$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9faa49d6-3203-4cc1-9c65-becea5a96941.roa File: 9faa49d6-3203-4cc1-9c65-becea5a96941.roa (raw, json) Hash identifier: 2vvrzbNxfPsS3jEsfKPPQ4GjkCkgdjQ92ohCj2jQg1A= Subject key identifier: 18:20:B0:30:82:61:5F:2A:3E:F3:61:C0:07:F8:76:52:96:66:D9:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 64D08E7E4D73580F336A9C406EEF3D7BE4800D30 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9faa49d6-3203-4cc1-9c65-becea5a96941.roa Signing time: Fri 22 May 2026 16:52:16 +0000 ROA not before: Fri 22 May 2026 16:52:16 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae0:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d0:8e:7e:4d:73:58:0f:33:6a:9c:40:6e:ef:3d:7b:e4:80:0d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:52:16 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=43bfb1672429bbb7e60ae247b78c1fe95e8902019a8f441b3633d42a898de024, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:c8:28:27:7f:14:dc:15:77:ff:2c:53:99: 97:18:c3:97:fc:d6:dc:16:92:31:a8:57:0c:c8:69: c6:3c:79:99:57:dc:25:4e:4d:24:c0:01:7d:88:fd: e3:07:0a:63:76:86:9a:9a:40:45:7f:f3:a4:c5:0c: d9:0b:4c:26:b8:bd:11:40:af:cf:98:b0:e3:80:cc: a1:5d:9d:24:ac:97:5b:a4:a7:13:55:ab:b2:ef:51: ab:9a:ce:72:4c:04:9c:b1:5d:e0:ec:3c:2a:8f:58: e0:6d:22:53:03:97:11:a6:36:ff:00:00:e1:5e:91: f0:e9:f3:67:f5:cd:cf:7e:09:8a:fb:b9:b5:5b:0a: 07:ef:2f:d0:e3:f5:80:8f:a8:69:d2:7f:32:09:3c: 3a:87:78:cd:35:f7:46:27:81:cb:6f:75:e0:b9:7c: d8:6d:00:ba:dc:48:a0:b7:66:8b:88:e2:0e:f0:c9: ef:2e:22:d9:bf:75:f0:be:89:34:1d:7e:2a:0f:a2: de:61:3d:e2:f0:8a:38:2f:8e:b0:c1:5c:d8:3a:a2: 72:25:2d:0d:e7:e3:73:58:60:e1:b6:ea:98:12:6e: 74:3d:f2:36:41:d3:b9:2b:84:f3:e7:5f:8a:29:df: 45:fa:dc:c5:6c:0d:4d:a5:fa:bd:a7:d8:02:92:c8: be:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:20:B0:30:82:61:5F:2A:3E:F3:61:C0:07:F8:76:52:96:66:D9:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9faa49d6-3203-4cc1-9c65-becea5a96941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae0:4800::/40 Signature Algorithm: sha256WithRSAEncryption 9b:21:70:49:4a:d8:eb:e9:9c:63:b2:58:2c:0d:82:03:b3:83: 3c:c9:e4:88:5f:a6:68:ed:0b:ac:19:b0:9e:97:58:d7:5d:a7: 16:5a:70:8f:2e:c8:ef:8c:ca:57:ed:56:df:3b:ed:2b:c2:2d: 6f:3a:31:41:e9:03:74:8a:0c:18:86:38:8d:4d:ce:7f:3f:06: c3:c1:5e:af:05:92:ea:60:28:db:35:20:a5:c6:b4:44:01:4b: 3b:5c:b4:e6:4e:36:88:6e:42:7c:23:b2:9b:c1:07:a6:ea:81: 5e:0a:9c:9a:2d:86:57:2b:85:22:93:02:b0:da:45:20:f6:30: 0c:0b:96:d8:5c:f9:dc:ef:68:60:73:0a:68:5e:22:65:c9:5a: 75:a6:8f:27:5a:1d:9f:02:51:64:ef:a1:4f:f6:7e:79:8b:0b: c2:5f:43:58:5d:88:e9:40:18:bf:d3:ee:40:02:4a:26:a5:a8: d9:cf:a3:2a:ea:6c:a0:6e:c4:88:3d:69:f9:aa:4f:f0:90:f4: 80:84:1c:a2:2d:2e:a7:35:53:cb:96:80:c0:71:96:b7:a2:a7: 66:9d:bd:a0:32:3a:c0:7b:9f:50:9c:0a:38:9d:c6:19:6a:69: 70:80:ca:c8:68:46:05:e7:66:fc:da:99:55:2d:75:f1:84:6b: 03:50:ec:b1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZNCOfk1zWA8zapxAbu89e+SADTAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTIxNloX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNANDNiZmIxNjcyNDI5YmJiN2U2MGFl MjQ3Yjc4YzFmZTk1ZTg5MDIwMTlhOGY0NDFiMzYzM2Q0MmE4OThkZTAyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaHIKCd/FNwVd/8sU5mXGMOX/Nbc FpIxqFcMyGnGPHmZV9wlTk0kwAF9iP3jBwpjdoaamkBFf/OkxQzZC0wmuL0RQK/P mLDjgMyhXZ0krJdbpKcTVauy71Grms5yTAScsV3g7Dwqj1jgbSJTA5cRpjb/AADh XpHw6fNn9c3PfgmK+7m1WwoH7y/Q4/WAj6hp0n8yCTw6h3jNNfdGJ4HLb3XguXzY bQC63Eigt2aLiOIO8MnvLiLZv3Xwvok0HX4qD6LeYT3i8Io4L46wwVzYOqJyJS0N 5+NzWGDhtuqYEm50PfI2QdO5K4Tz51+KKd9F+tzFbA1Npfq9p9gCksi+BQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBggsDCCYV8qPvNhwAf4dlKWZtkiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmYWE0OWQ2LTMyMDMtNGNjMS05YzY1LWJlY2VhNWE5Njk0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4EgwDQYJKoZIhvcNAQELBQADggEBAJshcElK2OvpnGOyWCwN ggOzgzzJ5IhfpmjtC6wZsJ6XWNddpxZacI8uyO+MylftVt877SvCLW86MUHpA3SK DBiGOI1Nzn8/BsPBXq8FkupgKNs1IKXGtEQBSztctOZONohuQnwjspvBB6bqgV4K nJothlcrhSKTArDaRSD2MAwLlthc+dzvaGBzCmheImXJWnWmjydaHZ8CUWTvoU/2 fnmLC8JfQ1hdiOlAGL/T7kACSialqNnPoyrqbKBuxIg9afmqT/CQ9ICEHKItLqc1 U8uWgMBxlreip2advaAyOsB7n1CcCjidxhlqaXCAyshoRgXnZvzamVUtdfGEawNQ 7LE= -----END CERTIFICATE-----Generated at Sun May 24 12:19:09 2026 by rpki-client