$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa File: 92488c39-e92d-4c20-9728-7956e83ecf4e.roa (raw, json) Hash identifier: 7KC19xqO0KLFbxOJooNzvPq6t8lFnYUKyXkD0Ip2qhY= Subject key identifier: 68:A3:37:B0:3C:AE:89:E5:F6:4C:01:DB:50:51:1E:4F:A5:47:C0:D9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4E8D37D3B86B1870E5ED7F1658FC40868E4A1DEF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa Signing time: Wed 13 May 2026 00:30:11 +0000 ROA not before: Wed 13 May 2026 00:30:11 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da19:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8d:37:d3:b8:6b:18:70:e5:ed:7f:16:58:fc:40:86:8e:4a:1d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:30:11 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=96b295131206a5c2bc5f70e1133c14a77645ded864303195b43e32c718c76f79, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:a6:2e:1f:3d:4c:48:05:58:5b:95:73:a8: 36:b3:05:24:06:4d:96:af:1b:43:a7:8e:aa:46:69: bd:d7:f9:ce:30:ba:98:66:89:78:c7:ff:0f:7d:15: 91:8f:c3:c9:b8:4b:98:ac:f1:e9:ae:18:41:b7:08: 91:89:bc:dc:68:d7:80:6e:39:13:25:b1:76:0a:bd: b8:36:f9:74:25:32:ab:72:6b:f8:ce:d8:28:9b:f2: bc:55:09:cd:a7:b0:9c:b2:1e:e1:17:48:73:5b:59: 71:b3:65:4e:43:1e:ec:b9:cd:89:d4:2d:ce:52:22: 60:29:40:d0:e3:26:ab:a8:9a:38:dc:df:0a:e4:d5: 61:ed:ad:d3:26:da:8c:3f:3a:eb:5b:2a:5f:1b:cc: dd:60:2d:39:39:cb:0f:78:b8:f5:a7:6f:0d:d7:a6: 70:d7:48:36:78:08:92:6f:12:89:d0:f5:84:6e:88: ce:2d:b1:48:17:db:be:cb:18:4a:ca:56:8d:2c:a1: e4:34:5c:03:5a:ac:3b:37:6d:c9:6f:0c:29:76:77: 9e:10:78:a0:e3:46:d5:d7:9c:ff:04:6b:b1:0c:69: 72:9d:c1:be:1c:5c:80:43:c1:54:5d:58:fb:71:8d: 12:2d:3c:99:55:de:06:db:d3:07:ab:a9:fd:4e:18: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A3:37:B0:3C:AE:89:E5:F6:4C:01:DB:50:51:1E:4F:A5:47:C0:D9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da19:400::/38 Signature Algorithm: sha256WithRSAEncryption 26:f8:72:54:76:93:4e:41:11:7b:64:1b:10:6f:37:15:91:e5: df:85:08:a1:1c:4d:01:c7:38:c7:4d:d2:3b:94:55:94:ac:7d: 93:56:df:87:46:bf:97:fa:a1:d4:65:b7:30:34:f7:5f:2b:57: 05:e3:b4:b8:21:fa:f4:bb:5c:92:7c:1d:fd:19:a8:11:3d:f1: 59:45:b9:80:19:f2:16:6c:98:9a:65:06:21:7e:f2:14:bb:72: 76:53:99:33:93:72:7e:cd:b7:2e:27:d9:57:9c:5e:6c:5f:f4: 71:df:05:fb:dc:30:19:7a:3c:ee:0e:96:12:f6:c1:63:f8:61: f5:28:e5:12:3e:c7:32:fb:b0:d1:1b:0e:ec:fd:a0:c7:04:05: 8c:ad:d3:13:01:98:b4:ef:46:de:e1:ab:d7:27:94:06:70:00: 85:d3:90:7f:b4:68:fd:10:ea:48:ba:8e:e9:32:91:e0:28:06: 1a:19:23:7f:4c:42:c5:5e:87:94:65:b7:32:df:7a:24:ce:31: 2c:ca:40:f3:3e:80:f3:2d:c4:d3:61:dd:18:cb:bf:c6:8c:5f: d5:0a:fd:c9:98:89:b3:31:d7:8d:0e:65:81:99:4b:ec:8f:ed: 8b:d4:67:67:de:ae:3c:db:8d:88:9b:dc:26:9f:fd:99:56:8c: ca:29:e1:ed -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTo0307hrGHDl7X8WWPxAho5KHe8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMzAxMVoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAOTZiMjk1MTMxMjA2YTVjMmJjNWY3 MGUxMTMzYzE0YTc3NjQ1ZGVkODY0MzAzMTk1YjQzZTMyYzcxOGM3NmY3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpCmLh89TEgFWFuVc6g2swUkBk2W rxtDp46qRmm91/nOMLqYZol4x/8PfRWRj8PJuEuYrPHprhhBtwiRibzcaNeAbjkT JbF2Cr24Nvl0JTKrcmv4ztgom/K8VQnNp7Ccsh7hF0hzW1lxs2VOQx7suc2J1C3O UiJgKUDQ4yarqJo43N8K5NVh7a3TJtqMPzrrWypfG8zdYC05OcsPeLj1p28N16Zw 10g2eAiSbxKJ0PWEbojOLbFIF9u+yxhKylaNLKHkNFwDWqw7N23JbwwpdneeEHig 40bV15z/BGuxDGlyncG+HFyAQ8FUXVj7cY0SLTyZVd4G29MHq6n9ThiVTwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGijN7A8ronl9kwB21BRHk+lR8DZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkyNDg4YzM5LWU5MmQtNGMyMC05NzI4LTc5NTZlODNlY2Y0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGQQwDQYJKoZIhvcNAQELBQADggEBACb4clR2k05BEXtkGxBv NxWR5d+FCKEcTQHHOMdN0juUVZSsfZNW34dGv5f6odRltzA0918rVwXjtLgh+vS7 XJJ8Hf0ZqBE98VlFuYAZ8hZsmJplBiF+8hS7cnZTmTOTcn7Nty4n2VecXmxf9HHf BfvcMBl6PO4OlhL2wWP4YfUo5RI+xzL7sNEbDuz9oMcEBYyt0xMBmLTvRt7hq9cn lAZwAIXTkH+0aP0Q6ki6jukykeAoBhoZI39MQsVeh5RltzLfeiTOMSzKQPM+gPMt xNNh3RjLv8aMX9UK/cmYibMx140OZYGZS+yP7YvUZ2ferjzbjYib3Caf/ZlWjMop 4e0= -----END CERTIFICATE-----Generated at Sat Jun 13 10:24:22 2026 by rpki-client