$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e48033f-7894-46c3-8bd7-cfab806b69ba.roa File: 9e48033f-7894-46c3-8bd7-cfab806b69ba.roa (raw, json) Hash identifier: QxHDmxOMpe9cmUTCH+Y6rV/vaXHVz428poYgGdHpnMo= Subject key identifier: 2D:88:28:21:73:E3:46:6A:69:0D:87:63:C3:28:F5:3A:BC:4A:AD:54 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3B10789ADAF9FB61BE03683E1C87CCC7A416EA6E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e48033f-7894-46c3-8bd7-cfab806b69ba.roa Signing time: Sun 31 May 2026 00:10:08 +0000 ROA not before: Sun 31 May 2026 00:10:08 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:10:78:9a:da:f9:fb:61:be:03:68:3e:1c:87:cc:c7:a4:16:ea:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:10:08 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=f6ae26a5f7e179480e541ed6187a762eb5c9124d4a6868e4a8a88c55714377a1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:43:be:cd:95:13:ec:3c:6c:f9:2e:fd:cc: 94:f5:09:12:43:fc:56:1a:2a:1f:9b:f6:12:ad:13: 92:b8:c8:df:2d:d1:b4:7c:b5:87:f9:34:af:0b:09: ac:f2:4c:d8:e1:4a:ef:be:27:d3:ea:9c:49:18:ae: 4d:15:9d:17:38:7a:ae:04:ab:49:b4:52:1d:cc:79: ff:f6:c6:51:88:b1:93:30:03:6a:71:1c:77:0f:0b: f9:fe:c6:ea:ab:0d:d5:8a:35:56:32:c7:1e:d7:79: fc:ff:e6:01:00:07:b6:90:de:ae:8f:41:d7:e6:4c: 3b:41:99:a9:6e:da:c1:eb:0a:5d:8e:a9:76:c4:9f: 92:c5:de:84:3d:cc:13:cc:13:6c:4b:87:aa:a1:8e: 5a:0d:92:bb:87:2d:10:d9:61:d0:92:28:47:1d:df: f1:32:08:d5:f9:2e:f1:e9:67:ff:58:0e:a6:97:0b: 66:54:27:09:e1:be:8f:71:6e:34:d1:4a:23:c8:1c: d9:e1:25:0a:c0:d6:31:ee:2a:2f:1b:24:89:12:3d: e6:27:dc:e2:7b:d2:70:4b:ed:d0:af:d7:87:cc:18: 20:41:f2:6e:6c:a0:70:68:46:12:ec:d7:0b:8c:70: 61:dc:d2:d8:51:aa:35:26:44:a8:cb:fb:22:11:95: aa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:88:28:21:73:E3:46:6A:69:0D:87:63:C3:28:F5:3A:BC:4A:AD:54 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e48033f-7894-46c3-8bd7-cfab806b69ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:9040::/48 Signature Algorithm: sha256WithRSAEncryption 66:df:76:17:a7:db:6c:66:53:40:ce:57:24:c0:d4:b8:62:40: cd:b5:2d:d4:30:84:42:ab:bc:30:a2:e0:12:40:d7:97:1f:ba: 08:b0:9d:8a:41:92:87:44:f9:86:fa:b4:19:23:86:7a:dd:7a: 0b:4a:88:19:c5:55:26:eb:eb:fb:50:99:03:15:df:1d:00:e4: ee:79:91:85:49:0f:e7:03:f5:a8:1d:73:14:9f:cf:d1:f2:92: c7:19:af:41:bf:e6:7b:8d:48:1d:bc:d7:5b:11:58:cc:f9:b8: 41:ad:f8:a5:23:72:43:68:ec:0d:e8:d0:5d:9d:1e:5c:5f:de: 53:6a:c2:cc:b8:ba:d2:f0:5d:f6:82:78:d8:f2:62:c2:0d:67: 80:c6:1c:e2:19:3e:aa:fd:d1:a5:7f:f4:7e:e3:da:15:a8:33: 29:64:e4:de:c7:67:30:85:9f:42:ce:96:65:55:fb:46:d6:55: 0f:05:0a:5a:1e:5f:b8:aa:c8:e2:81:5a:51:1a:0b:23:f0:6c: 08:18:55:4e:46:83:5c:5f:d2:67:73:f8:cf:a0:99:8c:09:11: 70:83:e6:56:34:5f:59:b0:40:7c:f8:82:61:9f:c6:ef:ab:f8: ef:3e:78:59:80:23:dc:ab:cf:3b:70:5b:fc:72:f1:03:2c:18: b4:9d:ef:1b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOxB4mtr5+2G+A2g+HIfMx6QW6m4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMTAwOFoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAZjZhZTI2YTVmN2UxNzk0ODBlNTQx ZWQ2MTg3YTc2MmViNWM5MTI0ZDRhNjg2OGU0YThhODhjNTU3MTQzNzdhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx5Dvs2VE+w8bPku/cyU9QkSQ/xW Giofm/YSrROSuMjfLdG0fLWH+TSvCwms8kzY4UrvvifT6pxJGK5NFZ0XOHquBKtJ tFIdzHn/9sZRiLGTMANqcRx3Dwv5/sbqqw3VijVWMsce13n8/+YBAAe2kN6uj0HX 5kw7QZmpbtrB6wpdjql2xJ+Sxd6EPcwTzBNsS4eqoY5aDZK7hy0Q2WHQkihHHd/x MgjV+S7x6Wf/WA6mlwtmVCcJ4b6PcW400UojyBzZ4SUKwNYx7iovGySJEj3mJ9zi e9JwS+3Qr9eHzBggQfJubKBwaEYS7NcLjHBh3NLYUao1JkSoy/siEZWqIwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFC2IKCFz40ZqaQ2HY8Mo9Tq8Sq1UMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzllNDgwMzNmLTc4OTQtNDZjMy04YmQ3LWNmYWI4MDZiNjliYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaupBAMA0GCSqGSIb3DQEBCwUAA4IBAQBm33YXp9tsZlNAzlck wNS4YkDNtS3UMIRCq7wwouASQNeXH7oIsJ2KQZKHRPmG+rQZI4Z63XoLSogZxVUm 6+v7UJkDFd8dAOTueZGFSQ/nA/WoHXMUn8/R8pLHGa9Bv+Z7jUgdvNdbEVjM+bhB rfilI3JDaOwN6NBdnR5cX95TasLMuLrS8F32gnjY8mLCDWeAxhziGT6q/dGlf/R+ 49oVqDMpZOTex2cwhZ9CzpZlVftG1lUPBQpaHl+4qsjigVpRGgsj8GwIGFVORoNc X9Jnc/jPoJmMCRFwg+ZWNF9ZsEB8+IJhn8bvq/jvPnhZgCPcq887cFv8cvEDLBi0 ne8b -----END CERTIFICATE-----Generated at Sat Jun 13 10:26:52 2026 by rpki-client