$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c4612412-93ec-4305-af23-daf63187e8f7.roa File: c4612412-93ec-4305-af23-daf63187e8f7.roa (raw, json) Hash identifier: 3ZscFu3TVbMaQBxATgXcNKCEIELMfycY9PWv+37c8q8= Subject key identifier: DC:A4:82:97:70:54:C8:AC:44:FE:7A:42:D1:73:CB:7C:AB:28:67:5A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 20533D5A7970D3D5BCB61FD5D9EEFC261CD26609 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c4612412-93ec-4305-af23-daf63187e8f7.roa Signing time: Fri 22 May 2026 16:52:15 +0000 ROA not before: Fri 22 May 2026 16:52:15 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae0:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:53:3d:5a:79:70:d3:d5:bc:b6:1f:d5:d9:ee:fc:26:1c:d2:66:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:52:15 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=5b1b905d9f76216466f7862a4314be4c96651bd455adf3800e9e789c4dfe48f0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cd:b1:53:2f:fc:78:f5:3d:4f:ec:e8:62:ab: 49:e1:99:87:ff:47:5c:8f:9b:24:a3:50:40:5d:1e: c6:f7:3c:e6:6a:1b:9c:08:43:f8:a9:c1:13:84:07: fe:fe:cc:8d:c3:24:30:04:3f:7c:f5:ea:c4:c0:cb: dc:e3:29:b8:01:23:a1:7d:44:fc:5b:14:da:ea:6c: d1:62:b8:cd:d7:2d:b5:e6:ce:3a:32:24:e1:77:1f: 75:c4:36:44:b9:66:f5:4b:92:78:6c:e4:b5:16:80: 06:12:51:0d:e8:a9:88:c8:0f:f3:b3:d9:b1:e9:0a: 87:12:cf:7a:20:cb:30:2d:68:38:1f:00:a7:c5:21: 5b:e9:66:48:08:56:3e:6f:bb:01:ae:d7:0a:79:b7: 69:fe:97:cb:93:f9:f8:8c:c5:37:8f:46:91:de:75: 3b:bc:c2:1e:3b:78:f5:5f:fa:99:16:b7:37:53:2a: 83:f5:f5:fc:e6:a7:d3:ab:d3:84:a3:f9:90:4f:a3: fc:a8:8b:12:f9:67:9a:b6:91:0d:bd:ed:82:5d:8b: 4b:35:dd:8a:af:b0:b1:09:d0:62:ae:80:f2:25:ad: b9:a9:5e:a5:ab:e7:28:96:83:1b:c3:62:30:7b:1c: 2f:0a:92:e6:11:3e:a4:7d:d2:1d:ae:71:c5:51:7f: 6b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A4:82:97:70:54:C8:AC:44:FE:7A:42:D1:73:CB:7C:AB:28:67:5A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c4612412-93ec-4305-af23-daf63187e8f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae0:2800::/40 Signature Algorithm: sha256WithRSAEncryption 51:19:fe:da:40:8a:76:c9:5a:60:c6:25:fe:72:ef:63:0e:84: e2:64:f3:36:d4:a3:99:a2:22:65:70:d1:ac:41:9c:08:34:d2: 5b:02:0d:1e:11:4e:72:20:65:48:7f:9a:5a:7f:6c:51:3d:92: e6:9f:c9:49:dd:6b:46:be:b1:be:b1:28:d3:70:02:fe:54:2d: 6f:ac:9e:90:14:6a:49:b8:31:b3:b1:40:68:e4:11:d6:46:18: b1:42:bb:48:e1:0d:f4:1c:e6:a5:68:80:14:89:a3:38:3f:34: 39:16:ae:96:7d:bd:89:87:e3:5c:52:4d:a4:6b:6f:e4:00:00: 00:1b:ab:dc:07:b8:4c:25:87:b4:a4:33:f0:f9:26:8d:07:e9: 86:d7:94:f7:3c:4e:fa:65:31:cc:5d:af:26:a0:c9:7a:de:6b: 61:d9:ac:45:9d:3e:28:45:30:e4:17:09:a3:ce:ef:0f:f4:17: 8f:d1:ef:04:62:ea:fb:5c:24:42:8d:77:87:85:b2:8b:59:46: 50:3f:51:d4:02:ba:21:1a:8e:60:a4:7a:dd:39:d8:10:40:c5: c7:1b:80:13:1d:ac:3f:e7:62:e5:45:ae:ba:20:23:bd:56:2e: fd:3e:47:a0:93:06:6b:92:74:85:9d:f9:98:fd:44:af:c3:ec: 5c:20:06:43 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIFM9Wnlw09W8th/V2e78JhzSZgkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTIxNVoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNANWIxYjkwNWQ5Zjc2MjE2NDY2Zjc4 NjJhNDMxNGJlNGM5NjY1MWJkNDU1YWRmMzgwMGU5ZTc4OWM0ZGZlNDhmMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M2xUy/8ePU9T+zoYqtJ4ZmH/0dc j5sko1BAXR7G9zzmahucCEP4qcEThAf+/syNwyQwBD989erEwMvc4ym4ASOhfUT8 WxTa6mzRYrjN1y215s46MiThdx91xDZEuWb1S5J4bOS1FoAGElEN6KmIyA/zs9mx 6QqHEs96IMswLWg4HwCnxSFb6WZICFY+b7sBrtcKebdp/pfLk/n4jMU3j0aR3nU7 vMIeO3j1X/qZFrc3UyqD9fX85qfTq9OEo/mQT6P8qIsS+WeatpENve2CXYtLNd2K r7CxCdBiroDyJa25qV6lq+coloMbw2IwexwvCpLmET6kfdIdrnHFUX9rpwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNykgpdwVMisRP56QtFzy3yrKGdaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M0NjEyNDEyLTkzZWMtNDMwNS1hZjIzLWRhZjYzMTg3ZThmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4CgwDQYJKoZIhvcNAQELBQADggEBAFEZ/tpAinbJWmDGJf5y 72MOhOJk8zbUo5miImVw0axBnAg00lsCDR4RTnIgZUh/mlp/bFE9kuafyUnda0a+ sb6xKNNwAv5ULW+snpAUakm4MbOxQGjkEdZGGLFCu0jhDfQc5qVogBSJozg/NDkW rpZ9vYmH41xSTaRrb+QAAAAbq9wHuEwlh7SkM/D5Jo0H6YbXlPc8TvplMcxdryag yXrea2HZrEWdPihFMOQXCaPO7w/0F4/R7wRi6vtcJEKNd4eFsotZRlA/UdQCuiEa jmCket052BBAxccbgBMdrD/nYuVFrrogI71WLv0+R6CTBmuSdIWd+Zj9RK/D7Fwg BkM= -----END CERTIFICATE-----Generated at Sun May 24 12:19:55 2026 by rpki-client