$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/880212bb-51a8-4111-9ffb-f1fce2a3315f.roa File: 880212bb-51a8-4111-9ffb-f1fce2a3315f.roa (raw, json) Hash identifier: tXb3vEPnPiToUFzRnBfzWluxkpVEcikCoUd9nyK02C8= Subject key identifier: 9F:6D:96:E5:C9:2B:72:D4:79:73:88:B1:69:03:D6:AC:E4:97:AF:46 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 67C871DAF4C07479DAEE0176C50AF776FE422850 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/880212bb-51a8-4111-9ffb-f1fce2a3315f.roa Signing time: Wed 13 May 2026 00:21:30 +0000 ROA not before: Wed 13 May 2026 00:21:30 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c8:71:da:f4:c0:74:79:da:ee:01:76:c5:0a:f7:76:fe:42:28:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:21:30 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=19dce34a1a2aff6c03869d90d48b5c8fc63a833711c8546e9d7ac9ad6c4ec2cb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d7:c4:7c:dc:8f:f6:62:45:52:da:cc:8f:18: a0:cc:8e:34:cd:f4:e7:f1:64:28:de:3e:a7:c9:64: 72:9f:70:e2:6d:1d:21:58:72:8a:d0:c9:93:69:01: 6f:02:5b:3a:fd:40:99:b2:0d:f8:d4:60:00:ad:6c: b9:72:7e:c4:57:04:5b:ec:29:79:0f:0a:16:5d:c1: a2:67:58:99:34:7c:95:3d:7c:9a:4f:53:24:41:20: a8:17:2e:2f:ce:f1:89:03:de:93:0c:5a:5d:90:92: 8b:80:14:0c:c9:5b:68:ab:5b:93:51:1b:95:36:3b: c3:b9:5a:60:31:cb:9d:a3:e4:79:f2:c6:d8:37:c9: 2c:8d:74:64:71:c9:e0:b8:76:d0:ec:7b:3d:44:ba: 65:fd:c4:0b:d5:e3:a2:29:65:c8:92:bc:3d:68:92: 00:bf:67:d8:13:aa:91:2b:e7:c5:47:78:23:a9:9e: b5:09:6d:b1:96:ac:54:a2:2a:90:df:5c:b9:e0:29: c7:50:29:03:8d:2d:59:18:3e:6d:d5:86:b9:01:99: 11:84:a6:83:fc:ea:25:6b:26:86:0b:a2:73:a3:e8: d4:0c:06:9b:ca:9f:91:15:31:e7:79:16:4a:b4:4c: 5b:f7:7e:18:38:4e:1e:67:5d:e8:a3:37:e6:a6:4a: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6D:96:E5:C9:2B:72:D4:79:73:88:B1:69:03:D6:AC:E4:97:AF:46 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/880212bb-51a8-4111-9ffb-f1fce2a3315f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:7000::/40 Signature Algorithm: sha256WithRSAEncryption 23:1e:e1:1e:eb:e7:58:ac:65:bf:d7:de:41:00:d5:7e:b8:9c: 1a:89:fd:00:1b:e5:5e:b9:19:d4:ec:9a:fd:c8:19:a2:6b:63: 61:d2:8c:95:aa:78:85:64:8d:13:dd:bd:68:04:de:d0:d4:02: ad:be:26:ef:2a:7d:bc:29:db:53:9d:58:ff:9c:96:79:af:da: c8:fe:38:bb:37:bc:9e:42:6f:71:79:84:55:2b:b9:8c:60:d4: 83:85:e6:de:23:5f:7f:13:a1:7e:bb:3f:f7:4b:67:9e:aa:ab: 29:73:bf:fc:3c:37:6e:b9:05:e3:db:70:3d:4e:97:ae:bd:8c: 7a:41:e4:ea:ff:a3:ae:72:9b:ab:32:b4:69:14:4c:9d:99:fb: 68:5a:08:3a:ed:fc:42:ac:5b:74:fa:32:ea:9a:45:ac:75:6f: 31:a0:17:0a:1f:9c:68:17:65:ca:c7:2e:4e:d1:0a:21:80:fb: b2:46:e7:f3:e3:ce:ce:8b:e7:8d:fe:b7:3b:86:ae:49:23:29: c7:92:fd:bf:a5:5f:da:b4:7c:06:f7:0e:bc:cb:e5:64:aa:4a: ca:02:9f:e5:5e:ef:22:8b:b0:a2:b5:d5:51:ce:87:cc:21:98: 23:31:f2:29:62:b6:e3:d8:3e:75:64:06:2f:55:1b:c3:de:a5: 78:78:8c:36 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZ8hx2vTAdHna7gF2xQr3dv5CKFAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMjEzMFoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAMTlkY2UzNGExYTJhZmY2YzAzODY5 ZDkwZDQ4YjVjOGZjNjNhODMzNzExYzg1NDZlOWQ3YWM5YWQ2YzRlYzJjYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tfEfNyP9mJFUtrMjxigzI40zfTn 8WQo3j6nyWRyn3DibR0hWHKK0MmTaQFvAls6/UCZsg341GAArWy5cn7EVwRb7Cl5 DwoWXcGiZ1iZNHyVPXyaT1MkQSCoFy4vzvGJA96TDFpdkJKLgBQMyVtoq1uTURuV NjvDuVpgMcudo+R58sbYN8ksjXRkccnguHbQ7Hs9RLpl/cQL1eOiKWXIkrw9aJIA v2fYE6qRK+fFR3gjqZ61CW2xlqxUoiqQ31y54CnHUCkDjS1ZGD5t1Ya5AZkRhKaD /OolayaGC6Jzo+jUDAabyp+RFTHneRZKtExb934YOE4eZ13oozfmpkrWfwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJ9tluXJK3LUeXOIsWkD1qzkl69GMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg4MDIxMmJiLTUxYTgtNDExMS05ZmZiLWYxZmNlMmEzMzE1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacHAwDQYJKoZIhvcNAQELBQADggEBACMe4R7r51isZb/X3kEA 1X64nBqJ/QAb5V65GdTsmv3IGaJrY2HSjJWqeIVkjRPdvWgE3tDUAq2+Ju8qfbwp 21OdWP+clnmv2sj+OLs3vJ5Cb3F5hFUruYxg1IOF5t4jX38ToX67P/dLZ56qqylz v/w8N265BePbcD1Ol669jHpB5Or/o65ym6sytGkUTJ2Z+2haCDrt/EKsW3T6Muqa Rax1bzGgFwofnGgXZcrHLk7RCiGA+7JG5/Pjzs6L543+tzuGrkkjKceS/b+lX9q0 fAb3DrzL5WSqSsoCn+Ve7yKLsKK11VHOh8whmCMx8ilituPYPnVkBi9VG8PepXh4 jDY= -----END CERTIFICATE-----Generated at Wed Jun 17 09:24:07 2026 by rpki-client