$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6d7d12e-d19b-4b6f-84d1-ef956b657000.roa File: a6d7d12e-d19b-4b6f-84d1-ef956b657000.roa (raw, json) Hash identifier: /mkUJeuTpjXxcAQd3oj3Xuo84O4rOzm7ILfh+3jgD2Q= Subject key identifier: 24:00:17:B2:10:94:E6:A5:B6:CC:FD:D4:C6:59:4B:1B:37:BA:C3:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24246CA7D22EC4EDC0C90A688450628B023610F4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6d7d12e-d19b-4b6f-84d1-ef956b657000.roa Signing time: Mon 11 May 2026 00:20:44 +0000 ROA not before: Mon 11 May 2026 00:20:44 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:24:6c:a7:d2:2e:c4:ed:c0:c9:0a:68:84:50:62:8b:02:36:10:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:20:44 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=99523e2db78696d00644ffd409bd9d1caae8069175b7073b5c61d60c931a78b7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ca:47:f6:a0:d5:a4:08:fa:76:2b:bb:5e:8f: b9:6a:1a:26:b5:df:bf:4a:66:f4:df:06:9c:1e:7b: 0c:d2:02:f7:4a:23:ef:cd:d5:7c:df:19:ef:82:7f: e1:c3:e4:c6:61:79:b7:30:ca:4c:6f:d1:81:68:dc: ff:a5:d2:15:f4:b2:f1:c1:a4:49:7d:d1:49:4e:f6: 7a:69:02:5c:62:4b:52:41:45:5a:ce:f2:73:a7:fb: 7d:dc:a3:d6:a1:9d:d5:8c:7e:77:e6:da:66:5a:7d: 5f:de:c5:1a:78:08:dd:06:19:31:c1:08:2c:a7:97: 7f:0b:db:0d:51:d4:ef:27:4f:9d:9f:58:b8:20:85: 60:bd:aa:b6:21:7a:57:d7:2d:ce:40:0e:16:ba:52: 72:57:53:1d:4c:80:77:8d:f0:a7:3d:dd:c7:ec:b6: 0b:45:02:83:f2:89:27:20:3f:e8:d4:fe:73:d2:0c: 87:a1:be:37:48:44:b0:3d:57:a6:1a:0c:55:c3:4f: 0d:ac:72:d9:44:7e:d3:99:69:97:fe:cc:02:0e:28: 35:8a:12:eb:f0:17:4c:dc:90:9c:75:65:63:09:15: e6:ca:65:57:d6:2e:de:a8:26:d9:79:84:24:5a:46: ed:45:6c:3f:6f:ce:d7:66:cf:5b:a1:86:17:7b:06: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:17:B2:10:94:E6:A5:B6:CC:FD:D4:C6:59:4B:1B:37:BA:C3:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6d7d12e-d19b-4b6f-84d1-ef956b657000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f080::/48 Signature Algorithm: sha256WithRSAEncryption bd:8c:94:65:31:61:c0:7f:a1:6c:7a:46:a5:cf:95:11:60:15: cc:1c:d3:14:31:d2:d8:32:23:98:38:1e:c2:88:f1:46:ee:08: 0c:6d:c5:24:fe:25:74:68:f2:4c:b8:21:29:4c:ad:5c:9e:e6: b8:68:bb:e8:69:a2:fc:25:e9:f0:34:eb:88:46:92:75:be:e2: 40:17:1c:89:c0:ca:79:59:dd:20:f7:b2:50:35:a6:66:09:c4: 7f:66:27:d7:cc:c3:76:ea:aa:91:6e:96:74:ea:8f:f7:84:0e: 9f:2d:d8:89:ab:35:58:bc:7b:2a:51:3a:fc:62:70:9d:73:15: 64:f3:de:b9:86:89:e6:d4:fb:f8:b8:f4:4e:3e:ab:14:1b:92: fe:56:cc:15:23:e4:3b:d6:c8:7f:a0:10:dd:9b:04:36:89:ba: 17:b2:32:38:dc:bc:57:7d:16:33:dd:39:c1:6d:a6:f9:ee:9b: fa:aa:c9:fe:58:2b:ee:c6:1a:e7:06:c6:10:7b:e7:98:7d:44: c7:b6:35:8c:57:50:75:99:75:96:45:22:19:73:6a:08:36:b8: 10:5d:66:37:e3:3c:91:4c:72:5a:42:ec:bc:72:49:58:49:cd: 31:42:9f:7b:69:00:6c:0a:51:6c:f9:ec:15:66:5f:f8:a1:94: 5e:d7:8f:b1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJCRsp9IuxO3AyQpohFBiiwI2EPQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMjA0NFoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAOTk1MjNlMmRiNzg2OTZkMDA2NDRm ZmQ0MDliZDlkMWNhYWU4MDY5MTc1YjcwNzNiNWM2MWQ2MGM5MzFhNzhiNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8pH9qDVpAj6diu7Xo+5ahomtd+/ Smb03wacHnsM0gL3SiPvzdV83xnvgn/hw+TGYXm3MMpMb9GBaNz/pdIV9LLxwaRJ fdFJTvZ6aQJcYktSQUVazvJzp/t93KPWoZ3VjH535tpmWn1f3sUaeAjdBhkxwQgs p5d/C9sNUdTvJ0+dn1i4IIVgvaq2IXpX1y3OQA4WulJyV1MdTIB3jfCnPd3H7LYL RQKD8oknID/o1P5z0gyHob43SESwPVemGgxVw08NrHLZRH7TmWmX/swCDig1ihLr 8BdM3JCcdWVjCRXmymVX1i7eqCbZeYQkWkbtRWw/b87XZs9boYYXewa/UQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCQAF7IQlOaltsz91MZZSxs3usPrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E2ZDdkMTJlLWQxOWItNGI2Zi04NGQxLWVmOTU2YjY1NzAwMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAPCAMA0GCSqGSIb3DQEBCwUAA4IBAQC9jJRlMWHAf6Fsekal z5URYBXMHNMUMdLYMiOYOB7CiPFG7ggMbcUk/iV0aPJMuCEpTK1cnua4aLvoaaL8 JenwNOuIRpJ1vuJAFxyJwMp5Wd0g97JQNaZmCcR/ZifXzMN26qqRbpZ06o/3hA6f LdiJqzVYvHsqUTr8YnCdcxVk8965honm1Pv4uPROPqsUG5L+VswVI+Q71sh/oBDd mwQ2iboXsjI43LxXfRYz3TnBbab57pv6qsn+WCvuxhrnBsYQe+eYfUTHtjWMV1B1 mXWWRSIZc2oINrgQXWY34zyRTHJaQuy8cklYSc0xQp97aQBsClFs+ewVZl/4oZRe 14+x -----END CERTIFICATE-----Generated at Tue May 12 23:35:02 2026 by rpki-client