$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89086800-1372-4bf1-a7f5-b402a95ea61a.roa File: 89086800-1372-4bf1-a7f5-b402a95ea61a.roa (raw, json) Hash identifier: Rm3cIaQu0n1KLee0/taiujWhpddo9KfkePZlbc/g6S0= Subject key identifier: 10:3E:32:63:E8:CC:E6:A2:B8:D5:B5:F9:B5:16:AE:31:A4:B7:24:62 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1D30DF8C2E019BEF7F0DE9710B58A413FBC2D918 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89086800-1372-4bf1-a7f5-b402a95ea61a.roa Signing time: Sun 31 May 2026 00:10:47 +0000 ROA not before: Sun 31 May 2026 00:10:47 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:30:df:8c:2e:01:9b:ef:7f:0d:e9:71:0b:58:a4:13:fb:c2:d9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:10:47 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=d0082e37f0e7ef0507df5d692e6a88b37c8885b040790d064abf06b12b9aecb8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:1b:ba:11:5e:28:47:b1:e7:d7:1f:d8:4c: df:e3:c9:34:a1:c7:4d:5c:9f:9b:5e:f2:56:0b:90: 98:f2:2b:5f:bc:6e:b7:84:44:38:02:18:db:8f:27: 72:6c:6a:11:b1:37:df:fd:cc:16:e9:2e:3b:15:d4: af:b7:20:02:e5:78:9b:58:d9:11:df:df:af:07:da: 14:d4:b7:93:05:70:4b:c9:81:a1:05:54:f7:1f:22: 51:2e:51:c6:13:dd:f9:f1:85:7e:1d:fc:b0:92:db: ad:ea:e5:fe:3c:64:45:e7:ea:29:b2:56:1e:31:2f: 67:f9:37:70:47:3c:87:36:5a:4e:75:73:d0:29:4e: af:07:65:ad:46:cc:80:96:32:11:8f:3e:da:2c:f1: 75:bf:cd:86:8c:ec:fb:56:e7:7a:93:d2:46:f4:1c: 57:1a:61:08:22:9a:40:e9:01:f1:0a:88:7e:90:e3: da:58:09:b5:39:f6:4c:41:a3:88:5c:f9:74:31:d1: fd:7e:fc:69:45:b6:9a:91:95:11:c0:4d:d5:89:8e: 61:53:6b:23:37:e6:75:1d:70:25:e2:a2:45:b1:36: 35:44:de:65:1f:0c:aa:2c:d0:c1:d2:44:a2:cb:28: fe:c5:78:da:17:6c:ed:73:3a:df:e3:35:82:46:43: ea:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3E:32:63:E8:CC:E6:A2:B8:D5:B5:F9:B5:16:AE:31:A4:B7:24:62 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89086800-1372-4bf1-a7f5-b402a95ea61a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 70:27:17:0a:e2:23:3b:b6:97:76:57:47:7d:d5:15:e5:97:89: 2d:5a:0c:5f:91:2d:ed:10:2a:36:cb:a0:1d:a5:4a:c3:df:06: b3:ab:81:c2:d0:99:e0:a7:c3:67:76:64:9a:67:90:f6:ee:5a: c3:c3:5b:d4:06:db:32:91:71:9c:78:ba:5c:c3:1e:50:28:d0: ae:8d:36:ea:b4:04:6b:c6:69:3d:87:8e:9f:8a:ab:b9:d2:fd: c8:f1:84:80:8c:01:cd:df:3d:25:08:d1:74:97:0d:28:94:54: e9:b3:94:e6:41:b2:5a:be:09:a5:14:fb:51:b9:69:d3:d3:8c: 0a:eb:3e:20:aa:8a:d7:79:20:34:20:76:e3:a8:bb:0b:8f:c3: 8e:f6:b5:85:45:51:a5:b9:8b:41:d1:88:7a:15:9d:11:93:64: 09:42:b3:a0:e9:9a:dd:1f:5a:3f:76:81:82:95:a9:a0:6d:9d: b6:eb:39:1a:ab:2f:8f:49:a2:1a:1f:89:18:95:17:db:24:2c: a6:1c:f3:4d:e4:35:4a:11:70:cd:7f:30:bb:13:ce:6d:e2:63: 9b:3f:8e:00:dc:57:08:8a:43:46:fc:ba:12:36:dc:26:f8:aa: 2f:e3:93:58:88:7b:d7:b6:8a:89:35:47:37:ed:30:4f:ea:11: 5b:e7:10:24 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHTDfjC4Bm+9/DelxC1ikE/vC2RgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMTA0N1oX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAZDAwODJlMzdmMGU3ZWYwNTA3ZGY1 ZDY5MmU2YTg4YjM3Yzg4ODViMDQwNzkwZDA2NGFiZjA2YjEyYjlhZWNiODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu4buhFeKEex59cf2Ezf48k0ocdN XJ+bXvJWC5CY8itfvG63hEQ4AhjbjydybGoRsTff/cwW6S47FdSvtyAC5XibWNkR 39+vB9oU1LeTBXBLyYGhBVT3HyJRLlHGE9358YV+Hfywktut6uX+PGRF5+opslYe MS9n+TdwRzyHNlpOdXPQKU6vB2WtRsyAljIRjz7aLPF1v82GjOz7Vud6k9JG9BxX GmEIIppA6QHxCoh+kOPaWAm1OfZMQaOIXPl0MdH9fvxpRbaakZURwE3ViY5hU2sj N+Z1HXAl4qJFsTY1RN5lHwyqLNDB0kSiyyj+xXjaF2ztczrf4zWCRkPqSQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBA+MmPozOaiuNW1+bUWrjGktyRiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg5MDg2ODAwLTEzNzItNGJmMS1hN2Y1LWI0MDJhOTVlYTYxYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauhDAMA0GCSqGSIb3DQEBCwUAA4IBAQBwJxcK4iM7tpd2V0d9 1RXll4ktWgxfkS3tECo2y6AdpUrD3wazq4HC0Jngp8NndmSaZ5D27lrDw1vUBtsy kXGceLpcwx5QKNCujTbqtARrxmk9h46fiqu50v3I8YSAjAHN3z0lCNF0lw0olFTp s5TmQbJavgmlFPtRuWnT04wK6z4gqorXeSA0IHbjqLsLj8OO9rWFRVGluYtB0Yh6 FZ0Rk2QJQrOg6ZrdH1o/doGClamgbZ226zkaqy+PSaIaH4kYlRfbJCymHPNN5DVK EXDNfzC7E85t4mObP44A3FcIikNG/LoSNtwm+Kov45NYiHvXtoqJNUc37TBP6hFb 5xAk -----END CERTIFICATE-----Generated at Wed Jun 17 08:57:15 2026 by rpki-client