$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2becce-f4e7-42cf-bb55-113f70842216.roa File: fa2becce-f4e7-42cf-bb55-113f70842216.roa (raw, json) Hash identifier: g2DbUvWUoVIXuJ2aKkXhc4vTzntw4tvbMMDWdUrslfo= Subject key identifier: 78:0B:EF:B7:FD:4D:82:52:7C:41:94:E1:AF:E2:D6:81:1F:C8:D8:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 38F322BEFF2B876DA11C8D05CE7229BBF44B2660 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2becce-f4e7-42cf-bb55-113f70842216.roa Signing time: Fri 22 May 2026 17:01:25 +0000 ROA not before: Fri 22 May 2026 17:01:25 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f3:22:be:ff:2b:87:6d:a1:1c:8d:05:ce:72:29:bb:f4:4b:26:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:01:25 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=e4110ec61481d080f007ab79b7ea3f216001d79ba5e2b615814b93640c4ce9ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3b:a4:7f:6d:47:7e:43:ee:a8:46:2f:b5:40: c8:59:10:47:38:92:99:4e:1e:43:1d:df:70:79:04: 10:8c:22:25:af:bc:b1:2d:8c:21:b1:d1:57:63:86: 98:3d:e2:2f:b0:42:92:c3:bc:65:2c:35:8f:33:95: a5:ab:2a:2f:0c:63:f6:be:58:37:27:31:d8:0a:21: c5:44:c2:94:29:ae:3e:8f:74:c0:0b:f8:a4:d2:29: 4d:22:e2:02:66:85:75:58:46:8e:78:d1:9d:71:44: 18:36:e9:01:3e:6b:49:f0:9d:89:57:4e:32:6b:5d: fc:c5:86:fd:12:81:a8:8a:5c:2d:e0:d2:e5:ae:ed: 9c:64:9c:28:84:4c:1d:b6:22:c6:38:82:c0:97:0b: 38:5a:e8:5c:7c:8b:6f:9d:b0:a7:86:75:c2:69:bc: bb:14:35:a8:de:c5:8b:14:62:3c:bc:b4:55:4e:f6: e0:ba:24:d4:b5:64:60:a4:b3:c1:14:6d:33:e4:14: a1:54:1a:f0:90:a4:30:ac:a1:b9:56:1d:fe:b7:a8: 05:65:a9:bb:f4:ea:54:bb:a8:14:bf:95:0c:10:50: 51:26:59:be:de:f1:a4:71:6c:b0:aa:46:98:bc:4c: 4d:6d:8d:66:98:b1:e5:ac:bc:ce:44:09:d3:3f:4b: c9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0B:EF:B7:FD:4D:82:52:7C:41:94:E1:AF:E2:D6:81:1F:C8:D8:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2becce-f4e7-42cf-bb55-113f70842216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:4080::/48 Signature Algorithm: sha256WithRSAEncryption 8a:2d:7d:d0:a5:99:11:a7:ef:f1:49:5a:f6:3d:7d:2e:61:60: 62:e8:62:25:c0:c9:27:f6:f0:5f:f8:47:22:49:e1:70:65:3c: 7b:c5:4a:ac:e8:f4:f8:ba:43:6d:79:03:bb:37:27:8d:1a:28: 9f:88:cb:27:29:1e:5e:a3:13:15:d8:74:3f:4a:65:3d:72:20: 32:ba:36:e3:9d:f3:1f:bc:1a:80:e1:ae:f4:77:e4:ca:0f:36: 8b:08:b8:38:bf:4c:05:1b:8b:f4:33:3d:a3:79:02:f8:22:36: 85:65:87:9e:79:f7:a7:b5:69:32:56:9f:e5:4c:10:6a:ee:fd: 80:9c:c2:ae:73:63:11:c2:41:75:4e:67:05:a7:95:6c:ff:f5: b8:7c:03:49:c1:1a:14:ba:83:f0:50:38:46:dd:bf:71:45:df: b8:56:41:57:95:77:40:71:27:20:a9:2e:ee:6e:05:71:3e:4b: c5:e5:ea:88:be:f8:ea:17:b0:d9:83:83:64:4e:bb:94:28:b1: bc:de:cf:3d:aa:45:a8:94:6f:24:f4:18:fe:86:ba:46:e0:00: 84:f2:e8:ae:05:00:95:7e:82:a5:48:7c:cc:ce:db:78:7c:b5: f6:c3:e1:71:7e:f8:b7:02:d4:01:e0:c0:7c:0c:98:95:b3:ce: 9b:10:f0:48 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOPMivv8rh22hHI0FznIpu/RLJmAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MDEyNVoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAZTQxMTBlYzYxNDgxZDA4MGYwMDdh Yjc5YjdlYTNmMjE2MDAxZDc5YmE1ZTJiNjE1ODE0YjkzNjQwYzRjZTlmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zukf21HfkPuqEYvtUDIWRBHOJKZ Th5DHd9weQQQjCIlr7yxLYwhsdFXY4aYPeIvsEKSw7xlLDWPM5WlqyovDGP2vlg3 JzHYCiHFRMKUKa4+j3TAC/ik0ilNIuICZoV1WEaOeNGdcUQYNukBPmtJ8J2JV04y a138xYb9EoGoilwt4NLlru2cZJwohEwdtiLGOILAlws4WuhcfItvnbCnhnXCaby7 FDWo3sWLFGI8vLRVTvbguiTUtWRgpLPBFG0z5BShVBrwkKQwrKG5Vh3+t6gFZam7 9OpUu6gUv5UMEFBRJlm+3vGkcWywqkaYvExNbY1mmLHlrLzORAnTP0vJrwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHgL77f9TYJSfEGU4a/i1oEfyNjgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZhMmJlY2NlLWY0ZTctNDJjZi1iYjU1LTExM2Y3MDg0MjIxNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ECAMA0GCSqGSIb3DQEBCwUAA4IBAQCKLX3QpZkRp+/xSVr2 PX0uYWBi6GIlwMkn9vBf+EciSeFwZTx7xUqs6PT4ukNteQO7NyeNGiifiMsnKR5e oxMV2HQ/SmU9ciAyujbjnfMfvBqA4a70d+TKDzaLCLg4v0wFG4v0Mz2jeQL4IjaF ZYeeefentWkyVp/lTBBq7v2AnMKuc2MRwkF1TmcFp5Vs//W4fANJwRoUuoPwUDhG 3b9xRd+4VkFXlXdAcScgqS7ubgVxPkvF5eqIvvjqF7DZg4NkTruUKLG83s89qkWo lG8k9Bj+hrpG4ACE8uiuBQCVfoKlSHzMztt4fLX2w+Fxfvi3AtQB4MB8DJiVs86b EPBI -----END CERTIFICATE-----Generated at Sun May 24 12:18:53 2026 by rpki-client