$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63974c12-ad91-4d18-98dc-f95f22782942.roa File: 63974c12-ad91-4d18-98dc-f95f22782942.roa (raw, json) Hash identifier: hOjSN8H2+akhqy9RM/GIyWOEzejrV6EN2iMemRMfhvE= Subject key identifier: 88:41:91:64:CA:72:C5:77:4D:11:2D:61:29:E1:E5:96:81:37:D4:00 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 666A9956E1F329C41E2AE00F03903086A9B2F33D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63974c12-ad91-4d18-98dc-f95f22782942.roa Signing time: Mon 22 Jun 2026 00:01:02 +0000 ROA not before: Mon 22 Jun 2026 00:01:02 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6a:99:56:e1:f3:29:c4:1e:2a:e0:0f:03:90:30:86:a9:b2:f3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:01:02 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=cf27c29949b4dc41b0cab2231e6f2c836fe76bb1de440334060392cad7aa6f96, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:27:ac:69:74:ed:90:ca:ad:35:a9:22:d8:4f: dc:e1:9c:ea:14:a8:f0:da:d3:06:67:34:99:40:be: b1:0d:a6:de:a6:6e:f7:08:d6:3d:d4:fb:f1:2e:4e: 0c:42:9b:16:d2:9a:e7:fc:75:3d:08:8f:23:dc:3c: c6:85:62:00:cc:4d:2b:e4:8c:f9:96:72:58:56:8a: 87:a3:d0:30:b9:f0:52:ce:34:03:6c:d5:a8:61:1e: 55:df:df:20:66:bc:33:6e:4c:41:0e:a7:cb:2c:ed: 43:1f:d4:0c:60:1f:d2:64:d7:54:52:e0:47:7c:ed: b9:bc:2b:bd:ec:28:b6:2e:7f:80:08:09:5a:9e:87: 53:82:f3:38:93:31:d2:b4:c8:c0:19:4e:38:28:50: d6:6a:f8:de:b2:40:4f:c3:4e:a8:41:79:9e:53:b6: 03:7e:03:56:60:0c:51:d6:b3:4f:d4:83:d0:74:34: 62:e9:27:9e:41:14:a7:79:6b:f8:8b:23:6b:16:60: 3c:27:6f:3a:bd:64:eb:ca:b5:cc:7f:ad:2a:19:b3: cd:37:6a:f8:aa:b1:a2:52:b9:d9:7d:f4:3d:0d:34: f9:5e:2f:32:4d:e8:48:12:92:81:53:5e:e0:8f:f6: eb:79:4d:23:b6:78:ef:49:47:f6:b9:ae:d5:d8:85: cb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:41:91:64:CA:72:C5:77:4D:11:2D:61:29:E1:E5:96:81:37:D4:00 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63974c12-ad91-4d18-98dc-f95f22782942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:2080::/48 Signature Algorithm: sha256WithRSAEncryption 52:12:3b:19:7d:4d:5b:30:9a:d1:de:a0:78:2c:28:2e:7b:35: 72:85:fd:76:70:67:07:7a:b9:5c:7c:82:eb:5d:d9:89:54:d3: 40:83:3e:43:ac:d6:a0:2d:fa:d4:6b:36:07:78:8d:66:18:6f: 2f:cc:36:98:f0:28:b1:14:f4:7e:7c:dc:cc:a7:a8:3f:a7:37: 68:a0:3b:5b:77:5a:c5:39:42:0f:75:73:a6:dc:eb:55:05:70: bf:ff:3d:ef:e8:b0:50:fc:d3:af:3b:88:5b:e7:2a:6a:3a:a2: 84:21:b4:0d:49:bb:c1:49:53:74:6a:90:78:2a:74:db:12:32: d7:07:25:0f:09:02:7b:ce:be:3a:c7:0e:40:35:6a:33:12:6b: 9b:94:00:b1:c9:78:62:d7:07:0d:4e:57:a6:0d:b5:c0:07:0b: 76:5f:9a:df:01:00:38:8b:c2:fc:65:2d:74:af:25:b5:dd:b4: 7c:df:11:e0:9c:9d:0f:28:2a:c0:79:d3:d0:ed:bc:dc:ff:67: ab:71:70:f8:f4:15:38:13:65:73:db:e4:2a:7c:6b:75:74:de: 9d:25:dd:ea:bc:58:c5:13:53:72:77:42:ef:e0:90:2c:89:3a: 78:9c:29:59:8a:96:a7:96:b4:df:69:15:4c:5a:fe:ab:58:6c: 58:2b:80:cf -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZmqZVuHzKcQeKuAPA5Awhqmy8z0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDEwMloX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAY2YyN2MyOTk0OWI0ZGM0MWIwY2Fi MjIzMWU2ZjJjODM2ZmU3NmJiMWRlNDQwMzM0MDYwMzkyY2FkN2FhNmY5NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SesaXTtkMqtNaki2E/c4ZzqFKjw 2tMGZzSZQL6xDabepm73CNY91PvxLk4MQpsW0prn/HU9CI8j3DzGhWIAzE0r5Iz5 lnJYVoqHo9AwufBSzjQDbNWoYR5V398gZrwzbkxBDqfLLO1DH9QMYB/SZNdUUuBH fO25vCu97Ci2Ln+ACAlanodTgvM4kzHStMjAGU44KFDWavjeskBPw06oQXmeU7YD fgNWYAxR1rNP1IPQdDRi6SeeQRSneWv4iyNrFmA8J286vWTryrXMf60qGbPNN2r4 qrGiUrnZffQ9DTT5Xi8yTehIEpKBU17gj/breU0jtnjvSUf2ua7V2IXL2wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIhBkWTKcsV3TREtYSnh5ZaBN9QAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYzOTc0YzEyLWFkOTEtNGQxOC05OGRjLWY5NWYyMjc4Mjk0Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6yCAMA0GCSqGSIb3DQEBCwUAA4IBAQBSEjsZfU1bMJrR3qB4 LCguezVyhf12cGcHerlcfILrXdmJVNNAgz5DrNagLfrUazYHeI1mGG8vzDaY8Cix FPR+fNzMp6g/pzdooDtbd1rFOUIPdXOm3OtVBXC//z3v6LBQ/NOvO4hb5ypqOqKE IbQNSbvBSVN0apB4KnTbEjLXByUPCQJ7zr46xw5ANWozEmublACxyXhi1wcNTlem DbXABwt2X5rfAQA4i8L8ZS10ryW13bR83xHgnJ0PKCrAedPQ7bzc/2ercXD49BU4 E2Vz2+QqfGt1dN6dJd3qvFjFE1Nyd0Lv4JAsiTp4nClZipanlrTfaRVMWv6rWGxY K4DP -----END CERTIFICATE-----Generated at Thu Jul 9 11:07:28 2026 by rpki-client