$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b973dff-8640-4e84-8f46-c176292803ab.roa File: 5b973dff-8640-4e84-8f46-c176292803ab.roa (raw, json) Hash identifier: pjD4l8ZOBv5RMAp4mxlKoeiMfL21689bDklzlMdPSzE= Subject key identifier: EE:4F:94:1B:43:FD:A5:F6:4E:F4:CE:4D:AF:DE:11:ED:57:C1:8A:67 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C538D7587C00B16ABB94CCDE14AA469DF9D0641 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b973dff-8640-4e84-8f46-c176292803ab.roa Signing time: Mon 22 Jun 2026 00:01:05 +0000 ROA not before: Mon 22 Jun 2026 00:01:05 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:53:8d:75:87:c0:0b:16:ab:b9:4c:cd:e1:4a:a4:69:df:9d:06:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:01:05 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=145148512025b33d6e069857e5e1f119057f78b128954c24c3646f5981b005c1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:ce:fd:ed:3a:5d:6c:4c:03:ce:c6:22:b6: 40:9a:68:97:04:cb:06:66:a3:87:a7:64:1b:7b:0a: 63:fe:57:aa:df:31:f9:b5:16:b1:2d:5d:04:31:fd: c2:bb:24:25:5b:85:8a:08:e7:8a:92:1a:69:cb:2e: 94:37:37:9c:7f:8b:49:60:7f:50:42:b9:45:38:f0: ed:54:41:7d:22:49:18:4d:2c:3e:79:85:60:4d:96: c6:fc:83:0e:af:b8:14:ae:48:b9:24:c1:a1:a8:5f: 0c:8f:ac:b6:67:e7:f0:0e:62:e3:b6:fa:ef:39:fd: b2:0c:3b:53:1c:03:ff:92:bb:dd:94:8b:c8:33:e0: 90:f8:cf:9b:4c:7e:a3:d9:3e:0a:9c:86:53:96:29: 5c:ed:5c:d0:1c:8d:af:7f:26:68:05:d5:13:93:06: f3:a7:ab:fc:ff:cb:e2:f7:be:e4:69:0e:28:69:3d: 39:45:30:2f:3d:66:4a:ce:8a:e3:04:18:be:a2:16: e8:f3:e6:58:6d:77:73:83:5e:14:a6:3b:7a:9b:48: 5b:39:19:75:6a:b3:dd:e1:8b:fa:18:12:87:aa:31: c5:32:d8:7f:85:77:91:bc:19:18:fa:23:a7:e6:3e: fb:80:63:7c:5f:08:99:90:c1:1a:8b:a9:36:33:5b: d7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4F:94:1B:43:FD:A5:F6:4E:F4:CE:4D:AF:DE:11:ED:57:C1:8A:67 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b973dff-8640-4e84-8f46-c176292803ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:6000::/40 Signature Algorithm: sha256WithRSAEncryption 65:50:a1:0e:26:d0:ef:98:3f:8f:6b:87:e9:9d:b1:80:e1:f6: 9d:fb:cf:93:a5:aa:08:b4:79:e9:25:ec:6c:a8:89:84:87:7b: 7d:cc:bd:67:69:a5:94:9b:72:5e:a7:d5:54:40:3d:1a:2c:86: 63:ce:22:63:53:18:48:d9:41:d8:20:5a:52:fa:54:71:a4:08: a7:4e:7b:e1:4c:c0:db:0a:3f:87:b1:9d:76:52:58:8c:93:05: 82:5a:bd:64:e3:60:da:77:be:fa:7c:b3:43:93:1b:62:56:83: 82:59:a0:eb:52:db:4f:8d:8a:5b:24:fd:16:e9:69:58:95:82: bd:be:21:fa:ad:1a:ab:40:1b:96:73:d1:1e:88:5a:48:cf:b8: 3d:7f:cc:a1:18:60:d0:e7:b9:c5:1d:08:dc:8a:b9:b3:26:65: de:9f:7d:16:82:12:f6:66:45:20:cf:88:70:a1:f9:64:31:d3: 42:86:25:f5:31:da:f0:a5:ec:e5:bf:88:13:6a:c4:c3:38:88: 4b:36:d8:12:b0:c8:0f:08:c6:8d:fe:8b:a8:df:76:18:f9:f0: cc:d5:68:e1:ae:08:ff:70:38:88:55:c4:25:a2:0e:de:c4:0f: 92:8f:1f:e6:92:46:ec:00:88:9d:e1:6f:78:05:2a:b2:43:8e: 02:e3:d0:b8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfFONdYfACxaruUzN4Uqkad+dBkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDEwNVoX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAMTQ1MTQ4NTEyMDI1YjMzZDZlMDY5 ODU3ZTVlMWYxMTkwNTdmNzhiMTI4OTU0YzI0YzM2NDZmNTk4MWIwMDVjMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW3O/e06XWxMA87GIrZAmmiXBMsG ZqOHp2Qbewpj/leq3zH5tRaxLV0EMf3CuyQlW4WKCOeKkhppyy6UNzecf4tJYH9Q QrlFOPDtVEF9IkkYTSw+eYVgTZbG/IMOr7gUrki5JMGhqF8Mj6y2Z+fwDmLjtvrv Of2yDDtTHAP/krvdlIvIM+CQ+M+bTH6j2T4KnIZTlilc7VzQHI2vfyZoBdUTkwbz p6v8/8vi977kaQ4oaT05RTAvPWZKzorjBBi+ohbo8+ZYbXdzg14Upjt6m0hbORl1 arPd4Yv6GBKHqjHFMth/hXeRvBkY+iOn5j77gGN8XwiZkMEai6k2M1vXVwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO5PlBtD/aX2TvTOTa/eEe1XwYpnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzViOTczZGZmLTg2NDAtNGU4NC04ZjQ2LWMxNzYyOTI4MDNhYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba62AwDQYJKoZIhvcNAQELBQADggEBAGVQoQ4m0O+YP49rh+md sYDh9p37z5Olqgi0eekl7GyoiYSHe33MvWdppZSbcl6n1VRAPRoshmPOImNTGEjZ QdggWlL6VHGkCKdOe+FMwNsKP4exnXZSWIyTBYJavWTjYNp3vvp8s0OTG2JWg4JZ oOtS20+Nilsk/RbpaViVgr2+IfqtGqtAG5Zz0R6IWkjPuD1/zKEYYNDnucUdCNyK ubMmZd6ffRaCEvZmRSDPiHCh+WQx00KGJfUx2vCl7OW/iBNqxMM4iEs22BKwyA8I xo3+i6jfdhj58MzVaOGuCP9wOIhVxCWiDt7ED5KPH+aSRuwAiJ3hb3gFKrJDjgLj 0Lg= -----END CERTIFICATE-----Generated at Thu Jul 9 11:02:51 2026 by rpki-client