$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/693455fd-3a93-4212-92a9-8a83e21ca82d.roa File: 693455fd-3a93-4212-92a9-8a83e21ca82d.roa (raw, json) Hash identifier: lowrgJ1b8pawkMfnZLjBVROuBloOLr7RAP+KXwdv6bM= Subject key identifier: BA:80:FF:AB:9E:EA:6F:FD:47:2A:8B:F8:81:6D:B2:9D:D0:99:68:3C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 40FF3D1D86210C360BDCAB3496C2E6EDA31978D2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/693455fd-3a93-4212-92a9-8a83e21ca82d.roa Signing time: Sun 31 May 2026 00:11:04 +0000 ROA not before: Sun 31 May 2026 00:11:04 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ff:3d:1d:86:21:0c:36:0b:dc:ab:34:96:c2:e6:ed:a3:19:78:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:11:04 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=ca27d6b739b286d9aa4bf2bad660366010f55dce101415b0f619cb81ea4aef92, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:1e:c2:fc:f3:18:64:f0:ee:db:d1:b7:28: e7:54:a8:74:93:5e:bb:fc:77:38:a9:b0:b8:89:77: 4f:84:42:84:41:af:d8:00:0b:74:2d:f0:8b:d8:cf: 49:0d:c2:28:53:9a:2d:b3:e1:4c:06:ad:27:6f:92: ef:0d:00:87:45:10:04:f0:dc:ac:57:7e:c3:9e:76: d5:26:45:1c:6e:44:d3:ad:aa:21:42:f4:98:1c:46: fc:7e:54:1e:51:97:6f:00:cb:b3:18:5b:b5:4e:4d: a3:9c:1c:b8:36:84:62:17:82:b6:f2:13:45:ba:40: 51:4e:4a:75:63:81:b1:b4:dd:c0:83:ef:c2:f7:74: 47:5b:47:4c:75:dd:52:8f:69:5d:f2:58:8e:2d:6d: b6:a1:2e:30:a2:2d:45:56:cc:e8:ce:7a:f2:0a:6b: c2:02:77:8f:a1:9e:e7:b2:62:63:5a:aa:5d:73:e5: b8:e0:f9:16:c9:bf:fa:64:4e:e1:83:f6:89:01:83: 4b:43:da:2e:d3:dd:f1:2c:05:06:0b:89:f7:2e:36: 7e:3e:4d:2c:d7:8c:2e:d8:36:24:2b:cb:3c:62:88: 2b:d8:00:30:c6:3b:f1:22:44:9b:ed:66:63:a7:23: 58:f8:cd:6f:35:af:50:a3:3d:fb:5a:42:1c:63:c8: c9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:80:FF:AB:9E:EA:6F:FD:47:2A:8B:F8:81:6D:B2:9D:D0:99:68:3C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/693455fd-3a93-4212-92a9-8a83e21ca82d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:c000::/40 Signature Algorithm: sha256WithRSAEncryption b9:ff:96:dc:13:b0:04:fb:3b:69:c7:1b:6c:bd:34:3a:9b:be: 74:a6:29:ba:96:e3:9a:c0:58:58:f4:d5:51:58:62:ae:35:09: 7a:9f:41:13:87:8b:4b:83:18:d4:02:4e:3c:7d:77:b9:e5:03: 77:c3:a4:22:be:45:2f:f2:90:80:68:35:2e:9e:f1:4d:77:b8: ef:5c:ca:2c:21:e5:cd:c7:f9:d9:f6:85:14:f6:ce:2a:58:7b: f7:ce:50:37:bc:84:18:04:38:03:7d:4b:29:e2:18:a8:f9:64: 92:54:1b:68:c7:96:e0:46:5d:06:54:7d:96:b9:73:f0:cc:f4: 00:d5:14:31:68:92:0e:88:12:a9:4d:df:20:a1:a8:97:20:97: 8d:e8:2d:1e:94:9f:df:24:61:91:37:ac:8b:84:93:0e:12:57: db:74:ec:f3:c4:63:33:d9:68:5e:d0:bd:67:c8:78:a6:aa:7d: 13:74:4f:8b:53:7f:a1:c3:3e:bf:2d:8f:00:b2:9a:b9:35:76: 01:e1:b1:90:fe:41:2b:28:7f:00:6f:08:5c:ec:99:eb:c4:d3: c1:cb:d3:58:2d:c2:e2:8f:30:48:d2:a6:3e:28:da:bd:da:ce: 35:28:4b:72:0e:f4:fd:f8:7e:8b:89:ce:e7:ad:32:af:e3:3d: ae:5a:98:7e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQP89HYYhDDYL3Ks0lsLm7aMZeNIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMTEwNFoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAY2EyN2Q2YjczOWIyODZkOWFhNGJm MmJhZDY2MDM2NjAxMGY1NWRjZTEwMTQxNWIwZjYxOWNiODFlYTRhZWY5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqcewvzzGGTw7tvRtyjnVKh0k167 /Hc4qbC4iXdPhEKEQa/YAAt0LfCL2M9JDcIoU5ots+FMBq0nb5LvDQCHRRAE8Nys V37DnnbVJkUcbkTTraohQvSYHEb8flQeUZdvAMuzGFu1Tk2jnBy4NoRiF4K28hNF ukBRTkp1Y4GxtN3Ag+/C93RHW0dMdd1Sj2ld8liOLW22oS4woi1FVszoznryCmvC AnePoZ7nsmJjWqpdc+W44PkWyb/6ZE7hg/aJAYNLQ9ou093xLAUGC4n3LjZ+Pk0s 14wu2DYkK8s8Yogr2AAwxjvxIkSb7WZjpyNY+M1vNa9Qoz37WkIcY8jJJwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLqA/6ue6m/9RyqL+IFtsp3QmWg8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY5MzQ1NWZkLTNhOTMtNDIxMi05MmE5LThhODNlMjFjYTgyZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6cAwDQYJKoZIhvcNAQELBQADggEBALn/ltwTsAT7O2nHG2y9 NDqbvnSmKbqW45rAWFj01VFYYq41CXqfQROHi0uDGNQCTjx9d7nlA3fDpCK+RS/y kIBoNS6e8U13uO9cyiwh5c3H+dn2hRT2zipYe/fOUDe8hBgEOAN9SyniGKj5ZJJU G2jHluBGXQZUfZa5c/DM9ADVFDFokg6IEqlN3yChqJcgl43oLR6Un98kYZE3rIuE kw4SV9t07PPEYzPZaF7QvWfIeKaqfRN0T4tTf6HDPr8tjwCymrk1dgHhsZD+QSso fwBvCFzsmevE08HL01gtwuKPMEjSpj4o2r3azjUoS3IO9P34fouJzuetMq/jPa5a mH4= -----END CERTIFICATE-----Generated at Wed Jun 17 12:03:45 2026 by rpki-client