$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f9cb38f-ec0a-4ab9-8c8d-3a7fbdc93515.roa File: 6f9cb38f-ec0a-4ab9-8c8d-3a7fbdc93515.roa (raw, json) Hash identifier: G4KXV2RMKrYdVxIJrRTiuoNtCGxUQqccLLzEWlwwQwA= Subject key identifier: 99:24:89:9D:AB:5E:50:08:8B:8B:BB:2F:9A:9B:A3:55:86:15:D2:93 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E7E9375065362B70B6A181C6442ACC726B09770 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f9cb38f-ec0a-4ab9-8c8d-3a7fbdc93515.roa Signing time: Tue 12 May 2026 00:10:43 +0000 ROA not before: Tue 12 May 2026 00:10:43 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:7e:93:75:06:53:62:b7:0b:6a:18:1c:64:42:ac:c7:26:b0:97:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:10:43 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=0e577a68ebd8af3b68d399cb2f6802606c265835993ba195d35f08244e85fe32, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:75:98:3f:7d:92:8f:1f:c9:d7:5d:e0:27: 5d:50:1d:c8:87:19:57:b9:7d:37:9b:e1:52:be:e2: ec:e9:0d:38:af:74:73:ac:c5:7d:97:59:e8:c8:5c: ff:f1:6f:2b:3f:7e:e5:d6:f5:f4:76:46:66:9f:98: 78:2e:7f:68:d2:ba:52:c0:54:50:ad:09:6d:a2:29: 84:17:66:6d:1e:06:32:f2:74:12:35:af:48:08:45: 28:ee:a6:12:ea:aa:92:15:4a:91:df:62:42:95:14: 92:dc:b0:d4:1b:25:7d:d9:32:b0:95:72:43:d2:06: 3c:d9:28:af:a3:8e:7d:dd:4c:5a:fd:fa:4c:13:26: 5c:15:c7:f4:f9:58:34:43:40:ea:69:9e:5e:02:63: 19:67:06:06:83:a3:ef:a7:ac:c0:1c:44:a2:91:aa: 0b:8d:30:04:7f:d6:00:65:4e:e0:4f:ea:8f:82:97: 4f:3e:a4:e3:53:d1:d6:cd:b6:2a:6a:9f:a6:af:e1: 06:34:f5:66:2d:bc:0d:66:0e:37:85:36:bd:1f:5f: b9:64:43:7f:af:f8:73:a2:25:3c:41:2a:3f:2b:9d: 85:fb:9e:72:78:41:9f:fb:c4:bd:27:70:b5:bf:c3: ea:84:af:ed:36:a6:3c:c9:ce:6a:9b:cc:76:98:e7: 3c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:24:89:9D:AB:5E:50:08:8B:8B:BB:2F:9A:9B:A3:55:86:15:D2:93 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f9cb38f-ec0a-4ab9-8c8d-3a7fbdc93515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2080::/48 Signature Algorithm: sha256WithRSAEncryption a8:81:e6:8f:c0:e4:96:ec:65:7b:ae:2c:8e:81:8f:75:24:8c: ef:7f:9e:07:b7:15:90:50:28:68:e0:5d:9b:9c:97:01:58:f3: 54:a0:97:2a:eb:89:9d:8e:69:b4:d5:bc:42:ef:90:47:7f:51: 7c:46:ed:e5:e9:d1:35:39:35:cc:20:9a:c8:3f:cd:19:7d:34: 78:e7:41:9f:3f:60:bf:9c:7c:5d:15:de:22:36:b0:7a:66:ae: 71:46:79:9e:53:18:f8:52:ed:66:74:4b:60:d5:e6:24:ff:13: d0:2d:7e:72:bd:f1:22:7a:b7:c0:5a:41:5b:89:38:97:f3:d2: d0:0b:61:29:93:f6:29:06:22:1b:a1:61:d4:f7:34:80:25:39: 13:e0:63:9c:26:8f:02:51:79:f5:22:cb:11:c3:48:81:7c:ea: d3:e0:f0:e5:15:db:e2:48:0a:e9:4c:f1:2f:40:f7:db:9e:ca: 86:ef:34:ce:c9:f3:7c:dc:d9:38:56:75:37:36:ee:70:88:6b: 99:c9:95:f8:7e:5f:b6:ba:60:f7:d9:d6:b7:46:22:40:f2:86: 02:17:97:c5:99:09:67:b0:64:51:97:3f:91:c0:2a:1a:0a:a0: 25:dd:5b:48:fd:50:c4:3d:e0:fe:de:4a:8b:a1:ec:26:9a:54: c8:fb:52:b3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULn6TdQZTYrcLahgcZEKsxyawl3AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMTA0M1oX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAMGU1NzdhNjhlYmQ4YWYzYjY4ZDM5 OWNiMmY2ODAyNjA2YzI2NTgzNTk5M2JhMTk1ZDM1ZjA4MjQ0ZTg1ZmUzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3J1mD99ko8fyddd4CddUB3IhxlX uX03m+FSvuLs6Q04r3RzrMV9l1noyFz/8W8rP37l1vX0dkZmn5h4Ln9o0rpSwFRQ rQltoimEF2ZtHgYy8nQSNa9ICEUo7qYS6qqSFUqR32JClRSS3LDUGyV92TKwlXJD 0gY82Sivo4593Uxa/fpMEyZcFcf0+Vg0Q0DqaZ5eAmMZZwYGg6Pvp6zAHESikaoL jTAEf9YAZU7gT+qPgpdPPqTjU9HWzbYqap+mr+EGNPVmLbwNZg43hTa9H1+5ZEN/ r/hzoiU8QSo/K52F+55yeEGf+8S9J3C1v8PqhK/tNqY8yc5qm8x2mOc8zwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJkkiZ2rXlAIi4u7L5qbo1WGFdKTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZmOWNiMzhmLWVjMGEtNGFiOS04YzhkLTNhN2ZiZGM5MzUxNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yCAMA0GCSqGSIb3DQEBCwUAA4IBAQCogeaPwOSW7GV7riyO gY91JIzvf54HtxWQUCho4F2bnJcBWPNUoJcq64mdjmm01bxC75BHf1F8Ru3l6dE1 OTXMIJrIP80ZfTR450GfP2C/nHxdFd4iNrB6Zq5xRnmeUxj4Uu1mdEtg1eYk/xPQ LX5yvfEierfAWkFbiTiX89LQC2Epk/YpBiIboWHU9zSAJTkT4GOcJo8CUXn1IssR w0iBfOrT4PDlFdviSArpTPEvQPfbnsqG7zTOyfN83Nk4VnU3Nu5wiGuZyZX4fl+2 umD32da3RiJA8oYCF5fFmQlnsGRRlz+RwCoaCqAl3VtI/VDEPeD+3kqLoewmmlTI +1Kz -----END CERTIFICATE-----Generated at Tue May 12 23:27:04 2026 by rpki-client