$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/829d3ffe-39a4-4cda-bb9c-925defc4e139.roa File: 829d3ffe-39a4-4cda-bb9c-925defc4e139.roa (raw, json) Hash identifier: q+hVp4eX7uz7eUxQeqfJ0O4/Vnhah1pKixK4yfmMVCY= Subject key identifier: 03:68:D2:F2:A3:B9:4C:DB:85:AA:5A:DD:B9:7E:95:ED:05:AB:DE:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0E3C2A662E78C64B15DF44515ED2B7E54B160FF7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/829d3ffe-39a4-4cda-bb9c-925defc4e139.roa Signing time: Sun 31 May 2026 00:10:48 +0000 ROA not before: Sun 31 May 2026 00:10:48 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da33:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3c:2a:66:2e:78:c6:4b:15:df:44:51:5e:d2:b7:e5:4b:16:0f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:10:48 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=2487daca51752d579f060f08cc6d6e8f17bfae4bef9a902ba8ef58d88061060a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:3b:a3:23:72:d4:ca:24:ad:7f:10:d1:db: 61:89:53:88:b0:03:f8:e9:e3:fb:84:72:28:03:7e: 51:ab:a7:49:f1:da:9e:1d:2e:1c:36:15:a9:3a:9c: 61:fc:fb:2f:85:f5:d6:77:d0:65:9c:e1:83:9b:55: 72:58:03:fb:a5:6a:ce:80:3d:2f:27:f9:39:05:d3: a9:f9:57:38:c3:b8:6f:3c:68:f2:a7:11:10:16:4c: a6:ea:d2:57:8a:fa:d5:26:ad:cc:7f:42:d6:68:35: ba:df:05:20:26:b4:17:0f:7f:ac:df:bd:09:bd:c0: b5:85:89:27:a9:a8:f5:2f:1c:be:e4:c4:d9:77:c2: 32:fa:a0:9c:ae:c4:f5:bb:f9:f4:f4:14:04:73:3b: a9:9d:59:f7:69:5a:8a:ce:ab:55:2f:d1:86:16:ad: 00:c9:14:e1:f3:d6:2f:7d:21:32:3b:51:2d:b5:aa: cf:47:31:35:00:08:83:41:c2:e6:0b:cf:82:68:e6: c7:66:5f:c6:e2:8e:e0:7f:c2:b7:13:7a:b1:51:fd: 27:0a:1f:41:88:5d:e9:f9:47:1f:c4:bd:d3:e1:1f: b0:74:7e:56:30:a7:0c:11:ef:6b:b9:8e:cb:71:7e: 16:af:1a:73:9a:98:cc:5b:13:72:3c:b6:e8:7b:70: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:68:D2:F2:A3:B9:4C:DB:85:AA:5A:DD:B9:7E:95:ED:05:AB:DE:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/829d3ffe-39a4-4cda-bb9c-925defc4e139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:8800::/40 Signature Algorithm: sha256WithRSAEncryption 6c:53:a7:1a:7a:53:b8:4e:7f:87:ee:81:54:67:c5:54:0b:a8: 8a:14:41:9f:1c:19:39:5a:41:54:cc:b7:f1:1e:1f:9b:2e:d4: 24:35:5d:a0:b8:50:d6:42:fe:fd:8b:19:df:c1:d4:79:3c:55: d2:72:e8:10:cf:48:b3:c3:f6:45:30:7b:96:8b:58:70:f7:f0: cc:34:a1:cc:4f:51:ea:c6:d6:c0:10:34:42:78:25:69:20:52: 7b:cf:53:e5:59:93:03:c1:9d:09:8e:c3:c9:1f:a5:c2:c6:95: b4:df:76:b0:eb:cc:9d:e6:b5:db:31:de:ee:8f:70:6b:bd:92: d3:78:50:10:39:fb:7a:5d:4e:a7:5d:d1:84:84:43:44:75:ea: 78:c2:26:b2:85:31:73:1d:ab:f9:be:65:10:e1:1e:f1:34:42: 8d:9e:3e:60:08:84:91:5d:df:94:37:dc:07:ca:10:3c:e7:4d: 67:80:87:ca:88:0c:19:8e:27:aa:0f:67:b7:1a:49:19:ef:28: 0e:f4:47:8e:ab:13:77:3c:9c:3d:40:eb:83:86:26:0d:df:63: 8b:99:a9:36:c5:47:25:58:1b:b3:60:e4:0a:58:5c:18:02:a2: e9:d3:38:47:8a:4d:69:64:47:15:06:d5:69:d6:f5:4a:e8:e6: eb:7a:2a:d7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDjwqZi54xksV30RRXtK35UsWD/cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMTA0OFoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAMjQ4N2RhY2E1MTc1MmQ1NzlmMDYw ZjA4Y2M2ZDZlOGYxN2JmYWU0YmVmOWE5MDJiYThlZjU4ZDg4MDYxMDYwYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHY7oyNy1MokrX8Q0dthiVOIsAP4 6eP7hHIoA35Rq6dJ8dqeHS4cNhWpOpxh/PsvhfXWd9BlnOGDm1VyWAP7pWrOgD0v J/k5BdOp+Vc4w7hvPGjypxEQFkym6tJXivrVJq3Mf0LWaDW63wUgJrQXD3+s370J vcC1hYknqaj1Lxy+5MTZd8Iy+qCcrsT1u/n09BQEczupnVn3aVqKzqtVL9GGFq0A yRTh89YvfSEyO1EttarPRzE1AAiDQcLmC8+CaObHZl/G4o7gf8K3E3qxUf0nCh9B iF3p+UcfxL3T4R+wdH5WMKcMEe9ruY7LcX4WrxpzmpjMWxNyPLboe3BfNQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFANo0vKjuUzbhapa3bl+le0Fq95pMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyOWQzZmZlLTM5YTQtNGNkYS1iYjljLTkyNWRlZmM0ZTEzOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaM4gwDQYJKoZIhvcNAQELBQADggEBAGxTpxp6U7hOf4fugVRn xVQLqIoUQZ8cGTlaQVTMt/EeH5su1CQ1XaC4UNZC/v2LGd/B1Hk8VdJy6BDPSLPD 9kUwe5aLWHD38Mw0ocxPUerG1sAQNEJ4JWkgUnvPU+VZkwPBnQmOw8kfpcLGlbTf drDrzJ3mtdsx3u6PcGu9ktN4UBA5+3pdTqdd0YSEQ0R16njCJrKFMXMdq/m+ZRDh HvE0Qo2ePmAIhJFd35Q33AfKEDznTWeAh8qIDBmOJ6oPZ7caSRnvKA70R46rE3c8 nD1A64OGJg3fY4uZqTbFRyVYG7Ng5ApYXBgCounTOEeKTWlkRxUG1WnW9Uro5ut6 Ktc= -----END CERTIFICATE-----Generated at Sat Jun 13 08:04:04 2026 by rpki-client