$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa File: d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa (raw, json) Hash identifier: Xvgb18v3j3eyE4zQ4ll7+WgH8YPAmuD1LolD6rK0si8= Subject key identifier: 47:4A:F8:B5:42:B8:66:D1:1C:C2:7A:46:E5:5C:6F:E8:18:F1:90:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7186AE841A2F7C72726E4DAAB5963B838D659309 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa Signing time: Tue 19 May 2026 00:00:57 +0000 ROA not before: Tue 19 May 2026 00:00:57 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:86:ae:84:1a:2f:7c:72:72:6e:4d:aa:b5:96:3b:83:8d:65:93:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 00:00:57 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=69b8b91d4cba4f205d7c786e169b845fdda768929406b9aeb7101d16a0c3fcdb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:08:c0:86:ed:7c:da:46:c3:bf:9c:12:bb:05: 9a:55:0a:29:8c:d5:c0:49:fc:79:c0:7e:12:87:c9: 9a:8d:bb:ae:bb:9c:81:7e:16:04:5c:7c:a4:03:3a: 2a:9c:c0:15:dc:41:0f:a6:38:f1:2d:ca:ab:f0:8f: 54:24:e6:84:d0:e8:30:51:16:cb:09:e3:f6:a4:ba: e5:0f:11:ef:da:72:49:2f:46:3f:a1:84:e9:0b:54: da:ea:6f:8b:e0:80:83:f8:5e:42:ae:f8:35:5c:00: 10:fa:ea:0e:ea:c7:c1:af:fe:29:d0:95:cc:cb:15: 32:7f:2f:6e:cc:40:a1:18:05:76:e7:c4:4d:df:22: d5:fe:3d:53:1d:d0:64:95:63:8d:22:23:61:b3:b3: 7f:f7:9a:81:a9:f9:d7:e1:8e:f3:84:76:f2:1d:d8: d9:fd:99:22:72:d2:89:f2:5c:8a:22:d9:db:9c:00: 8f:48:03:31:f5:22:8e:31:d7:46:f1:bb:57:5f:2b: b0:26:a4:cc:c6:86:31:c6:d4:c4:57:cb:93:df:6c: 5d:d7:d0:60:6c:91:50:e4:c5:f3:95:5f:d2:a5:00: 6c:c1:1c:e2:68:8b:43:db:c9:70:93:21:2a:97:38: d6:6b:7e:66:9c:82:d9:9b:ba:e5:c7:99:27:24:d2: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4A:F8:B5:42:B8:66:D1:1C:C2:7A:46:E5:5C:6F:E8:18:F1:90:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:2800::/40 Signature Algorithm: sha256WithRSAEncryption b0:8d:fc:ae:c0:4a:f8:a3:68:1c:c1:cd:f1:6a:c7:69:5b:65: dc:e4:15:9e:1e:09:40:5c:ac:08:71:13:62:9a:9a:bd:64:68: c1:7c:3b:08:5f:c8:54:65:13:a8:7e:df:94:97:44:46:d6:7a: 4f:02:55:bb:0e:c6:4a:06:57:45:a3:e6:21:14:e3:eb:22:0c: ab:30:85:ee:7d:20:10:82:c5:62:7c:58:da:7e:83:56:24:22: 54:a6:5b:6d:cd:94:bf:6a:c8:c5:d6:09:d4:ea:10:57:4d:1c: 6b:86:1f:9f:b2:b2:c7:3e:7a:21:3d:72:c0:72:b4:0d:f9:50: d6:98:e8:37:6e:fc:40:cb:2f:14:f0:d3:c2:34:8e:86:de:06: 8f:ac:0d:9d:93:3e:60:96:9c:10:56:4d:e5:ea:f6:ff:ed:8f: f2:f9:57:a4:2d:e5:a8:40:22:f7:fa:5c:b6:35:09:ee:dd:13: 34:fd:fd:2e:db:ca:a2:85:d7:c1:ba:02:e3:5e:9f:c9:ad:77: c7:37:ca:84:22:ce:96:97:0f:92:c1:b3:fe:64:4c:b7:f6:17: bc:cb:46:6b:0f:c8:e8:9b:0c:b1:5f:db:71:0e:53:2b:da:5f: 34:57:bf:f7:fe:eb:26:a6:4c:17:4b:a8:66:0a:a0:de:e8:ed: 17:b0:c1:a0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcYauhBovfHJybk2qtZY7g41lkwkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxOTAwMDA1N1oX DTI2MDgxNzIzNTk1OVowejFJMEcGA1UEBRNANjliOGI5MWQ0Y2JhNGYyMDVkN2M3 ODZlMTY5Yjg0NWZkZGE3Njg5Mjk0MDZiOWFlYjcxMDFkMTZhMGMzZmNkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wjAhu182kbDv5wSuwWaVQopjNXA Sfx5wH4Sh8majbuuu5yBfhYEXHykAzoqnMAV3EEPpjjxLcqr8I9UJOaE0OgwURbL CeP2pLrlDxHv2nJJL0Y/oYTpC1Ta6m+L4ICD+F5Crvg1XAAQ+uoO6sfBr/4p0JXM yxUyfy9uzEChGAV258RN3yLV/j1THdBklWONIiNhs7N/95qBqfnX4Y7zhHbyHdjZ /ZkictKJ8lyKItnbnACPSAMx9SKOMddG8btXXyuwJqTMxoYxxtTEV8uT32xd19Bg bJFQ5MXzlV/SpQBswRziaItD28lwkyEqlzjWa35mnILZm7rlx5knJNKYDQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEdK+LVCuGbRHMJ6RuVcb+gY8ZANMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q0M2EyZTU2LTJkNTgtNGM3ZC04ZWUyLTBjYTZhYzhhNjI3NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7ygwDQYJKoZIhvcNAQELBQADggEBALCN/K7ASvijaBzBzfFq x2lbZdzkFZ4eCUBcrAhxE2Kamr1kaMF8OwhfyFRlE6h+35SXREbWek8CVbsOxkoG V0Wj5iEU4+siDKswhe59IBCCxWJ8WNp+g1YkIlSmW23NlL9qyMXWCdTqEFdNHGuG H5+yssc+eiE9csBytA35UNaY6Ddu/EDLLxTw08I0jobeBo+sDZ2TPmCWnBBWTeXq 9v/tj/L5V6Qt5ahAIvf6XLY1Ce7dEzT9/S7byqKF18G6AuNen8mtd8c3yoQizpaX D5LBs/5kTLf2F7zLRmsPyOibDLFf23EOUyvaXzRXv/f+6yamTBdLqGYKoN7o7Rew waA= -----END CERTIFICATE-----Generated at Fri May 22 14:19:02 2026 by rpki-client