GPdrAoYM+GW3MAmf3BRghVrPgEUa9g76WUFVy wNsa -----END CERTIFICATE-----Generated at Sun May 24 12:19:42 2026 by rpki-client