$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/995f333a-490f-44be-baae-a7428f2d9a63.roa File: 995f333a-490f-44be-baae-a7428f2d9a63.roa (raw, json) Hash identifier: M+UmFck08U6RnwR44ar1l1kGz1+VlX/XjILg+k1USUc= Subject key identifier: 41:76:DB:86:BE:92:18:14:8C:B9:31:AF:8E:49:BC:D0:C9:E7:D6:BA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 50ED0D4F9139DACC2F6DA3D5A8FB6656C97432A0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/995f333a-490f-44be-baae-a7428f2d9a63.roa Signing time: Tue 19 May 2026 00:00:59 +0000 ROA not before: Tue 19 May 2026 00:00:59 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ed:0d:4f:91:39:da:cc:2f:6d:a3:d5:a8:fb:66:56:c9:74:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 00:00:59 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=4381dc978bea79610aa0448a202a03ad6f63d390986384deae84b055e2fb095a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ba:06:0c:bd:fc:e4:22:1a:1a:b5:91:89:42: e2:20:64:27:26:cb:a4:3b:bf:43:1c:2e:39:04:fc: 26:97:be:b4:c5:4d:08:37:70:72:72:b4:f8:ee:e1: 08:e1:88:17:0f:00:c9:4c:a2:b7:37:b8:bd:3b:9d: 51:b9:c6:00:4e:94:c0:bf:5b:10:01:22:f4:72:fc: 83:a6:34:1a:ef:2f:90:68:34:ab:3a:d2:55:23:9a: 40:97:b4:c3:07:88:f7:8e:80:27:41:3a:5e:f0:5b: 39:8c:a1:45:55:de:60:20:de:b4:3f:35:96:a3:c1: 0c:20:6c:b6:c3:0f:a2:a2:a8:fb:78:91:e3:e8:64: e7:fe:c2:ea:a5:8f:fa:de:31:f4:92:ff:59:1b:80: 2b:9f:9b:9d:69:b1:45:7a:9c:68:8b:d1:5d:e6:87: dc:56:f4:e5:70:9f:4c:f3:4c:d9:92:fa:8c:75:c4: 53:56:01:ce:5e:4f:2e:3d:c3:ce:79:a8:b1:23:69: 42:30:60:37:e7:19:26:01:53:f5:0f:f7:36:06:42: 1b:6b:89:76:63:41:3e:4a:71:6c:d2:c1:55:8a:b9: 13:b4:bb:f9:36:b8:df:b2:b1:0a:9d:04:23:53:b4: 32:7a:c9:f8:78:cf:0f:7e:f6:e7:1a:69:ba:4b:9a: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:76:DB:86:BE:92:18:14:8C:B9:31:AF:8E:49:BC:D0:C9:E7:D6:BA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/995f333a-490f-44be-baae-a7428f2d9a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:1000::/40 Signature Algorithm: sha256WithRSAEncryption 7a:a0:2b:35:32:21:bb:51:5e:2f:3e:76:4b:80:f4:9b:a9:88: 8d:47:b1:42:20:11:ab:f5:62:f6:7d:ca:07:54:76:ed:9d:d8: 7d:ca:2c:93:cc:47:25:58:ed:02:65:54:0d:5e:b2:7d:aa:fa: ef:13:12:78:0b:af:57:ea:b2:06:6d:54:81:cc:08:3b:c1:2d: 18:bd:4f:8e:91:88:61:2c:83:b8:21:6d:fc:da:02:93:27:4d: 97:25:f5:d2:3e:04:2b:ea:c5:5e:aa:6e:88:50:ea:ff:ea:96: 85:61:50:c5:16:41:ec:a9:21:37:a6:a5:34:e5:fc:48:28:86: 27:c0:e2:30:9a:c4:bd:27:70:09:bc:7a:17:fd:d2:06:ba:02: ed:1e:2c:fa:26:9e:69:a8:74:57:af:03:96:d9:36:20:92:f6: 4f:7b:70:fd:2d:07:59:27:a3:ac:10:32:41:69:d1:fd:d6:33: c8:cb:33:69:2d:35:21:98:58:9e:3f:a9:cd:6d:89:c8:7e:a8: b4:db:4d:2c:55:89:26:82:61:4c:a6:82:7e:e8:68:a7:4e:0c: 8d:81:6d:ed:a5:da:38:8e:d7:6f:a4:b4:66:6d:b5:c3:97:de: 17:03:e5:f6:37:94:12:10:40:a4:81:6d:92:ad:76:61:e5:ad: 82:3f:92:f7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUO0NT5E52swvbaPVqPtmVsl0MqAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxOTAwMDA1OVoX DTI2MDgxNzIzNTk1OVowejFJMEcGA1UEBRNANDM4MWRjOTc4YmVhNzk2MTBhYTA0 NDhhMjAyYTAzYWQ2ZjYzZDM5MDk4NjM4NGRlYWU4NGIwNTVlMmZiMDk1YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLoGDL385CIaGrWRiULiIGQnJsuk O79DHC45BPwml760xU0IN3BycrT47uEI4YgXDwDJTKK3N7i9O51RucYATpTAv1sQ ASL0cvyDpjQa7y+QaDSrOtJVI5pAl7TDB4j3joAnQTpe8Fs5jKFFVd5gIN60PzWW o8EMIGy2ww+ioqj7eJHj6GTn/sLqpY/63jH0kv9ZG4Arn5udabFFepxoi9Fd5ofc VvTlcJ9M80zZkvqMdcRTVgHOXk8uPcPOeaixI2lCMGA35xkmAVP1D/c2BkIba4l2 Y0E+SnFs0sFVirkTtLv5NrjfsrEKnQQjU7Qyesn4eM8PfvbnGmm6S5ooswIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEF224a+khgUjLkxr45JvNDJ59a6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5NWYzMzNhLTQ5MGYtNDRiZS1iYWFlLWE3NDI4ZjJkOWE2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7xAwDQYJKoZIhvcNAQELBQADggEBAHqgKzUyIbtRXi8+dkuA 9JupiI1HsUIgEav1YvZ9ygdUdu2d2H3KLJPMRyVY7QJlVA1esn2q+u8TEngLr1fq sgZtVIHMCDvBLRi9T46RiGEsg7ghbfzaApMnTZcl9dI+BCvqxV6qbohQ6v/qloVh UMUWQeypITempTTl/EgohifA4jCaxL0ncAm8ehf90ga6Au0eLPomnmmodFevA5bZ NiCS9k97cP0tB1kno6wQMkFp0f3WM8jLM2ktNSGYWJ4/qc1tich+qLTbTSxViSaC YUymgn7oaKdODI2Bbe2l2jiO12+ktGZttcOX3hcD5fY3lBIQQKSBbZKtdmHlrYI/ kvc= -----END CERTIFICATE-----Generated at Fri May 22 14:19:10 2026 by rpki-client