$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6413b799-f822-4470-b7a0-a8f6a6103653.roa File: 6413b799-f822-4470-b7a0-a8f6a6103653.roa (raw, json) Hash identifier: 1cTt7EcOGSl3zaGYhdHv84L9LMT5+zV9Y+GAzo0afRA= Subject key identifier: E8:3F:E5:F4:30:3B:AA:66:3B:D9:38:6F:72:E2:61:DC:52:26:C9:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 29FC7F276B173B5166F93507716CCEFAECEE9460 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6413b799-f822-4470-b7a0-a8f6a6103653.roa Signing time: Sun 31 May 2026 00:20:49 +0000 ROA not before: Sun 31 May 2026 00:20:49 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fc:7f:27:6b:17:3b:51:66:f9:35:07:71:6c:ce:fa:ec:ee:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:20:49 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=b889ac99ac369997935a45be5b7bf0a59d546a136869142466453e13f8ad4bc1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:87:fb:f5:f1:e7:2d:f9:d9:72:7e:71:d8:f6: 50:53:6e:1a:a1:60:16:1c:fa:f5:3a:69:f4:5f:fb: 17:af:63:e3:e9:2e:0b:eb:38:ff:b2:61:ef:33:29: a7:f8:ea:5d:c5:4f:f6:89:35:77:8f:0c:69:6a:d8: ac:b5:7b:99:a5:94:9c:6d:d7:23:ab:ec:29:95:fe: ef:88:28:f8:c8:c4:02:ff:f0:ce:9f:83:99:eb:88: 90:bc:35:64:3d:07:1c:6b:8d:ac:1d:50:ad:35:8e: af:e7:c2:a1:26:e9:b2:9f:36:49:76:3f:69:0c:7b: d7:d1:d7:f0:ca:de:3b:3b:b5:53:45:c4:84:c2:84: e8:a8:28:2f:9f:6d:6e:7b:1f:29:a6:73:9b:3a:38: 90:88:2b:bd:49:2d:74:4d:53:3d:38:b6:16:f2:8d: 97:d8:a2:9d:0c:0f:6b:b5:cf:bd:c3:fc:02:9f:11: 06:1f:8a:1c:a8:82:1f:62:b0:e4:b4:ae:70:21:83: 8e:df:5b:f6:cf:7e:15:b4:7e:f4:c1:31:0b:3f:7f: ba:59:3d:fa:ac:8c:f3:c2:ad:5d:22:27:8f:7c:a4: 7e:bc:1c:bb:0f:06:ca:21:f5:fb:da:12:b6:52:e1: fb:ed:5c:a2:4c:cb:df:14:34:6e:65:56:b7:81:06: 9f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3F:E5:F4:30:3B:AA:66:3B:D9:38:6F:72:E2:61:DC:52:26:C9:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6413b799-f822-4470-b7a0-a8f6a6103653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:8880::/48 Signature Algorithm: sha256WithRSAEncryption 3c:18:4d:e0:dd:e1:b8:e6:c3:22:90:91:7f:a1:04:b9:87:74: e6:83:b1:4f:2c:1a:b0:11:76:dd:f8:02:cb:ea:a5:ac:bc:55: 65:fc:6c:2f:1b:4e:04:28:52:c1:78:57:9e:c2:91:82:00:53: 0c:1e:25:f6:c3:f3:9a:b1:79:02:ce:0c:27:35:c9:de:0f:79: b3:7c:9d:4c:1d:f6:12:31:fb:e7:67:23:ae:d8:dc:e7:d1:df: 95:74:08:d8:c4:bb:58:de:f5:69:65:ce:cd:ad:f4:4d:f4:22: 51:59:37:7a:38:32:a0:6f:8e:bf:6e:c7:24:63:aa:90:24:43: 75:bd:52:28:b5:47:49:10:7f:17:ff:fb:2a:0e:c3:44:02:75: b5:38:63:3b:8f:e4:be:0a:52:86:88:eb:e2:33:c5:6f:84:5c: 3e:54:e2:9d:71:d5:17:1c:1f:51:4c:b4:9b:43:eb:52:d3:a4: c8:50:b6:f5:e1:ca:e2:eb:e0:5e:c7:4b:f5:e0:fd:29:c0:3d: 3f:c7:97:95:51:d2:42:4e:f2:59:8c:c8:d2:7d:44:4d:72:3c: 61:3f:b1:0d:8b:3f:dd:3f:37:b2:89:1e:64:38:0f:4c:40:04: 42:f4:7d:4d:ca:f8:fe:af:5a:81:d3:32:b6:e5:42:aa:7c:60: ff:25:bf:9e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKfx/J2sXO1Fm+TUHcWzO+uzulGAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMjA0OVoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAYjg4OWFjOTlhYzM2OTk5NzkzNWE0 NWJlNWI3YmYwYTU5ZDU0NmExMzY4NjkxNDI0NjY0NTNlMTNmOGFkNGJjMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yf79fHnLfnZcn5x2PZQU24aoWAW HPr1Omn0X/sXr2Pj6S4L6zj/smHvMymn+OpdxU/2iTV3jwxpatistXuZpZScbdcj q+wplf7viCj4yMQC//DOn4OZ64iQvDVkPQcca42sHVCtNY6v58KhJumynzZJdj9p DHvX0dfwyt47O7VTRcSEwoToqCgvn21uex8ppnObOjiQiCu9SS10TVM9OLYW8o2X 2KKdDA9rtc+9w/wCnxEGH4ocqIIfYrDktK5wIYOO31v2z34VtH70wTELP3+6WT36 rIzzwq1dIiePfKR+vBy7DwbKIfX72hK2UuH77VyiTMvfFDRuZVa3gQaf7wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOg/5fQwO6pmO9k4b3LiYdxSJsmZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY0MTNiNzk5LWY4MjItNDQ3MC1iN2EwLWE4ZjZhNjEwMzY1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauoiAMA0GCSqGSIb3DQEBCwUAA4IBAQA8GE3g3eG45sMikJF/ oQS5h3Tmg7FPLBqwEXbd+ALL6qWsvFVl/GwvG04EKFLBeFeewpGCAFMMHiX2w/Oa sXkCzgwnNcneD3mzfJ1MHfYSMfvnZyOu2Nzn0d+VdAjYxLtY3vVpZc7NrfRN9CJR WTd6ODKgb46/bsckY6qQJEN1vVIotUdJEH8X//sqDsNEAnW1OGM7j+S+ClKGiOvi M8VvhFw+VOKdcdUXHB9RTLSbQ+tS06TIULb14cri6+Bex0v14P0pwD0/x5eVUdJC TvJZjMjSfURNcjxhP7ENiz/dPzeyiR5kOA9MQARC9H1Nyvj+r1qB0zK25UKqfGD/ Jb+e -----END CERTIFICATE-----Generated at Sat Jun 13 13:15:28 2026 by rpki-client