$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46414410-3c41-474e-9f4b-cac045e67568.roa File: 46414410-3c41-474e-9f4b-cac045e67568.roa (raw, json) Hash identifier: 2jlaFb13vjNx0GGCKuK7lcG3TkTPL5O2GmOFojzP8nc= Subject key identifier: 80:85:1A:8C:B2:FC:C7:64:D4:11:59:22:B1:E1:CB:02:F9:B6:5F:73 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B42B6A94D2AB75DF0375E60BB7E0BD1BE2C5779 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46414410-3c41-474e-9f4b-cac045e67568.roa Signing time: Wed 13 May 2026 00:30:28 +0000 ROA not before: Wed 13 May 2026 00:30:28 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:42:b6:a9:4d:2a:b7:5d:f0:37:5e:60:bb:7e:0b:d1:be:2c:57:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:30:28 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=9178d6a095068c599813dab25c50ecb8bc669889238c21c2e7c631b08feb8fc8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:05:97:13:14:e5:ea:8a:92:f8:88:7d:2c: b6:50:b1:1c:46:73:15:35:7f:34:b5:50:8e:bf:78: f8:46:d3:f3:63:ce:29:ab:b9:50:c1:94:8c:bd:55: cf:2d:33:26:e8:37:3f:c0:a3:44:2d:ef:40:6e:8a: e1:2f:a5:54:93:d8:e9:ba:fc:66:1a:5d:96:98:6d: 4e:6f:c3:22:01:df:12:fa:1e:a7:16:59:44:89:4c: 1f:90:0c:a3:7c:d5:60:54:fa:8d:10:5f:1d:39:40: c1:3b:7a:6d:23:f4:b9:af:38:59:61:59:71:c3:f8: aa:3a:9c:60:50:5c:93:d3:ce:e2:be:5c:88:b7:53: 5c:2b:46:3a:ff:2b:ae:b4:fc:20:8c:b7:0b:7d:17: 17:f2:3f:7a:a5:39:0d:59:6d:2e:66:3b:7f:98:ab: 77:b4:d8:2d:99:69:4e:36:bd:f5:c1:13:ac:6e:ac: 1f:67:ef:32:bf:0c:34:41:38:d1:01:a0:4d:35:2b: 03:7d:8b:d2:9a:9e:bd:02:fc:56:c0:bf:32:4f:9d: e5:27:eb:3d:61:5c:5e:cc:13:e7:19:7d:7c:04:54: 23:40:d3:1a:74:b3:b0:c5:76:1a:67:30:48:02:91: da:4c:f0:e2:17:f1:bb:2d:d2:bc:50:f7:c5:7d:48: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:85:1A:8C:B2:FC:C7:64:D4:11:59:22:B1:E1:CB:02:F9:B6:5F:73 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46414410-3c41-474e-9f4b-cac045e67568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:8800::/38 Signature Algorithm: sha256WithRSAEncryption 1a:b8:29:c3:89:3f:2b:16:d7:cc:b4:37:c2:c4:d9:c9:02:e7: 7a:da:61:bf:9c:ba:f2:72:11:12:14:12:62:58:53:d3:55:54: 80:5c:75:67:08:fa:33:b9:38:99:ae:41:17:9a:96:dd:ac:51: 76:e5:1a:ca:37:0d:54:87:13:22:3f:ef:7b:13:ad:c9:c5:71: 6f:9f:b6:23:bd:a6:ba:61:1b:62:e4:55:4c:17:a7:9c:88:47: e0:cf:08:c9:7f:9c:0e:fc:01:c9:a8:a6:c6:7d:8e:76:4a:fa: 1d:dc:0c:ef:32:70:04:c1:be:78:d5:ca:ba:1a:be:35:1b:e5: 9b:8a:c5:cd:80:90:90:fb:e2:a7:3b:e0:a9:ec:85:87:ef:e4: be:e9:97:1d:ff:75:4b:65:26:57:97:c3:29:8f:58:79:68:a1: 80:e2:47:d5:a1:67:98:09:e1:6b:50:42:78:81:ad:a0:8b:e9: 89:d0:74:ef:e3:de:42:19:ef:37:86:58:43:ab:49:c3:ae:e9: b3:f9:b7:4c:47:67:1d:a6:ed:2f:f6:bd:8f:86:d2:17:08:84: 07:ba:ad:c3:57:7d:1c:3f:1e:fc:01:a0:24:7d:ca:e6:15:34: 46:2c:b9:ac:c9:16:e0:be:5a:b8:9f:5f:30:3d:e1:e9:f1:5e: 11:87:65:4f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUa0K2qU0qt13wN15gu34L0b4sV3kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMzAyOFoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAOTE3OGQ2YTA5NTA2OGM1OTk4MTNk YWIyNWM1MGVjYjhiYzY2OTg4OTIzOGMyMWMyZTdjNjMxYjA4ZmViOGZjODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6EFlxMU5eqKkviIfSy2ULEcRnMV NX80tVCOv3j4RtPzY84pq7lQwZSMvVXPLTMm6Dc/wKNELe9AborhL6VUk9jpuvxm Gl2WmG1Ob8MiAd8S+h6nFllEiUwfkAyjfNVgVPqNEF8dOUDBO3ptI/S5rzhZYVlx w/iqOpxgUFyT087ivlyIt1NcK0Y6/yuutPwgjLcLfRcX8j96pTkNWW0uZjt/mKt3 tNgtmWlONr31wROsbqwfZ+8yvww0QTjRAaBNNSsDfYvSmp69AvxWwL8yT53lJ+s9 YVxezBPnGX18BFQjQNMadLOwxXYaZzBIApHaTPDiF/G7LdK8UPfFfUjPsQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFICFGoyy/Mdk1BFZIrHhywL5tl9zMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ2NDE0NDEwLTNjNDEtNDc0ZS05ZjRiLWNhYzA0NWU2NzU2OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFIgwDQYJKoZIhvcNAQELBQADggEBABq4KcOJPysW18y0N8LE 2ckC53raYb+cuvJyERIUEmJYU9NVVIBcdWcI+jO5OJmuQRealt2sUXblGso3DVSH EyI/73sTrcnFcW+ftiO9prphG2LkVUwXp5yIR+DPCMl/nA78AcmopsZ9jnZK+h3c DO8ycATBvnjVyroavjUb5ZuKxc2AkJD74qc74KnshYfv5L7plx3/dUtlJleXwymP WHlooYDiR9WhZ5gJ4WtQQniBraCL6YnQdO/j3kIZ7zeGWEOrScOu6bP5t0xHZx2m 7S/2vY+G0hcIhAe6rcNXfRw/HvwBoCR9yuYVNEYsuazJFuC+WrifXzA94enxXhGH ZU8= -----END CERTIFICATE-----Generated at Sat Jun 13 08:06:48 2026 by rpki-client