$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab6c1a5b-baf2-4a51-9278-bb551e8fe5cb.roa File: ab6c1a5b-baf2-4a51-9278-bb551e8fe5cb.roa (raw, json) Hash identifier: 6wwi2nRsAL26O/i8Qj6GyvaFrhokgUra2YYG23FkDUs= Subject key identifier: 1E:65:73:32:F1:67:6E:CC:60:DA:FC:8C:A5:46:E9:AC:42:1C:22:EC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6F8CEF9866E9663E1DBEC45175C43F6D522BD318 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab6c1a5b-baf2-4a51-9278-bb551e8fe5cb.roa Signing time: Fri 22 May 2026 17:16:36 +0000 ROA not before: Fri 22 May 2026 17:16:36 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:8c:ef:98:66:e9:66:3e:1d:be:c4:51:75:c4:3f:6d:52:2b:d3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:16:36 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=18074c28d410d80cb1e829231c7cae55188cf752832a3988b3b6a291812178d1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:7f:e7:8c:45:d1:d2:9c:10:99:0f:43:36: a3:2c:5d:93:6c:1c:e6:ff:59:f8:a6:34:d7:8f:5b: db:d3:01:92:80:68:4e:d8:c5:a6:92:15:cb:0b:85: af:1d:a8:66:12:f4:2b:01:2e:89:11:4a:de:16:e7: d2:3b:5b:e4:2c:d2:a3:9d:ce:1a:50:81:e2:87:61: 74:c8:ca:f2:9d:49:c8:3c:b4:b6:31:25:88:3b:25: 6f:0f:ce:a6:dc:88:23:5a:f7:58:eb:e6:25:08:a6: ce:85:00:fb:b4:aa:41:62:2d:1b:d2:9a:e4:6a:71: f7:17:a5:ee:b8:81:b9:e3:bc:b9:36:14:56:f7:ae: 6f:75:49:75:2f:03:3a:3d:6b:82:89:67:c1:42:c2: 84:e1:3b:48:a3:38:a2:83:79:a8:53:7c:bb:b3:f2: 36:d8:80:fe:5a:45:22:b5:11:b9:8b:c1:5f:8b:a9: 5d:79:b2:c1:f2:06:d5:3b:90:c2:7d:91:81:91:93: 1d:9f:fa:79:32:e3:77:19:d8:5b:5d:fe:79:82:4a: cd:82:7e:70:e9:20:20:83:95:bf:29:52:06:3f:39: 8a:7e:d4:59:ef:20:bc:ac:df:90:5b:03:11:cb:83: ff:38:1e:0b:e5:3e:30:d3:b1:32:30:29:14:c2:06: 81:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:65:73:32:F1:67:6E:CC:60:DA:FC:8C:A5:46:E9:AC:42:1C:22:EC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab6c1a5b-baf2-4a51-9278-bb551e8fe5cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:4800::/40 Signature Algorithm: sha256WithRSAEncryption c5:04:a1:6d:9d:b2:46:d8:51:18:13:ea:13:1b:ae:b7:ec:69: bb:ab:f2:bb:94:59:d5:47:63:e5:dc:2b:cb:83:92:db:07:90: bc:a9:a7:03:bc:39:1c:a5:ca:e8:d6:42:c8:8c:8c:58:38:63: 61:b0:d9:1d:8e:80:b8:06:61:71:47:05:79:ff:b4:3b:78:1a: 6d:f7:11:ef:09:e9:f6:dc:81:97:11:13:57:df:23:6c:85:f9: 6f:10:f5:d4:15:6e:5b:b7:76:1a:28:dd:77:d1:b0:e9:51:1c: fd:d7:cb:b7:b8:2d:b7:96:83:6d:a1:eb:b6:08:1b:d7:c0:d7: 29:81:47:96:f8:a5:99:05:4c:4d:ec:4b:ee:76:1f:72:1d:fc: e0:8d:7b:fd:71:f9:b2:e7:47:48:d4:88:a1:7f:76:37:0e:c5: af:29:57:fb:8b:23:2d:3e:f0:e9:99:46:68:2c:25:c6:9d:73: 3a:59:1e:78:37:17:78:11:61:8f:ad:a3:3c:69:a4:c1:25:9a: b0:a5:ac:a3:64:24:36:6e:0e:53:04:8e:ae:64:f1:52:15:86: bc:d3:78:e5:0b:ec:50:3e:74:a4:11:99:c9:4f:56:fd:7c:06: 59:14:05:22:f7:fd:01:d4:02:26:72:03:c3:0e:7a:4d:2e:7f: 65:a7:7b:4a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUb4zvmGbpZj4dvsRRdcQ/bVIr0xgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MTYzNloX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAMTgwNzRjMjhkNDEwZDgwY2IxZTgy OTIzMWM3Y2FlNTUxODhjZjc1MjgzMmEzOTg4YjNiNmEyOTE4MTIxNzhkMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwB/54xF0dKcEJkPQzajLF2TbBzm /1n4pjTXj1vb0wGSgGhO2MWmkhXLC4WvHahmEvQrAS6JEUreFufSO1vkLNKjnc4a UIHih2F0yMrynUnIPLS2MSWIOyVvD86m3IgjWvdY6+YlCKbOhQD7tKpBYi0b0prk anH3F6XuuIG547y5NhRW965vdUl1LwM6PWuCiWfBQsKE4TtIoziig3moU3y7s/I2 2ID+WkUitRG5i8Ffi6ldebLB8gbVO5DCfZGBkZMdn/p5MuN3GdhbXf55gkrNgn5w 6SAgg5W/KVIGPzmKftRZ7yC8rN+QWwMRy4P/OB4L5T4w07EyMCkUwgaBzwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB5lczLxZ27MYNr8jKVG6axCHCLsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FiNmMxYTViLWJhZjItNGE1MS05Mjc4LWJiNTUxZThmZTVjYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6EgwDQYJKoZIhvcNAQELBQADggEBAMUEoW2dskbYURgT6hMb rrfsabur8ruUWdVHY+XcK8uDktsHkLyppwO8ORylyujWQsiMjFg4Y2Gw2R2OgLgG YXFHBXn/tDt4Gm33Ee8J6fbcgZcRE1ffI2yF+W8Q9dQVblu3dhoo3XfRsOlRHP3X y7e4LbeWg22h67YIG9fA1ymBR5b4pZkFTE3sS+52H3Id/OCNe/1x+bLnR0jUiKF/ djcOxa8pV/uLIy0+8OmZRmgsJcadczpZHng3F3gRYY+tozxppMElmrClrKNkJDZu DlMEjq5k8VIVhrzTeOUL7FA+dKQRmclPVv18BlkUBSL3/QHUAiZyA8MOek0uf2Wn e0o= -----END CERTIFICATE-----Generated at Sun May 24 12:18:50 2026 by rpki-client