$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ef6ab83-cb4a-4c45-a58b-8383ab2bf4f7.roa File: 9ef6ab83-cb4a-4c45-a58b-8383ab2bf4f7.roa (raw, json) Hash identifier: TyssG3lk8q+bS7kzp4EQ4gYXxXdIOOek2LpukF2odVM= Subject key identifier: 4C:16:8C:2B:67:9E:1C:92:07:0D:AA:CA:53:8D:47:3C:A9:3D:D9:35 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 679F5D3D81D50B76C7367EAD00BCEA77019A72D5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ef6ab83-cb4a-4c45-a58b-8383ab2bf4f7.roa Signing time: Wed 06 May 2026 00:00:36 +0000 ROA not before: Wed 06 May 2026 00:00:36 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:9f:5d:3d:81:d5:0b:76:c7:36:7e:ad:00:bc:ea:77:01:9a:72:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 6 00:00:36 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=66d47fca831de639192eea945d247c8d94bcc5a2d92f221408c7229997431812, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:c7:a5:b4:cf:0f:1e:ec:4a:8b:85:c9:cb: 3c:ff:a6:93:fc:40:26:2e:50:c9:65:51:68:3d:32: 27:e2:08:df:15:9d:51:ee:bf:b2:d9:62:bf:93:f9: 5d:f9:07:4f:b0:6f:7b:c6:05:89:34:f7:b5:fc:a5: fc:2b:32:7f:db:f4:cd:34:0b:3d:2c:a7:1e:27:33: 47:e1:8c:ba:a6:36:7a:e0:ee:c6:2c:41:04:11:6b: a9:fe:99:a4:05:ef:f5:9f:7d:c2:7a:95:e9:35:ac: 30:06:c6:2b:17:2b:14:d8:33:fe:a9:44:13:84:a6: d4:57:2b:b2:ac:fc:a3:93:18:b8:b5:1d:79:70:d0: 8f:a5:bd:65:47:9b:3a:a7:c2:0a:1c:3d:17:93:79: 15:26:7e:2b:0e:71:f4:e8:f2:63:6f:e8:29:aa:9b: b2:95:90:d9:a4:5f:10:72:7d:a0:ce:16:9d:61:46: ca:af:ab:c6:7b:27:79:74:2c:e3:01:a4:2f:1e:72: 04:e2:75:73:46:3d:4b:40:67:12:81:67:0f:54:e5: 70:57:c5:a1:8c:9d:45:74:2a:45:6f:f0:be:66:ff: 81:de:f7:be:0b:f8:8f:e0:10:0c:f2:ab:ba:1a:df: 6c:9b:e2:90:1e:c3:5f:23:45:b4:eb:bc:8f:8e:21: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:16:8C:2B:67:9E:1C:92:07:0D:AA:CA:53:8D:47:3C:A9:3D:D9:35 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ef6ab83-cb4a-4c45-a58b-8383ab2bf4f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:b000::/40 Signature Algorithm: sha256WithRSAEncryption ac:0b:ee:0b:05:8e:65:10:65:34:de:66:e0:a0:65:2e:b6:d3: a0:e7:a2:35:19:82:90:f6:77:de:79:94:b6:8e:fd:cb:7d:ad: a3:3d:79:46:e9:6d:f4:c9:f3:8c:00:a0:90:3f:ba:45:92:1f: 03:61:4e:c0:1e:5d:94:2a:25:7f:ea:71:85:50:7e:c3:27:5d: 1c:f9:a1:0e:3e:bb:ec:64:1e:b7:b8:a6:53:d6:2e:55:5c:ca: 6d:43:ec:04:e0:bd:9a:cf:82:d1:ad:2a:29:72:61:73:23:ea: 60:42:18:ca:0f:b6:40:a6:8a:a2:8a:c7:2c:bd:07:08:82:a2: b0:a3:f7:78:9d:33:99:22:20:25:24:5f:3e:3a:ac:be:59:ee: 85:a8:35:02:d6:99:8a:85:71:cc:33:d6:68:4e:01:66:65:0d: f2:ec:f6:94:e2:0c:64:f0:85:35:c0:2a:dc:d9:99:a3:d0:a3: f3:65:ae:1b:ed:10:3e:dc:71:c3:bf:0e:27:60:3b:62:3a:67: ee:40:67:a2:e3:fd:25:eb:e1:d8:f3:4d:55:01:3b:d1:cc:01: f5:50:9a:1d:e4:c2:b2:be:d8:18:06:94:0a:19:1e:e0:80:3c: 98:cd:c3:08:8c:7d:69:3d:b3:a8:16:75:8c:5e:55:c4:1e:28: 4f:00:28:2f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZ59dPYHVC3bHNn6tALzqdwGactUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwNjAwMDAzNloX DTI2MDgwNDIzNTk1OVowejFJMEcGA1UEBRNANjZkNDdmY2E4MzFkZTYzOTE5MmVl YTk0NWQyNDdjOGQ5NGJjYzVhMmQ5MmYyMjE0MDhjNzIyOTk5NzQzMTgxMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCXHpbTPDx7sSouFycs8/6aT/EAm LlDJZVFoPTIn4gjfFZ1R7r+y2WK/k/ld+QdPsG97xgWJNPe1/KX8KzJ/2/TNNAs9 LKceJzNH4Yy6pjZ64O7GLEEEEWup/pmkBe/1n33CepXpNawwBsYrFysU2DP+qUQT hKbUVyuyrPyjkxi4tR15cNCPpb1lR5s6p8IKHD0Xk3kVJn4rDnH06PJjb+gpqpuy lZDZpF8Qcn2gzhadYUbKr6vGeyd5dCzjAaQvHnIE4nVzRj1LQGcSgWcPVOVwV8Wh jJ1FdCpFb/C+Zv+B3ve+C/iP4BAM8qu6Gt9sm+KQHsNfI0W067yPjiEwIwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEwWjCtnnhySBw2qylONRzypPdk1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzllZjZhYjgzLWNiNGEtNGM0NS1hNThiLTgzODNhYjJiZjRmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYLAwDQYJKoZIhvcNAQELBQADggEBAKwL7gsFjmUQZTTeZuCg ZS6206DnojUZgpD2d955lLaO/ct9raM9eUbpbfTJ84wAoJA/ukWSHwNhTsAeXZQq JX/qcYVQfsMnXRz5oQ4+u+xkHre4plPWLlVcym1D7ATgvZrPgtGtKilyYXMj6mBC GMoPtkCmiqKKxyy9BwiCorCj93idM5kiICUkXz46rL5Z7oWoNQLWmYqFccwz1mhO AWZlDfLs9pTiDGTwhTXAKtzZmaPQo/NlrhvtED7cccO/DidgO2I6Z+5AZ6Lj/SXr 4djzTVUBO9HMAfVQmh3kwrK+2BgGlAoZHuCAPJjNwwiMfWk9s6gWdYxeVcQeKE8A KC8= -----END CERTIFICATE-----Generated at Tue May 12 22:18:55 2026 by rpki-client