$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c46996db-f910-480b-b9b6-36bb1271f42a.roa File: c46996db-f910-480b-b9b6-36bb1271f42a.roa (raw, json) Hash identifier: vcfFeKeQLHpAoxGsR8Ownm2xfNqiE2F07GzmuLn0EHk= Subject key identifier: F1:00:D2:9A:8E:22:43:B6:27:84:D1:1B:2E:54:6B:51:EB:86:01:1E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0AFBC9B8A465A2B947793F2C50560E7BF1B35050 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c46996db-f910-480b-b9b6-36bb1271f42a.roa Signing time: Fri 22 May 2026 16:52:17 +0000 ROA not before: Fri 22 May 2026 16:52:17 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae0:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fb:c9:b8:a4:65:a2:b9:47:79:3f:2c:50:56:0e:7b:f1:b3:50:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:52:17 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=00ff78d7dce12f81d67e07c7feed75bebc386f10a42483a2f7c859d871aed18b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:44:c5:df:ee:20:dd:27:70:e9:0d:91:ef: 70:32:36:7a:4e:0b:cf:62:32:d0:0c:37:9b:b5:00: fd:fd:9a:c4:81:88:93:b3:09:bf:e2:2b:1c:32:ed: 09:2d:09:e2:df:07:26:3f:0c:26:f6:9c:c5:99:aa: 35:fd:51:b9:48:7a:9c:0f:f1:01:82:a4:14:4a:73: 16:c9:87:01:46:2c:f7:91:70:7b:58:3e:38:ad:64: be:c4:21:57:29:b2:8c:e0:37:c4:5f:f2:30:f4:ab: fa:2f:cc:38:15:da:9c:00:21:71:22:26:92:b4:b7: 01:96:26:47:68:0e:6c:f3:9b:ff:90:f1:42:d3:b7: a4:95:38:0f:04:cc:db:28:a0:34:4c:f4:b6:5a:d9: 43:06:41:cc:ae:fb:a4:e9:cc:a4:a8:f6:d1:de:15: 04:22:26:8b:d7:37:b8:ba:e1:ea:1f:ba:f6:f6:3e: 0f:69:2c:ef:c9:5d:5d:eb:5d:0f:5f:97:35:2d:dd: b2:ee:e6:3d:66:a3:82:a6:eb:88:ac:41:0d:28:e4: 03:8c:ab:cf:ab:7b:16:eb:9b:b6:46:6d:e2:2c:01: c1:e7:a2:a0:4e:c6:07:6a:b3:c8:f1:22:91:f0:28: 8a:06:af:5c:25:e8:26:da:13:55:c6:58:93:09:39: 71:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:00:D2:9A:8E:22:43:B6:27:84:D1:1B:2E:54:6B:51:EB:86:01:1E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c46996db-f910-480b-b9b6-36bb1271f42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae0:7000::/40 Signature Algorithm: sha256WithRSAEncryption b6:5e:62:0e:75:b9:bc:41:aa:a0:99:d7:b4:2e:4b:e2:d9:ad: 41:40:b1:23:f8:89:92:2f:d0:26:69:1b:c5:65:7a:e2:28:fe: 64:b8:e3:98:e9:27:1a:36:49:4d:1d:21:9a:6f:fc:7d:76:42: 7e:f3:9b:4d:7e:04:9f:ed:88:ac:03:2c:76:c6:83:92:a3:49: a1:41:4a:68:ef:d3:12:65:a8:7d:cc:19:3c:ca:68:74:cc:46: 13:42:75:10:9b:67:46:2b:f0:14:a7:40:26:d6:0c:74:a5:9a: 1e:bf:7a:ab:47:f6:8b:47:c5:02:a5:60:f5:38:1a:72:0e:c0: 01:7c:15:f2:17:4a:4c:b6:5f:65:1e:b4:c8:6e:f7:45:77:91: 0a:38:a4:be:7e:d3:a2:fe:e9:c0:a2:61:47:b5:ac:b8:c5:13: e9:da:70:31:1b:7f:bc:9f:63:8f:5b:0e:c8:1d:59:40:6c:21: 79:e6:bb:fa:20:15:d9:86:c8:4e:b8:1a:20:9b:cf:28:7e:fb: 5a:58:9e:c4:d8:95:a9:cb:25:b8:3e:68:25:87:49:87:47:bf: 33:1c:ed:be:bd:b7:3d:57:9a:e7:ec:53:21:41:12:ef:ad:13: b7:55:f4:4b:bc:51:81:61:a9:a6:6b:59:86:42:97:11:9b:f9: 9c:0a:94:a5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCvvJuKRlorlHeT8sUFYOe/GzUFAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTIxN1oX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAMDBmZjc4ZDdkY2UxMmY4MWQ2N2Uw N2M3ZmVlZDc1YmViYzM4NmYxMGE0MjQ4M2EyZjdjODU5ZDg3MWFlZDE4YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eRExd/uIN0ncOkNke9wMjZ6TgvP YjLQDDebtQD9/ZrEgYiTswm/4iscMu0JLQni3wcmPwwm9pzFmao1/VG5SHqcD/EB gqQUSnMWyYcBRiz3kXB7WD44rWS+xCFXKbKM4DfEX/Iw9Kv6L8w4FdqcACFxIiaS tLcBliZHaA5s85v/kPFC07eklTgPBMzbKKA0TPS2WtlDBkHMrvuk6cykqPbR3hUE IiaL1ze4uuHqH7r29j4PaSzvyV1d610PX5c1Ld2y7uY9ZqOCpuuIrEENKOQDjKvP q3sW65u2Rm3iLAHB56KgTsYHarPI8SKR8CiKBq9cJegm2hNVxliTCTlxRwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPEA0pqOIkO2J4TRGy5Ua1HrhgEeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M0Njk5NmRiLWY5MTAtNDgwYi1iOWI2LTM2YmIxMjcxZjQyYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4HAwDQYJKoZIhvcNAQELBQADggEBALZeYg51ubxBqqCZ17Qu S+LZrUFAsSP4iZIv0CZpG8VleuIo/mS445jpJxo2SU0dIZpv/H12Qn7zm01+BJ/t iKwDLHbGg5KjSaFBSmjv0xJlqH3MGTzKaHTMRhNCdRCbZ0Yr8BSnQCbWDHSlmh6/ eqtH9otHxQKlYPU4GnIOwAF8FfIXSky2X2UetMhu90V3kQo4pL5+06L+6cCiYUe1 rLjFE+nacDEbf7yfY49bDsgdWUBsIXnmu/ogFdmGyE64GiCbzyh++1pYnsTYlanL Jbg+aCWHSYdHvzMc7b69tz1XmufsUyFBEu+tE7dV9Eu8UYFhqaZrWYZClxGb+ZwK lKU= -----END CERTIFICATE-----Generated at Sun May 24 12:19:41 2026 by rpki-client