$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6c0acde-6391-436e-b3cd-0e9dc63a1f6b.roa File: f6c0acde-6391-436e-b3cd-0e9dc63a1f6b.roa (raw, json) Hash identifier: yz5MEFFGCxKtGhbTUsnt+kZFkTka+h/VMW25CW/oPcc= Subject key identifier: CF:E1:1B:F2:82:86:F9:A4:00:C7:50:A3:4C:BC:35:69:A5:E1:47:25 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4CA2AD420761E2068D8FC66A4CB3A4EF5DA891DB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6c0acde-6391-436e-b3cd-0e9dc63a1f6b.roa Signing time: Sun 31 May 2026 00:20:26 +0000 ROA not before: Sun 31 May 2026 00:20:26 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a2:ad:42:07:61:e2:06:8d:8f:c6:6a:4c:b3:a4:ef:5d:a8:91:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:20:26 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=7e9266e95584fcd0260e6dfae9f1751622e4ffd5e7e7232c0dc3baa288af6a25, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:97:ab:73:f2:dc:97:11:d3:c1:39:bb:f2: dd:d3:7d:6f:91:3a:d9:6d:7b:0a:1e:25:65:a9:41: 17:c3:33:7e:fa:0e:53:2f:34:2d:5a:3f:39:a7:9d: 16:92:0c:a9:73:05:7a:ab:d7:65:db:f7:55:8e:f2: 8c:be:fb:6c:2d:38:6e:d7:46:29:e0:78:67:bd:57: e5:7b:3a:ca:84:e1:bf:83:90:48:e0:8e:17:16:c0: fb:9d:02:3c:08:7d:c1:b8:70:64:56:d8:dd:c8:5b: 34:d6:cf:38:2a:5b:80:6d:b8:65:e2:24:79:14:36: ad:89:b4:79:95:55:c6:2f:1d:e6:f4:f7:cb:09:90: 52:eb:2e:33:78:94:2b:94:77:2e:d7:8c:b9:86:74: 90:37:82:00:f7:1c:65:0e:bd:b9:a5:61:0a:ec:0c: a2:3e:fd:b6:93:d8:94:80:16:5d:bd:dc:c3:c7:bd: 03:5f:8b:ce:67:a1:83:07:03:59:8e:77:8d:35:b2: 11:4a:8e:44:b1:f3:18:a6:6c:5b:cc:c2:62:02:9f: ba:3f:cf:56:7d:94:d4:11:62:47:7e:e9:a7:7f:6b: c3:42:51:a1:5e:c9:3c:2a:04:55:a3:d8:53:60:d8: 8f:9d:6f:9f:de:08:ae:55:16:ea:00:2a:7d:61:e7: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E1:1B:F2:82:86:F9:A4:00:C7:50:A3:4C:BC:35:69:A5:E1:47:25 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6c0acde-6391-436e-b3cd-0e9dc63a1f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:e000::/40 Signature Algorithm: sha256WithRSAEncryption 50:d0:97:0d:dd:42:12:61:74:10:b9:69:1a:69:0d:2d:3a:d6: 08:a3:90:88:40:e8:70:8c:e9:f4:ba:dd:50:5b:63:ed:da:04: 32:52:0d:33:65:09:f7:be:59:8e:91:a1:58:49:71:d0:f0:d7: a2:81:2a:05:f3:19:dc:7a:8b:fa:d3:32:a8:c1:d0:9f:a6:2f: 44:a9:92:60:c3:c5:55:36:28:0c:18:3f:28:64:df:59:7b:c0: 51:38:41:c1:0a:b7:1d:fc:81:d9:7a:ba:0d:59:3e:48:fe:db: 78:77:25:8f:3d:97:82:e1:0b:87:c4:ed:79:c6:ba:95:ad:0d: d3:eb:f4:9a:5e:70:ea:d8:32:59:52:15:48:8e:1e:68:77:aa: 2e:24:fa:ef:07:3a:e6:a5:98:d9:da:f2:f8:ad:5a:c3:a2:5c: c3:a1:a1:76:82:74:ad:d8:76:7f:a9:97:86:9e:aa:58:93:6b: e3:23:6b:6c:dc:eb:a6:b1:ef:4b:f5:93:c7:ce:df:7c:2b:2b: ce:dc:2c:2a:d2:2f:68:4c:a0:16:45:30:61:4e:a3:93:72:b8: 5c:df:80:01:29:d9:dc:e7:1e:22:30:86:7a:ba:67:d7:73:57: 42:19:fb:d6:61:e0:be:3e:71:3d:1e:4e:03:9f:26:a8:89:48: 4a:89:ad:0a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTKKtQgdh4gaNj8ZqTLOk712okdswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMjAyNloX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAN2U5MjY2ZTk1NTg0ZmNkMDI2MGU2 ZGZhZTlmMTc1MTYyMmU0ZmZkNWU3ZTcyMzJjMGRjM2JhYTI4OGFmNmEyNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXaXq3Py3JcR08E5u/Ld031vkTrZ bXsKHiVlqUEXwzN++g5TLzQtWj85p50WkgypcwV6q9dl2/dVjvKMvvtsLThu10Yp 4HhnvVflezrKhOG/g5BI4I4XFsD7nQI8CH3BuHBkVtjdyFs01s84KluAbbhl4iR5 FDatibR5lVXGLx3m9PfLCZBS6y4zeJQrlHcu14y5hnSQN4IA9xxlDr25pWEK7Ayi Pv22k9iUgBZdvdzDx70DX4vOZ6GDBwNZjneNNbIRSo5EsfMYpmxbzMJiAp+6P89W fZTUEWJHfumnf2vDQlGhXsk8KgRVo9hTYNiPnW+f3giuVRbqACp9YeeO3wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM/hG/KChvmkAMdQo0y8NWml4UclMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2YzBhY2RlLTYzOTEtNDM2ZS1iM2NkLTBlOWRjNjNhMWY2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6eAwDQYJKoZIhvcNAQELBQADggEBAFDQlw3dQhJhdBC5aRpp DS061gijkIhA6HCM6fS63VBbY+3aBDJSDTNlCfe+WY6RoVhJcdDw16KBKgXzGdx6 i/rTMqjB0J+mL0SpkmDDxVU2KAwYPyhk31l7wFE4QcEKtx38gdl6ug1ZPkj+23h3 JY89l4LhC4fE7XnGupWtDdPr9JpecOrYMllSFUiOHmh3qi4k+u8HOualmNna8vit WsOiXMOhoXaCdK3Ydn+pl4aeqliTa+Mja2zc66ax70v1k8fO33wrK87cLCrSL2hM oBZFMGFOo5NyuFzfgAEp2dznHiIwhnq6Z9dzV0IZ+9Zh4L4+cT0eTgOfJqiJSEqJ rQo= -----END CERTIFICATE-----Generated at Sat Jun 13 10:27:55 2026 by rpki-client