$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6ab62013-18bf-4521-88c7-45d3708c7675.roa File: 6ab62013-18bf-4521-88c7-45d3708c7675.roa (raw, json) Hash identifier: eVG5AjKIDu9HE71xw6YkZbbz2cMKuzOiU9wtvObIiCI= Subject key identifier: 12:00:3E:FE:EE:FE:B7:34:A7:3D:7C:7D:C5:4C:A5:5A:F9:A8:0E:71 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0D7846AF8004E389DC97908D92CD7B5FA2ED2A9D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6ab62013-18bf-4521-88c7-45d3708c7675.roa Signing time: Tue 28 Jul 2026 00:00:06 +0000 ROA not before: Tue 28 Jul 2026 00:00:06 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:78:46:af:80:04:e3:89:dc:97:90:8d:92:cd:7b:5f:a2:ed:2a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 00:00:06 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=507a17fed449f0492c393e3e3ecbaec8e8a7fe8f793d7b7e74a16c2b7ad04b35, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:22:07:65:a4:94:f1:48:5f:c2:4a:a7:e2: 5e:30:5b:74:91:fe:f2:40:7f:06:ae:b9:89:7c:66: bb:d6:f4:47:61:77:8d:38:10:e6:a9:96:5d:14:77: 4c:3e:d2:29:73:84:bb:98:98:58:96:70:86:15:65: 81:88:14:89:92:71:25:22:48:31:d0:87:2c:39:b7: 83:1e:3f:78:aa:ad:53:36:70:22:0b:2e:b9:c3:4e: b1:b8:9c:af:8e:05:4e:ea:7a:dc:d3:02:b6:f0:7e: 7a:cc:9d:53:df:13:2f:66:26:72:90:49:c0:d9:9d: a4:15:f7:ae:64:2c:0e:3a:09:44:d6:14:e7:e9:34: 35:63:6a:be:39:8d:9c:e5:72:e6:d4:f6:30:75:7f: d7:29:2c:2f:34:45:aa:ba:5e:15:ff:05:71:b2:7d: f1:81:8c:00:e9:8e:b5:b2:1b:04:05:7e:b8:82:43: 23:9c:97:1b:7d:3c:3f:a1:ca:98:92:f4:a1:91:db: fd:b9:c8:00:17:01:95:8b:6f:f2:4e:dd:5d:4a:35: 5b:a3:46:e8:2d:b6:46:fb:af:d1:e7:0b:73:de:db: 79:84:72:b7:de:cb:ce:78:6b:a7:10:ad:fd:16:c8: a8:2a:6f:36:b7:2e:c6:d7:90:75:42:44:93:f3:3a: 04:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:00:3E:FE:EE:FE:B7:34:A7:3D:7C:7D:C5:4C:A5:5A:F9:A8:0E:71 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6ab62013-18bf-4521-88c7-45d3708c7675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption 10:35:fc:f5:3b:a4:ef:b5:77:74:e1:49:97:d6:8f:2b:d9:aa: d5:2e:6f:fb:c1:98:7d:e2:0c:1f:5a:0b:af:92:ba:da:99:b9: d8:c3:2f:18:22:70:b3:ba:ca:f9:e7:6a:ab:d1:f1:3c:e1:88: d8:8a:26:aa:9a:0e:a3:d2:30:88:6a:70:3a:21:c2:33:d7:59: 1d:cd:44:fc:5d:60:79:03:c0:83:d3:7f:e9:8a:73:eb:1e:f1: 6f:2d:92:b9:44:92:99:42:b9:89:4d:12:65:d4:ea:5b:95:47: 33:c5:72:0b:60:4c:da:01:1a:2f:9a:20:ab:67:4e:d6:11:bb: fa:c6:ac:40:90:78:4b:e5:ef:f9:a5:34:c7:70:54:bb:1b:a9: a5:7f:a3:55:fa:ef:f0:b2:fd:4c:d5:14:04:f1:1c:3a:d4:aa: 67:d7:5b:b8:7f:59:a9:db:80:7b:b2:18:3d:fb:59:0f:72:f9: 7e:a9:a9:34:05:2e:70:ca:26:de:af:56:43:85:90:53:45:b8: 63:40:93:ab:74:a5:04:3e:6b:a8:af:f9:86:cb:8f:b8:c0:1b: 1a:b8:74:86:a8:57:d9:14:a3:d6:c2:fc:ef:e8:65:96:e4:ca: 2f:9d:60:b7:cc:cd:8b:23:d8:50:96:d2:c9:99:c3:5d:6e:9a: 94:5f:f6:f3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDXhGr4AE44ncl5CNks17X6LtKp0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyODAwMDAwNloX DTI2MTAyNjIzNTk1OVowejFJMEcGA1UEBRNANTA3YTE3ZmVkNDQ5ZjA0OTJjMzkz ZTNlM2VjYmFlYzhlOGE3ZmU4Zjc5M2Q3YjdlNzRhMTZjMmI3YWQwNGIzNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzgiB2WklPFIX8JKp+JeMFt0kf7y QH8GrrmJfGa71vRHYXeNOBDmqZZdFHdMPtIpc4S7mJhYlnCGFWWBiBSJknElIkgx 0IcsObeDHj94qq1TNnAiCy65w06xuJyvjgVO6nrc0wK28H56zJ1T3xMvZiZykEnA 2Z2kFfeuZCwOOglE1hTn6TQ1Y2q+OY2c5XLm1PYwdX/XKSwvNEWqul4V/wVxsn3x gYwA6Y61shsEBX64gkMjnJcbfTw/ocqYkvShkdv9ucgAFwGVi2/yTt1dSjVbo0bo LbZG+6/R5wtz3tt5hHK33svOeGunEK39FsioKm82ty7G15B1QkST8zoEtwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBIAPv7u/rc0pz18fcVMpVr5qA5xMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZhYjYyMDEzLTE4YmYtNDUyMS04OGM3LTQ1ZDM3MDhjNzY3NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8qDAMA0GCSqGSIb3DQEBCwUAA4IBAQAQNfz1O6TvtXd04UmX 1o8r2arVLm/7wZh94gwfWguvkrrambnYwy8YInCzusr552qr0fE84YjYiiaqmg6j 0jCIanA6IcIz11kdzUT8XWB5A8CD03/pinPrHvFvLZK5RJKZQrmJTRJl1OpblUcz xXILYEzaARovmiCrZ07WEbv6xqxAkHhL5e/5pTTHcFS7G6mlf6NV+u/wsv1M1RQE 8Rw61Kpn11u4f1mp24B7shg9+1kPcvl+qak0BS5wyiber1ZDhZBTRbhjQJOrdKUE Pmuor/mGy4+4wBsauHSGqFfZFKPWwvzv6GWW5MovnWC3zM2LI9hQltLJmcNdbpqU X/bz -----END CERTIFICATE-----Generated at Wed Jul 29 01:00:19 2026 by rpki-client