$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cfb49e7a-154b-471e-a907-df88740872ac.roa File: cfb49e7a-154b-471e-a907-df88740872ac.roa (raw, json) Hash identifier: FY3IZW2XKX8itgZmaeUotdhGnfgjC+pSGMkiOQjx2z8= Subject key identifier: 5B:D7:71:4A:FF:1C:DF:66:A4:7E:0B:6D:79:4C:B1:58:B1:51:4D:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 760ABA6281F4A193052D8133F5559FAF3305E365 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cfb49e7a-154b-471e-a907-df88740872ac.roa Signing time: Fri 22 May 2026 16:52:08 +0000 ROA not before: Fri 22 May 2026 16:52:08 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0a:ba:62:81:f4:a1:93:05:2d:81:33:f5:55:9f:af:33:05:e3:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:52:08 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=55ab59d16187550a5bfa8f2b8ad9b29da9b5fef1714fc08d599f33f542ca401c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:5b:3b:2f:7f:5c:8a:2c:35:89:66:92:30: 5a:32:de:c5:43:d7:b0:70:0d:c3:57:a7:52:e3:69: ec:c2:aa:db:c7:b7:81:5d:87:ee:fe:90:2b:dd:3b: e5:17:40:e7:16:65:f6:21:3b:cf:f8:1f:6c:64:29: 22:7c:7f:0e:e5:49:ec:44:30:80:d1:0d:e2:da:09: 08:f7:ad:ee:01:f8:6e:03:58:46:c8:a6:43:82:ca: 3c:92:c5:c6:2f:2d:db:cd:78:0a:5c:4b:93:a9:1f: e1:80:59:f3:08:46:f3:76:f7:4b:35:3d:8c:00:d8: b4:5a:98:d7:70:a1:55:14:14:2d:f5:f9:5b:7e:80: b3:a9:26:ca:dc:4f:3f:63:4f:0e:77:7f:38:d5:ad: d2:a7:bd:32:56:4b:f7:3c:c6:80:df:11:95:9b:2e: 02:02:a6:e8:ab:60:d1:0d:fe:fc:02:c6:05:af:a6: e1:6a:72:36:b0:81:79:13:bb:a2:62:86:b5:ff:d1: 4a:98:00:62:44:b3:47:e4:a9:29:d9:ad:09:36:59: d5:cc:a0:c7:50:dc:c4:26:3e:d4:69:23:5e:76:93: 4a:6b:78:0a:d6:4d:5e:de:9a:5b:16:1c:ad:8c:06: 9e:8d:e2:81:43:08:f3:6a:14:29:6b:79:24:b9:ca: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D7:71:4A:FF:1C:DF:66:A4:7E:0B:6D:79:4C:B1:58:B1:51:4D:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cfb49e7a-154b-471e-a907-df88740872ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:7000::/40 Signature Algorithm: sha256WithRSAEncryption c0:a0:4d:ea:22:12:e2:9e:96:8d:6e:7f:24:1e:83:9d:9c:ba: a0:a4:e7:50:10:5c:f0:0f:3d:2c:e8:16:3f:40:e6:53:51:b8: b4:6c:13:ab:05:2d:33:d7:bb:70:f9:34:a8:64:f0:1e:14:9d: 92:b4:c8:bc:54:3a:e1:e2:04:0a:5e:fe:da:9c:cf:7c:56:bb: 21:93:16:7d:64:7b:9a:ec:1a:dd:49:e6:f0:b8:f2:4c:6e:88: 2c:9e:f4:08:e7:df:f6:88:1a:3a:72:52:a3:51:bb:43:69:a4: 67:cf:39:63:3e:6c:d6:f7:d1:9e:89:73:f0:43:fb:67:3d:bf: 88:27:19:b4:9c:6f:e6:14:1d:6e:b5:91:42:a2:9c:87:bc:df: d8:fe:db:aa:5e:b8:ef:13:d3:41:c1:74:e5:95:88:39:a1:ba: b1:35:f5:a9:f6:dd:c1:0c:16:e9:80:e0:1e:22:ae:71:e4:53: ee:72:1d:85:b4:27:9a:52:62:87:84:6f:5f:63:46:5d:7a:a9: 4a:ff:d0:0e:87:2f:77:10:88:a1:2b:04:5f:2d:0e:c2:7b:64: 78:eb:ed:d1:cb:cc:09:c8:2a:5a:5a:02:db:cf:30:e2:94:88: c8:6d:ee:47:5f:21:3e:54:cb:bd:89:ff:0b:8e:82:40:2c:fe: b3:69:09:28 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdgq6YoH0oZMFLYEz9VWfrzMF42UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTIwOFoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNANTVhYjU5ZDE2MTg3NTUwYTViZmE4 ZjJiOGFkOWIyOWRhOWI1ZmVmMTcxNGZjMDhkNTk5ZjMzZjU0MmNhNDAxYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGxbOy9/XIosNYlmkjBaMt7FQ9ew cA3DV6dS42nswqrbx7eBXYfu/pAr3TvlF0DnFmX2ITvP+B9sZCkifH8O5UnsRDCA 0Q3i2gkI963uAfhuA1hGyKZDgso8ksXGLy3bzXgKXEuTqR/hgFnzCEbzdvdLNT2M ANi0WpjXcKFVFBQt9flbfoCzqSbK3E8/Y08Od3841a3Sp70yVkv3PMaA3xGVmy4C Aqboq2DRDf78AsYFr6bhanI2sIF5E7uiYoa1/9FKmABiRLNH5Kkp2a0JNlnVzKDH UNzEJj7UaSNedpNKa3gK1k1e3ppbFhytjAaejeKBQwjzahQpa3kkucpKqQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFvXcUr/HN9mpH4LbXlMsVixUU3iMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NmYjQ5ZTdhLTE1NGItNDcxZS1hOTA3LWRmODg3NDA4NzJhYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYXAwDQYJKoZIhvcNAQELBQADggEBAMCgTeoiEuKelo1ufyQe g52cuqCk51AQXPAPPSzoFj9A5lNRuLRsE6sFLTPXu3D5NKhk8B4UnZK0yLxUOuHi BApe/tqcz3xWuyGTFn1ke5rsGt1J5vC48kxuiCye9Ajn3/aIGjpyUqNRu0NppGfP OWM+bNb30Z6Jc/BD+2c9v4gnGbScb+YUHW61kUKinIe839j+26peuO8T00HBdOWV iDmhurE19an23cEMFumA4B4irnHkU+5yHYW0J5pSYoeEb19jRl16qUr/0A6HL3cQ iKErBF8tDsJ7ZHjr7dHLzAnIKlpaAtvPMOKUiMht7kdfIT5Uy72J/wuOgkAs/rNp CSg= -----END CERTIFICATE-----Generated at Sun May 24 12:19:08 2026 by rpki-client