$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/62603757-a298-4715-81cd-bc8195aabfe8.roa File: 62603757-a298-4715-81cd-bc8195aabfe8.roa (raw, json) Hash identifier: +6v2x9LKW/qevlXN88w1ZPtLAxZ4udv96LLiflJufjg= Subject key identifier: 83:28:2B:73:32:41:01:3E:40:BC:86:98:7E:FD:AE:EA:19:00:38:ED Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 602FEFF9CD3F39C0EA46A22F92F51076BB1A1C21 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/62603757-a298-4715-81cd-bc8195aabfe8.roa Signing time: Mon 22 Jun 2026 00:10:07 +0000 ROA not before: Mon 22 Jun 2026 00:10:07 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2f:ef:f9:cd:3f:39:c0:ea:46:a2:2f:92:f5:10:76:bb:1a:1c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:10:07 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=28e0b3ac4b45723b4a79c2db5c36d9b36e720a8afc2d9d8980bc31b06857f48b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4d:c7:06:62:5e:4a:b4:55:11:b6:50:f2:28: ab:7c:93:95:30:c9:b1:1b:b6:bb:9d:da:c1:e4:0a: fb:50:16:03:27:8a:a6:25:2e:e3:20:86:7d:bb:b8: 29:5b:50:61:68:b3:f9:4a:b0:10:0c:4f:24:96:a8: 94:4e:6b:34:4e:0b:5b:fe:43:f3:f8:06:3f:aa:09: c2:c8:43:f6:b0:ec:c4:ca:f9:1f:bc:83:e4:7f:bf: ea:d9:f0:a8:90:d3:4b:61:fe:0c:f8:92:90:2f:64: 0a:fa:4e:15:08:ef:cd:6e:ad:29:07:16:d2:a8:48: 11:08:e9:fd:e2:b5:4a:4f:de:02:b5:10:8b:9e:af: d3:fc:54:e7:17:07:98:a7:ba:30:bf:46:b0:43:39: eb:1f:70:f7:6a:78:71:75:84:fc:f2:01:1c:08:0f: 57:8d:a5:af:76:c4:10:c1:99:89:82:e6:88:0c:67: e0:0e:4d:85:4a:cb:fb:88:4e:53:7a:7d:01:97:f3: 1a:e9:b4:5e:a1:e4:1c:1c:2a:b5:58:74:f0:cb:f6: bd:ed:c2:26:e2:fc:13:1f:d7:1b:69:eb:91:fb:07: 2d:a7:da:c7:85:6c:06:b0:90:20:6a:62:de:50:53: 0c:2f:f3:c6:c9:b7:27:13:10:7c:c8:2c:3c:4b:70: 7c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:28:2B:73:32:41:01:3E:40:BC:86:98:7E:FD:AE:EA:19:00:38:ED X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/62603757-a298-4715-81cd-bc8195aabfe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:8000::/40 Signature Algorithm: sha256WithRSAEncryption 50:a5:e1:86:76:b1:57:ee:ef:fb:2d:57:f2:2d:43:16:c6:7b: ee:bf:bf:ee:0c:29:4d:40:0c:6c:ef:25:1d:84:db:e0:18:29: 7d:74:0a:46:f9:13:5a:5b:b9:fe:c4:6a:cb:2c:92:35:e7:2e: 39:83:e5:9f:47:0d:c0:0e:af:e0:04:12:f8:7d:cb:9a:f2:17: 3a:59:21:51:ad:89:01:a9:5f:5b:2c:f8:4e:cb:6c:ae:60:f6: 13:37:1a:2d:37:0f:e7:5e:74:3f:79:e9:81:f0:2f:4e:f5:5a: e7:73:d5:6a:68:43:3a:dc:3d:21:ef:13:22:e5:3d:3d:e2:ec: 2a:e0:24:44:e5:02:70:72:96:b3:a5:0f:bd:08:3e:3c:a0:39: 61:8d:80:bc:e1:3f:11:8f:1f:e0:cf:bd:5f:64:f1:fe:4d:7f: 62:e0:59:53:c4:b0:68:71:06:2c:f2:14:af:fa:47:e0:4c:99: d1:e9:3d:4a:74:6a:4c:16:74:98:8c:d1:f7:72:9b:4d:2c:70: f5:ea:f9:e9:56:c4:8b:4f:9c:9d:e2:a3:af:be:a2:56:1c:94: 7e:8e:c3:ae:73:c0:9d:c4:ba:9d:bf:15:38:f9:fd:e4:42:73: 10:c3:d4:a6:58:60:7c:11:79:98:75:a6:8f:9a:9f:1a:82:d9: b3:4b:95:da -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYC/v+c0/OcDqRqIvkvUQdrsaHCEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMTAwN1oX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAMjhlMGIzYWM0YjQ1NzIzYjRhNzlj MmRiNWMzNmQ5YjM2ZTcyMGE4YWZjMmQ5ZDg5ODBiYzMxYjA2ODU3ZjQ4YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6U3HBmJeSrRVEbZQ8iirfJOVMMmx G7a7ndrB5Ar7UBYDJ4qmJS7jIIZ9u7gpW1BhaLP5SrAQDE8klqiUTms0Tgtb/kPz +AY/qgnCyEP2sOzEyvkfvIPkf7/q2fCokNNLYf4M+JKQL2QK+k4VCO/Nbq0pBxbS qEgRCOn94rVKT94CtRCLnq/T/FTnFweYp7owv0awQznrH3D3anhxdYT88gEcCA9X jaWvdsQQwZmJguaIDGfgDk2FSsv7iE5Ten0Bl/Ma6bReoeQcHCq1WHTwy/a97cIm 4vwTH9cbaeuR+wctp9rHhWwGsJAgamLeUFMML/PGybcnExB8yCw8S3B8WQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIMoK3MyQQE+QLyGmH79ruoZADjtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYyNjAzNzU3LWEyOTgtNDcxNS04MWNkLWJjODE5NWFhYmZlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba64AwDQYJKoZIhvcNAQELBQADggEBAFCl4YZ2sVfu7/stV/It QxbGe+6/v+4MKU1ADGzvJR2E2+AYKX10Ckb5E1pbuf7EassskjXnLjmD5Z9HDcAO r+AEEvh9y5ryFzpZIVGtiQGpX1ss+E7LbK5g9hM3Gi03D+dedD956YHwL071Wudz 1WpoQzrcPSHvEyLlPT3i7CrgJETlAnBylrOlD70IPjygOWGNgLzhPxGPH+DPvV9k 8f5Nf2LgWVPEsGhxBizyFK/6R+BMmdHpPUp0akwWdJiM0fdym00scPXq+elWxItP nJ3io6++olYclH6Ow65zwJ3Eup2/FTj5/eRCcxDD1KZYYHwReZh1po+anxqC2bNL ldo= -----END CERTIFICATE-----Generated at Thu Jul 9 11:07:08 2026 by rpki-client