$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa File: f79388ce-7d40-4e2d-99a2-f64918866a6d.roa (raw, json) Hash identifier: HUbCxmkh+P1xQkdbboE67MjQ+uJpHFTJHHgjG92pjhQ= Subject key identifier: BE:A3:71:E0:5D:8E:5B:04:DD:B3:E1:DE:18:D2:A0:BB:A9:34:0E:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 044F273321DE2BFC918072E983E172F0B6DEAE26 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa Signing time: Tue 19 May 2026 00:00:58 +0000 ROA not before: Tue 19 May 2026 00:00:58 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:4f:27:33:21:de:2b:fc:91:80:72:e9:83:e1:72:f0:b6:de:ae:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 00:00:58 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=b2a589a8645e19a97fbf0036d7debf3746fadf021eeb703993ad1de3eb105af9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:d6:58:52:0d:e7:26:30:2b:8f:fc:1f:ac: 4d:21:00:f0:eb:28:b0:f4:93:35:ba:a8:64:11:68: f6:4c:e5:f3:e7:7f:b3:57:d3:b2:d7:85:4f:4f:1b: 87:86:2a:6f:45:ed:02:6e:f0:d4:9f:24:c2:84:7c: 25:8e:d6:58:44:d4:20:62:ef:ac:40:90:fd:5f:27: f2:65:46:66:48:1c:6a:76:fe:51:92:ad:76:7e:d1: e3:97:08:c0:0b:cb:9a:3f:a1:8c:47:fa:26:8a:c4: b2:7b:7f:fa:04:f0:d4:7a:fd:fc:d4:00:5e:c6:ee: da:96:ae:03:22:4a:e2:9e:c9:ca:af:1e:a4:61:98: 5d:d2:55:86:b5:e4:81:05:4c:5e:1c:6a:5a:6f:8d: d9:38:9d:2a:c8:38:35:12:d3:27:f7:2d:92:5b:7d: 8c:a5:37:73:5c:50:63:82:c9:1d:3a:13:66:31:96: 74:89:27:2b:e3:9c:d6:7f:7e:f9:06:aa:5b:e3:d8: 97:c2:ca:df:19:85:ca:23:0d:58:6f:90:d8:8a:38: 19:0b:6f:d1:15:1f:cf:99:ba:64:f0:14:a7:3c:a7: 8f:b7:da:2d:68:99:12:76:22:0c:00:f5:7d:55:d6: ff:d3:0d:26:8b:66:4a:46:51:b3:4d:b3:52:da:e6: 74:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A3:71:E0:5D:8E:5B:04:DD:B3:E1:DE:18:D2:A0:BB:A9:34:0E:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:7000::/40 Signature Algorithm: sha256WithRSAEncryption 01:03:50:2a:12:1a:3c:bf:85:96:82:dc:9e:a3:15:12:94:59: 04:3c:fa:78:2f:44:f6:56:05:7c:a6:36:c1:6e:4c:f2:9f:01: fb:95:a1:c8:72:fe:4f:54:e4:91:9d:15:db:cc:64:c6:33:20: 70:cf:6a:f4:fd:03:b4:0c:51:22:15:af:7f:95:2e:56:14:ca: 32:de:ac:22:a9:94:14:5f:0c:a4:6c:3d:35:bd:1d:80:b8:0c: 01:ab:99:d4:90:38:5a:6a:94:a1:28:7a:6a:35:34:0e:06:70: fb:4e:1e:07:be:d6:1a:1f:68:32:59:44:bb:22:2b:b7:ab:b3: ec:e7:d8:be:b1:3b:09:19:d7:a6:93:77:22:46:ba:ae:6d:c5: 7c:22:f6:31:43:2b:47:a4:5e:58:d1:98:f8:fe:0f:03:4e:c0: 1e:12:6f:fd:02:13:5d:33:4d:20:63:f8:76:f2:08:19:e3:76: e0:e9:9f:83:c6:dc:b0:1c:f1:bc:81:b5:30:7a:3a:68:1f:11: 1b:f3:ae:d0:c3:a0:67:14:87:b5:8a:fc:f7:72:bf:cf:b8:fc: 7e:48:b4:47:e4:52:f5:df:47:3a:aa:f2:20:93:c3:6f:28:0c: 9a:9f:b4:6b:a8:6a:d8:2e:b5:28:56:66:f2:7b:fe:93:ef:3e: 00:c5:9b:2b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBE8nMyHeK/yRgHLpg+Fy8LberiYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxOTAwMDA1OFoX DTI2MDgxNzIzNTk1OVowejFJMEcGA1UEBRNAYjJhNTg5YTg2NDVlMTlhOTdmYmYw MDM2ZDdkZWJmMzc0NmZhZGYwMjFlZWI3MDM5OTNhZDFkZTNlYjEwNWFmOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssPWWFIN5yYwK4/8H6xNIQDw6yiw 9JM1uqhkEWj2TOXz53+zV9Oy14VPTxuHhipvRe0CbvDUnyTChHwljtZYRNQgYu+s QJD9XyfyZUZmSBxqdv5Rkq12ftHjlwjAC8uaP6GMR/omisSye3/6BPDUev381ABe xu7alq4DIkrinsnKrx6kYZhd0lWGteSBBUxeHGpab43ZOJ0qyDg1EtMn9y2SW32M pTdzXFBjgskdOhNmMZZ0iScr45zWf375Bqpb49iXwsrfGYXKIw1Yb5DYijgZC2/R FR/Pmbpk8BSnPKePt9otaJkSdiIMAPV9Vdb/0w0mi2ZKRlGzTbNS2uZ08wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL6jceBdjlsE3bPh3hjSoLupNA50MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3OTM4OGNlLTdkNDAtNGUyZC05OWEyLWY2NDkxODg2NmE2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba73AwDQYJKoZIhvcNAQELBQADggEBAAEDUCoSGjy/hZaC3J6j FRKUWQQ8+ngvRPZWBXymNsFuTPKfAfuVochy/k9U5JGdFdvMZMYzIHDPavT9A7QM USIVr3+VLlYUyjLerCKplBRfDKRsPTW9HYC4DAGrmdSQOFpqlKEoemo1NA4GcPtO Hge+1hofaDJZRLsiK7ers+zn2L6xOwkZ16aTdyJGuq5txXwi9jFDK0ekXljRmPj+ DwNOwB4Sb/0CE10zTSBj+HbyCBnjduDpn4PG3LAc8byBtTB6OmgfERvzrtDDoGcU h7WK/Pdyv8+4/H5ItEfkUvXfRzqq8iCTw28oDJqftGuoatgutShWZvJ7/pPvPgDF mys= -----END CERTIFICATE-----Generated at Sat Jun 13 08:05:55 2026 by rpki-client