$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8615452-8353-4f12-b747-2c8acb8165c9.roa File: d8615452-8353-4f12-b747-2c8acb8165c9.roa (raw, json) Hash identifier: pxHmm7oWmEC8trwqh4A0pyP2+lxNgf/lcKm0DYasDq4= Subject key identifier: E1:B2:33:1E:D5:88:B8:57:AC:0E:14:AB:42:B4:08:E5:1E:46:A9:D3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58B110C79E4815A513080E67509943B16D945111 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8615452-8353-4f12-b747-2c8acb8165c9.roa Signing time: Sun 31 May 2026 00:01:22 +0000 ROA not before: Sun 31 May 2026 00:01:22 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:a040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b1:10:c7:9e:48:15:a5:13:08:0e:67:50:99:43:b1:6d:94:51:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:01:22 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=f698c86ca5cf6bcad56db10fe59d62ac735192a50966b475b32bb41501ba0ca6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:ce:b3:47:dd:29:80:2a:db:1a:36:3b:ff: 1a:8c:73:f8:a7:37:d8:fa:98:82:d9:b7:9a:9b:70: 3a:1d:58:4a:bc:3d:25:25:b6:6a:c7:ec:0d:c2:8b: 1d:57:56:3f:88:12:d5:f1:8e:5f:d0:10:69:52:aa: af:b5:f9:da:5d:19:e6:44:6a:db:0d:da:5f:ca:f8: 8c:d2:a3:a5:1c:65:39:da:67:9c:f1:6e:ec:58:d0: d9:1d:ee:b3:89:e7:bc:58:da:f1:2d:95:ef:83:7e: f3:86:fd:92:b1:be:35:6d:c1:bb:8d:f7:f2:cf:f5: ac:71:d1:3d:af:83:ba:ec:33:ac:db:40:db:36:25: 0a:ff:cf:2a:fb:bf:44:5d:4f:74:c4:0b:36:bc:40: 24:b6:0c:35:87:ec:be:0e:1d:23:9b:c1:69:b5:0f: 75:2f:7b:a1:e6:29:3e:d5:e6:0e:2f:2a:ac:88:88: be:b6:76:87:cc:8c:d5:9a:5a:df:ec:42:67:98:af: 7b:64:3b:d3:d1:cf:98:fc:5e:92:24:6b:2c:ed:73: b3:e2:b7:2d:10:4e:8d:df:04:f7:05:53:7f:2b:75: 2e:e4:ff:03:94:7b:97:a3:fe:4b:e7:b8:8b:d1:e5: ca:6b:6a:09:ac:e8:dd:fd:68:7a:bf:a6:03:cd:2c: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B2:33:1E:D5:88:B8:57:AC:0E:14:AB:42:B4:08:E5:1E:46:A9:D3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8615452-8353-4f12-b747-2c8acb8165c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:a040::/48 Signature Algorithm: sha256WithRSAEncryption 2a:bc:1f:68:01:3c:ac:e8:92:1d:98:f7:23:6d:dc:f2:c3:3a: 8f:ae:79:f5:7b:39:58:c8:a2:64:3b:05:30:31:56:b4:5e:a9: 07:49:0f:3c:ec:69:a1:8a:6a:47:c5:7c:ae:1f:d5:0f:bb:c4: 13:82:8c:c4:0f:8a:8a:71:e2:ed:a4:b4:12:72:ec:ff:2a:e0: db:8e:44:8a:37:d2:5c:98:0f:21:1a:70:e7:df:9e:24:44:86: 24:3b:74:96:b2:99:0c:4d:e0:57:41:a2:26:2a:4d:70:12:18: 37:d3:de:d6:45:f4:af:f4:91:d3:56:17:5a:d4:84:c5:69:37: b0:23:5c:60:d4:c3:0a:1d:81:79:75:b6:2c:fa:fb:f6:08:6b: 31:09:c1:52:ec:4f:8d:2c:38:f6:3f:dc:eb:20:47:38:b0:d5: 1e:2e:d0:da:47:70:38:14:1f:2e:d4:8b:25:70:9c:30:23:df: 83:20:c5:ce:d7:7c:67:58:be:59:d0:49:ca:48:f5:a2:36:91: 49:5d:42:35:a1:b4:26:73:bf:d5:fc:55:c3:f5:d7:08:0d:ac: ed:b3:c0:e9:88:1b:e0:ea:17:df:d3:62:c8:38:86:4d:9f:73: c7:9d:4d:59:0f:8e:95:7a:6a:1d:26:4d:ff:bf:5f:2a:b9:9a: 64:08:89:b2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWLEQx55IFaUTCA5nUJlDsW2UUREwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMDEyMloX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAZjY5OGM4NmNhNWNmNmJjYWQ1NmRi MTBmZTU5ZDYyYWM3MzUxOTJhNTA5NjZiNDc1YjMyYmI0MTUwMWJhMGNhNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCXOs0fdKYAq2xo2O/8ajHP4pzfY +piC2beam3A6HVhKvD0lJbZqx+wNwosdV1Y/iBLV8Y5f0BBpUqqvtfnaXRnmRGrb DdpfyviM0qOlHGU52mec8W7sWNDZHe6ziee8WNrxLZXvg37zhv2Ssb41bcG7jffy z/WscdE9r4O67DOs20DbNiUK/88q+79EXU90xAs2vEAktgw1h+y+Dh0jm8FptQ91 L3uh5ik+1eYOLyqsiIi+tnaHzIzVmlrf7EJnmK97ZDvT0c+Y/F6SJGss7XOz4rct EE6N3wT3BVN/K3Uu5P8DlHuXo/5L57iL0eXKa2oJrOjd/Wh6v6YDzSxEXQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOGyMx7ViLhXrA4Uq0K0COUeRqnTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4NjE1NDUyLTgzNTMtNGYxMi1iNzQ3LTJjOGFjYjgxNjVjOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauqBAMA0GCSqGSIb3DQEBCwUAA4IBAQAqvB9oATys6JIdmPcj bdzywzqPrnn1ezlYyKJkOwUwMVa0XqkHSQ887GmhimpHxXyuH9UPu8QTgozED4qK ceLtpLQScuz/KuDbjkSKN9JcmA8hGnDn354kRIYkO3SWspkMTeBXQaImKk1wEhg3 097WRfSv9JHTVhda1ITFaTewI1xg1MMKHYF5dbYs+vv2CGsxCcFS7E+NLDj2P9zr IEc4sNUeLtDaR3A4FB8u1IslcJwwI9+DIMXO13xnWL5Z0EnKSPWiNpFJXUI1obQm c7/V/FXD9dcIDazts8DpiBvg6hff02LIOIZNn3PHnU1ZD46VemodJk3/v18quZpk CImy -----END CERTIFICATE-----Generated at Sat Jun 13 10:28:57 2026 by rpki-client