$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7482f49a-b81f-45ce-aa4c-4fb0e8221e30.roa File: 7482f49a-b81f-45ce-aa4c-4fb0e8221e30.roa (raw, json) Hash identifier: ptJ+00umU2Sm7iSRjiUOzBLiKYjpZOLEes24FiK9rRE= Subject key identifier: 1E:EF:57:69:57:6E:BE:9E:6E:81:9F:9C:5A:64:FC:60:2A:34:9D:30 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 166126B23DE0FB0537D215B927B1BF836615E95C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7482f49a-b81f-45ce-aa4c-4fb0e8221e30.roa Signing time: Sun 31 May 2026 00:01:25 +0000 ROA not before: Sun 31 May 2026 00:01:25 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:61:26:b2:3d:e0:fb:05:37:d2:15:b9:27:b1:bf:83:66:15:e9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:01:25 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=ac64881a40d24339b3d5accb79f9e704daba3720215cf82eb978051c4aad7026, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:01:05:17:36:6b:c7:b6:7c:69:81:08:79: e6:51:76:4d:d6:1a:6d:3e:5a:33:25:cb:4e:2e:14: 93:e7:04:ca:8b:0a:22:a2:2a:e7:03:04:db:17:ed: 65:63:3d:6a:9c:ae:61:c0:d7:e9:4f:63:21:ef:ce: d7:da:1f:01:77:b6:94:57:97:ba:38:8c:57:92:65: 13:9a:32:ec:9b:24:d2:75:6b:6e:c0:2c:26:b1:fa: de:fd:2a:12:bc:b6:d9:ac:36:be:88:fc:26:b3:f7: 99:71:5f:99:21:e5:f0:3b:20:36:2b:ff:d3:1c:59: 10:a4:21:31:cc:e8:9f:09:f0:9c:68:6a:33:91:73: 14:e2:e1:d2:2d:76:32:ad:ac:96:24:72:8c:7a:b9: dc:3d:53:f3:8f:4f:22:f8:8c:6d:d7:d8:29:f3:6c: f5:25:6a:d4:78:36:ef:62:ca:4f:82:82:55:ce:4b: b2:f8:66:67:fb:39:9f:99:56:47:6c:80:da:f8:e2: a2:c1:8b:8f:0b:da:42:7a:6a:23:ff:1c:4e:a4:50: 6a:44:fb:bb:48:2d:db:18:85:03:a8:63:11:50:7a: 7c:d9:be:61:b9:c2:ba:30:2a:e1:66:bd:ab:e8:7b: 09:b8:9b:de:08:2e:57:50:4a:28:4d:88:cc:9d:a1: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EF:57:69:57:6E:BE:9E:6E:81:9F:9C:5A:64:FC:60:2A:34:9D:30 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7482f49a-b81f-45ce-aa4c-4fb0e8221e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:e080::/48 Signature Algorithm: sha256WithRSAEncryption 95:2f:08:3e:10:94:2a:68:82:71:a2:e1:cc:ff:f1:cd:fb:8e: 19:9a:e6:c8:e2:67:bf:ab:6b:5e:41:1a:fc:0f:1d:e7:4c:48: 34:06:ae:eb:b7:74:5e:b6:ae:12:c1:86:d4:8b:a9:80:c7:76: 34:39:bf:71:12:71:ff:13:a1:f9:88:b7:f9:ba:bf:a6:c0:06: 03:b0:84:af:f0:fc:3a:4f:4c:b3:0c:37:59:d9:a4:02:9f:e5: 2e:01:60:8e:b3:8e:1f:5e:20:61:7f:0d:88:d5:cc:a0:4b:08: 66:68:33:21:1e:63:04:e2:d0:ee:91:72:b6:b9:98:cd:ea:ae: 70:a8:aa:71:d3:81:e2:ea:3d:56:54:2c:f2:3a:cc:19:45:fe: 18:5b:cc:bd:c1:de:81:78:b8:26:5d:b1:7a:30:87:74:66:4c: 2f:53:88:c8:11:de:95:fa:76:ff:0f:85:65:5c:aa:43:4d:a5: 44:0a:06:82:9e:cb:50:68:85:88:25:78:dd:9b:4b:52:ac:b3: 75:65:e4:6f:6c:f5:35:e0:2d:2b:0e:f4:5e:ec:07:99:0c:f4: 1c:53:37:85:90:62:0b:27:a3:e8:3f:a5:ac:d5:10:1a:a1:a8: a5:fa:e2:ff:aa:b0:4d:4e:fb:d8:96:29:d3:8c:36:3a:fa:db: 8e:bb:2c:91 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFmEmsj3g+wU30hW5J7G/g2YV6VwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMDEyNVoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAYWM2NDg4MWE0MGQyNDMzOWIzZDVh Y2NiNzlmOWU3MDRkYWJhMzcyMDIxNWNmODJlYjk3ODA1MWM0YWFkNzAyNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsgBBRc2a8e2fGmBCHnmUXZN1hpt PlozJctOLhST5wTKiwoioirnAwTbF+1lYz1qnK5hwNfpT2Mh787X2h8Bd7aUV5e6 OIxXkmUTmjLsmyTSdWtuwCwmsfre/SoSvLbZrDa+iPwms/eZcV+ZIeXwOyA2K//T HFkQpCExzOifCfCcaGozkXMU4uHSLXYyrayWJHKMerncPVPzj08i+Ixt19gp82z1 JWrUeDbvYspPgoJVzkuy+GZn+zmfmVZHbIDa+OKiwYuPC9pCemoj/xxOpFBqRPu7 SC3bGIUDqGMRUHp82b5hucK6MCrhZr2r6HsJuJveCC5XUEooTYjMnaFS5wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFB7vV2lXbr6eboGfnFpk/GAqNJ0wMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc0ODJmNDlhLWI4MWYtNDVjZS1hYTRjLTRmYjBlODIyMWUzMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6eCAMA0GCSqGSIb3DQEBCwUAA4IBAQCVLwg+EJQqaIJxouHM //HN+44ZmubI4me/q2teQRr8Dx3nTEg0Bq7rt3Retq4SwYbUi6mAx3Y0Ob9xEnH/ E6H5iLf5ur+mwAYDsISv8Pw6T0yzDDdZ2aQCn+UuAWCOs44fXiBhfw2I1cygSwhm aDMhHmME4tDukXK2uZjN6q5wqKpx04Hi6j1WVCzyOswZRf4YW8y9wd6BeLgmXbF6 MId0ZkwvU4jIEd6V+nb/D4VlXKpDTaVECgaCnstQaIWIJXjdm0tSrLN1ZeRvbPU1 4C0rDvRe7AeZDPQcUzeFkGILJ6PoP6Ws1RAaoail+uL/qrBNTvvYlinTjDY6+tuO uyyR -----END CERTIFICATE-----Generated at Sat Jun 13 09:14:17 2026 by rpki-client