$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc69f87e-11e6-4d9a-b692-23dfbf595c30.roa File: cc69f87e-11e6-4d9a-b692-23dfbf595c30.roa (raw, json) Hash identifier: 3Wab2mrYsIS4syxHQTIdyoF2OnGEYzFbwLXpBLwGOxk= Subject key identifier: 38:0C:A6:FC:97:8E:EC:61:7B:5E:77:BA:A8:45:0B:27:1F:F5:1F:7D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C42D47F846D6B6CF4881BA95EAA786B78302D3E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc69f87e-11e6-4d9a-b692-23dfbf595c30.roa Signing time: Sun 31 May 2026 00:10:24 +0000 ROA not before: Sun 31 May 2026 00:10:24 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:42:d4:7f:84:6d:6b:6c:f4:88:1b:a9:5e:aa:78:6b:78:30:2d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:10:24 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=b353b9b42b032c3fc54822cff845857396328e2aec7041007d8767766cb6c3eb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:59:e3:60:5f:e9:46:1d:12:b8:28:0e:c4:76: 5a:30:f6:33:c3:fc:8d:b5:55:b5:5a:5a:fd:5f:46: 8e:53:9a:c2:5f:4b:05:c7:f8:7f:e2:3e:3b:94:c5: 0e:90:44:da:78:ee:1f:40:65:57:8c:e1:a4:a2:c4: 32:bc:a3:b1:16:a4:20:9d:27:df:a9:12:f3:1b:b8: fe:8e:d6:75:8f:87:41:ea:2d:c6:08:b4:94:43:70: dc:fa:91:51:5e:8b:55:32:06:4e:91:64:c9:2b:3e: 95:04:11:b5:24:19:08:e8:e0:74:31:07:02:de:54: cb:be:3d:26:09:d2:38:71:fd:6d:98:35:d1:f9:c8: 65:71:17:e5:3f:45:18:85:0d:75:4e:ad:19:42:b2: 22:90:dc:bb:3f:07:5f:0e:57:bc:d0:83:2f:84:64: ee:ff:90:6c:1f:c4:03:91:30:0d:02:da:01:ec:9f: 25:44:5c:5c:49:1d:58:3f:a2:fd:9d:b5:cc:e5:e9: a3:fe:78:a5:f6:bb:e4:3d:96:6a:eb:d7:12:44:ba: 3d:46:22:62:1f:a9:58:01:ae:0f:f6:32:6a:90:74: 76:37:f5:b2:3c:02:f5:23:14:78:97:45:c2:af:a3: 7b:5c:22:68:0f:6c:4c:7e:54:51:c9:58:9e:89:b7: 76:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0C:A6:FC:97:8E:EC:61:7B:5E:77:BA:A8:45:0B:27:1F:F5:1F:7D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc69f87e-11e6-4d9a-b692-23dfbf595c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:4020::/48 Signature Algorithm: sha256WithRSAEncryption 0a:35:75:e0:0f:18:f6:c2:64:d9:f0:ba:27:68:aa:cd:82:48: c6:a3:4f:cd:08:e3:c6:3e:f9:5d:bc:47:c4:ba:d5:3d:7c:04: 4c:81:b6:f5:ef:21:cb:fc:68:92:27:5e:76:20:70:b1:a5:44: f8:89:8c:5d:16:c4:c5:58:9e:7a:dc:5d:35:2e:b7:04:aa:04: 0b:7b:ef:ac:a3:02:bf:d2:54:80:ab:24:41:7c:d3:d4:f4:0a: 54:4a:ed:8e:a3:1e:50:0c:c7:c2:43:a9:d8:40:b2:c7:54:fe: 9c:89:c0:42:4f:9f:53:72:8f:9c:6c:00:f7:c4:03:41:2e:ae: c8:c3:90:20:f2:9d:5f:e7:64:b2:2f:2c:af:79:0a:6f:a6:09: a4:2f:ce:a7:81:1a:71:93:50:aa:64:6a:97:9d:36:b7:39:0b: 27:95:ed:a3:fb:56:19:eb:4e:5f:a4:14:cd:c3:6a:15:71:33: 16:f7:05:95:30:7b:51:9d:3d:b7:e8:89:d8:de:01:50:f5:41: 66:ca:3b:1f:31:9c:25:d3:2d:87:7b:29:a0:65:cb:e0:65:fc: de:89:97:61:b3:25:33:84:da:ea:70:a6:d8:e7:51:46:cf:2a: ec:bb:ed:bf:1c:82:55:7c:59:fa:d2:32:4b:a2:5d:c5:4c:78: 08:9e:da:77 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTELUf4Rta2z0iBupXqp4a3gwLT4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMTAyNFoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAYjM1M2I5YjQyYjAzMmMzZmM1NDgy MmNmZjg0NTg1NzM5NjMyOGUyYWVjNzA0MTAwN2Q4NzY3NzY2Y2I2YzNlYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FnjYF/pRh0SuCgOxHZaMPYzw/yN tVW1Wlr9X0aOU5rCX0sFx/h/4j47lMUOkETaeO4fQGVXjOGkosQyvKOxFqQgnSff qRLzG7j+jtZ1j4dB6i3GCLSUQ3Dc+pFRXotVMgZOkWTJKz6VBBG1JBkI6OB0MQcC 3lTLvj0mCdI4cf1tmDXR+chlcRflP0UYhQ11Tq0ZQrIikNy7PwdfDle80IMvhGTu /5BsH8QDkTANAtoB7J8lRFxcSR1YP6L9nbXM5emj/nil9rvkPZZq69cSRLo9RiJi H6lYAa4P9jJqkHR2N/WyPAL1IxR4l0XCr6N7XCJoD2xMflRRyVieibd2vQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDgMpvyXjuxhe153uqhFCycf9R99MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NjNjlmODdlLTExZTYtNGQ5YS1iNjkyLTIzZGZiZjU5NWMzMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6UAgMA0GCSqGSIb3DQEBCwUAA4IBAQAKNXXgDxj2wmTZ8Lon aKrNgkjGo0/NCOPGPvldvEfEutU9fARMgbb17yHL/GiSJ152IHCxpUT4iYxdFsTF WJ563F01LrcEqgQLe++sowK/0lSAqyRBfNPU9ApUSu2Oox5QDMfCQ6nYQLLHVP6c icBCT59Tco+cbAD3xANBLq7Iw5Ag8p1f52SyLyyveQpvpgmkL86ngRpxk1CqZGqX nTa3OQsnle2j+1YZ605fpBTNw2oVcTMW9wWVMHtRnT236InY3gFQ9UFmyjsfMZwl 0y2HeymgZcvgZfzeiZdhsyUzhNrqcKbY51FGzyrsu+2/HIJVfFn60jJLol3FTHgI ntp3 -----END CERTIFICATE-----Generated at Sat Jun 13 10:28:00 2026 by rpki-client