$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/537fa129-e348-4c80-bdec-ae0d9403264e.roa File: 537fa129-e348-4c80-bdec-ae0d9403264e.roa (raw, json) Hash identifier: ZUCsfICLKQwzmTci4MEcbLES5vrW6nS+eKQpTJHPjHg= Subject key identifier: 1A:E8:B0:BD:4F:87:16:0D:32:CD:F7:EC:5F:80:5F:1F:D5:47:A3:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 169BB1BE7A11F74825B2E4147F4FFE2C2E3C3B6C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/537fa129-e348-4c80-bdec-ae0d9403264e.roa Signing time: Sun 31 May 2026 00:20:27 +0000 ROA not before: Sun 31 May 2026 00:20:27 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9b:b1:be:7a:11:f7:48:25:b2:e4:14:7f:4f:fe:2c:2e:3c:3b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:20:27 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=876a82c3fe6e9d690f65b5334436f73f5b3ed065b7814520f27191718a7436da, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:58:01:cc:21:44:77:f9:26:f3:96:fc:ac: df:fa:86:2c:c4:93:36:19:2e:0d:b3:59:04:b9:d0: 1f:d2:98:fc:ea:d5:c2:b2:05:52:e1:28:e1:c1:b3: c7:58:c5:20:58:7f:e3:03:ad:86:41:10:e5:ef:e5: bc:07:48:6d:40:f3:86:c3:6a:32:bc:e3:16:77:89: 6c:25:c5:00:17:45:a3:5e:f3:bf:4f:3e:ff:00:4c: d8:0e:d8:63:9b:16:99:c4:ee:90:db:d6:96:0d:02: fa:c1:27:b0:9a:8c:4a:04:2f:8f:e9:c8:86:80:b5: c9:44:cc:9c:e5:09:82:4e:88:d1:0f:71:1f:bd:da: 24:56:77:63:f6:1e:05:60:d1:be:8f:51:82:c8:d2: 73:97:ac:26:d2:f3:0f:75:d2:9c:9b:16:bc:f6:f3: 0e:23:6c:1d:26:e1:c7:07:7d:32:80:d4:75:66:9b: 38:c3:91:3b:12:a7:11:2a:d6:95:0f:a2:9f:15:fa: 67:2c:15:dc:83:af:3e:f7:e4:e8:ce:ee:0a:60:27: 1d:0c:48:35:d8:ef:c2:43:ec:c4:3e:b1:94:24:df: db:a7:6f:9e:e3:a4:5d:75:c7:b2:37:5c:a1:ec:e3: 94:d6:14:9e:06:11:c5:fe:84:18:a3:60:c3:f7:7f: 54:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E8:B0:BD:4F:87:16:0D:32:CD:F7:EC:5F:80:5F:1F:D5:47:A3:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/537fa129-e348-4c80-bdec-ae0d9403264e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:1040::/48 Signature Algorithm: sha256WithRSAEncryption c1:52:52:3f:49:5c:f0:31:cb:7d:b4:3e:ed:54:ec:a3:1f:82: 8e:44:c7:90:a6:a5:5d:bd:a8:db:a1:87:4c:57:db:94:7b:41: ca:32:6d:1f:88:80:0b:fd:63:82:97:4c:16:b1:ff:f6:4a:c4: f5:ea:8d:ee:13:be:3a:c8:30:e1:cc:ca:92:18:10:e2:50:f9: 21:2a:a3:3e:70:b3:02:98:78:4f:5d:d0:54:18:15:f5:b2:4e: e2:14:cf:77:e4:55:e8:70:d9:da:c8:19:62:2a:95:2d:1d:87: 3f:d4:92:1e:37:6c:21:7e:72:51:f4:40:b9:85:8a:a0:67:fa: 50:a4:35:7f:1b:31:ab:ed:55:b0:c8:33:8e:15:1f:e8:ad:d9: 4d:62:a9:6e:c9:bf:86:43:f7:83:4c:3c:87:6d:f8:81:b5:46: b0:39:da:9a:d9:8a:93:6a:74:cc:b5:96:86:a6:d8:7c:2b:a2: 7b:fc:3d:28:44:8f:a4:8b:a3:c9:39:8c:b8:e2:7c:08:20:88: 22:e9:ae:ac:8a:96:42:ee:94:8f:eb:d3:d4:ab:b6:e3:1b:6e: 07:24:7a:18:5d:03:bd:bc:4c:ec:36:3e:b8:46:c4:00:1c:b4: 20:d2:9d:be:c3:a9:64:ee:6b:a0:8d:f7:50:59:34:e7:16:53: 97:df:26:f6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFpuxvnoR90glsuQUf0/+LC48O2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMjAyN1oX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAODc2YTgyYzNmZTZlOWQ2OTBmNjVi NTMzNDQzNmY3M2Y1YjNlZDA2NWI3ODE0NTIwZjI3MTkxNzE4YTc0MzZkYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWxYAcwhRHf5JvOW/Kzf+oYsxJM2 GS4Ns1kEudAf0pj86tXCsgVS4SjhwbPHWMUgWH/jA62GQRDl7+W8B0htQPOGw2oy vOMWd4lsJcUAF0WjXvO/Tz7/AEzYDthjmxaZxO6Q29aWDQL6wSewmoxKBC+P6ciG gLXJRMyc5QmCTojRD3EfvdokVndj9h4FYNG+j1GCyNJzl6wm0vMPddKcmxa89vMO I2wdJuHHB30ygNR1Zps4w5E7EqcRKtaVD6KfFfpnLBXcg68+9+Tozu4KYCcdDEg1 2O/CQ+zEPrGUJN/bp2+e46RddceyN1yh7OOU1hSeBhHF/oQYo2DD939UhwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBrosL1PhxYNMs337F+AXx/VR6MBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUzN2ZhMTI5LWUzNDgtNGM4MC1iZGVjLWFlMGQ5NDAzMjY0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6RBAMA0GCSqGSIb3DQEBCwUAA4IBAQDBUlI/SVzwMct9tD7t VOyjH4KORMeQpqVdvajboYdMV9uUe0HKMm0fiIAL/WOCl0wWsf/2SsT16o3uE746 yDDhzMqSGBDiUPkhKqM+cLMCmHhPXdBUGBX1sk7iFM935FXocNnayBliKpUtHYc/ 1JIeN2whfnJR9EC5hYqgZ/pQpDV/GzGr7VWwyDOOFR/ordlNYqluyb+GQ/eDTDyH bfiBtUawOdqa2YqTanTMtZaGpth8K6J7/D0oRI+ki6PJOYy44nwIIIgi6a6sipZC 7pSP69PUq7bjG24HJHoYXQO9vEzsNj64RsQAHLQg0p2+w6lk7mugjfdQWTTnFlOX 3yb2 -----END CERTIFICATE-----Generated at Sat Jun 13 12:42:28 2026 by rpki-client