$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d89da8f5-4793-4756-9fbb-ea436d60233a.roa File: d89da8f5-4793-4756-9fbb-ea436d60233a.roa (raw, json) Hash identifier: Tfk6bxK8vFvJoz3eYoElVH56wuMjJi8Z8biu+ty2GBA= Subject key identifier: 1B:06:65:8D:92:7C:F0:27:9E:EF:CE:5F:7E:06:06:9B:D2:2E:C9:DB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1A7CA20E670D7B786D96C2C77FE2787F347BB217 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d89da8f5-4793-4756-9fbb-ea436d60233a.roa Signing time: Sun 31 May 2026 00:11:02 +0000 ROA not before: Sun 31 May 2026 00:11:02 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7c:a2:0e:67:0d:7b:78:6d:96:c2:c7:7f:e2:78:7f:34:7b:b2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:11:02 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=3d22dcaa72fe286ba7d359b83eedbc4ddaa3a32b980491358b9f74048297931c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:89:79:88:2a:cc:b9:6c:46:87:31:43:58: 76:13:d1:d1:5d:ff:f4:5a:00:94:0f:da:19:d5:cd: 2e:79:93:f9:90:37:5d:3a:c4:9b:00:e1:3d:77:b5: 9e:4f:73:df:ac:69:73:eb:4b:cd:a2:24:ba:7d:f7: 27:5b:54:54:2a:cd:71:cc:40:58:5b:8e:53:f7:62: 7f:97:c0:63:d0:6c:8e:e9:65:00:47:8d:24:af:bf: a5:73:05:d8:0b:5a:93:c6:e0:03:12:f4:27:33:bc: d4:e6:28:94:b0:90:cf:15:9e:59:da:ce:bf:89:0f: 78:f1:9e:25:f6:a2:fd:ff:87:9e:08:d3:7c:ac:11: e9:48:a9:5e:bc:1c:7a:24:60:69:d1:60:b1:11:d0: 8b:5b:41:6f:4a:88:5a:3c:da:55:3d:32:a0:e2:18: e2:27:ec:0a:c1:1b:7f:4a:cf:9a:ec:76:a9:5c:9f: dc:d8:12:36:7a:89:4e:e7:74:78:ff:ec:98:21:c7: 4a:a3:bf:7d:29:1a:20:c1:a4:09:01:0b:b0:e1:5f: a4:f7:c3:1c:80:1c:f2:df:53:b5:4d:6d:d5:21:17: 0c:98:40:36:14:09:48:f9:42:ca:c0:37:55:1a:fc: dd:47:ed:3a:f6:b8:b4:d1:cd:12:a4:b4:f0:79:aa: 42:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:06:65:8D:92:7C:F0:27:9E:EF:CE:5F:7E:06:06:9B:D2:2E:C9:DB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d89da8f5-4793-4756-9fbb-ea436d60233a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:90c0::/48 Signature Algorithm: sha256WithRSAEncryption 0b:49:54:a3:94:cb:74:53:21:1b:7b:13:29:3f:b0:c4:2e:4c: f8:c9:8f:89:f6:a0:43:1e:f5:02:a1:49:e1:0c:8e:21:c0:90: 24:6a:43:8f:e1:58:f6:46:7e:56:a4:ed:a5:48:2c:d0:4d:5b: ab:31:20:c9:cc:fd:fd:d1:f4:ad:c3:0e:91:84:fc:01:28:3c: 05:30:e3:59:ba:69:ad:6c:93:b0:7c:fa:c4:ba:3c:12:2d:af: 40:63:bd:7a:f2:b1:75:c5:61:4c:50:35:04:d0:c4:d0:42:0c: d5:fb:25:0b:17:8f:d3:56:39:fd:f8:87:6f:26:d7:59:3e:32: 01:f1:f4:0f:cc:45:68:19:8e:1c:28:ab:38:43:07:68:0a:9e: 1f:d0:f8:a5:a5:c1:c6:ed:10:c7:5e:42:3c:db:b7:02:e4:fb: 03:c1:80:cf:e0:13:de:21:a1:46:5b:71:46:27:87:c2:47:f9: 97:86:44:8e:d3:63:3b:13:7e:ea:40:9b:a8:9e:d8:0f:63:f9: 70:a6:8e:95:82:e1:d7:e0:8c:76:85:f6:3c:79:63:fb:0b:b2: 88:4f:77:14:44:03:ee:e1:3b:26:dd:82:b0:e0:a7:1c:9e:9a: db:87:c1:35:da:43:6e:e3:01:1c:17:d5:ad:f1:9b:1f:8d:60: 59:78:c7:43 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGnyiDmcNe3htlsLHf+J4fzR7shcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMTEwMloX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAM2QyMmRjYWE3MmZlMjg2YmE3ZDM1 OWI4M2VlZGJjNGRkYWEzYTMyYjk4MDQ5MTM1OGI5Zjc0MDQ4Mjk3OTMxYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCWJeYgqzLlsRocxQ1h2E9HRXf/0 WgCUD9oZ1c0ueZP5kDddOsSbAOE9d7WeT3PfrGlz60vNoiS6ffcnW1RUKs1xzEBY W45T92J/l8Bj0GyO6WUAR40kr7+lcwXYC1qTxuADEvQnM7zU5iiUsJDPFZ5Z2s6/ iQ948Z4l9qL9/4eeCNN8rBHpSKlevBx6JGBp0WCxEdCLW0FvSohaPNpVPTKg4hji J+wKwRt/Ss+a7HapXJ/c2BI2eolO53R4/+yYIcdKo799KRogwaQJAQuw4V+k98Mc gBzy31O1TW3VIRcMmEA2FAlI+ULKwDdVGvzdR+069ri00c0SpLTweapCRwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBsGZY2SfPAnnu/OX34GBpvSLsnbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4OWRhOGY1LTQ3OTMtNDc1Ni05ZmJiLWVhNDM2ZDYwMjMzYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ZDAMA0GCSqGSIb3DQEBCwUAA4IBAQALSVSjlMt0UyEbexMp P7DELkz4yY+J9qBDHvUCoUnhDI4hwJAkakOP4Vj2Rn5WpO2lSCzQTVurMSDJzP39 0fStww6RhPwBKDwFMONZummtbJOwfPrEujwSLa9AY7168rF1xWFMUDUE0MTQQgzV +yULF4/TVjn9+IdvJtdZPjIB8fQPzEVoGY4cKKs4QwdoCp4f0PilpcHG7RDHXkI8 27cC5PsDwYDP4BPeIaFGW3FGJ4fCR/mXhkSO02M7E37qQJuontgPY/lwpo6VguHX 4Ix2hfY8eWP7C7KIT3cURAPu4Tsm3YKw4Kccnprbh8E12kNu4wEcF9Wt8ZsfjWBZ eMdD -----END CERTIFICATE-----Generated at Sat Jun 13 10:26:06 2026 by rpki-client