$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f593232f-0244-4a16-ab0c-ae29ea60c65f.roa File: f593232f-0244-4a16-ab0c-ae29ea60c65f.roa (raw, json) Hash identifier: PDfrTEa0aa1BKlUuTy7D7gwfOGodXSyjfejIQgrBCs4= Subject key identifier: AE:D8:46:BE:49:20:70:9A:77:5D:18:1A:AD:97:D7:46:92:A1:8D:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4B0E7254B7C238020EFFFA5C687A59EA1E52A87B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f593232f-0244-4a16-ab0c-ae29ea60c65f.roa Signing time: Wed 13 May 2026 00:20:36 +0000 ROA not before: Wed 13 May 2026 00:20:36 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0e:72:54:b7:c2:38:02:0e:ff:fa:5c:68:7a:59:ea:1e:52:a8:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:20:36 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=78aaa6b7bceb38f217359f38c3a9e18db4ef7c4a41457120240d31e9ebef8387, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:02:cf:d7:58:1a:c3:5b:01:5f:e7:db:6d: 0a:89:04:c4:50:23:e1:c8:3b:04:83:ce:3a:3a:2e: cf:0e:a6:6e:bb:33:02:19:79:65:46:55:60:48:01: 82:df:ee:77:85:8c:11:02:93:09:4c:28:fc:7e:a8: 98:2b:e9:12:0a:25:cf:ce:19:fd:84:d1:f3:01:b4: 9e:d7:0d:05:4e:bf:49:da:df:e8:c7:f2:37:e8:56: 71:e1:3d:96:8c:b3:16:12:1b:9b:16:42:b7:52:ec: 7a:d8:a4:e7:7c:c1:c3:83:b0:59:6a:01:c6:53:8e: c0:0c:d8:73:9c:dc:a4:9f:93:22:fe:56:bc:df:f7: 16:cb:41:fc:c3:27:c1:2b:8f:ba:02:59:cb:ea:78: 7c:6d:25:01:55:41:92:f6:18:a9:7a:96:91:3d:ad: 49:a9:92:c8:ed:fe:09:d3:c3:a0:9d:ab:b9:4a:2b: d9:15:04:df:ac:ec:ad:33:77:98:84:28:1c:e8:27: 58:47:e3:f0:ab:75:07:98:25:5b:53:b7:8b:ca:d5: 08:89:8e:0e:c8:6f:ff:c7:86:25:f5:7d:0b:1f:c4: 45:4a:ed:e8:60:d5:79:5f:79:4d:2d:cf:b7:d3:c7: 75:f2:f9:2c:cc:d1:f3:7d:26:9e:51:e4:ea:c5:c5: 1d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D8:46:BE:49:20:70:9A:77:5D:18:1A:AD:97:D7:46:92:A1:8D:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f593232f-0244-4a16-ab0c-ae29ea60c65f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:f000::/40 Signature Algorithm: sha256WithRSAEncryption 92:14:74:13:cf:6a:bf:19:65:3e:f7:33:4e:33:c4:92:72:5a: b2:55:2e:10:23:52:47:5c:08:f3:f8:5e:b0:ff:ac:e5:a5:90: ea:96:d1:3b:57:f8:d7:8f:0f:bc:9a:62:df:f6:55:9b:a9:17: 0e:76:e9:b1:c6:22:dc:da:22:2e:fd:d7:64:bf:95:3e:f4:ea: 14:f8:ba:e4:c5:54:24:55:42:72:d8:d4:19:ec:94:33:f2:a5: e0:cb:ba:7d:d8:46:8b:8f:6c:8d:a2:ff:49:3e:c1:39:ba:9a: 04:98:1b:f6:0b:5a:35:4b:7e:75:22:0b:e5:b4:30:f6:9d:80: b8:0a:1a:1e:d8:56:d6:73:47:3a:6b:4e:e4:d9:89:ba:eb:fe: fc:a1:97:34:35:e5:80:63:10:80:45:3b:b2:6f:03:c3:38:21: 56:b4:49:bf:e2:b4:3c:da:7c:4a:1d:5c:4b:aa:df:6e:01:d1: 4d:13:b8:a3:bd:90:b4:71:e8:d0:3f:b2:28:9c:b8:8e:c3:7a: 9d:6e:f6:da:7c:3b:09:32:5a:4c:c1:99:06:65:99:54:d5:3f: 56:ce:af:07:9d:ef:66:ff:9f:90:7f:be:f0:7c:e4:6e:1f:7a: ef:e3:39:c2:43:1f:d2:58:f3:a8:54:d5:4e:37:2e:23:2d:0d: 44:8f:e8:5f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSw5yVLfCOAIO//pcaHpZ6h5SqHswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMjAzNloX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNANzhhYWE2YjdiY2ViMzhmMjE3MzU5 ZjM4YzNhOWUxOGRiNGVmN2M0YTQxNDU3MTIwMjQwZDMxZTllYmVmODM4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFICz9dYGsNbAV/n220KiQTEUCPh yDsEg846Oi7PDqZuuzMCGXllRlVgSAGC3+53hYwRApMJTCj8fqiYK+kSCiXPzhn9 hNHzAbSe1w0FTr9J2t/ox/I36FZx4T2WjLMWEhubFkK3Uux62KTnfMHDg7BZagHG U47ADNhznNykn5Mi/la83/cWy0H8wyfBK4+6AlnL6nh8bSUBVUGS9hipepaRPa1J qZLI7f4J08Ognau5SivZFQTfrOytM3eYhCgc6CdYR+Pwq3UHmCVbU7eLytUIiY4O yG//x4Yl9X0LH8RFSu3oYNV5X3lNLc+308d18vkszNHzfSaeUeTqxcUd3wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK7YRr5JIHCad10YGq2X10aSoY1bMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y1OTMyMzJmLTAyNDQtNGExNi1hYjBjLWFlMjllYTYwYzY1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaPAwDQYJKoZIhvcNAQELBQADggEBAJIUdBPPar8ZZT73M04z xJJyWrJVLhAjUkdcCPP4XrD/rOWlkOqW0TtX+NePD7yaYt/2VZupFw526bHGItza Ii7912S/lT706hT4uuTFVCRVQnLY1BnslDPypeDLun3YRouPbI2i/0k+wTm6mgSY G/YLWjVLfnUiC+W0MPadgLgKGh7YVtZzRzprTuTZibrr/vyhlzQ15YBjEIBFO7Jv A8M4IVa0Sb/itDzafEodXEuq324B0U0TuKO9kLRx6NA/siicuI7Dep1u9tp8Owky WkzBmQZlmVTVP1bOrwed72b/n5B/vvB85G4feu/jOcJDH9JY86hU1U43LiMtDUSP 6F8= -----END CERTIFICATE-----Generated at Sat Jun 13 10:27:59 2026 by rpki-client