$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39e837a2-fed3-4fe3-959f-d22cb42598c4.roa File: 39e837a2-fed3-4fe3-959f-d22cb42598c4.roa (raw, json) Hash identifier: BPZeMI1NUz7ZkLQwYf3xEzoC5QiEV01yDVhH+pBKEJA= Subject key identifier: 2B:BC:D3:34:E4:30:8C:92:3D:89:8F:1B:92:99:DA:67:35:A6:BE:8D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1AE4C79034BD55C774058C8A30B710B8650EBAD5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39e837a2-fed3-4fe3-959f-d22cb42598c4.roa Signing time: Wed 13 May 2026 00:00:41 +0000 ROA not before: Wed 13 May 2026 00:00:41 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e4:c7:90:34:bd:55:c7:74:05:8c:8a:30:b7:10:b8:65:0e:ba:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:00:41 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=a9694ce0ae5543ad9b3a355fdbbf7951808ba5f6488e4ec3b99a9c2c289e76a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:50:ff:b2:78:93:e5:27:79:49:b3:bc:85: e9:3b:37:f8:df:9d:32:77:6d:fc:27:96:a4:7b:66: 93:84:05:2e:63:a4:9c:52:60:97:4a:9a:6d:a5:93: 62:69:4e:d7:c2:fa:65:7f:ea:3d:8b:f1:e8:91:1d: 92:67:3b:c0:8b:03:61:35:05:c9:c5:f5:5f:ed:b1: 39:86:f0:2f:8d:0e:c0:5f:b0:ed:ec:c7:2f:f7:29: a5:80:5f:32:09:95:ba:68:7b:de:66:99:0a:0e:7b: d7:59:04:12:61:a5:cd:a1:07:1e:82:48:4b:54:3e: 97:e1:7c:08:99:e0:c9:ef:3b:f4:15:82:c9:9d:40: e8:75:34:70:07:53:1e:ae:de:29:87:45:a5:81:2f: f5:91:b9:bb:6d:55:45:10:cd:2c:05:db:ea:35:3b: ca:6c:cc:dd:fb:87:65:74:7f:03:17:56:44:6a:83: b9:c6:4d:64:b9:7c:84:5e:0e:36:5c:f6:50:0a:09: d0:65:23:a8:31:e6:9a:c7:f3:89:eb:b1:80:ee:fa: ab:ef:68:75:56:ab:8e:a8:1f:7b:41:69:e4:ce:3d: b4:35:90:b7:42:6b:6e:69:54:6b:b4:a6:11:25:1a: eb:18:69:79:f6:2a:4a:31:4b:2f:ac:c0:31:1a:80: f3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BC:D3:34:E4:30:8C:92:3D:89:8F:1B:92:99:DA:67:35:A6:BE:8D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39e837a2-fed3-4fe3-959f-d22cb42598c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:2800::/40 Signature Algorithm: sha256WithRSAEncryption 7d:b5:b3:3a:04:b2:33:0e:01:ed:9b:0f:df:82:64:54:a6:e3: 8b:48:2f:0f:c8:66:4d:1f:ca:17:61:5c:67:e5:40:dc:b3:47: 29:7e:b7:58:fd:24:7b:fb:40:1c:6d:03:78:9a:da:7b:23:fc: ad:a0:57:0c:35:36:d6:02:08:f4:df:50:fc:6b:85:08:a0:b6: b1:df:11:84:54:3e:ae:e5:0b:1b:7a:c5:d8:4f:c0:59:4c:64: 3a:53:d7:98:20:66:29:34:1d:81:2e:a7:5f:07:2f:d9:08:ff: e8:a8:6d:be:cf:62:66:95:88:fc:67:fb:6e:2d:32:35:7a:0b: f3:14:33:4e:86:d3:2e:36:0a:bd:ab:e0:dd:59:35:56:de:0e: 77:f2:f4:08:dd:de:86:95:48:a3:12:ee:f3:1f:8d:78:47:02: 75:99:b6:ff:2d:e5:db:7a:38:b7:9a:d8:c2:1a:50:43:66:36: 0f:32:1f:5c:4f:15:ca:7d:ec:fb:1e:3b:b5:21:7e:02:48:87: 0e:54:0b:2e:c5:4e:a4:15:35:ff:b2:af:d5:d4:9c:a4:c3:39: 05:13:2f:ae:17:4c:1e:50:b1:fa:97:3e:b3:3f:fa:c1:20:15: e6:9c:cf:07:d3:8d:bb:eb:22:f9:98:33:80:10:cb:f9:a3:1e: 21:f7:0e:4a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGuTHkDS9Vcd0BYyKMLcQuGUOutUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMDA0MVoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAYTk2OTRjZTBhZTU1NDNhZDliM2Ez NTVmZGJiZjc5NTE4MDhiYTVmNjQ4OGU0ZWMzYjk5YTljMmMyODllNzZhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6RQ/7J4k+UneUmzvIXpOzf4350y d238J5ake2aThAUuY6ScUmCXSpptpZNiaU7Xwvplf+o9i/HokR2SZzvAiwNhNQXJ xfVf7bE5hvAvjQ7AX7Dt7Mcv9ymlgF8yCZW6aHveZpkKDnvXWQQSYaXNoQcegkhL VD6X4XwImeDJ7zv0FYLJnUDodTRwB1Mert4ph0WlgS/1kbm7bVVFEM0sBdvqNTvK bMzd+4dldH8DF1ZEaoO5xk1kuXyEXg42XPZQCgnQZSOoMeaax/OJ67GA7vqr72h1 VquOqB97QWnkzj20NZC3QmtuaVRrtKYRJRrrGGl59ipKMUsvrMAxGoDzcwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCu80zTkMIySPYmPG5KZ2mc1pr6NMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM5ZTgzN2EyLWZlZDMtNGZlMy05NTlmLWQyMmNiNDI1OThjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNigwDQYJKoZIhvcNAQELBQADggEBAH21szoEsjMOAe2bD9+C ZFSm44tILw/IZk0fyhdhXGflQNyzRyl+t1j9JHv7QBxtA3ia2nsj/K2gVww1NtYC CPTfUPxrhQigtrHfEYRUPq7lCxt6xdhPwFlMZDpT15ggZik0HYEup18HL9kI/+io bb7PYmaViPxn+24tMjV6C/MUM06G0y42Cr2r4N1ZNVbeDnfy9Ajd3oaVSKMS7vMf jXhHAnWZtv8t5dt6OLea2MIaUENmNg8yH1xPFcp97PseO7UhfgJIhw5UCy7FTqQV Nf+yr9XUnKTDOQUTL64XTB5QsfqXPrM/+sEgFeaczwfTjbvrIvmYM4AQy/mjHiH3 Dko= -----END CERTIFICATE-----Generated at Sat Jun 13 10:27:59 2026 by rpki-client