$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb5ac36e-13d0-4ce3-94bc-b0883f71b1dd.roa File: eb5ac36e-13d0-4ce3-94bc-b0883f71b1dd.roa (raw, json) Hash identifier: tB331AyZNZizGI2YcUePDO5U4kJzRLMXxhruwu7Khog= Subject key identifier: AF:E7:33:FD:F5:EC:BF:46:BC:EF:E2:1D:A4:48:FD:18:CF:6B:97:75 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0BE15BAEFC6FE1FEB5599D2DA7B5BCE92EC06979 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb5ac36e-13d0-4ce3-94bc-b0883f71b1dd.roa Signing time: Fri 22 May 2026 17:01:29 +0000 ROA not before: Fri 22 May 2026 17:01:29 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e1:5b:ae:fc:6f:e1:fe:b5:59:9d:2d:a7:b5:bc:e9:2e:c0:69:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:01:29 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=787c25a8b5f9087e50c48ab67cb349a321b12926d5b0a96be1ffb446f27ea1b7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:ef:75:08:b7:f0:31:d7:b8:87:db:93:fd: 3d:c7:06:01:8b:a0:fc:10:c7:0a:b0:c9:36:ce:77: 8f:7e:da:d8:cf:91:3c:67:91:39:f6:70:af:50:cd: fe:83:c9:c2:d4:21:33:a9:d9:59:d8:ba:49:80:3b: 1b:25:aa:b7:8d:05:25:a4:5d:a4:13:0b:ea:23:4b: d9:ae:f6:d5:1e:db:a1:c1:6f:3c:ce:6c:26:2f:72: a6:2c:55:98:c2:98:0e:44:68:2c:52:bd:38:a1:5d: 4e:ff:24:19:24:97:ff:d2:4a:d3:10:66:d9:c7:7a: 97:68:53:aa:47:14:eb:ad:95:ed:d4:37:e4:85:08: da:32:32:d8:98:1c:22:20:58:28:d0:79:0d:fd:bf: 30:d3:e7:33:cd:3e:7f:aa:91:fd:4f:40:89:53:32: 47:11:c8:63:9e:af:2f:bf:c4:a7:6c:5b:6f:7a:6b: a9:cc:98:41:33:59:5a:4a:46:8b:96:0b:3a:51:df: 47:89:11:e3:3e:45:5a:3a:a7:2a:3d:bd:a1:b1:13: 10:6f:da:e1:09:0b:49:22:89:cc:54:e3:0e:8f:aa: 53:ed:16:82:b4:2e:cc:87:04:67:e0:81:8e:ee:ad: 74:52:15:05:7b:1f:23:10:2d:f0:a2:c4:f5:f1:30: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E7:33:FD:F5:EC:BF:46:BC:EF:E2:1D:A4:48:FD:18:CF:6B:97:75 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb5ac36e-13d0-4ce3-94bc-b0883f71b1dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:7080::/48 Signature Algorithm: sha256WithRSAEncryption 73:77:b8:aa:06:59:5f:12:59:6e:0e:cf:eb:c4:11:40:49:6d: c5:bf:0b:8b:99:f6:f0:5a:d3:db:0b:57:a9:b3:4f:cd:c6:37: e7:e6:46:85:7a:15:04:91:58:ab:e8:5b:e1:2f:23:1f:60:44: 17:eb:a8:e4:73:f0:9e:6a:d5:9c:dd:c6:9f:40:64:31:34:1d: 93:ba:87:8d:1f:8a:6b:d4:d6:ec:7d:b0:10:d8:6f:13:5e:e8: c1:7e:10:53:75:82:4f:bc:fb:57:04:57:1b:26:77:20:19:ba: 88:d7:07:cc:3f:84:43:1d:41:b9:20:a5:34:30:fe:c1:46:25: 79:97:a0:74:20:ff:d8:46:7c:bd:a1:b8:12:ab:0c:b7:e1:7c: cb:f9:9f:cb:db:37:d1:22:48:c7:0d:8f:45:c5:2f:e3:bd:15: 56:ae:aa:36:b6:b4:a9:80:a5:3f:26:6f:e7:ef:a5:4e:ec:c4: e4:16:66:da:03:08:f0:39:2e:fc:77:4d:b7:22:3f:9f:59:9a: 68:5c:1c:60:46:60:8a:d0:fa:7b:fd:92:8a:59:35:1c:dd:62: b1:cf:0f:37:25:c5:41:3a:5c:b3:31:27:b6:33:b1:ec:c2:3b: b7:59:bd:6d:82:41:38:2c:4c:2b:ff:27:62:8d:b1:49:11:e6: 83:7a:61:8b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUC+Fbrvxv4f61WZ0tp7W86S7AaXkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MDEyOVoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNANzg3YzI1YThiNWY5MDg3ZTUwYzQ4 YWI2N2NiMzQ5YTMyMWIxMjkyNmQ1YjBhOTZiZTFmZmI0NDZmMjdlYTFiNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw3vdQi38DHXuIfbk/09xwYBi6D8 EMcKsMk2znePftrYz5E8Z5E59nCvUM3+g8nC1CEzqdlZ2LpJgDsbJaq3jQUlpF2k EwvqI0vZrvbVHtuhwW88zmwmL3KmLFWYwpgORGgsUr04oV1O/yQZJJf/0krTEGbZ x3qXaFOqRxTrrZXt1DfkhQjaMjLYmBwiIFgo0HkN/b8w0+czzT5/qpH9T0CJUzJH Echjnq8vv8SnbFtvemupzJhBM1laSkaLlgs6Ud9HiRHjPkVaOqcqPb2hsRMQb9rh CQtJIonMVOMOj6pT7RaCtC7MhwRn4IGO7q10UhUFex8jEC3wosT18TB3OQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFK/nM/317L9GvO/iHaRI/RjPa5d1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ViNWFjMzZlLTEzZDAtNGNlMy05NGJjLWIwODgzZjcxYjFkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6HCAMA0GCSqGSIb3DQEBCwUAA4IBAQBzd7iqBllfElluDs/r xBFASW3FvwuLmfbwWtPbC1eps0/Nxjfn5kaFehUEkVir6FvhLyMfYEQX66jkc/Ce atWc3cafQGQxNB2TuoeNH4pr1NbsfbAQ2G8TXujBfhBTdYJPvPtXBFcbJncgGbqI 1wfMP4RDHUG5IKU0MP7BRiV5l6B0IP/YRny9obgSqwy34XzL+Z/L2zfRIkjHDY9F xS/jvRVWrqo2trSpgKU/Jm/n76VO7MTkFmbaAwjwOS78d023Ij+fWZpoXBxgRmCK 0Pp7/ZKKWTUc3WKxzw83JcVBOlyzMSe2M7Hswju3Wb1tgkE4LEwr/ydijbFJEeaD emGL -----END CERTIFICATE-----Generated at Sun May 24 12:19:08 2026 by rpki-client