$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56cecdf0-d939-4f36-a536-da8aacae2529.roa File: 56cecdf0-d939-4f36-a536-da8aacae2529.roa (raw, json) Hash identifier: lanis4AXXOppUHXyUo1z+HYANKG5fGqaJ+ijDdBwxiY= Subject key identifier: 8C:AA:3D:4F:F0:C2:59:4F:13:2A:A7:28:6E:0B:DA:B2:EC:5F:1E:1B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C3B5CFF7ACA52B7D82F2056C7C0367D4CBAF452 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56cecdf0-d939-4f36-a536-da8aacae2529.roa Signing time: Sun 31 May 2026 00:10:12 +0000 ROA not before: Sun 31 May 2026 00:10:12 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3b:5c:ff:7a:ca:52:b7:d8:2f:20:56:c7:c0:36:7d:4c:ba:f4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:10:12 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=1d22843064a97cf56580708cf762425386e85b87689c53d989b8526fa15b385d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:04:ff:35:34:51:56:f2:ed:82:cf:90:50: 60:ea:75:ef:9b:ed:c4:32:2e:2a:6a:f5:f2:06:d4: 05:29:c3:68:d5:b2:4c:dc:81:7e:2d:d9:fc:05:d2: 8d:96:49:e0:9d:e6:ab:2f:c4:01:ba:a0:d4:39:40: 97:f9:1e:5d:b7:51:eb:e3:db:b2:66:ad:fb:5a:c1: 7b:e7:97:3d:c8:2d:7d:4f:25:81:8d:81:04:7b:4b: 16:eb:5d:9c:e9:0b:af:e9:ef:0e:08:ef:13:14:44: f9:4d:98:63:6a:01:1f:fe:6f:9e:d0:af:7d:77:17: d9:83:88:6a:fd:5d:0a:eb:85:8f:60:89:ed:7d:9e: 18:a5:76:b0:cb:fa:74:76:e0:81:ac:6c:f7:60:f2: ce:35:c4:07:0e:29:a6:4e:3b:b2:44:09:6f:e5:ed: 68:60:a4:db:68:c8:e0:9d:cd:3f:3f:4d:f9:41:3a: fe:d1:77:53:3c:d3:8c:51:7d:4c:57:d3:c1:82:be: ec:fa:9a:33:9e:d3:5c:21:41:72:b6:93:ed:e6:90: d7:bb:35:fa:a1:58:07:ab:0c:c8:d3:c8:ac:4e:46: 78:60:7c:f9:5c:55:87:b4:c4:23:0a:b1:54:34:fe: 4a:13:7c:bf:06:40:5c:06:23:03:5b:ba:a1:9c:b8: 11:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AA:3D:4F:F0:C2:59:4F:13:2A:A7:28:6E:0B:DA:B2:EC:5F:1E:1B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56cecdf0-d939-4f36-a536-da8aacae2529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:2800::/40 Signature Algorithm: sha256WithRSAEncryption 01:b8:2a:18:b1:28:0f:1a:21:d1:ce:1a:c1:af:cd:2c:42:fe: 8f:ee:e5:22:40:f2:16:84:ac:45:bd:27:6e:d2:89:f6:bb:e8: 1f:28:5d:b5:64:95:ef:da:a6:14:19:ce:6d:79:ed:a1:54:eb: 18:94:5f:53:5d:11:ee:e9:50:4d:7f:dd:4f:c5:f7:91:df:22: 9a:b7:38:c8:28:ee:8d:ba:45:bc:8b:b1:82:9a:80:d6:28:a6: e0:bd:21:78:7f:85:32:2c:5d:c2:80:f6:c4:d9:70:a4:66:ac: 3c:22:6d:ad:65:31:1a:bd:55:d8:db:48:df:9f:98:23:2f:81: 14:69:5c:33:9d:c3:a0:c5:ac:01:9c:95:c1:9d:e0:5a:b6:ae: 6e:be:d6:6e:f8:9f:b6:b5:43:d3:43:bf:be:f8:0a:86:3d:e0: 29:57:d9:38:15:b0:33:ac:91:06:b7:5f:b0:b7:91:78:0d:ac: 6d:90:5a:c7:34:07:24:7f:ac:ed:01:5c:79:56:6a:ab:ff:ae: 84:72:07:f5:b6:46:ae:60:54:9c:50:06:ee:5b:66:b5:17:07: 6e:3d:55:ff:f4:59:74:e5:36:13:00:2a:87:d7:df:94:9e:45: f9:c6:98:56:db:94:f5:1a:69:31:30:fb:66:19:da:d5:fe:61: 23:0d:5b:a5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfDtc/3rKUrfYLyBWx8A2fUy69FIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMTAxMloX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAMWQyMjg0MzA2NGE5N2NmNTY1ODA3 MDhjZjc2MjQyNTM4NmU4NWI4NzY4OWM1M2Q5ODliODUyNmZhMTViMzg1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphkE/zU0UVby7YLPkFBg6nXvm+3E Mi4qavXyBtQFKcNo1bJM3IF+Ldn8BdKNlkngnearL8QBuqDUOUCX+R5dt1Hr49uy Zq37WsF755c9yC19TyWBjYEEe0sW612c6Quv6e8OCO8TFET5TZhjagEf/m+e0K99 dxfZg4hq/V0K64WPYIntfZ4YpXawy/p0duCBrGz3YPLONcQHDimmTjuyRAlv5e1o YKTbaMjgnc0/P035QTr+0XdTPNOMUX1MV9PBgr7s+pozntNcIUFytpPt5pDXuzX6 oVgHqwzI08isTkZ4YHz5XFWHtMQjCrFUNP5KE3y/BkBcBiMDW7qhnLgRAQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIyqPU/wwllPEyqnKG4L2rLsXx4bMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2Y2VjZGYwLWQ5MzktNGYzNi1hNTM2LWRhOGFhY2FlMjUyOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauigwDQYJKoZIhvcNAQELBQADggEBAAG4KhixKA8aIdHOGsGv zSxC/o/u5SJA8haErEW9J27Sifa76B8oXbVkle/aphQZzm157aFU6xiUX1NdEe7p UE1/3U/F95HfIpq3OMgo7o26RbyLsYKagNYopuC9IXh/hTIsXcKA9sTZcKRmrDwi ba1lMRq9VdjbSN+fmCMvgRRpXDOdw6DFrAGclcGd4Fq2rm6+1m74n7a1Q9NDv774 CoY94ClX2TgVsDOskQa3X7C3kXgNrG2QWsc0ByR/rO0BXHlWaqv/roRyB/W2Rq5g VJxQBu5bZrUXB249Vf/0WXTlNhMAKofX35SeRfnGmFbblPUaaTEw+2YZ2tX+YSMN W6U= -----END CERTIFICATE-----Generated at Sat Jun 13 10:27:55 2026 by rpki-client