$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/40ea4c94-3902-4c43-8a7e-89fa9a21817d.roa File: 40ea4c94-3902-4c43-8a7e-89fa9a21817d.roa (raw, json) Hash identifier: hL2wW+Y+Zc7kPstWfL4l9Txs1V6iZS/1PO3Rc/zMzs8= Subject key identifier: CF:E9:EF:11:03:2E:57:EC:37:F6:60:F1:67:F0:55:86:35:33:E3:D9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2723BC1D9CA8951E9CC10D53F42B7DD90C64D947 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/40ea4c94-3902-4c43-8a7e-89fa9a21817d.roa Signing time: Sun 31 May 2026 00:20:32 +0000 ROA not before: Sun 31 May 2026 00:20:32 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:23:bc:1d:9c:a8:95:1e:9c:c1:0d:53:f4:2b:7d:d9:0c:64:d9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:20:32 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=ec68460ea19306e713db12d042ce0a33eea492f6e6cb748a0ad1d8b586bee759, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e2:e5:8d:e5:9e:b0:33:bd:8d:26:50:da:e1: b4:1c:db:0a:24:53:f3:67:44:ca:cb:5f:d6:da:e9: bd:c9:e9:8f:8d:39:75:59:d6:d8:b3:c4:11:ae:9f: 41:dc:69:ab:fb:87:15:00:23:c4:3e:cf:36:19:bd: b6:d6:0b:7b:3e:27:44:7b:04:80:44:52:80:7d:2e: 9a:b2:ef:64:2b:8b:95:3f:9b:9c:3d:41:32:fa:7f: 4b:e8:e9:8e:29:84:56:b2:cd:7c:35:64:be:fc:e4: 66:cb:3d:c0:ef:70:e2:dc:68:bd:00:c9:fb:17:70: 38:97:fa:d3:d0:f0:f0:48:3d:51:36:58:ac:19:f5: 1b:76:47:45:5e:39:37:51:b1:ee:99:d6:a6:4b:d4: 48:78:c8:a2:85:70:ff:60:dd:a3:86:b3:69:22:4f: 39:c5:96:f5:ce:79:28:8d:bd:8a:6b:ca:7a:e8:e5: ac:56:bf:3b:85:6a:78:a4:2b:3f:eb:cc:c2:16:c8: fb:c8:1f:cb:37:fc:10:0a:bd:4f:d0:71:49:17:35: 65:1e:e8:cf:b6:db:65:f2:ac:ce:a2:b8:c1:1c:f7: 79:9c:92:b9:33:06:3b:74:32:99:96:40:fa:81:39: d8:21:8b:70:f5:a8:9b:ba:16:72:67:00:d1:1d:6f: 4b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E9:EF:11:03:2E:57:EC:37:F6:60:F1:67:F0:55:86:35:33:E3:D9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/40ea4c94-3902-4c43-8a7e-89fa9a21817d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 93:2c:98:4d:1f:93:37:4c:a2:0c:20:4f:b6:2b:eb:81:f3:f8: 5c:d6:58:98:04:f4:9d:d5:ad:75:de:75:a4:dc:e7:92:aa:c6: a6:90:e1:e7:61:a2:ed:58:40:44:ba:4c:2b:ff:1d:11:2f:dc: 9d:05:17:1e:0a:f9:7d:f5:bf:3d:e0:ea:e3:78:51:d7:5d:e1: 2e:de:14:0d:21:da:3c:99:de:cb:e9:88:33:08:9c:a4:76:f9: 5a:2b:c4:bf:83:d6:85:45:b3:94:26:b4:0c:10:7e:51:92:c9: 3c:3f:5c:94:a3:b5:42:54:1b:b3:88:51:4a:7b:f5:e0:49:fa: 3a:50:9c:96:f6:aa:80:64:ab:23:07:b3:f8:3d:86:6c:b5:5b: 8f:fc:ea:18:84:d4:33:2e:f9:9e:c0:75:5c:2f:c4:8b:a2:97: 74:8a:13:be:ce:33:e5:41:0a:80:f8:bf:98:8e:8d:49:14:3c: 3f:48:f6:b3:0b:db:99:8d:6c:c6:c4:1e:bc:56:e2:98:b4:21: 9f:c4:fc:e6:a3:e8:0a:0f:ca:20:ab:1c:bc:94:98:90:98:4a: 2e:d0:ff:7f:ab:a3:1f:54:95:a0:d3:83:fe:2f:8d:41:86:3d: f0:44:e7:16:82:2e:9e:8d:af:ce:a9:f8:57:b3:f6:51:64:a6: 39:e9:b0:4b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJyO8HZyolR6cwQ1T9Ct92Qxk2UcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMjAzMloX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAZWM2ODQ2MGVhMTkzMDZlNzEzZGIx MmQwNDJjZTBhMzNlZWE0OTJmNmU2Y2I3NDhhMGFkMWQ4YjU4NmJlZTc1OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eLljeWesDO9jSZQ2uG0HNsKJFPz Z0TKy1/W2um9yemPjTl1WdbYs8QRrp9B3Gmr+4cVACPEPs82Gb221gt7PidEewSA RFKAfS6asu9kK4uVP5ucPUEy+n9L6OmOKYRWss18NWS+/ORmyz3A73Di3Gi9AMn7 F3A4l/rT0PDwSD1RNlisGfUbdkdFXjk3UbHumdamS9RIeMiihXD/YN2jhrNpIk85 xZb1znkojb2Ka8p66OWsVr87hWp4pCs/68zCFsj7yB/LN/wQCr1P0HFJFzVlHujP tttl8qzOorjBHPd5nJK5MwY7dDKZlkD6gTnYIYtw9aibuhZyZwDRHW9LwQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFM/p7xEDLlfsN/Zg8WfwVYY1M+PZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQwZWE0Yzk0LTM5MDItNGM0My04YTdlLTg5ZmE5YTIxODE3ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauoDAMA0GCSqGSIb3DQEBCwUAA4IBAQCTLJhNH5M3TKIMIE+2 K+uB8/hc1liYBPSd1a113nWk3OeSqsamkOHnYaLtWEBEukwr/x0RL9ydBRceCvl9 9b894OrjeFHXXeEu3hQNIdo8md7L6YgzCJykdvlaK8S/g9aFRbOUJrQMEH5Rksk8 P1yUo7VCVBuziFFKe/XgSfo6UJyW9qqAZKsjB7P4PYZstVuP/OoYhNQzLvmewHVc L8SLopd0ihO+zjPlQQqA+L+Yjo1JFDw/SPazC9uZjWzGxB68VuKYtCGfxPzmo+gK D8ogqxy8lJiQmEou0P9/q6MfVJWg04P+L41Bhj3wROcWgi6eja/OqfhXs/ZRZKY5 6bBL -----END CERTIFICATE-----Generated at Sat Jun 13 08:02:34 2026 by rpki-client