$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd97fd1c-8072-482f-8e33-e42256920554.roa File: bd97fd1c-8072-482f-8e33-e42256920554.roa (raw, json) Hash identifier: HBJvxmknzHJgt35FRNl+FYKsmvXdW+GVktXlIyuD0YM= Subject key identifier: 22:7A:F8:D5:44:AB:D3:CB:4D:A5:B7:BC:F0:ED:EE:DF:F8:9C:15:FE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74D494E468B08C6ECD162A5BF7931D6F7F28E1E2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd97fd1c-8072-482f-8e33-e42256920554.roa Signing time: Wed 13 May 2026 00:30:11 +0000 ROA not before: Wed 13 May 2026 00:30:11 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d4:94:e4:68:b0:8c:6e:cd:16:2a:5b:f7:93:1d:6f:7f:28:e1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:30:11 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=ccffa02fb55dbe3602c4327fcfaeadab75d680884bc1176a8af60e2560fa7fda, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:a3:ff:47:92:1e:88:a2:51:49:d3:da:b0: 33:a0:37:a8:e1:d4:b4:0e:34:be:dd:be:36:2e:1f: b8:36:7a:b0:18:0a:7b:b6:41:9b:35:72:a5:9d:8f: 27:fb:e1:40:26:6e:32:43:c4:a9:3d:12:96:6c:c5: 0b:57:84:d2:d1:08:aa:0d:92:2d:57:ad:4e:df:83: bb:15:4d:86:0f:2c:03:61:8e:a8:9a:fc:ae:9e:b1: b7:a2:8b:02:a3:db:cb:f3:a8:df:f5:72:78:88:06: 2d:9e:c2:e2:78:34:5b:c0:9f:2b:36:c2:62:87:bb: 44:64:3d:d2:b3:79:e4:70:00:9e:75:1b:d3:94:b8: a6:fd:9b:57:3e:83:3e:92:f3:9d:7b:f3:f3:cf:b0: 97:94:76:13:c7:f1:cb:ad:9d:8e:dd:58:f5:e7:3f: 55:25:f5:83:a7:20:47:a6:51:6b:87:30:83:cd:b8: ff:ae:da:8f:40:cf:04:c3:71:a9:de:25:24:1e:9b: be:12:d8:7e:5a:3e:5d:16:30:54:47:b4:77:01:2b: f2:ce:68:ba:8b:ab:b7:56:f8:dd:ed:49:23:02:d8: 54:5c:c7:89:77:65:b8:94:23:4b:30:7b:d1:8f:5e: 42:72:51:dd:87:40:e7:d9:79:c7:46:05:2b:d5:77: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7A:F8:D5:44:AB:D3:CB:4D:A5:B7:BC:F0:ED:EE:DF:F8:9C:15:FE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd97fd1c-8072-482f-8e33-e42256920554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:2000::/40 Signature Algorithm: sha256WithRSAEncryption be:7f:8d:86:9a:ea:67:da:b5:06:d8:b2:59:37:4e:b4:5f:3d: 0e:9a:c1:77:3e:b2:b0:30:af:83:e0:f5:12:f4:86:bc:92:c0: 7a:fe:db:0e:83:0a:4a:7f:8e:77:bd:c5:cb:a3:22:ae:93:46: 7e:6f:16:27:53:42:c4:48:55:68:0d:b4:c1:1c:47:ed:33:63: 6b:10:72:e4:0a:44:6f:1c:63:41:fa:c7:fd:f6:86:75:cb:a9: 49:62:e1:46:bf:76:74:8e:72:6b:2f:6a:a9:f7:11:c7:cb:47: 12:e3:44:d3:c7:1e:4d:c8:d8:6c:eb:58:9b:02:f1:5d:0d:f4: 88:1e:7e:c1:27:f0:60:78:65:cc:f8:25:8b:6f:b9:d0:7d:10: f4:b4:b3:3b:c9:58:bb:67:61:91:01:a4:0a:8a:1d:87:73:52: 0b:87:d0:b0:a2:55:84:61:aa:58:68:d6:64:7a:be:57:12:28: 85:ea:86:b2:f9:e0:cc:3f:10:17:09:6c:d5:c4:80:8a:62:f7: da:7f:3b:c3:72:60:9d:6e:fb:69:33:73:cb:35:25:42:6d:22: 88:15:0e:a9:d6:d7:c7:e1:93:65:67:36:42:55:e3:26:cc:1e: e4:6f:37:a9:69:44:9b:ab:81:4c:ab:c5:84:80:d8:ad:6b:22: 15:87:04:c1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdNSU5GiwjG7NFipb95Mdb38o4eIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMzAxMVoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAY2NmZmEwMmZiNTVkYmUzNjAyYzQz MjdmY2ZhZWFkYWI3NWQ2ODA4ODRiYzExNzZhOGFmNjBlMjU2MGZhN2ZkYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8qj/0eSHoiiUUnT2rAzoDeo4dS0 DjS+3b42Lh+4NnqwGAp7tkGbNXKlnY8n++FAJm4yQ8SpPRKWbMULV4TS0QiqDZIt V61O34O7FU2GDywDYY6omvyunrG3oosCo9vL86jf9XJ4iAYtnsLieDRbwJ8rNsJi h7tEZD3Ss3nkcACedRvTlLim/ZtXPoM+kvOde/Pzz7CXlHYTx/HLrZ2O3Vj15z9V JfWDpyBHplFrhzCDzbj/rtqPQM8Ew3Gp3iUkHpu+Eth+Wj5dFjBUR7R3ASvyzmi6 i6u3Vvjd7UkjAthUXMeJd2W4lCNLMHvRj15CclHdh0Dn2XnHRgUr1XfzkQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCJ6+NVEq9PLTaW3vPDt7t/4nBX+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JkOTdmZDFjLTgwNzItNDgyZi04ZTMzLWU0MjI1NjkyMDU1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacCAwDQYJKoZIhvcNAQELBQADggEBAL5/jYaa6mfatQbYslk3 TrRfPQ6awXc+srAwr4Pg9RL0hrySwHr+2w6DCkp/jne9xcujIq6TRn5vFidTQsRI VWgNtMEcR+0zY2sQcuQKRG8cY0H6x/32hnXLqUli4Ua/dnSOcmsvaqn3EcfLRxLj RNPHHk3I2GzrWJsC8V0N9IgefsEn8GB4Zcz4JYtvudB9EPS0szvJWLtnYZEBpAqK HYdzUguH0LCiVYRhqlho1mR6vlcSKIXqhrL54Mw/EBcJbNXEgIpi99p/O8NyYJ1u +2kzc8s1JUJtIogVDqnW18fhk2VnNkJV4ybMHuRvN6lpRJurgUyrxYSA2K1rIhWH BME= -----END CERTIFICATE-----Generated at Sat Jun 13 08:02:49 2026 by rpki-client