$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d7a9dfdd-1e30-48c4-a84b-e367abbd9971.roa File: d7a9dfdd-1e30-48c4-a84b-e367abbd9971.roa (raw, json) Hash identifier: gliB2Ms0z5FKrbfA7A58VA3B5X3jaKnSuN+sYr1hE8M= Subject key identifier: F2:FC:5C:3A:2E:7C:A7:0C:96:36:24:25:B0:F5:C8:C8:19:2C:8B:09 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C039BF21E669A5E44992649BEE25F0A75E13738 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d7a9dfdd-1e30-48c4-a84b-e367abbd9971.roa Signing time: Sun 31 May 2026 00:10:10 +0000 ROA not before: Sun 31 May 2026 00:10:10 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:03:9b:f2:1e:66:9a:5e:44:99:26:49:be:e2:5f:0a:75:e1:37:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:10:10 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=0d634bd3984ea900380717982d144041a5d0f0bf499df819ed97928bafebacee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:24:e8:6f:51:8a:21:09:ef:0a:2e:e7:fc: fc:ed:9f:fd:a5:34:f1:12:2f:2f:a5:5e:2b:8e:dc: cb:4d:82:29:e9:a3:2a:5c:5d:9a:c6:20:32:9d:2a: 3d:3d:aa:e7:ce:83:f0:d3:b1:69:17:58:1b:0a:39: 63:50:7b:f4:61:ba:aa:ab:8f:04:a4:05:7e:01:b9: 1b:1d:fb:1c:71:c4:45:3e:51:ee:c7:14:06:91:61: a3:37:8a:b2:4b:0f:c3:08:dc:d2:b5:42:f3:5a:7f: bf:ba:2d:1a:78:14:fc:71:a4:de:64:21:ea:98:75: 46:f3:cc:71:30:1d:2e:66:56:eb:8d:0e:68:1a:26: d3:e2:a2:e7:f1:ca:63:60:7b:dc:34:8f:5a:48:d8: 28:b8:8a:cf:15:b4:42:aa:ce:33:8f:23:2c:db:a3: ca:4f:27:27:20:f1:b8:fc:9c:20:e7:80:cb:ff:4b: 79:66:52:37:c7:ac:48:ce:2b:7e:48:2a:b1:6a:5b: 38:60:c5:04:ba:19:89:32:12:d5:69:df:56:a3:4c: 50:5b:43:21:34:9c:5e:ce:ce:89:46:09:0f:46:ae: fa:74:99:99:8d:d3:cd:db:66:06:e9:fa:72:e7:17: 34:71:fd:92:90:35:ce:fa:ab:1f:e4:35:de:b5:cb: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FC:5C:3A:2E:7C:A7:0C:96:36:24:25:B0:F5:C8:C8:19:2C:8B:09 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d7a9dfdd-1e30-48c4-a84b-e367abbd9971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:f000::/40 Signature Algorithm: sha256WithRSAEncryption 61:bd:ba:b4:4a:6e:55:f1:35:9b:45:93:cf:6a:c8:14:56:f1: 53:51:60:72:9f:85:3d:f4:db:9b:4f:2d:03:55:19:4b:9e:9c: 80:92:32:3b:cb:68:fe:8f:34:9b:c9:93:35:ab:6c:8c:b8:87: bb:cb:12:80:aa:f8:55:b5:82:ac:d2:e1:c5:0b:fa:4c:6b:70: fe:2d:3c:23:99:49:93:8d:03:e4:13:af:3d:ed:ab:66:f7:2c: d8:c7:52:bf:8a:ec:75:62:40:b6:a0:9d:7d:e0:41:2c:9a:16: 57:ff:fd:7b:2e:65:22:27:64:89:22:cb:47:ec:ce:18:3a:3d: 31:da:41:14:93:c7:6b:f5:63:28:88:d5:67:ea:ae:84:7f:60: d5:3a:0e:b1:0f:92:f9:4c:5c:5f:f9:d3:65:53:ba:4e:36:25: 8e:25:aa:f8:54:94:4c:4e:e1:d7:b2:b7:a6:cb:3b:29:39:7f: 58:b9:7b:e1:42:3e:88:84:45:9c:2e:3d:e5:ca:34:9f:e0:cd: a8:dc:0c:34:f6:ba:60:e6:95:79:45:75:5c:c1:4d:fc:6e:98: 17:4e:68:26:4b:15:69:77:2f:77:da:20:29:1a:34:b9:8c:fb: 98:ff:d3:87:02:d2:a8:ce:7f:1b:58:5c:a3:ca:0a:50:88:99: e3:3c:9c:33 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPAOb8h5mml5EmSZJvuJfCnXhNzgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMTAxMFoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAMGQ2MzRiZDM5ODRlYTkwMDM4MDcx Nzk4MmQxNDQwNDFhNWQwZjBiZjQ5OWRmODE5ZWQ5NzkyOGJhZmViYWNlZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo20k6G9RiiEJ7wou5/z87Z/9pTTx Ei8vpV4rjtzLTYIp6aMqXF2axiAynSo9ParnzoPw07FpF1gbCjljUHv0Ybqqq48E pAV+AbkbHfscccRFPlHuxxQGkWGjN4qySw/DCNzStULzWn+/ui0aeBT8caTeZCHq mHVG88xxMB0uZlbrjQ5oGibT4qLn8cpjYHvcNI9aSNgouIrPFbRCqs4zjyMs26PK TycnIPG4/Jwg54DL/0t5ZlI3x6xIzit+SCqxals4YMUEuhmJMhLVad9Wo0xQW0Mh NJxezs6JRgkPRq76dJmZjdPN22YG6fpy5xc0cf2SkDXO+qsf5DXetcujswIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPL8XDoufKcMljYkJbD1yMgZLIsJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q3YTlkZmRkLTFlMzAtNDhjNC1hODRiLWUzNjdhYmJkOTk3MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauvAwDQYJKoZIhvcNAQELBQADggEBAGG9urRKblXxNZtFk89q yBRW8VNRYHKfhT3025tPLQNVGUuenICSMjvLaP6PNJvJkzWrbIy4h7vLEoCq+FW1 gqzS4cUL+kxrcP4tPCOZSZONA+QTrz3tq2b3LNjHUr+K7HViQLagnX3gQSyaFlf/ /XsuZSInZIkiy0fszhg6PTHaQRSTx2v1YyiI1WfqroR/YNU6DrEPkvlMXF/502VT uk42JY4lqvhUlExO4deyt6bLOyk5f1i5e+FCPoiERZwuPeXKNJ/gzajcDDT2umDm lXlFdVzBTfxumBdOaCZLFWl3L3faICkaNLmM+5j/04cC0qjOfxtYXKPKClCImeM8 nDM= -----END CERTIFICATE-----Generated at Sat Jun 13 07:59:07 2026 by rpki-client