$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87619775-f311-41aa-8c4b-9d0702423e74.roa File: 87619775-f311-41aa-8c4b-9d0702423e74.roa (raw, json) Hash identifier: I53g+t+zoTXdU9nxE7IHDUuEqWGpi3mbtgFhT5A8wFc= Subject key identifier: B3:A6:DC:F5:0D:4C:BD:E8:2F:78:65:66:7A:40:59:53:C2:21:8F:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4AB25062E9513D69840B638C4FD88E9A7CE4D2E9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87619775-f311-41aa-8c4b-9d0702423e74.roa Signing time: Sun 31 May 2026 00:00:59 +0000 ROA not before: Sun 31 May 2026 00:00:59 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b2:50:62:e9:51:3d:69:84:0b:63:8c:4f:d8:8e:9a:7c:e4:d2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:00:59 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=f206715dab892bfdb53c382a40eba847a5f41068c03349ae0997cc910806087a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:ab:67:00:41:f3:e3:dd:09:3b:1d:5f:8b: e5:fe:68:fb:84:ee:72:61:22:d1:92:2e:7f:d2:e1: 77:ee:7f:b2:76:40:d5:cd:4f:60:2c:44:16:b2:67: 15:ab:ab:61:cb:6d:42:50:97:b1:35:06:68:18:4a: 21:cc:c2:9b:ae:20:96:b5:54:4a:cc:e5:e3:e8:2b: 44:9a:98:24:f1:f5:49:19:56:a3:f0:94:08:77:63: 35:ba:25:1b:ac:f4:3a:c3:08:2e:53:4f:1a:c5:f9: 71:ce:f5:61:26:87:4e:05:ba:13:87:e3:be:e4:b5: 06:d0:ba:62:86:ef:0d:c2:3f:57:67:b3:a7:f6:d1: d6:40:62:ca:81:15:dc:8a:53:fa:68:b9:8b:68:76: f8:51:4c:b2:79:38:4f:6a:de:aa:03:ac:ba:ed:6f: ae:db:fa:0f:5a:9c:97:19:d0:93:76:0c:ba:71:89: 57:e5:fc:9f:fd:61:d4:20:2c:88:e4:a6:c7:7a:49: 42:de:58:64:df:d5:61:cd:cc:49:60:65:34:cf:ea: 9c:72:da:b2:9a:a9:ce:77:a5:3f:6e:0a:60:44:ee: 0f:89:01:57:54:f6:96:0a:0e:15:44:78:64:46:55: 9a:a4:a1:98:25:40:ac:37:43:1c:33:cc:eb:88:8f: 95:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A6:DC:F5:0D:4C:BD:E8:2F:78:65:66:7A:40:59:53:C2:21:8F:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87619775-f311-41aa-8c4b-9d0702423e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:a000::/40 Signature Algorithm: sha256WithRSAEncryption 22:83:56:0b:1e:89:7d:3b:33:12:b0:85:5d:c1:e7:fb:a8:b5: 97:2d:3e:bf:38:ee:3c:5c:5f:22:04:c2:b4:8b:d5:bb:b6:2b: 6b:1e:fe:be:4b:81:d0:84:35:02:e9:8b:e5:66:93:06:d6:12: c5:2c:8c:62:6d:8b:02:66:e7:c1:80:89:1c:a4:75:83:a6:1c: 74:99:4a:32:78:3c:1d:55:90:00:48:13:ba:15:cd:f3:33:1a: b7:dd:1b:87:24:f1:6c:3d:0b:7b:c5:85:66:0a:a9:7e:a3:29: f5:66:04:01:e3:c6:93:c5:72:2f:8e:64:7f:9c:b5:46:c9:2b: 16:f5:5c:18:8e:a2:df:d0:9d:29:b5:09:31:1d:0f:de:6b:cb: cc:8d:2f:07:f9:b9:ab:07:66:e6:27:33:a9:ee:39:95:00:8f: 32:38:88:d8:bc:66:62:03:ac:ee:e7:3f:db:81:01:87:86:38: bd:2a:74:d9:ba:8a:96:62:ea:e3:b2:18:55:c3:46:ac:06:a3: b0:c0:59:7b:6e:b8:1e:70:60:7b:84:ff:49:00:82:fa:48:52: 01:23:50:39:c0:16:e8:0b:4b:77:8d:76:cf:0b:6c:5f:8c:25: 85:39:88:50:ca:c6:d6:b1:37:5c:33:b3:93:62:4d:1f:23:7b: f8:2e:1a:af -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSrJQYulRPWmEC2OMT9iOmnzk0ukwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMDA1OVoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAZjIwNjcxNWRhYjg5MmJmZGI1M2Mz ODJhNDBlYmE4NDdhNWY0MTA2OGMwMzM0OWFlMDk5N2NjOTEwODA2MDg3YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXKrZwBB8+PdCTsdX4vl/mj7hO5y YSLRki5/0uF37n+ydkDVzU9gLEQWsmcVq6thy21CUJexNQZoGEohzMKbriCWtVRK zOXj6CtEmpgk8fVJGVaj8JQId2M1uiUbrPQ6wwguU08axflxzvVhJodOBboTh+O+ 5LUG0Lpihu8Nwj9XZ7On9tHWQGLKgRXcilP6aLmLaHb4UUyyeThPat6qA6y67W+u 2/oPWpyXGdCTdgy6cYlX5fyf/WHUICyI5KbHeklC3lhk39VhzcxJYGU0z+qcctqy mqnOd6U/bgpgRO4PiQFXVPaWCg4VRHhkRlWapKGYJUCsN0McM8zriI+VAQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLOm3PUNTL3oL3hlZnpAWVPCIY9EMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg3NjE5Nzc1LWYzMTEtNDFhYS04YzRiLTlkMDcwMjQyM2U3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauqAwDQYJKoZIhvcNAQELBQADggEBACKDVgseiX07MxKwhV3B 5/uotZctPr847jxcXyIEwrSL1bu2K2se/r5LgdCENQLpi+VmkwbWEsUsjGJtiwJm 58GAiRykdYOmHHSZSjJ4PB1VkABIE7oVzfMzGrfdG4ck8Ww9C3vFhWYKqX6jKfVm BAHjxpPFci+OZH+ctUbJKxb1XBiOot/QnSm1CTEdD95ry8yNLwf5uasHZuYnM6nu OZUAjzI4iNi8ZmIDrO7nP9uBAYeGOL0qdNm6ipZi6uOyGFXDRqwGo7DAWXtuuB5w YHuE/0kAgvpIUgEjUDnAFugLS3eNds8LbF+MJYU5iFDKxtaxN1wzs5NiTR8je/gu Gq8= -----END CERTIFICATE-----Generated at Sat Jun 13 08:11:12 2026 by rpki-client