$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8565c56-388b-48f4-90b0-4bbd36d0c2fe.roa File: d8565c56-388b-48f4-90b0-4bbd36d0c2fe.roa (raw, json) Hash identifier: J218T32reBUhb4+iVRBGFXUQ4n5pmTXxrFl9rxytNYI= Subject key identifier: 0C:01:03:F1:92:EB:52:CF:59:D7:8C:6D:29:A1:14:90:02:AC:F9:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3E7C58F21AA1FEAA3D4FA5245592AC7482F3C34B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8565c56-388b-48f4-90b0-4bbd36d0c2fe.roa Signing time: Wed 13 May 2026 00:10:11 +0000 ROA not before: Wed 13 May 2026 00:10:11 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 00:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7c:58:f2:1a:a1:fe:aa:3d:4f:a5:24:55:92:ac:74:82:f3:c3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:10:11 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=0a51e6f31da3cf4962c8efe3748570e4ebf817004eea249bbe51f40b9fc47630, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:36:e7:ef:76:20:7d:4e:22:6d:de:20:91: 52:d2:ed:76:30:63:2b:b8:c1:7e:97:7b:fb:4b:e1: 96:ef:de:7b:dd:6f:0f:4c:d6:28:e9:b6:fc:0e:ab: 78:e8:1b:03:e9:39:f9:f7:3a:48:e9:f9:3a:50:64: ca:31:d1:26:7f:af:b3:fc:5b:68:04:8d:7f:a5:c9: df:9b:df:4f:41:db:c7:75:01:89:03:d9:a2:57:41: e9:2f:cf:ee:72:8c:5a:36:2a:dc:de:91:80:ba:9f: d4:7a:13:eb:5c:14:c8:69:d0:13:80:64:2c:c0:68: 77:7e:9d:15:13:e4:9c:d1:1b:d1:33:95:2a:b9:b0: af:4b:33:7f:a5:3f:1a:fa:bf:51:08:0f:cf:7c:af: 54:b4:8a:66:68:31:2d:45:2a:02:81:12:31:46:61: fb:48:44:9d:3e:47:b2:5a:3e:31:3a:13:57:b8:38: 6a:c6:7b:ef:48:a0:4e:5f:0e:2b:2d:73:96:98:10: d1:e4:77:6c:58:bf:a9:71:29:64:6d:17:d0:2d:cd: 5c:dd:9f:4e:01:ac:34:eb:8b:20:08:79:38:06:fc: 28:97:f6:5a:89:8e:f0:9d:44:cf:d7:01:b5:07:77: 48:29:05:4a:f7:61:b4:0d:85:e8:fb:91:3a:92:44: 7c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:01:03:F1:92:EB:52:CF:59:D7:8C:6D:29:A1:14:90:02:AC:F9:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8565c56-388b-48f4-90b0-4bbd36d0c2fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:a000::/40 Signature Algorithm: sha256WithRSAEncryption 32:00:40:c0:d5:dd:a0:58:e3:e7:74:e3:07:79:c5:28:ff:4b: 15:90:99:c8:ab:dd:62:1d:4d:64:6a:26:14:06:54:74:5d:33: f6:2a:c2:06:12:29:49:da:cc:47:db:74:20:0f:83:87:c2:60: be:9f:ee:b8:60:9f:92:f9:d5:af:3f:7b:c1:27:fa:c6:08:3e: 80:90:71:6e:73:5e:85:4c:2e:6d:2a:1a:15:91:90:ca:0e:29: 81:aa:2f:2b:6c:6c:d2:f0:72:ce:56:f2:36:c9:6b:f3:4f:53: 3b:8b:b2:f0:7a:78:81:0d:69:f4:bd:38:30:73:6e:81:b6:dc: aa:d8:aa:46:8d:21:00:15:07:33:23:45:3f:fc:f9:f4:ea:82: ab:5a:dd:60:a4:9b:97:1e:40:a8:46:d7:75:c7:81:1c:39:c3: b8:fb:e0:e6:ee:07:d9:4d:57:92:84:e1:83:10:fe:cc:a6:88: 32:88:a1:9a:8b:ab:63:36:ee:0e:c4:d2:f0:6b:b6:22:2c:d9: 1e:2d:bf:49:b5:bb:35:72:35:66:58:56:16:db:66:e6:e8:e6: 91:17:33:c1:ed:3a:9e:23:6f:72:5a:0c:df:ea:0b:05:e5:a7: a3:1d:d7:8c:4a:bc:a2:7e:f5:35:ed:c9:0a:be:d6:af:ce:12: 97:a8:88:7a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPnxY8hqh/qo9T6UkVZKsdILzw0swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMTAxMVoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAMGE1MWU2ZjMxZGEzY2Y0OTYyYzhl ZmUzNzQ4NTcwZTRlYmY4MTcwMDRlZWEyNDliYmU1MWY0MGI5ZmM0NzYzMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwU25+92IH1OIm3eIJFS0u12MGMr uMF+l3v7S+GW79573W8PTNYo6bb8Dqt46BsD6Tn59zpI6fk6UGTKMdEmf6+z/Fto BI1/pcnfm99PQdvHdQGJA9miV0HpL8/ucoxaNirc3pGAup/UehPrXBTIadATgGQs wGh3fp0VE+Sc0RvRM5UqubCvSzN/pT8a+r9RCA/PfK9UtIpmaDEtRSoCgRIxRmH7 SESdPkeyWj4xOhNXuDhqxnvvSKBOXw4rLXOWmBDR5HdsWL+pcSlkbRfQLc1c3Z9O Aaw064sgCHk4Bvwol/ZaiY7wnUTP1wG1B3dIKQVK92G0DYXo+5E6kkR8xwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAwBA/GS61LPWdeMbSmhFJACrPk9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4NTY1YzU2LTM4OGItNDhmNC05MGIwLTRiYmQzNmQwYzJmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+KAwDQYJKoZIhvcNAQELBQADggEBADIAQMDV3aBY4+d04wd5 xSj/SxWQmcir3WIdTWRqJhQGVHRdM/YqwgYSKUnazEfbdCAPg4fCYL6f7rhgn5L5 1a8/e8En+sYIPoCQcW5zXoVMLm0qGhWRkMoOKYGqLytsbNLwcs5W8jbJa/NPUzuL svB6eIENafS9ODBzboG23KrYqkaNIQAVBzMjRT/8+fTqgqta3WCkm5ceQKhG13XH gRw5w7j74ObuB9lNV5KE4YMQ/symiDKIoZqLq2M27g7E0vBrtiIs2R4tv0m1uzVy NWZYVhbbZubo5pEXM8HtOp4jb3JaDN/qCwXlp6Md14xKvKJ+9TXtyQq+1q/OEpeo iHo= -----END CERTIFICATE-----Generated at Mon Jun 1 09:05:53 2026 by rpki-client