$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d70643f8-e8fd-4d28-982a-885994301643.roa File: d70643f8-e8fd-4d28-982a-885994301643.roa (raw, json) Hash identifier: RpMADakC7Nmyu/ge+XbbJ/x4T07s8urRpxqjd9wb7zA= Subject key identifier: A4:DB:29:6A:BA:59:1C:33:40:03:1F:29:69:64:B2:07:0E:EB:5A:1D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6710F0A25A2F2ECF0B21EB1D3A653BBD4BE5688A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d70643f8-e8fd-4d28-982a-885994301643.roa Signing time: Fri 22 May 2026 16:52:07 +0000 ROA not before: Fri 22 May 2026 16:52:07 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:10:f0:a2:5a:2f:2e:cf:0b:21:eb:1d:3a:65:3b:bd:4b:e5:68:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:52:07 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=ec4e615896440938ff191df154b30c34cb0ebc57a7ef9fba5dc12a4e426227e4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:63:40:51:46:5e:2d:48:e4:36:ff:31:1d: ac:e4:ca:1c:50:f7:97:d4:31:ee:8a:91:7b:cd:6d: d5:c3:7c:60:94:40:d7:ba:7f:58:bd:3a:17:27:20: ab:41:9b:cf:24:80:76:f0:8e:51:18:d3:19:e2:9d: 1f:77:8d:97:f8:cc:33:e9:7e:6e:da:ed:7d:10:9a: 15:95:99:0d:33:1a:72:4a:d8:95:a5:66:b6:81:9f: 7e:2c:a4:56:af:08:4b:31:95:ea:36:0a:7c:ac:cb: b7:32:42:b3:39:b0:ad:00:96:e3:e9:b0:2d:fd:91: ee:a6:d5:cc:3f:e2:8f:4a:19:49:2a:11:d2:00:54: b6:d0:83:49:9f:56:dd:c1:b7:c8:3e:40:9d:23:d2: f4:81:d7:98:1b:3d:fd:fa:31:56:63:b4:13:db:f1: 1c:da:48:7d:cf:e8:7a:40:6d:57:d8:e6:56:8a:b7: 58:d2:10:9c:c8:3f:2d:f5:f6:ce:5a:c6:57:66:7f: 27:7e:98:7a:f3:6f:ab:62:80:17:05:60:f7:23:1b: 81:dd:9f:74:aa:91:5f:03:2f:82:38:8f:c6:e9:b2: a7:df:51:e4:49:ce:1c:04:ea:3a:4c:10:96:7c:c0: cf:d9:bf:8d:0f:92:57:de:7f:06:df:17:3e:dd:77: 45:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DB:29:6A:BA:59:1C:33:40:03:1F:29:69:64:B2:07:0E:EB:5A:1D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d70643f8-e8fd-4d28-982a-885994301643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:6000::/40 Signature Algorithm: sha256WithRSAEncryption b4:cc:45:e2:63:e9:53:fd:23:85:27:e9:7f:9e:29:b3:4e:2a: 2c:b1:24:d6:a6:81:f4:f1:e1:43:b4:5c:5f:7f:6f:13:94:49: 9c:24:33:9a:58:46:fa:23:f9:1c:eb:01:48:cb:aa:0f:87:cb: be:df:7a:0a:6c:e2:6b:85:bc:fb:1c:ec:12:7b:34:0b:ac:92: 69:30:6c:8d:61:2a:f8:88:1b:66:2b:20:1f:b1:7b:be:77:f3: a3:0e:66:7d:a2:e2:71:8e:13:b9:4f:4c:0a:49:c9:72:4a:a0: c7:52:95:1e:49:33:9a:c7:7b:b6:37:47:20:0f:9b:d6:50:46: 67:4b:8c:59:18:2e:be:4c:7b:ff:8d:f6:2c:b5:de:36:5b:fe: 87:b4:40:a6:8e:ba:d1:ae:53:2d:b5:b0:f8:db:5c:2a:95:04: 0d:7b:88:33:55:7e:aa:5f:33:f5:d1:ef:97:ee:f0:e4:48:1f: 51:a5:31:b6:bc:b5:e6:85:f8:8d:30:24:92:0e:2b:cc:06:12: d9:c0:de:e9:46:61:18:90:3f:2f:7f:30:ea:63:b8:e8:99:79: 42:89:90:11:32:4b:63:85:92:56:ef:7a:08:eb:57:57:a0:c9: a9:47:8d:65:d4:24:61:c2:54:35:bf:5f:2d:fc:fd:9e:3d:2a: 1b:50:84:05 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZxDwolovLs8LIesdOmU7vUvlaIowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTIwN1oX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAZWM0ZTYxNTg5NjQ0MDkzOGZmMTkx ZGYxNTRiMzBjMzRjYjBlYmM1N2E3ZWY5ZmJhNWRjMTJhNGU0MjYyMjdlNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPVjQFFGXi1I5Db/MR2s5MocUPeX 1DHuipF7zW3Vw3xglEDXun9YvToXJyCrQZvPJIB28I5RGNMZ4p0fd42X+Mwz6X5u 2u19EJoVlZkNMxpyStiVpWa2gZ9+LKRWrwhLMZXqNgp8rMu3MkKzObCtAJbj6bAt /ZHuptXMP+KPShlJKhHSAFS20INJn1bdwbfIPkCdI9L0gdeYGz39+jFWY7QT2/Ec 2kh9z+h6QG1X2OZWirdY0hCcyD8t9fbOWsZXZn8nfph682+rYoAXBWD3IxuB3Z90 qpFfAy+COI/G6bKn31HkSc4cBOo6TBCWfMDP2b+ND5JX3n8G3xc+3XdFXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKTbKWq6WRwzQAMfKWlksgcO61odMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q3MDY0M2Y4LWU4ZmQtNGQyOC05ODJhLTg4NTk5NDMwMTY0My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYWAwDQYJKoZIhvcNAQELBQADggEBALTMReJj6VP9I4Un6X+e KbNOKiyxJNamgfTx4UO0XF9/bxOUSZwkM5pYRvoj+RzrAUjLqg+Hy77fegps4muF vPsc7BJ7NAuskmkwbI1hKviIG2YrIB+xe75386MOZn2i4nGOE7lPTApJyXJKoMdS lR5JM5rHe7Y3RyAPm9ZQRmdLjFkYLr5Me/+N9iy13jZb/oe0QKaOutGuUy21sPjb XCqVBA17iDNVfqpfM/XR75fu8ORIH1GlMba8teaF+I0wJJIOK8wGEtnA3ulGYRiQ Py9/MOpjuOiZeUKJkBEyS2OFklbvegjrV1egyalHjWXUJGHCVDW/Xy38/Z49KhtQ hAU= -----END CERTIFICATE-----Generated at Sun May 24 12:18:41 2026 by rpki-client