$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b34c442-1c54-4c2b-a4eb-b2dded05ce1f.roa File: 6b34c442-1c54-4c2b-a4eb-b2dded05ce1f.roa (raw, json) Hash identifier: 4cSQHwtMRb2Jhhisf9fViuKO4PBfa+8I6NuKRzf8h6o= Subject key identifier: 4B:CC:45:72:C8:A3:CB:33:B5:D7:2C:09:07:17:4D:8B:8A:7F:B1:2B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5F2BBD59F919B45F63A349D1F597E118AF690B0F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b34c442-1c54-4c2b-a4eb-b2dded05ce1f.roa Signing time: Tue 21 Jul 2026 00:00:13 +0000 ROA not before: Tue 21 Jul 2026 00:00:13 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2b:bd:59:f9:19:b4:5f:63:a3:49:d1:f5:97:e1:18:af:69:0b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:00:13 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=2200b5856cb88a3d1000b45cb0719a2a45d89f988932208a79b5a1650a7222da, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:8b:96:59:6a:d6:4d:70:92:86:39:ba:3c: ef:ed:bd:0a:84:28:ab:71:0a:f3:29:48:52:c4:39: 56:6a:ab:e6:cf:d5:f4:ee:34:65:49:c4:b2:a5:a1: 8f:37:30:d2:79:c7:27:20:1f:60:19:fa:68:1b:31: e6:0b:f1:95:b2:90:c6:88:30:48:13:8d:91:13:d9: 32:bb:d1:8c:08:05:85:dc:9c:cf:88:2f:69:d7:ad: 93:2e:55:34:73:6d:84:69:f3:b4:f3:c9:44:2d:9d: 44:73:ab:96:42:cd:51:f6:e2:5f:50:60:fb:51:62: 9d:87:23:8c:3f:5e:84:ad:1f:83:cf:0e:e1:ad:c0: c6:84:ff:64:ca:48:05:0f:a0:5d:18:6d:e8:69:5e: 3b:0f:fe:b2:07:ef:c0:e6:6f:aa:cf:15:26:13:c5: e4:c4:ba:ac:52:a9:4a:fc:34:6a:b6:42:13:ec:21: a0:e2:2b:4a:5d:ae:bd:be:56:e5:39:2c:7d:2f:8b: 28:9f:f7:b6:09:0e:c4:52:f6:e1:b6:68:74:f4:2c: 61:58:3d:7d:87:36:a3:2c:81:1b:3d:a2:a8:73:53: ff:66:a0:c9:3d:f8:bd:33:1e:1e:f5:35:c6:ca:f1: be:63:96:9b:94:e7:39:1c:d1:35:30:72:25:cc:50: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CC:45:72:C8:A3:CB:33:B5:D7:2C:09:07:17:4D:8B:8A:7F:B1:2B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b34c442-1c54-4c2b-a4eb-b2dded05ce1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:2040::/48 Signature Algorithm: sha256WithRSAEncryption 7f:f3:bb:f7:24:06:e7:fc:9e:bf:2f:46:bf:1b:e6:84:ab:9e: 39:5e:64:a7:a4:46:93:18:a3:82:da:f6:34:57:11:3a:3c:24: dd:be:76:4b:1c:b2:7d:24:4d:ef:02:fa:10:12:a3:b7:81:44: 41:e0:91:f8:8c:22:59:ea:86:9f:cb:85:f0:1c:d8:63:b3:4b: db:47:cb:bd:99:31:c9:44:8e:e2:71:7e:b8:38:52:fe:4b:5a: aa:90:ec:03:90:f1:5d:2e:00:ec:96:af:82:58:f6:a0:09:cf: 3c:1a:5b:1d:ac:0b:1c:94:82:19:9a:fe:5e:db:08:8c:76:5f: 55:ec:14:9d:de:f4:9d:b7:10:48:28:6b:d3:f2:a8:24:86:f3: 8a:17:b8:5a:74:d3:02:3c:52:a8:60:27:24:01:b5:f4:65:7a: 20:2a:54:bd:ad:b1:f5:ba:82:05:3b:86:ae:83:69:98:bb:82: 59:3d:c1:4b:ab:22:1d:1f:57:22:39:40:5d:21:e3:b1:22:bd: ca:b1:7c:bd:f0:15:06:07:4c:dc:c5:28:77:4b:cb:34:48:8b: dd:f2:23:69:94:58:8a:a2:38:13:fd:1e:5d:7d:47:d3:a2:aa: bc:c3:35:61:13:14:10:a0:c9:16:7a:68:59:d5:c4:28:58:d5: 80:33:92:10 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXyu9WfkZtF9jo0nR9ZfhGK9pCw8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMDAxM1oX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAMjIwMGI1ODU2Y2I4OGEzZDEwMDBi NDVjYjA3MTlhMmE0NWQ4OWY5ODg5MzIyMDhhNzliNWExNjUwYTcyMjJkYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvOLlllq1k1wkoY5ujzv7b0KhCir cQrzKUhSxDlWaqvmz9X07jRlScSypaGPNzDSeccnIB9gGfpoGzHmC/GVspDGiDBI E42RE9kyu9GMCAWF3JzPiC9p162TLlU0c22EafO088lELZ1Ec6uWQs1R9uJfUGD7 UWKdhyOMP16ErR+Dzw7hrcDGhP9kykgFD6BdGG3oaV47D/6yB+/A5m+qzxUmE8Xk xLqsUqlK/DRqtkIT7CGg4itKXa69vlblOSx9L4son/e2CQ7EUvbhtmh09CxhWD19 hzajLIEbPaKoc1P/ZqDJPfi9Mx4e9TXGyvG+Y5ablOc5HNE1MHIlzFDStQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEvMRXLIo8sztdcsCQcXTYuKf7ErMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZiMzRjNDQyLTFjNTQtNGMyYi1hNGViLWIyZGRlZDA1Y2UxZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6iBAMA0GCSqGSIb3DQEBCwUAA4IBAQB/87v3JAbn/J6/L0a/ G+aEq545XmSnpEaTGKOC2vY0VxE6PCTdvnZLHLJ9JE3vAvoQEqO3gURB4JH4jCJZ 6oafy4XwHNhjs0vbR8u9mTHJRI7icX64OFL+S1qqkOwDkPFdLgDslq+CWPagCc88 GlsdrAsclIIZmv5e2wiMdl9V7BSd3vSdtxBIKGvT8qgkhvOKF7hadNMCPFKoYCck AbX0ZXogKlS9rbH1uoIFO4aug2mYu4JZPcFLqyIdH1ciOUBdIeOxIr3KsXy98BUG B0zcxSh3S8s0SIvd8iNplFiKojgT/R5dfUfToqq8wzVhExQQoMkWemhZ1cQoWNWA M5IQ -----END CERTIFICATE-----Generated at Fri Jul 24 07:27:40 2026 by rpki-client