$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c5909587-3a2c-49e3-b14b-0ba83d636951.roa File: c5909587-3a2c-49e3-b14b-0ba83d636951.roa (raw, json) Hash identifier: hoURVkXO1V3iJgRkwBZxGi0bmz45lo/e2Kx9DKFMQK8= Subject key identifier: 51:93:A0:83:80:DC:03:12:02:50:D9:7C:D3:DB:B3:B0:A6:83:1C:6C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4ED51DEA698C75EDD4491EB1F6EEB800300CDC87 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c5909587-3a2c-49e3-b14b-0ba83d636951.roa Signing time: Fri 22 May 2026 16:52:13 +0000 ROA not before: Fri 22 May 2026 16:52:13 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d5:1d:ea:69:8c:75:ed:d4:49:1e:b1:f6:ee:b8:00:30:0c:dc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:52:13 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=8b847545ea64c400409d6592658b8c76772fcb1ecd85ee46fa11d4fd7dd0c683, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:28:cc:bb:11:38:13:44:8e:1d:58:b8:3d:3c: ac:e3:a8:55:12:f4:d2:8d:ae:49:d7:cb:7e:fd:f1: 67:0d:cc:c6:da:b1:82:a9:68:01:27:9b:86:68:ec: bc:47:4c:47:cd:4a:be:73:46:60:ac:85:26:11:24: 69:35:e5:05:5f:64:6a:e3:5b:d7:11:96:22:49:e6: 3a:56:6b:db:ce:a2:7c:1e:c1:10:ee:c9:24:cd:e5: 88:15:a8:02:54:5f:92:4b:c3:24:3e:e5:da:0c:57: fe:55:d4:6a:a4:61:92:82:cd:c6:d9:dd:fd:49:c9: 3c:be:05:01:4f:2e:88:6e:d5:77:94:73:f5:41:32: 56:4c:f2:3d:85:77:5f:d8:23:ab:97:4d:4f:08:b1: d6:e0:2e:d0:d4:5b:24:74:aa:16:d1:95:00:62:0b: af:5d:52:b6:e5:9b:1c:c7:47:04:e2:a9:cd:ef:cc: 18:cb:29:5f:00:3a:fd:c1:12:75:38:9e:50:7d:7c: 7f:d8:af:00:eb:58:c8:54:9e:15:42:30:60:be:4c: 5b:a5:fe:4c:50:3b:2f:82:29:8c:5d:e1:be:25:2a: bd:b1:25:b9:5c:b2:79:7e:68:9d:b1:da:00:0e:9a: 2d:95:38:4c:25:03:89:ea:9e:87:6c:bc:bc:bb:27: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:93:A0:83:80:DC:03:12:02:50:D9:7C:D3:DB:B3:B0:A6:83:1C:6C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c5909587-3a2c-49e3-b14b-0ba83d636951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c800::/40 Signature Algorithm: sha256WithRSAEncryption 5a:f8:00:1a:33:bf:2a:4c:da:56:b4:e9:22:07:2a:76:f6:e0: c8:00:50:53:08:a2:bd:3b:4c:88:48:94:7e:33:49:d5:ef:a7: eb:0f:7e:cf:40:db:89:5f:bb:1f:df:0a:65:3a:5c:da:88:3b: a4:12:c6:6d:51:88:5b:c2:80:b3:b6:f6:7d:0d:da:f3:14:9c: 5e:3b:fd:8d:b2:ff:e1:2b:88:63:e6:f5:21:52:2b:43:1b:95: cb:43:5a:71:08:b0:5d:33:e1:e5:d1:18:bf:76:e1:6b:e1:f1: 07:38:82:78:1a:65:ef:b7:ce:db:85:e3:c6:70:b6:f9:46:9b: 1b:89:01:c9:b9:35:ac:47:71:2a:4c:28:90:77:d3:12:9e:f9: 01:f4:e2:f5:5a:75:8f:94:16:81:69:8a:e0:d6:63:3b:fe:3a: ea:9a:82:fa:b9:f0:45:1c:c5:2d:fa:c3:80:63:f7:39:e2:ad: 1c:a3:d4:ee:f2:2e:d6:0f:2f:dc:b5:51:25:28:ab:53:b7:1d: e6:21:dc:e2:03:36:48:f6:74:df:56:c5:4f:20:56:f3:89:07: 7f:26:9e:83:f2:d0:98:12:93:71:c1:70:9a:3e:f7:34:1a:01: 9c:02:51:03:3c:e0:42:77:ee:6a:62:5b:97:53:03:7c:55:8d: dc:bc:26:62 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTtUd6mmMde3USR6x9u64ADAM3IcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTIxM1oX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAOGI4NDc1NDVlYTY0YzQwMDQwOWQ2 NTkyNjU4YjhjNzY3NzJmY2IxZWNkODVlZTQ2ZmExMWQ0ZmQ3ZGQwYzY4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ijMuxE4E0SOHVi4PTys46hVEvTS ja5J18t+/fFnDczG2rGCqWgBJ5uGaOy8R0xHzUq+c0ZgrIUmESRpNeUFX2Rq41vX EZYiSeY6VmvbzqJ8HsEQ7skkzeWIFagCVF+SS8MkPuXaDFf+VdRqpGGSgs3G2d39 Sck8vgUBTy6IbtV3lHP1QTJWTPI9hXdf2COrl01PCLHW4C7Q1FskdKoW0ZUAYguv XVK25Zscx0cE4qnN78wYyylfADr9wRJ1OJ5QfXx/2K8A61jIVJ4VQjBgvkxbpf5M UDsvgimMXeG+JSq9sSW5XLJ5fmidsdoADpotlThMJQOJ6p6HbLy8uycxWwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFGToIOA3AMSAlDZfNPbs7CmgxxsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M1OTA5NTg3LTNhMmMtNDllMy1iMTRiLTBiYTgzZDYzNjk1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYcgwDQYJKoZIhvcNAQELBQADggEBAFr4ABozvypM2la06SIH Knb24MgAUFMIor07TIhIlH4zSdXvp+sPfs9A24lfux/fCmU6XNqIO6QSxm1RiFvC gLO29n0N2vMUnF47/Y2y/+EriGPm9SFSK0MblctDWnEIsF0z4eXRGL924Wvh8Qc4 gngaZe+3ztuF48ZwtvlGmxuJAcm5NaxHcSpMKJB30xKe+QH04vVadY+UFoFpiuDW Yzv+Ouqagvq58EUcxS36w4Bj9znirRyj1O7yLtYPL9y1USUoq1O3HeYh3OIDNkj2 dN9WxU8gVvOJB38mnoPy0JgSk3HBcJo+9zQaAZwCUQM84EJ37mpiW5dTA3xVjdy8 JmI= -----END CERTIFICATE-----Generated at Sun May 24 12:19:41 2026 by rpki-client