$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a21dee66-37c0-469d-8b01-08b0f731a865.roa File: a21dee66-37c0-469d-8b01-08b0f731a865.roa (raw, json) Hash identifier: BgFAcH6/1kX1n8UZefRiG8/lfpsScSOjXRg5ieMIWYQ= Subject key identifier: 99:A3:7A:F6:89:0D:86:B1:F8:87:A6:8F:5B:C2:CF:80:6E:86:25:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 53251CA93D69FEA5C02870F1E01C35892D8BE667 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a21dee66-37c0-469d-8b01-08b0f731a865.roa Signing time: Wed 13 May 2026 00:01:01 +0000 ROA not before: Wed 13 May 2026 00:01:01 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:25:1c:a9:3d:69:fe:a5:c0:28:70:f1:e0:1c:35:89:2d:8b:e6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:01:01 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=9856b5d7c2fdc998a15a3d64c105ef8173bee55409cbcbefab6c3da3ac4d4b46, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:ac:46:06:33:c3:8a:5c:1f:6b:65:7e:0f: c9:21:11:2a:25:00:a9:0c:78:ea:e2:7b:2c:ac:69: 4e:45:e1:a8:e5:36:25:5e:91:94:13:f3:dc:97:2c: 03:33:9f:86:ad:d0:d8:77:e7:08:71:f6:e5:f0:fe: b1:9c:3f:16:35:38:c5:49:63:c4:7a:99:8a:2a:43: f6:70:12:79:50:b1:ae:52:47:29:0d:9a:bc:d0:fc: 1c:30:15:70:96:f4:91:c4:49:0c:03:93:ec:2c:c5: d0:cc:f7:6c:58:30:b5:5e:33:90:10:43:33:56:c2: 74:57:83:4c:aa:f8:fa:06:f2:62:01:a1:a5:9a:27: 0c:23:d7:4f:1d:63:d0:ae:35:98:dc:18:97:08:40: c0:52:28:97:90:0f:75:7e:35:16:89:64:d0:48:bc: b1:36:4e:2d:1a:b3:81:de:2d:7b:68:b7:62:a8:8e: e5:5b:03:40:a6:14:80:50:63:ea:94:4b:a3:7b:1f: fc:fb:47:2e:e6:f2:f0:85:17:4c:6a:25:2a:19:4c: 54:84:97:44:f6:a0:68:86:cc:53:d8:3b:71:0e:1d: a1:b1:3d:e8:f8:60:e4:50:9f:52:6d:bc:bb:48:39: 4c:2b:4c:2d:0a:4f:0c:7e:8c:e2:0f:28:93:10:4d: b3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A3:7A:F6:89:0D:86:B1:F8:87:A6:8F:5B:C2:CF:80:6E:86:25:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a21dee66-37c0-469d-8b01-08b0f731a865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:b000::/40 Signature Algorithm: sha256WithRSAEncryption b6:38:c8:2f:b4:55:77:8c:ec:39:30:af:58:41:13:5f:83:45: e9:58:01:f3:53:ca:9b:23:22:db:55:a8:6e:77:99:4a:b4:91: b6:94:34:8d:3a:38:18:28:9a:86:96:54:99:2a:48:ee:eb:c9: 3a:e1:32:23:fe:41:c4:d5:e4:7e:dd:e3:8a:dd:30:3f:96:bd: 41:e5:95:67:c5:14:f8:99:ab:5d:64:f9:29:c9:e1:86:d1:27: 16:67:ec:6f:08:ca:29:1b:3f:f7:f3:80:2a:a0:6f:9e:1d:87: ff:7e:2c:c2:61:a9:93:10:e0:68:fb:24:0d:e0:e5:36:4a:f6: 6c:44:ce:ee:fd:a3:9a:65:78:9f:4f:89:be:91:ad:a5:b0:2f: fa:44:cd:a4:d2:16:50:5c:4f:a1:73:a0:4a:4f:6a:33:48:f2: 36:ca:9e:3e:5e:0b:b8:66:ca:b9:2d:57:28:a1:b5:3e:d6:71: 01:38:f3:00:5f:60:e1:bf:47:23:4b:82:6f:55:bb:4d:58:30: 78:e5:29:87:8d:d0:ae:ce:1a:b3:71:c4:b1:92:e7:bb:a0:54: 84:96:e9:3c:e2:11:56:4c:e1:46:16:5f:d8:1e:81:82:7c:e6: a9:43:a3:b4:c7:1d:34:46:37:0f:6d:cd:d1:ef:42:bf:9b:5f: 58:d6:70:e3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUyUcqT1p/qXAKHDx4Bw1iS2L5mcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMDEwMVoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAOTg1NmI1ZDdjMmZkYzk5OGExNWEz ZDY0YzEwNWVmODE3M2JlZTU1NDA5Y2JjYmVmYWI2YzNkYTNhYzRkNGI0NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt56sRgYzw4pcH2tlfg/JIREqJQCp DHjq4nssrGlOReGo5TYlXpGUE/PclywDM5+GrdDYd+cIcfbl8P6xnD8WNTjFSWPE epmKKkP2cBJ5ULGuUkcpDZq80PwcMBVwlvSRxEkMA5PsLMXQzPdsWDC1XjOQEEMz VsJ0V4NMqvj6BvJiAaGlmicMI9dPHWPQrjWY3BiXCEDAUiiXkA91fjUWiWTQSLyx Nk4tGrOB3i17aLdiqI7lWwNAphSAUGPqlEujex/8+0cu5vLwhRdMaiUqGUxUhJdE 9qBohsxT2DtxDh2hsT3o+GDkUJ9Sbby7SDlMK0wtCk8MfoziDyiTEE2zkwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJmjevaJDYax+Iemj1vCz4BuhiXKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EyMWRlZTY2LTM3YzAtNDY5ZC04YjAxLTA4YjBmNzMxYTg2NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNrAwDQYJKoZIhvcNAQELBQADggEBALY4yC+0VXeM7Dkwr1hB E1+DRelYAfNTypsjIttVqG53mUq0kbaUNI06OBgomoaWVJkqSO7ryTrhMiP+QcTV 5H7d44rdMD+WvUHllWfFFPiZq11k+SnJ4YbRJxZn7G8IyikbP/fzgCqgb54dh/9+ LMJhqZMQ4Gj7JA3g5TZK9mxEzu79o5pleJ9Pib6RraWwL/pEzaTSFlBcT6FzoEpP ajNI8jbKnj5eC7hmyrktVyihtT7WcQE48wBfYOG/RyNLgm9Vu01YMHjlKYeN0K7O GrNxxLGS57ugVISW6TziEVZM4UYWX9gegYJ85qlDo7THHTRGNw9tzdHvQr+bX1jW cOM= -----END CERTIFICATE-----Generated at Sat Jun 13 10:28:34 2026 by rpki-client