$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39722937-1a3f-446d-9bac-081e561c2054.roa File: 39722937-1a3f-446d-9bac-081e561c2054.roa (raw, json) Hash identifier: W+KlhwAQJaskjoEmlOP4TMn9dbyYCZFV38KntRBuXE8= Subject key identifier: AA:0B:2E:0E:3C:B0:50:EB:2A:63:69:08:75:8C:28:53:C6:E6:23:6F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1F261D2F538E15EC88BDB8E13BCBAEC77C2D7479 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39722937-1a3f-446d-9bac-081e561c2054.roa Signing time: Mon 22 Jun 2026 00:00:41 +0000 ROA not before: Mon 22 Jun 2026 00:00:41 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:26:1d:2f:53:8e:15:ec:88:bd:b8:e1:3b:cb:ae:c7:7c:2d:74:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:00:41 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=8adc4112deaee83f53013fab0a20384d066e458adfacb38679a241b6cda689cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:92:9b:40:59:e3:fe:5c:7d:4f:b3:e6:a4:50: b5:4d:04:44:40:f9:24:25:5a:2c:be:fb:6a:52:a5: 15:a5:4d:de:92:52:d2:64:47:22:79:fe:ec:a3:0b: 1a:6e:eb:f6:8b:70:c3:2d:ec:e3:0f:32:dd:62:b2: b5:0d:ab:71:68:22:e6:69:52:9f:ca:47:fd:dd:a5: ae:84:2f:b8:18:5c:9f:36:94:0b:00:87:d0:6c:b8: 87:ec:c1:46:6e:27:00:9f:94:45:0f:f8:44:3a:f2: 4b:c1:55:0d:98:1f:bc:c0:32:35:0d:a1:f7:1c:32: cb:ec:77:84:27:4b:7b:5f:f4:a3:a6:ce:4e:75:e7: 65:ca:aa:7e:38:92:42:eb:7b:5f:67:30:73:8a:2d: d0:ee:57:9a:3a:c9:7c:af:bd:46:0d:31:c1:44:c6: b5:de:16:5e:e2:2b:0c:9c:d7:4f:18:94:bf:1b:15: b5:3c:c0:2a:55:ae:08:53:71:06:ba:0a:7e:73:4d: 17:4d:4b:8b:6d:40:f7:5f:65:33:f3:67:c4:5a:b5: 14:93:89:c2:19:c8:c2:55:22:b8:10:8f:d7:6f:13: 3b:d1:1d:ec:e8:e1:8d:0e:7a:b8:c7:11:9f:f2:8e: 7d:e5:9a:5c:42:1c:8c:76:5a:c9:74:42:8b:82:6b: a3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0B:2E:0E:3C:B0:50:EB:2A:63:69:08:75:8C:28:53:C6:E6:23:6F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39722937-1a3f-446d-9bac-081e561c2054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:e080::/48 Signature Algorithm: sha256WithRSAEncryption 7b:f4:8d:f9:ed:0c:d1:93:59:5d:4f:61:88:06:53:f1:3e:31: 8a:81:24:ea:67:6e:07:ab:92:21:4e:0b:81:f2:68:32:58:88: a1:53:5d:66:8a:44:c0:06:11:38:ad:de:c5:d5:7b:a4:58:11: d8:28:f8:12:75:5d:76:ef:93:fa:75:88:b9:89:df:93:8e:74: b9:92:f4:83:a5:c6:82:6a:72:08:c5:a3:fc:ac:0c:43:74:4d: 8e:9d:2a:52:64:4e:81:9f:84:b0:54:16:a9:08:14:2a:b3:fb: f6:97:e2:68:16:37:af:ea:d9:5c:7a:65:0a:7b:96:b5:a3:cf: 69:17:a0:e3:9e:c3:86:e9:20:72:ae:3e:82:ca:09:ee:cd:99: 7a:6c:71:ad:a5:e3:4e:f1:69:f9:08:c1:ef:3e:d5:bc:44:ea: 60:2c:6b:79:a2:08:41:71:b8:16:5c:4b:c0:95:e6:8e:0b:28: b7:2f:b1:1f:45:bb:66:71:cf:3b:c3:cb:06:ef:0c:fd:b7:fa: 81:81:9c:cf:0e:f0:3b:e4:a6:19:78:90:e4:f2:53:2d:91:3a: aa:a8:6f:9a:54:23:e5:fe:9c:07:81:ec:fa:b3:1f:10:0a:6f: 31:bb:41:20:19:55:28:48:3f:47:48:7e:65:15:a6:b4:32:c1: ec:31:73:7a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHyYdL1OOFeyIvbjhO8uux3wtdHkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDA0MVoX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAOGFkYzQxMTJkZWFlZTgzZjUzMDEz ZmFiMGEyMDM4NGQwNjZlNDU4YWRmYWNiMzg2NzlhMjQxYjZjZGE2ODljZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZKbQFnj/lx9T7PmpFC1TQREQPkk JVosvvtqUqUVpU3eklLSZEcief7sowsabuv2i3DDLezjDzLdYrK1DatxaCLmaVKf ykf93aWuhC+4GFyfNpQLAIfQbLiH7MFGbicAn5RFD/hEOvJLwVUNmB+8wDI1DaH3 HDLL7HeEJ0t7X/Sjps5Odedlyqp+OJJC63tfZzBzii3Q7leaOsl8r71GDTHBRMa1 3hZe4isMnNdPGJS/GxW1PMAqVa4IU3EGugp+c00XTUuLbUD3X2Uz82fEWrUUk4nC GcjCVSK4EI/XbxM70R3s6OGNDnq4xxGf8o595ZpcQhyMdlrJdEKLgmujqQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKoLLg48sFDrKmNpCHWMKFPG5iNvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM5NzIyOTM3LTFhM2YtNDQ2ZC05YmFjLTA4MWU1NjFjMjA1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6+CAMA0GCSqGSIb3DQEBCwUAA4IBAQB79I357QzRk1ldT2GI BlPxPjGKgSTqZ24Hq5IhTguB8mgyWIihU11mikTABhE4rd7F1XukWBHYKPgSdV12 75P6dYi5id+TjnS5kvSDpcaCanIIxaP8rAxDdE2OnSpSZE6Bn4SwVBapCBQqs/v2 l+JoFjev6tlcemUKe5a1o89pF6DjnsOG6SByrj6CygnuzZl6bHGtpeNO8Wn5CMHv PtW8ROpgLGt5oghBcbgWXEvAleaOCyi3L7EfRbtmcc87w8sG7wz9t/qBgZzPDvA7 5KYZeJDk8lMtkTqqqG+aVCPl/pwHgez6sx8QCm8xu0EgGVUoSD9HSH5lFaa0MsHs MXN6 -----END CERTIFICATE-----Generated at Thu Jul 9 11:06:30 2026 by rpki-client