$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e7d3a3f6-0428-4033-9ab3-d8f7b102a521.roa File: e7d3a3f6-0428-4033-9ab3-d8f7b102a521.roa (raw, json) Hash identifier: uAwM985C1REcQFY7hC8X8pKw/sFw5gwh26Zng9wIPDs= Subject key identifier: 9A:9E:1F:E3:AC:C2:11:7C:05:50:B4:2B:C9:7F:47:9C:4E:6C:89:84 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 75799FB54BA4D5D1E1A06E6095D60603DF89AF8E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e7d3a3f6-0428-4033-9ab3-d8f7b102a521.roa Signing time: Fri 22 May 2026 17:03:17 +0000 ROA not before: Fri 22 May 2026 17:03:17 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:79:9f:b5:4b:a4:d5:d1:e1:a0:6e:60:95:d6:06:03:df:89:af:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:03:17 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=e5d3d5fce9090c60b31e94deb1c3d583133263c040b88978d8f18a8688082dee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:c9:8a:a0:e5:de:1b:d4:16:76:67:80:b3: 42:59:2f:a4:90:c7:37:1d:fb:0b:da:5d:fc:04:5d: 77:80:62:6c:fa:c0:92:97:71:80:53:26:74:7a:d5: 0b:45:59:6c:e6:db:44:f8:bf:b2:98:1f:04:5d:00: 53:44:2b:f3:07:48:55:28:33:88:05:1e:52:88:4a: fa:45:e3:1b:33:2c:91:43:ba:a8:f8:1c:dc:79:52: c7:14:b6:ba:59:11:6c:e2:40:a1:e0:e8:ac:34:db: 70:ed:73:14:af:91:80:a1:72:28:6c:ba:13:d4:18: ac:d7:6b:90:ba:ff:b4:55:44:e3:b4:0f:ad:cf:a0: 25:fd:57:61:cb:bf:a6:c3:33:b9:fa:a3:42:12:ae: 24:74:99:97:59:88:20:b7:18:5b:d2:53:48:ba:35: ab:8e:36:3e:dc:57:ae:c7:a4:c9:bf:2f:a3:4e:bc: 61:4b:a5:8d:a8:c6:59:7f:fb:21:d4:dc:05:68:cc: 35:dd:9f:eb:67:e2:36:a6:4a:72:34:55:cd:d7:5f: 13:46:5e:16:77:c6:0c:45:29:f2:09:71:fb:4e:78: 36:77:fa:3d:fd:7d:74:ba:a1:38:39:8d:c3:c7:01: 52:9c:64:79:27:83:17:6b:2d:90:4a:07:40:22:75: 8e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9E:1F:E3:AC:C2:11:7C:05:50:B4:2B:C9:7F:47:9C:4E:6C:89:84 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e7d3a3f6-0428-4033-9ab3-d8f7b102a521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:c880::/48 Signature Algorithm: sha256WithRSAEncryption 9e:6f:c7:79:c2:07:c9:7c:ef:cb:c4:ee:2b:8f:d9:81:ee:9c: 4b:ef:cb:9b:fa:87:8b:d5:c4:9e:bb:05:fd:94:22:68:f3:85: ac:fa:4a:0c:80:82:16:e6:60:43:bf:b2:53:de:82:d8:48:69: 09:fa:35:d0:76:3f:50:1f:13:ff:59:70:6c:8b:2c:e8:7c:f3: a4:24:26:61:3c:af:9a:ea:d3:26:24:81:97:3d:a7:c2:ac:5f: 0c:7c:b9:aa:33:4a:c2:6b:0c:ed:61:4b:ce:cf:cd:91:72:8f: 1d:a8:5f:01:e0:75:8f:7c:b6:62:96:85:98:16:55:0f:e0:57: c4:8b:9b:96:40:e7:1f:9a:55:27:f7:63:cd:95:19:8f:f4:c4: 5a:62:05:4d:0f:ef:fc:0f:93:6f:c0:e6:a5:87:a3:fc:bb:b7: 6b:26:18:f1:2b:c3:7b:af:af:97:cc:dc:81:51:78:60:be:56: 7d:52:80:cb:42:43:c8:7a:93:62:a4:81:9f:9c:e6:63:23:d7: 65:92:0c:d1:4e:11:ee:06:05:ee:a2:c7:5a:08:f3:c5:e6:b7: 54:84:c0:05:37:a2:2c:30:3d:00:88:56:e4:7d:e9:22:de:bb: 99:3a:79:e7:94:71:40:cc:1f:1e:cb:5c:15:32:7d:fc:fa:d9: 58:72:de:4c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdXmftUuk1dHhoG5gldYGA9+Jr44wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MDMxN1oX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAZTVkM2Q1ZmNlOTA5MGM2MGIzMWU5 NGRlYjFjM2Q1ODMxMzMyNjNjMDQwYjg4OTc4ZDhmMThhODY4ODA4MmRlZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM3JiqDl3hvUFnZngLNCWS+kkMc3 HfsL2l38BF13gGJs+sCSl3GAUyZ0etULRVls5ttE+L+ymB8EXQBTRCvzB0hVKDOI BR5SiEr6ReMbMyyRQ7qo+BzceVLHFLa6WRFs4kCh4OisNNtw7XMUr5GAoXIobLoT 1Bis12uQuv+0VUTjtA+tz6Al/Vdhy7+mwzO5+qNCEq4kdJmXWYggtxhb0lNIujWr jjY+3Feux6TJvy+jTrxhS6WNqMZZf/sh1NwFaMw13Z/rZ+I2pkpyNFXN118TRl4W d8YMRSnyCXH7Tng2d/o9/X10uqE4OY3DxwFSnGR5J4MXay2QSgdAInWOoQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJqeH+OswhF8BVC0K8l/R5xObImEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U3ZDNhM2Y2LTA0MjgtNDAzMy05YWIzLWQ4ZjdiMTAyYTUyMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6MiAMA0GCSqGSIb3DQEBCwUAA4IBAQCeb8d5wgfJfO/LxO4r j9mB7pxL78ub+oeL1cSeuwX9lCJo84Ws+koMgIIW5mBDv7JT3oLYSGkJ+jXQdj9Q HxP/WXBsiyzofPOkJCZhPK+a6tMmJIGXPafCrF8MfLmqM0rCawztYUvOz82Rco8d qF8B4HWPfLZiloWYFlUP4FfEi5uWQOcfmlUn92PNlRmP9MRaYgVND+/8D5NvwOal h6P8u7drJhjxK8N7r6+XzNyBUXhgvlZ9UoDLQkPIepNipIGfnOZjI9dlkgzRThHu BgXuosdaCPPF5rdUhMAFN6IsMD0AiFbkfeki3ruZOnnnlHFAzB8ey1wVMn38+tlY ct5M -----END CERTIFICATE-----Generated at Sun May 24 12:19:07 2026 by rpki-client