$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e9cc6af-bc2c-4dca-8915-0cddf25cc8db.roa File: 3e9cc6af-bc2c-4dca-8915-0cddf25cc8db.roa (raw, json) Hash identifier: zdQapQK0Tnbyp6cv+n3yMc+MRbZ5AquwdeqU7sPKG9w= Subject key identifier: C4:AD:68:52:78:F1:7C:AE:10:FF:5A:28:B5:FF:5E:52:9B:90:25:28 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1A9B9FEDCAB97C34A68E8BA3C4F038B69B7D2947 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e9cc6af-bc2c-4dca-8915-0cddf25cc8db.roa Signing time: Wed 13 May 2026 00:20:31 +0000 ROA not before: Wed 13 May 2026 00:20:31 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9b:9f:ed:ca:b9:7c:34:a6:8e:8b:a3:c4:f0:38:b6:9b:7d:29:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:20:31 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=e7928abbe25bdc8f7dcf1e866cc1ceec4c830ed697bc92dc801f9ab7f865b961, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9a:12:69:c3:75:a3:c0:f5:ad:e6:da:57:19: 0d:f4:e1:f2:ad:4b:21:fe:06:cf:66:f6:b1:c6:b5: 41:69:d8:80:20:02:e0:dc:c9:92:a7:b6:02:a9:e7: bb:9f:bb:ca:66:da:fb:21:c0:4b:b7:dd:5d:29:6f: 7f:db:3d:22:79:7e:02:c3:18:ae:6b:1e:dc:f1:25: 03:68:dc:9c:b1:54:65:9e:46:da:b1:af:f3:1f:d7: 92:65:97:5e:33:a6:f2:ca:d5:4c:08:1e:4d:2c:48: 93:05:66:de:eb:3f:86:a5:01:e7:fa:18:c7:6d:d2: fb:53:87:cb:b2:ee:a9:ed:94:3d:51:a3:3e:17:80: 41:61:84:9b:91:96:4a:c9:6f:17:09:21:c4:d6:e5: d1:62:88:38:ba:15:c1:ec:9f:7c:20:4b:ee:c5:a2: 4d:34:a5:59:12:31:04:8e:eb:94:a1:ca:0f:a5:5d: b0:1d:11:9e:15:6c:9d:47:01:42:78:c6:ce:53:51: b5:4b:45:d6:ea:01:d5:18:c9:70:59:5b:cc:f0:15: c2:8e:2e:53:5b:52:6a:65:98:a0:06:9e:0b:17:ce: 33:a1:33:87:a8:e3:a9:1f:7c:d2:30:fa:b5:8e:b4: 84:1a:1b:38:98:87:f6:46:8d:86:e9:2f:df:b6:93: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AD:68:52:78:F1:7C:AE:10:FF:5A:28:B5:FF:5E:52:9B:90:25:28 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e9cc6af-bc2c-4dca-8915-0cddf25cc8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:4800::/40 Signature Algorithm: sha256WithRSAEncryption ac:ab:62:27:84:0a:b0:b2:36:94:9d:ec:59:7a:ff:0d:4a:ed: 7d:24:22:ff:ec:f5:1a:6f:4c:cd:2a:84:33:8d:ea:32:5d:70: ca:5d:59:6a:33:80:c0:17:c7:a8:cc:fd:4c:34:2c:06:1a:9c: e5:4b:20:83:ef:8b:99:9a:0c:d8:11:51:67:9b:77:41:34:ab: d0:0e:24:e3:10:f1:46:95:bc:60:08:c7:08:16:03:41:c0:90: 6a:43:68:a2:af:ab:22:24:d4:ec:3c:02:09:4c:c9:e5:8b:61: 74:9a:51:b2:34:d4:28:82:b5:12:5a:97:4a:b5:c4:7c:eb:d0: 22:8d:f7:fb:63:f8:f1:85:bb:e4:fd:ea:56:36:a7:73:ea:4a: 05:3a:9b:31:fe:54:5c:d9:82:60:94:56:18:3d:0a:96:d8:5e: 0f:cb:29:40:ee:cc:db:7d:47:bb:c5:a7:f1:39:5e:73:57:c3: 4e:d6:6d:b6:cd:6a:33:d4:e8:ac:cd:03:91:27:97:d2:d4:f4: 0d:90:b7:58:ec:8e:ad:3c:98:0d:88:d4:e3:d3:d6:17:8a:09: 09:f2:53:6e:b0:41:8c:2a:ed:5c:cf:fc:04:a8:d8:94:a4:92: 37:48:ff:e1:bf:88:0b:e2:cf:80:76:f4:d6:62:d2:39:e3:05: 22:dd:d9:17 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGpuf7cq5fDSmjoujxPA4tpt9KUcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMjAzMVoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAZTc5MjhhYmJlMjViZGM4ZjdkY2Yx ZTg2NmNjMWNlZWM0YzgzMGVkNjk3YmM5MmRjODAxZjlhYjdmODY1Yjk2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpoSacN1o8D1rebaVxkN9OHyrUsh /gbPZvaxxrVBadiAIALg3MmSp7YCqee7n7vKZtr7IcBLt91dKW9/2z0ieX4Cwxiu ax7c8SUDaNycsVRlnkbasa/zH9eSZZdeM6byytVMCB5NLEiTBWbe6z+GpQHn+hjH bdL7U4fLsu6p7ZQ9UaM+F4BBYYSbkZZKyW8XCSHE1uXRYog4uhXB7J98IEvuxaJN NKVZEjEEjuuUocoPpV2wHRGeFWydRwFCeMbOU1G1S0XW6gHVGMlwWVvM8BXCji5T W1JqZZigBp4LF84zoTOHqOOpH3zSMPq1jrSEGhs4mIf2Ro2G6S/ftpPNOQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMStaFJ48XyuEP9aKLX/XlKbkCUoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNlOWNjNmFmLWJjMmMtNGRjYS04OTE1LTBjZGRmMjVjYzhkYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaEgwDQYJKoZIhvcNAQELBQADggEBAKyrYieECrCyNpSd7Fl6 /w1K7X0kIv/s9RpvTM0qhDON6jJdcMpdWWozgMAXx6jM/Uw0LAYanOVLIIPvi5ma DNgRUWebd0E0q9AOJOMQ8UaVvGAIxwgWA0HAkGpDaKKvqyIk1Ow8AglMyeWLYXSa UbI01CiCtRJal0q1xHzr0CKN9/tj+PGFu+T96lY2p3PqSgU6mzH+VFzZgmCUVhg9 CpbYXg/LKUDuzNt9R7vFp/E5XnNXw07WbbbNajPU6KzNA5Enl9LU9A2Qt1jsjq08 mA2I1OPT1heKCQnyU26wQYwq7VzP/ASo2JSkkjdI/+G/iAviz4B29NZi0jnjBSLd 2Rc= -----END CERTIFICATE-----Generated at Sat Jun 13 09:13:14 2026 by rpki-client