$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b34c442-1c54-4c2b-a4eb-b2dded05ce1f.roa File: 6b34c442-1c54-4c2b-a4eb-b2dded05ce1f.roa (raw, json) Hash identifier: k1bxmvfuO8HK87grX4uI0lD6i6RNAJ0IcMSwUcX7gKM= Subject key identifier: 78:48:A9:2B:2A:65:FB:3A:20:DC:B4:AE:86:B0:55:80:47:15:CA:AE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77463C7928500AE9E6D4D7E6A0E50BE42915C8FC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b34c442-1c54-4c2b-a4eb-b2dded05ce1f.roa Signing time: Sat 02 May 2026 00:00:50 +0000 ROA not before: Sat 02 May 2026 00:00:50 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:46:3c:79:28:50:0a:e9:e6:d4:d7:e6:a0:e5:0b:e4:29:15:c8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:00:50 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=6ed95dd3dfdeead1bb32869e62babce9f2011ecc190faeaacb95e05273064bc6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:83:dd:cc:89:e6:d4:48:19:b4:32:9d:15:6c: c2:90:4e:85:e4:3b:ba:b1:c3:62:0a:09:ad:47:23: 3b:7c:ec:7e:e6:47:6e:13:c7:8f:aa:8d:d1:c5:0a: 90:60:b8:52:4d:c3:ee:aa:fb:3a:fb:d3:74:7b:3b: 0d:02:c3:7d:c2:ed:32:71:4b:2e:72:36:99:ca:0a: 1a:f1:33:f2:9b:38:68:6c:31:5a:76:bc:33:7d:ca: ab:c2:64:52:e2:d7:14:70:95:38:ca:96:d4:2d:92: 4d:0b:7c:23:0d:69:17:34:7e:27:94:7d:a3:21:df: 35:6a:40:2b:08:11:48:e1:fa:3f:cb:44:ee:47:ab: e1:0e:72:b5:06:27:0c:0a:39:54:b3:f3:2f:1a:49: 23:d4:2e:30:a3:16:58:ee:88:95:24:50:6d:17:3c: 4f:08:54:86:05:91:77:89:da:05:76:b8:79:0b:82: 71:4f:d3:5b:e7:98:0f:89:71:29:20:25:dc:35:d8: ab:f0:4d:ac:26:06:3b:b3:32:d0:d9:2c:14:55:bf: 27:35:27:ce:92:1c:66:b4:b3:ad:d0:c1:fe:fc:99: 7a:6d:74:86:8e:37:09:93:5a:5d:19:e2:00:9c:3d: 73:58:15:da:ca:59:06:16:4c:db:ac:ea:7e:3f:e0: 75:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:48:A9:2B:2A:65:FB:3A:20:DC:B4:AE:86:B0:55:80:47:15:CA:AE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b34c442-1c54-4c2b-a4eb-b2dded05ce1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:2040::/48 Signature Algorithm: sha256WithRSAEncryption 00:e3:59:36:f2:be:cf:0d:da:18:52:1d:9b:1e:c9:8c:cb:26: 93:3f:33:93:94:f0:8c:de:bc:62:46:c7:4c:fd:1f:3e:95:3e: 04:33:28:1f:66:b3:79:f3:d5:17:a4:eb:75:b3:56:b6:92:4b: d0:f5:6e:45:97:30:20:8c:d0:23:c1:11:56:78:49:5c:8e:05: 15:93:3a:4c:fe:11:bf:95:29:35:f1:72:37:cb:46:68:e1:3f: 8b:dd:5e:1a:20:46:92:98:04:76:12:bd:84:05:c3:d7:fa:a3: 1c:a5:00:1e:03:53:8d:1d:1a:e0:0a:a1:d6:fd:db:20:63:4e: c1:07:46:fb:66:2c:5e:f2:d9:9b:a9:b3:f4:f5:80:7d:46:33: d2:15:47:80:e6:d5:42:6e:f0:87:db:82:2f:5d:d2:a8:bb:73: ff:8e:50:2b:5b:b8:2e:02:c8:87:ea:fe:97:0a:43:80:b1:f1: 59:57:e3:9e:39:9f:82:ef:45:6d:22:8d:8a:20:e9:99:f3:45: c3:15:9f:98:e0:2f:b0:24:dc:8d:07:bd:49:c6:4c:d3:b9:43: c0:7f:1f:c7:19:a0:14:d4:0d:a6:5e:2a:06:b3:29:26:d5:28: 07:a1:97:90:49:88:cf:d1:39:8e:50:38:d8:48:99:03:11:60: 72:d4:b7:61 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUd0Y8eShQCunm1NfmoOUL5CkVyPwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMDA1MFoX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNANmVkOTVkZDNkZmRlZWFkMWJiMzI4 NjllNjJiYWJjZTlmMjAxMWVjYzE5MGZhZWFhY2I5NWUwNTI3MzA2NGJjNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oPdzInm1EgZtDKdFWzCkE6F5Du6 scNiCgmtRyM7fOx+5kduE8ePqo3RxQqQYLhSTcPuqvs6+9N0ezsNAsN9wu0ycUsu cjaZygoa8TPymzhobDFadrwzfcqrwmRS4tcUcJU4ypbULZJNC3wjDWkXNH4nlH2j Id81akArCBFI4fo/y0TuR6vhDnK1BicMCjlUs/MvGkkj1C4woxZY7oiVJFBtFzxP CFSGBZF3idoFdrh5C4JxT9Nb55gPiXEpICXcNdir8E2sJgY7szLQ2SwUVb8nNSfO khxmtLOt0MH+/Jl6bXSGjjcJk1pdGeIAnD1zWBXaylkGFkzbrOp+P+B1YwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHhIqSsqZfs6INy0roawVYBHFcquMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZiMzRjNDQyLTFjNTQtNGMyYi1hNGViLWIyZGRlZDA1Y2UxZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6iBAMA0GCSqGSIb3DQEBCwUAA4IBAQAA41k28r7PDdoYUh2b HsmMyyaTPzOTlPCM3rxiRsdM/R8+lT4EMygfZrN589UXpOt1s1a2kkvQ9W5FlzAg jNAjwRFWeElcjgUVkzpM/hG/lSk18XI3y0Zo4T+L3V4aIEaSmAR2Er2EBcPX+qMc pQAeA1ONHRrgCqHW/dsgY07BB0b7Zixe8tmbqbP09YB9RjPSFUeA5tVCbvCH24Iv XdKou3P/jlArW7guAsiH6v6XCkOAsfFZV+OeOZ+C70VtIo2KIOmZ80XDFZ+Y4C+w JNyNB71JxkzTuUPAfx/HGaAU1A2mXioGsykm1SgHoZeQSYjP0TmOUDjYSJkDEWBy 1Ldh -----END CERTIFICATE-----Generated at Tue May 12 23:48:04 2026 by rpki-client