$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d545d42-676e-4de2-8c27-f33d51079ff5.roa File: 7d545d42-676e-4de2-8c27-f33d51079ff5.roa (raw, json) Hash identifier: PC2Kqy56tM5+pb0pTYXsL4pgh3HBVB5lxVVLcS1xlvs= Subject key identifier: 97:85:14:39:35:BC:D3:3D:76:DA:7A:EC:C8:F8:2D:0C:41:E4:61:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 18A9CFB816E62D775361518299AAEDFE26AA41DF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d545d42-676e-4de2-8c27-f33d51079ff5.roa Signing time: Sun 31 May 2026 00:10:11 +0000 ROA not before: Sun 31 May 2026 00:10:11 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a9:cf:b8:16:e6:2d:77:53:61:51:82:99:aa:ed:fe:26:aa:41:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:10:11 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=4ca36bec0e1461114151643838d15d39cb610c65b57fc69efd8e686d7b0a8891, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:04:0a:e6:71:d7:97:8e:57:9d:c6:44:ad:58: 64:dc:98:8f:ed:ca:bb:58:bc:9d:37:4b:3f:7e:da: 71:08:7d:d4:a2:43:eb:63:92:4d:cc:fa:41:3e:ad: 38:db:5c:95:af:c6:85:5d:7c:e6:cf:13:7f:41:9d: 12:d0:6c:6a:af:28:bc:66:91:51:c2:66:1d:0b:e2: 88:94:8b:fe:60:77:f0:86:94:93:b2:76:f1:d6:99: 81:d1:5e:dd:9c:34:47:5d:2b:76:4e:66:46:44:ef: a3:d5:d6:c3:61:a2:26:4e:f2:16:2f:8b:da:43:60: c8:cf:32:fc:71:00:e1:84:1f:d6:fc:6b:18:11:c6: 23:e6:9f:16:2b:0e:55:3a:c5:43:ae:43:76:72:10: 79:5c:45:0b:54:68:3a:72:7f:8e:5c:52:d4:21:dc: d4:cf:ca:09:52:a8:ab:48:48:71:41:1e:16:c6:59: 1d:ee:97:4e:ca:d3:77:22:9c:2e:6a:27:42:a3:ba: 41:22:2a:60:f5:7f:a4:78:df:df:79:63:07:e6:db: c8:58:71:ca:5a:fe:59:89:5c:c3:4b:28:5f:8c:74: e1:1f:aa:87:44:db:26:34:2b:0f:6c:61:c4:8a:e4: 30:6e:a1:80:c8:ee:93:d1:e1:a9:68:0c:fd:ad:a3: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:85:14:39:35:BC:D3:3D:76:DA:7A:EC:C8:F8:2D:0C:41:E4:61:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d545d42-676e-4de2-8c27-f33d51079ff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:840::/48 Signature Algorithm: sha256WithRSAEncryption c6:6c:ec:ad:87:e7:1c:d8:7b:86:8c:46:cb:5b:e5:e8:51:bf: 01:bb:47:7f:36:63:20:9d:d5:bc:92:75:de:9b:2b:be:1c:0f: b9:e1:c0:e0:e4:4e:d0:62:46:66:f1:43:46:ab:6d:ea:31:c5: 71:71:3e:e4:2e:6a:29:b6:d1:29:4b:02:2a:f2:87:b3:af:81: 85:b5:2c:7e:09:68:5e:98:1d:8c:32:11:8f:72:ae:fd:2f:08: 59:52:cd:a7:41:cf:47:ad:af:c1:ee:56:b2:bb:2d:95:6c:06: 4e:6d:6c:9c:b2:97:c8:fe:35:56:bf:fc:3e:8d:1f:c2:2e:4c: dc:64:b6:11:6f:85:43:6e:50:fd:a6:13:db:62:47:3d:fc:bf: 12:86:98:47:b8:94:8a:02:f4:84:7b:d6:8a:5a:29:4a:33:4a: 06:09:e3:78:ec:68:f1:22:22:5a:4d:30:7a:eb:d9:51:8a:0e: 66:44:53:a7:53:fc:9e:d1:ad:f2:ee:33:27:13:db:f8:b0:ca: 00:5d:f5:59:1d:98:21:1f:e8:6b:77:5f:1a:88:93:d6:3d:14: 86:fe:f0:48:35:ba:93:4a:76:f9:10:7a:42:37:d7:00:cd:2b: d9:b9:83:0a:cd:3d:2b:f7:43:24:3c:5a:b1:80:71:d2:32:75: 82:be:ac:66 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGKnPuBbmLXdTYVGCmart/iaqQd8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMTAxMVoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNANGNhMzZiZWMwZTE0NjExMTQxNTE2 NDM4MzhkMTVkMzljYjYxMGM2NWI1N2ZjNjllZmQ4ZTY4NmQ3YjBhODg5MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAQK5nHXl45XncZErVhk3JiP7cq7 WLydN0s/ftpxCH3UokPrY5JNzPpBPq0421yVr8aFXXzmzxN/QZ0S0Gxqryi8ZpFR wmYdC+KIlIv+YHfwhpSTsnbx1pmB0V7dnDRHXSt2TmZGRO+j1dbDYaImTvIWL4va Q2DIzzL8cQDhhB/W/GsYEcYj5p8WKw5VOsVDrkN2chB5XEULVGg6cn+OXFLUIdzU z8oJUqirSEhxQR4Wxlkd7pdOytN3IpwuaidCo7pBIipg9X+keN/feWMH5tvIWHHK Wv5ZiVzDSyhfjHThH6qHRNsmNCsPbGHEiuQwbqGAyO6T0eGpaAz9raNR3wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJeFFDk1vNM9dtp67Mj4LQxB5GH2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdkNTQ1ZDQyLTY3NmUtNGRlMi04YzI3LWYzM2Q1MTA3OWZmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6QhAMA0GCSqGSIb3DQEBCwUAA4IBAQDGbOyth+cc2HuGjEbL W+XoUb8Bu0d/NmMgndW8knXemyu+HA+54cDg5E7QYkZm8UNGq23qMcVxcT7kLmop ttEpSwIq8oezr4GFtSx+CWhemB2MMhGPcq79LwhZUs2nQc9Hra/B7layuy2VbAZO bWycspfI/jVWv/w+jR/CLkzcZLYRb4VDblD9phPbYkc9/L8ShphHuJSKAvSEe9aK WilKM0oGCeN47GjxIiJaTTB669lRig5mRFOnU/ye0a3y7jMnE9v4sMoAXfVZHZgh H+hrd18aiJPWPRSG/vBINbqTSnb5EHpCN9cAzSvZuYMKzT0r90MkPFqxgHHSMnWC vqxm -----END CERTIFICATE-----Generated at Sat Jun 13 09:18:09 2026 by rpki-client