$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/923a0c7a-e057-4a7e-9a52-c431defe230c.roa File: 923a0c7a-e057-4a7e-9a52-c431defe230c.roa (raw, json) Hash identifier: Q6Q/Iy6gUDPvs8ADDOwp1mq9UhFkk0nqCHLifG1N7yc= Subject key identifier: 73:37:3E:E2:43:79:48:87:6C:71:FC:89:D5:B9:A8:D5:45:C9:40:23 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 66EED052ED8F51F468669E32EC72827D90DE0605 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/923a0c7a-e057-4a7e-9a52-c431defe230c.roa Signing time: Sun 31 May 2026 00:00:43 +0000 ROA not before: Sun 31 May 2026 00:00:43 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ee:d0:52:ed:8f:51:f4:68:66:9e:32:ec:72:82:7d:90:de:06:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:00:43 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=5eea604b83efecf80bee5d0be25c92198326b87886440ce9690512f7aefab70c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:90:78:8c:4f:2f:03:de:6c:0b:4d:3e:0c:46: 80:23:78:e8:94:1c:d4:01:78:2c:cd:5e:fc:08:bd: 2b:0c:5f:fd:74:72:4a:f6:84:86:71:a5:98:11:17: b4:dd:14:2f:b2:59:0e:ba:68:23:ac:d0:1e:b0:28: ff:7a:10:57:5e:bc:f7:d3:88:da:48:a0:63:d9:ad: 47:b8:eb:21:64:4b:7e:94:3f:fe:b3:06:5a:54:1e: 93:eb:e2:1d:f8:d6:8d:68:d6:55:0a:ce:e0:6a:c7: cb:1a:bd:a5:8e:a6:90:d2:6c:09:6c:be:a7:f5:5f: c8:7b:9f:0e:82:3b:96:c3:d5:60:c5:7e:58:8b:86: ba:ee:c0:94:95:64:04:7a:48:aa:23:7c:4c:f9:17: 9e:fb:45:38:c7:b9:6d:5e:d3:2f:5d:72:e3:6a:54: 9d:00:15:34:30:79:2e:6a:fc:c5:a5:cb:0a:5b:ee: 03:4c:b9:4d:8f:b2:b3:fc:73:5b:3e:98:a9:32:6a: 0d:f0:32:a0:c5:58:e8:b6:dc:8e:08:58:b2:42:e7: 8d:93:fb:66:c0:78:44:ae:4a:a7:b7:a3:9c:89:28: 78:60:e7:59:0d:fd:09:26:01:eb:80:d2:46:46:3e: fe:72:5f:17:df:99:c1:b4:3d:4a:dc:b5:6c:e9:15: ac:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:37:3E:E2:43:79:48:87:6C:71:FC:89:D5:B9:A8:D5:45:C9:40:23 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/923a0c7a-e057-4a7e-9a52-c431defe230c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:800::/40 Signature Algorithm: sha256WithRSAEncryption b2:35:db:b7:cb:f9:95:7e:d2:f7:03:37:bc:be:6b:f9:46:44: c6:1c:54:54:2d:cd:de:18:cf:9a:e6:34:73:08:98:9b:bb:2e: 82:c7:83:18:d2:52:bf:3a:aa:23:c8:d9:ea:5c:6e:a7:6c:77: 59:8d:ce:aa:a9:5d:ee:2c:2f:69:d3:de:82:3b:7f:bc:11:53: d9:80:c0:6e:65:91:81:96:ef:7b:47:23:3e:cb:82:5f:70:5c: 4f:d2:c8:31:ac:4b:db:d5:a9:66:66:8d:b7:5a:eb:ec:3f:86: b1:2f:4a:bd:58:3e:aa:c3:8e:2b:1b:8c:c0:9f:27:9c:cc:49: 79:4c:c4:78:f0:92:4f:86:7f:4a:7c:5d:42:ec:08:fd:64:79: 16:26:87:6d:03:38:7b:0e:3e:42:a4:39:55:b9:45:6f:7f:8f: a3:e1:0e:39:9f:ae:9f:38:51:41:26:78:bb:eb:0a:5a:d0:fe: 04:b5:8e:ed:d5:ed:06:43:d1:ab:25:9b:e2:5e:61:44:89:46: d3:94:45:17:9b:05:19:46:40:1f:2e:eb:23:33:07:fb:67:73: 3a:7e:8d:14:b4:49:cc:31:c9:26:29:e8:8e:fd:8e:13:56:ad: 1e:b7:6a:03:af:d9:a7:69:e6:5a:63:f7:7e:2f:92:4c:c0:54: 66:1d:0d:fe -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZu7QUu2PUfRoZp4y7HKCfZDeBgUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMDA0M1oX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNANWVlYTYwNGI4M2VmZWNmODBiZWU1 ZDBiZTI1YzkyMTk4MzI2Yjg3ODg2NDQwY2U5NjkwNTEyZjdhZWZhYjcwYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JB4jE8vA95sC00+DEaAI3jolBzU AXgszV78CL0rDF/9dHJK9oSGcaWYERe03RQvslkOumgjrNAesCj/ehBXXrz304ja SKBj2a1HuOshZEt+lD/+swZaVB6T6+Id+NaNaNZVCs7gasfLGr2ljqaQ0mwJbL6n 9V/Ie58OgjuWw9VgxX5Yi4a67sCUlWQEekiqI3xM+Ree+0U4x7ltXtMvXXLjalSd ABU0MHkuavzFpcsKW+4DTLlNj7Kz/HNbPpipMmoN8DKgxVjottyOCFiyQueNk/tm wHhErkqnt6OciSh4YOdZDf0JJgHrgNJGRj7+cl8X35nBtD1K3LVs6RWscwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHM3PuJDeUiHbHH8idW5qNVFyUAjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkyM2EwYzdhLWUwNTctNGE3ZS05YTUyLWM0MzFkZWZlMjMwYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6QgwDQYJKoZIhvcNAQELBQADggEBALI127fL+ZV+0vcDN7y+ a/lGRMYcVFQtzd4Yz5rmNHMImJu7LoLHgxjSUr86qiPI2epcbqdsd1mNzqqpXe4s L2nT3oI7f7wRU9mAwG5lkYGW73tHIz7Lgl9wXE/SyDGsS9vVqWZmjbda6+w/hrEv Sr1YPqrDjisbjMCfJ5zMSXlMxHjwkk+Gf0p8XULsCP1keRYmh20DOHsOPkKkOVW5 RW9/j6PhDjmfrp84UUEmeLvrClrQ/gS1ju3V7QZD0aslm+JeYUSJRtOURRebBRlG QB8u6yMzB/tnczp+jRS0ScwxySYp6I79jhNWrR63agOv2adp5lpj934vkkzAVGYd Df4= -----END CERTIFICATE-----Generated at Sat Jun 13 08:01:57 2026 by rpki-client