$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7a0825a-8ce0-4524-9368-49a3904fde33.roa File: c7a0825a-8ce0-4524-9368-49a3904fde33.roa (raw, json) Hash identifier: NJeQSBkDIoorI7LKVIrfr++i3QjF0vnvcof8Ecn0pN4= Subject key identifier: B2:35:06:D7:23:19:C0:B2:99:75:FE:64:73:B7:0D:36:F9:51:23:54 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C3EE0E907E25253AA3F2669B166FA2DF5DE6EA8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7a0825a-8ce0-4524-9368-49a3904fde33.roa Signing time: Fri 22 May 2026 16:54:00 +0000 ROA not before: Fri 22 May 2026 16:54:00 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae2:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3e:e0:e9:07:e2:52:53:aa:3f:26:69:b1:66:fa:2d:f5:de:6e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:54:00 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=8738163753523d407f9d8f5fcbf50d7cb33b52b9506fb64111bcee151b924fea, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f3:2a:0f:f9:12:b1:4a:71:59:6d:ea:08:03: 62:c0:80:a8:e6:94:bc:6f:f4:3c:c2:55:9f:e1:45: 56:d3:9c:8f:21:65:ad:73:01:a0:72:a2:8c:0f:6b: 6c:74:d3:f0:f0:38:b2:44:6f:47:61:5a:56:cf:26: 24:91:ee:52:a3:7f:5e:58:08:30:2f:48:32:4f:a5: f2:d4:e6:93:c8:24:e3:a7:49:07:f3:f9:3d:b5:0b: 7e:c9:65:7b:c3:ca:42:cf:fd:62:a6:2b:db:95:54: 4f:3d:ed:a5:f7:dd:87:5f:c5:ac:a4:fe:17:36:c7: 34:80:cd:ee:8f:4e:18:80:5a:e3:f4:29:d3:4a:33: d0:98:bb:1c:77:7b:73:ab:76:78:1d:df:b2:22:37: 4e:81:e1:c6:4c:6f:29:0d:ff:d6:f9:92:05:cd:88: 2b:51:85:e5:f9:fc:57:30:7b:b1:63:04:a0:89:65: bc:43:a4:90:17:47:0f:71:fe:f4:a4:e6:b7:62:84: 50:cc:39:75:24:d6:d5:3e:ed:98:18:4e:4a:c5:10: 96:3c:dd:f9:10:01:bb:e9:f5:4d:83:31:5f:a0:9f: 09:ad:21:c2:be:8a:87:11:dc:0e:88:9e:6d:5b:6f: 5d:4b:b0:0f:d6:63:2b:40:d7:92:3e:b1:92:f9:9e: cb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:35:06:D7:23:19:C0:B2:99:75:FE:64:73:B7:0D:36:F9:51:23:54 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7a0825a-8ce0-4524-9368-49a3904fde33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae2:c000::/40 Signature Algorithm: sha256WithRSAEncryption 26:1e:a3:f3:9d:07:f5:01:a1:42:b5:42:91:9c:af:98:c2:ca: e1:4b:e9:b0:df:7c:44:eb:47:1f:39:6d:b4:b5:17:8b:07:b2: c4:4f:1e:7d:45:ff:d0:bb:2e:00:a5:93:0f:e4:d8:88:47:2b: 39:3e:18:c1:c9:87:06:2f:8b:b6:1f:51:0c:0e:8c:f8:2c:ff: b6:18:31:e8:32:e4:ad:a8:db:4a:6c:2f:8b:dd:e3:c7:d4:c1: 6e:1c:52:98:a9:49:e0:6e:ab:b2:8e:54:42:f0:bb:a4:54:9d: dd:31:a3:67:c9:c7:8f:af:36:35:19:da:ec:e6:79:f0:22:b0: f6:c3:88:bc:b2:f0:78:dd:6e:84:4b:d5:06:ea:22:32:53:2c: 8b:6f:91:cf:03:47:5e:0f:a0:fb:ff:3b:05:f0:60:0a:4e:1a: f8:36:db:d5:57:d6:14:fa:0b:8d:12:85:24:d3:d1:e8:fd:4e: fb:77:be:58:a8:d8:6b:f8:fa:ba:8f:21:10:c0:24:46:51:38: fe:81:e0:72:8a:89:c3:a1:b6:de:1c:c1:f3:15:31:be:25:5c: e8:a0:13:0d:53:ed:7d:75:19:c1:d7:96:9e:a3:15:2e:77:bf: 91:ec:78:2a:b6:b6:4c:4b:06:3c:3d:94:e4:ae:1c:bb:d1:9e: cb:1d:3d:55 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPD7g6QfiUlOqPyZpsWb6LfXebqgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTQwMFoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAODczODE2Mzc1MzUyM2Q0MDdmOWQ4 ZjVmY2JmNTBkN2NiMzNiNTJiOTUwNmZiNjQxMTFiY2VlMTUxYjkyNGZlYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvMqD/kSsUpxWW3qCANiwICo5pS8 b/Q8wlWf4UVW05yPIWWtcwGgcqKMD2tsdNPw8DiyRG9HYVpWzyYkke5So39eWAgw L0gyT6Xy1OaTyCTjp0kH8/k9tQt+yWV7w8pCz/1ipivblVRPPe2l992HX8WspP4X Nsc0gM3uj04YgFrj9CnTSjPQmLscd3tzq3Z4Hd+yIjdOgeHGTG8pDf/W+ZIFzYgr UYXl+fxXMHuxYwSgiWW8Q6SQF0cPcf70pOa3YoRQzDl1JNbVPu2YGE5KxRCWPN35 EAG76fVNgzFfoJ8JrSHCvoqHEdwOiJ5tW29dS7AP1mMrQNeSPrGS+Z7LvwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLI1BtcjGcCymXX+ZHO3DTb5USNUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3YTA4MjVhLThjZTAtNDUyNC05MzY4LTQ5YTM5MDRmZGUzMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4sAwDQYJKoZIhvcNAQELBQADggEBACYeo/OdB/UBoUK1QpGc r5jCyuFL6bDffETrRx85bbS1F4sHssRPHn1F/9C7LgClkw/k2IhHKzk+GMHJhwYv i7YfUQwOjPgs/7YYMegy5K2o20psL4vd48fUwW4cUpipSeBuq7KOVELwu6RUnd0x o2fJx4+vNjUZ2uzmefAisPbDiLyy8HjdboRL1QbqIjJTLItvkc8DR14PoPv/OwXw YApOGvg229VX1hT6C40ShSTT0ej9Tvt3vlio2Gv4+rqPIRDAJEZROP6B4HKKicOh tt4cwfMVMb4lXOigEw1T7X11GcHXlp6jFS53v5HseCq2tkxLBjw9lOSuHLvRnssd PVU= -----END CERTIFICATE-----Generated at Sun May 24 12:19:40 2026 by rpki-client