$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa File: 2304fccd-a194-40a7-978d-bdb25807cebe.roa (raw, json) Hash identifier: j9B0+R+EAizaaOFgHJ9n2kItTH7RQhk+Kpz4O1P1BAs= Subject key identifier: AB:2C:BD:65:13:63:8E:B0:D4:81:F1:5C:C4:B8:55:B8:41:E5:08:4C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3534E87A3019828D588710DF517B8F0510DE2B09 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa Signing time: Tue 19 May 2026 00:00:45 +0000 ROA not before: Tue 19 May 2026 00:00:45 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:34:e8:7a:30:19:82:8d:58:87:10:df:51:7b:8f:05:10:de:2b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 00:00:45 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=29cf94417cfe477f41543244c54316905ce3ea7387873a0af183d18e66de13c8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:f6:5d:0c:93:cb:8e:e6:45:88:0b:30:59: dc:33:08:9c:c5:9d:3c:0a:41:06:99:89:44:ba:f7: 24:b7:bd:dc:0f:c3:ca:21:a0:e0:8a:6c:2d:e1:32: a3:73:57:00:73:7e:88:a3:fa:f2:f5:00:37:d6:f9: 3d:31:77:cd:a0:93:27:d0:64:0f:dc:22:c7:58:91: 79:e2:62:d3:0f:39:52:75:10:56:67:b8:a4:e3:f3: 49:26:64:29:e3:22:f8:1e:7e:bb:2e:a9:99:b0:95: ee:08:2a:b5:6c:ef:58:5c:0b:95:f7:ca:ed:4c:28: 50:33:d7:2b:63:2a:7b:d5:a1:ef:51:03:26:0d:2b: 6c:7e:15:3f:bd:74:32:6a:9f:64:25:26:63:54:de: e4:bf:02:31:83:af:48:f6:16:95:5b:05:20:91:2c: ce:27:3d:1b:b0:33:03:e0:0f:93:48:d1:17:88:3c: 5e:40:f6:e5:24:37:c9:4d:50:99:f4:9a:1d:ba:b4: ba:5f:5b:95:eb:6b:5f:bb:27:76:53:fd:91:a5:63: 1a:d9:3c:5e:e9:74:eb:6c:1a:a0:a4:44:cb:6f:17: 8b:fe:7f:72:1d:f4:f6:33:84:38:6d:f4:36:1d:39: a9:85:ee:94:bc:9c:33:16:39:b2:a4:45:2f:42:76: 26:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2C:BD:65:13:63:8E:B0:D4:81:F1:5C:C4:B8:55:B8:41:E5:08:4C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:c800::/40 Signature Algorithm: sha256WithRSAEncryption b5:d2:6a:d5:b6:ef:09:e9:e4:52:db:df:fc:7c:81:d6:a9:4a: 3e:59:2e:b1:a2:ae:05:ca:08:5d:93:e8:cf:bb:97:52:9d:86: cc:62:80:52:9a:e7:35:c4:b5:d9:52:ab:97:44:ba:f7:6c:e6: fa:97:7a:27:3c:db:56:bb:00:2b:1a:de:5e:c2:bc:df:5e:81: d1:7f:0f:5f:53:81:1c:97:57:8e:53:fd:c0:3b:75:78:cb:5a: 1a:8e:3c:96:c9:35:a5:04:af:ac:83:b1:80:6f:21:90:de:23: 8a:e6:68:30:d4:3e:77:2b:ae:b7:26:1a:1d:9c:21:2e:39:5e: fd:c0:e2:ea:78:1e:c4:f4:9b:01:44:c0:aa:d6:76:41:5e:29: c6:0a:06:17:2b:4e:c7:5d:63:fe:25:46:ea:a8:b2:de:eb:3e: 3d:49:94:8f:9b:56:c2:82:bb:0e:15:c7:19:07:4d:d5:e5:8a: 50:39:94:47:76:b5:36:ed:0b:13:3b:11:fb:cb:e2:be:fc:a0: 6d:62:46:0b:d3:b2:0b:dc:a8:3c:b0:91:06:f9:88:1e:da:65: 1b:d8:c3:b9:6a:da:27:0f:d8:c2:ce:ef:d0:53:8d:89:b1:ab: 50:86:b6:0f:c6:5c:c3:83:39:45:ec:db:78:ec:1c:65:33:08: d9:0f:c3:03 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNTToejAZgo1YhxDfUXuPBRDeKwkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxOTAwMDA0NVoX DTI2MDgxNzIzNTk1OVowejFJMEcGA1UEBRNAMjljZjk0NDE3Y2ZlNDc3ZjQxNTQz MjQ0YzU0MzE2OTA1Y2UzZWE3Mzg3ODczYTBhZjE4M2QxOGU2NmRlMTNjODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XL2XQyTy47mRYgLMFncMwicxZ08 CkEGmYlEuvckt73cD8PKIaDgimwt4TKjc1cAc36Io/ry9QA31vk9MXfNoJMn0GQP 3CLHWJF54mLTDzlSdRBWZ7ik4/NJJmQp4yL4Hn67LqmZsJXuCCq1bO9YXAuV98rt TChQM9crYyp71aHvUQMmDStsfhU/vXQyap9kJSZjVN7kvwIxg69I9haVWwUgkSzO Jz0bsDMD4A+TSNEXiDxeQPblJDfJTVCZ9JodurS6X1uV62tfuyd2U/2RpWMa2Txe 6XTrbBqgpETLbxeL/n9yHfT2M4Q4bfQ2HTmphe6UvJwzFjmypEUvQnYmQwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKssvWUTY46w1IHxXMS4VbhB5QhMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzMDRmY2NkLWExOTQtNDBhNy05NzhkLWJkYjI1ODA3Y2ViZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba78gwDQYJKoZIhvcNAQELBQADggEBALXSatW27wnp5FLb3/x8 gdapSj5ZLrGirgXKCF2T6M+7l1KdhsxigFKa5zXEtdlSq5dEuvds5vqXeic821a7 ACsa3l7CvN9egdF/D19TgRyXV45T/cA7dXjLWhqOPJbJNaUEr6yDsYBvIZDeI4rm aDDUPncrrrcmGh2cIS45Xv3A4up4HsT0mwFEwKrWdkFeKcYKBhcrTsddY/4lRuqo st7rPj1JlI+bVsKCuw4VxxkHTdXlilA5lEd2tTbtCxM7EfvL4r78oG1iRgvTsgvc qDywkQb5iB7aZRvYw7lq2icP2MLO79BTjYmxq1CGtg/GXMODOUXs23jsHGUzCNkP wwM= -----END CERTIFICATE-----Generated at Wed Jun 17 08:42:24 2026 by rpki-client