$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8227bc1-4264-48f3-87b2-92615c51c752.roa File: d8227bc1-4264-48f3-87b2-92615c51c752.roa (raw, json) Hash identifier: 7a07m3kjCSirVcg+0Fx8ziDI617435jscOofm9rqeXU= Subject key identifier: 10:91:38:30:87:00:D0:2F:9C:64:25:F0:DB:11:92:7B:02:24:7A:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7023998C0398BB499DCADE25863D154323D32BE5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8227bc1-4264-48f3-87b2-92615c51c752.roa Signing time: Fri 22 May 2026 16:52:14 +0000 ROA not before: Fri 22 May 2026 16:52:14 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae0:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:23:99:8c:03:98:bb:49:9d:ca:de:25:86:3d:15:43:23:d3:2b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:52:14 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=8c5bf8e9dae2ac2f5a0aaec452c0e89173af855329a35bffa2738d898ca7a891, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c3:97:94:65:c8:69:b2:ca:28:6b:ea:ca:3d: c3:d7:e6:fc:42:ca:af:47:53:ae:05:f8:66:0c:39: db:7a:3d:53:4d:f6:cd:a5:c9:6a:b0:77:43:fa:eb: 9f:be:a4:7a:d7:9a:fb:eb:28:e8:33:e1:51:13:65: 1b:bb:9a:03:43:9c:27:d1:82:35:b8:86:3c:02:54: f4:f5:22:e9:c5:79:06:59:33:62:60:27:0e:6f:3b: e0:15:74:b6:a3:97:74:3b:43:b7:4d:c5:5d:a6:e9: e2:cd:d2:4d:f6:f8:2f:ab:72:7f:07:c4:49:b8:20: cb:5d:62:68:d1:65:e5:ee:f0:63:a9:eb:5b:f8:12: 64:8a:9f:f8:cb:49:90:fa:a6:bd:ab:5a:63:63:b1: f4:6d:2e:41:8b:30:a2:5d:fd:9e:1b:00:e0:57:cf: 6f:82:e0:a4:b8:5e:23:4b:d2:76:db:e9:20:78:cf: 22:4d:71:40:20:1b:29:56:55:3d:e1:be:3f:1a:d7: 6d:88:45:02:41:03:f4:8a:29:86:b9:f1:8d:2d:2f: f1:fe:ab:43:65:e7:d9:2a:bd:96:3c:68:31:6a:03: 93:33:5c:ed:d7:a0:10:b0:00:85:82:a1:d6:a0:49: fe:27:29:50:c5:49:20:ee:d9:ed:72:b3:5d:b0:2b: 78:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:91:38:30:87:00:D0:2F:9C:64:25:F0:DB:11:92:7B:02:24:7A:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8227bc1-4264-48f3-87b2-92615c51c752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae0:1000::/40 Signature Algorithm: sha256WithRSAEncryption 61:44:85:11:01:72:1b:ac:e2:34:7b:ef:eb:cd:dc:54:0a:96: 92:fc:89:f4:7f:66:3f:e3:ab:22:d3:72:33:6f:20:07:87:9d: 19:ab:f5:b8:68:8e:93:3b:06:65:b5:19:2b:57:bd:3f:9a:d5: 66:3c:be:e9:fe:ef:66:b1:41:f6:13:90:f4:9d:fb:36:14:6d: ae:6b:bd:36:94:6b:c4:e7:e9:5c:ea:70:27:a8:65:4e:50:4a: 35:6f:21:e3:d9:c6:f5:62:8c:29:24:66:db:8f:4b:18:df:0e: 51:aa:65:d8:c4:13:9c:40:30:92:c4:60:8d:10:82:42:2f:b2: 9b:68:4f:b8:fd:03:85:e5:d3:30:0f:05:31:0a:e3:f4:64:24: 05:f7:0e:9e:f6:91:81:a5:b7:f1:40:36:df:c8:86:99:04:ae: 24:fa:47:cf:9e:27:63:33:10:4a:c5:86:b5:31:af:d9:3a:1e: 13:e5:d1:45:f3:c3:f1:03:7d:d2:93:51:5a:f0:6e:73:7e:c6: d1:ec:08:fd:36:4e:45:9e:01:5e:e0:43:62:b4:6e:51:2f:f8: 8a:56:57:b3:db:d5:db:14:b8:d2:46:9f:86:ba:1d:6f:be:b3: 60:e0:83:d6:6a:89:fd:2d:e7:76:d3:09:b9:8e:aa:ed:43:4c: c0:a9:0d:1d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcCOZjAOYu0mdyt4lhj0VQyPTK+UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTIxNFoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAOGM1YmY4ZTlkYWUyYWMyZjVhMGFh ZWM0NTJjMGU4OTE3M2FmODU1MzI5YTM1YmZmYTI3MzhkODk4Y2E3YTg5MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcOXlGXIabLKKGvqyj3D1+b8Qsqv R1OuBfhmDDnbej1TTfbNpclqsHdD+uufvqR615r76yjoM+FRE2Ubu5oDQ5wn0YI1 uIY8AlT09SLpxXkGWTNiYCcObzvgFXS2o5d0O0O3TcVdpunizdJN9vgvq3J/B8RJ uCDLXWJo0WXl7vBjqetb+BJkip/4y0mQ+qa9q1pjY7H0bS5BizCiXf2eGwDgV89v guCkuF4jS9J22+kgeM8iTXFAIBspVlU94b4/GtdtiEUCQQP0iimGufGNLS/x/qtD ZefZKr2WPGgxagOTM1zt16AQsACFgqHWoEn+JylQxUkg7tntcrNdsCt4ZQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBCRODCHANAvnGQl8NsRknsCJHoXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4MjI3YmMxLTQyNjQtNDhmMy04N2IyLTkyNjE1YzUxYzc1Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4BAwDQYJKoZIhvcNAQELBQADggEBAGFEhREBchus4jR77+vN 3FQKlpL8ifR/Zj/jqyLTcjNvIAeHnRmr9bhojpM7BmW1GStXvT+a1WY8vun+72ax QfYTkPSd+zYUba5rvTaUa8Tn6VzqcCeoZU5QSjVvIePZxvVijCkkZtuPSxjfDlGq ZdjEE5xAMJLEYI0QgkIvsptoT7j9A4Xl0zAPBTEK4/RkJAX3Dp72kYGlt/FANt/I hpkEriT6R8+eJ2MzEErFhrUxr9k6HhPl0UXzw/EDfdKTUVrwbnN+xtHsCP02TkWe AV7gQ2K0blEv+IpWV7Pb1dsUuNJGn4a6HW++s2Dgg9Zqif0t53bTCbmOqu1DTMCp DR0= -----END CERTIFICATE-----Generated at Sun May 24 12:19:54 2026 by rpki-client