$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d37ea8b-5c6a-4937-9375-496d799c8f30.roa File: 9d37ea8b-5c6a-4937-9375-496d799c8f30.roa (raw, json) Hash identifier: fcSn1bMd0h5LvUg60rIxKiLB7LD3AC3182/qOp/gycQ= Subject key identifier: 90:D8:D1:2B:77:FB:FC:A1:7F:6F:2C:B2:94:E6:CA:D5:7C:11:F5:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 781EA15C99EE5D674B3B798947EDBE95CCF69960 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d37ea8b-5c6a-4937-9375-496d799c8f30.roa Signing time: Sun 31 May 2026 00:00:57 +0000 ROA not before: Sun 31 May 2026 00:00:57 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1e:a1:5c:99:ee:5d:67:4b:3b:79:89:47:ed:be:95:cc:f6:99:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:00:57 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=02a9ad6b1671c08df9a3187bb30de92596d9fc7261753a7082b3dd967d3ae7ba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:07:ff:5b:01:f6:a1:ac:81:72:6d:a3:bf: eb:ac:5e:b1:6c:97:92:1a:81:cc:42:86:d1:82:c6: 83:aa:f6:96:86:db:b1:75:74:89:e8:7b:58:ef:bd: ee:0c:46:3b:65:2f:1f:ca:f7:c0:94:2a:c8:e4:f6: 59:04:5f:12:a5:5e:0e:cd:37:9c:a0:1b:2d:0d:51: 3d:75:ad:cc:48:fc:4d:d8:b9:82:9e:2b:36:c7:a9: 12:49:95:db:8c:77:e3:05:5c:23:41:c0:a0:3c:0f: ff:e2:26:76:27:d8:b3:d0:04:1f:74:67:c1:5f:be: 90:11:b8:e1:85:d8:2e:ba:eb:13:1d:91:13:5c:44: 96:d3:6e:7e:c8:c7:17:4b:53:d4:88:58:e0:4c:a4: 46:9b:1b:bd:10:db:9c:4e:5a:10:de:1d:4b:db:d6: 5a:d5:d9:83:6a:fe:45:8b:3a:fc:bd:74:57:92:d9: e9:9f:7a:a1:ee:04:da:0b:0e:8f:91:74:a3:8a:f8: 85:1d:86:0b:38:c2:18:21:52:81:78:0c:e2:7c:ad: 48:fc:9f:fb:05:cf:38:7e:35:42:6b:25:3a:73:74: 7f:a8:71:2e:95:dd:5c:f4:f2:30:1c:fa:59:b3:5f: 27:2b:ae:e2:f8:69:5f:11:cf:86:84:cb:12:d7:b7: f4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D8:D1:2B:77:FB:FC:A1:7F:6F:2C:B2:94:E6:CA:D5:7C:11:F5:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d37ea8b-5c6a-4937-9375-496d799c8f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:7080::/48 Signature Algorithm: sha256WithRSAEncryption 3a:a3:b0:e8:12:09:d5:c2:36:18:40:ab:4e:84:6a:83:43:93: 80:1f:ad:72:4d:0a:4f:65:7b:16:61:18:9e:ed:6b:93:0b:88: e8:d0:7f:35:b4:e7:b7:69:94:23:23:42:16:f0:5a:9b:70:20: 21:86:ef:06:0b:07:56:51:1a:eb:81:2f:e2:0d:e7:2d:6d:1e: ee:46:95:b0:85:1f:69:a1:71:5c:bc:58:40:77:15:b4:33:20: 30:d4:d2:7e:8e:ab:76:84:02:7d:9b:b5:81:f3:34:f7:61:a9: 77:fd:11:5f:2c:d1:cd:f5:45:cb:f8:23:3d:4e:69:ef:29:4d: 34:e8:d9:b8:fe:74:21:e4:64:bb:78:37:b8:c3:9c:da:cb:e7: b0:9a:5f:0b:45:b9:72:3e:86:0b:1d:fc:53:73:84:68:05:e0: 54:4f:75:87:90:58:49:3e:40:1b:22:30:c2:32:a2:db:0d:06: b0:8b:78:83:e0:95:21:56:6d:be:be:2e:9b:e4:23:34:03:6c: e4:ff:3b:d0:b3:78:fe:97:00:8f:2a:25:72:54:07:ba:c6:54: 7e:19:0f:ef:ba:3d:73:7f:c2:cd:8e:37:a3:72:b9:92:92:c1: 90:9a:2c:77:37:61:1b:df:c4:65:15:d2:22:55:c8:30:75:07: 4f:0e:74:5b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeB6hXJnuXWdLO3mJR+2+lcz2mWAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMDA1N1oX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAMDJhOWFkNmIxNjcxYzA4ZGY5YTMx ODdiYjMwZGU5MjU5NmQ5ZmM3MjYxNzUzYTcwODJiM2RkOTY3ZDNhZTdiYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VgH/1sB9qGsgXJto7/rrF6xbJeS GoHMQobRgsaDqvaWhtuxdXSJ6HtY773uDEY7ZS8fyvfAlCrI5PZZBF8SpV4OzTec oBstDVE9da3MSPxN2LmCnis2x6kSSZXbjHfjBVwjQcCgPA//4iZ2J9iz0AQfdGfB X76QEbjhhdguuusTHZETXESW025+yMcXS1PUiFjgTKRGmxu9ENucTloQ3h1L29Za 1dmDav5Fizr8vXRXktnpn3qh7gTaCw6PkXSjiviFHYYLOMIYIVKBeAzifK1I/J/7 Bc84fjVCayU6c3R/qHEuld1c9PIwHPpZs18nK67i+GlfEc+GhMsS17f0jQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJDY0St3+/yhf28sspTmytV8EfWrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkMzdlYThiLTVjNmEtNDkzNy05Mzc1LTQ5NmQ3OTljOGYzMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6XCAMA0GCSqGSIb3DQEBCwUAA4IBAQA6o7DoEgnVwjYYQKtO hGqDQ5OAH61yTQpPZXsWYRie7WuTC4jo0H81tOe3aZQjI0IW8FqbcCAhhu8GCwdW URrrgS/iDectbR7uRpWwhR9poXFcvFhAdxW0MyAw1NJ+jqt2hAJ9m7WB8zT3Yal3 /RFfLNHN9UXL+CM9TmnvKU006Nm4/nQh5GS7eDe4w5zay+ewml8LRblyPoYLHfxT c4RoBeBUT3WHkFhJPkAbIjDCMqLbDQawi3iD4JUhVm2+vi6b5CM0A2zk/zvQs3j+ lwCPKiVyVAe6xlR+GQ/vuj1zf8LNjjejcrmSksGQmix3N2Eb38RlFdIiVcgwdQdP DnRb -----END CERTIFICATE-----Generated at Sat Jun 13 08:03:21 2026 by rpki-client