$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa File: df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa (raw, json) Hash identifier: D9hqOU6QrKuvKJQxanhuc5hRpwyK/o2T2H+GP082MxI= Subject key identifier: 2B:F6:BF:FF:ED:2B:DE:53:1D:E5:E2:C0:6A:8D:23:A8:06:3C:FF:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7491DCCAAF9A46014A18B973421C6B4FF873B644 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa Signing time: Wed 13 May 2026 00:10:44 +0000 ROA not before: Wed 13 May 2026 00:10:44 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 May 2026 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:91:dc:ca:af:9a:46:01:4a:18:b9:73:42:1c:6b:4f:f8:73:b6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:10:44 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=f61cff98e1897b1ce9e9ef8d1f2ba62335134f32d0f3b425da5eddf05ea696db, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:7d:86:68:da:b9:b6:37:a4:19:9a:27:24: 4a:77:3f:f4:8d:b0:82:44:a3:90:36:bd:c8:e9:60: 76:1f:f4:6a:94:7e:67:c8:16:d8:dd:56:0e:bd:d2: 96:ee:c9:04:ed:82:e8:64:d2:01:04:d4:79:60:4c: 60:b5:54:06:a2:d4:b3:6c:d4:24:28:af:62:0a:41: 9a:52:ff:33:c9:14:82:82:a3:54:42:da:f2:13:ea: 13:90:4b:a7:ca:d0:1f:99:56:92:66:7f:c6:1b:a0: 2d:e9:3b:7b:5a:cd:a9:a1:da:b0:a6:a0:d5:a4:32: 27:cc:6f:fe:22:b6:d7:8e:94:d2:13:36:20:8f:5d: 18:e3:de:94:72:07:f3:a2:fa:bc:dc:c9:9a:9d:dd: 43:b9:ef:3c:70:36:8f:62:86:f7:21:56:ce:60:dc: ad:c5:12:46:d1:f2:4c:54:6b:64:26:71:d2:8f:15: 91:02:4f:07:4a:1e:b2:cf:28:a6:91:24:cd:33:a0: 5f:2a:ac:4e:cd:59:71:02:f8:bd:16:38:ec:23:9a: 4b:af:c4:2c:b0:29:cf:02:7f:e5:8a:7e:2d:c8:85: a7:e2:48:b3:73:a8:dc:e9:59:8d:75:02:62:9e:d8: 82:8a:be:1b:ae:af:98:a0:b1:ab:04:35:a3:a1:06: 6c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F6:BF:FF:ED:2B:DE:53:1D:E5:E2:C0:6A:8D:23:A8:06:3C:FF:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:800::/40 Signature Algorithm: sha256WithRSAEncryption 3d:0b:70:4e:6b:03:de:53:3e:1c:ac:b0:d8:12:d6:ef:de:e7: e0:2a:5f:e6:13:82:f7:94:25:19:04:58:40:dc:8a:3c:a0:03: ea:20:b6:f9:4f:04:21:a1:35:d6:9d:01:c1:2d:15:32:4e:cf: 3f:a7:b8:27:a1:c0:57:8c:01:15:c1:b0:a5:f7:dd:53:63:67: c4:27:0d:15:32:c8:aa:0b:cf:9b:af:40:17:71:e8:9f:a4:7b: ad:e4:91:15:d6:44:d6:5c:bf:10:54:0a:10:23:d9:4d:5c:a2: ae:01:06:01:af:6b:0c:ee:16:f9:28:1c:77:ba:58:29:65:aa: dd:69:85:85:a3:1f:e3:84:e0:8b:50:52:d3:69:b5:89:5c:21: 55:3b:b3:18:2c:71:b6:45:56:c1:33:21:b3:6f:3d:b6:da:2e: aa:da:dd:b6:b7:12:68:cd:27:f8:7a:87:06:29:26:f0:e2:42: 7e:c7:33:df:86:6c:b7:e1:fd:18:96:e2:33:21:09:46:67:89: 1d:3b:b5:98:ae:bf:31:29:db:94:ed:36:79:50:df:e8:8e:3f: 0f:d8:6c:18:d1:fc:db:da:79:12:01:0c:92:5d:54:ec:b5:ce: dd:98:18:aa:23:12:b9:70:57:23:1f:da:1b:27:ae:d2:87:78: 1f:6b:8c:68 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdJHcyq+aRgFKGLlzQhxrT/hztkQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMTA0NFoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAZjYxY2ZmOThlMTg5N2IxY2U5ZTll ZjhkMWYyYmE2MjMzNTEzNGYzMmQwZjNiNDI1ZGE1ZWRkZjA1ZWE2OTZkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoh9hmjaubY3pBmaJyRKdz/0jbCC RKOQNr3I6WB2H/RqlH5nyBbY3VYOvdKW7skE7YLoZNIBBNR5YExgtVQGotSzbNQk KK9iCkGaUv8zyRSCgqNUQtryE+oTkEunytAfmVaSZn/GG6At6Tt7Ws2podqwpqDV pDInzG/+IrbXjpTSEzYgj10Y496Ucgfzovq83Mmand1Due88cDaPYob3IVbOYNyt xRJG0fJMVGtkJnHSjxWRAk8HSh6yzyimkSTNM6BfKqxOzVlxAvi9FjjsI5pLr8Qs sCnPAn/lin4tyIWn4kizc6jc6VmNdQJintiCir4brq+YoLGrBDWjoQZsYQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCv2v//tK95THeXiwGqNI6gGPP8XMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmMGVhOGU1LTJkNTUtNDIxNC05ZTA2LTVlNmZmMzg1MDgzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoAgwDQYJKoZIhvcNAQELBQADggEBAD0LcE5rA95TPhyssNgS 1u/e5+AqX+YTgveUJRkEWEDcijygA+ogtvlPBCGhNdadAcEtFTJOzz+nuCehwFeM ARXBsKX33VNjZ8QnDRUyyKoLz5uvQBdx6J+ke63kkRXWRNZcvxBUChAj2U1coq4B BgGvawzuFvkoHHe6WCllqt1phYWjH+OE4ItQUtNptYlcIVU7sxgscbZFVsEzIbNv PbbaLqra3ba3EmjNJ/h6hwYpJvDiQn7HM9+GbLfh/RiW4jMhCUZniR07tZiuvzEp 25TtNnlQ3+iOPw/YbBjR/NvaeRIBDJJdVOy1zt2YGKojErlwVyMf2hsnrtKHeB9r jGg= -----END CERTIFICATE-----Generated at Mon May 25 22:24:55 2026 by rpki-client