$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6602a63e-35ff-4691-9488-f64ca93504e7.roa File: 6602a63e-35ff-4691-9488-f64ca93504e7.roa (raw, json) Hash identifier: IvfyEq3/CGHs7ddFYUuOAfBnJBBXzcvYd2q9oRGorL8= Subject key identifier: CA:78:22:25:CA:1D:A3:4C:B6:B6:85:63:2A:49:37:3E:06:2B:D3:C7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 523D877829EFB1E2903CE16229D65021B2EFCD72 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6602a63e-35ff-4691-9488-f64ca93504e7.roa Signing time: Mon 22 Jun 2026 00:01:03 +0000 ROA not before: Mon 22 Jun 2026 00:01:03 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3d:87:78:29:ef:b1:e2:90:3c:e1:62:29:d6:50:21:b2:ef:cd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:01:03 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=209c15c777128bbd05e3a8c3cade14b1f48d5ffcaef8de846383fa363da8b815, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:68:01:05:20:7c:91:d7:50:d5:6b:d3:ce:89: 32:54:1d:40:a0:e8:de:ec:cb:da:00:ba:6e:37:1c: 95:3f:dd:ea:74:19:3a:1f:b2:c4:07:9b:2b:72:31: 99:a5:c8:60:07:9f:d4:c2:72:cb:08:f6:47:3b:af: fa:d8:a2:04:a6:fc:38:f6:e1:58:a8:4a:a7:fa:2d: 63:28:0d:dd:1f:7d:ff:6c:8e:c8:18:67:eb:91:30: cf:93:b8:42:78:4c:a2:e8:90:8b:c6:3f:3f:65:86: 86:01:bc:0c:29:c5:f4:e2:5c:16:d0:96:a1:7d:b8: 69:b5:0e:0a:f4:b8:4a:12:10:fa:52:dd:ed:4f:3e: 10:9f:a8:f2:d1:f3:81:36:51:51:1c:bf:7e:72:ae: 1d:2b:0b:88:b4:d5:f0:22:21:cb:54:e2:0a:fc:d8: ff:b9:26:d0:24:1b:e7:6f:62:20:50:b4:ae:8d:6a: b3:2f:ce:85:b0:af:e2:a5:97:95:5b:d6:97:b0:17: a7:23:4c:f8:1a:dc:06:40:59:a9:3a:cc:33:94:0d: 1b:95:cc:c1:83:7e:fc:cd:fa:f1:c0:29:8a:00:35: 37:49:20:5c:39:03:ed:0b:a2:59:c3:26:b2:4b:d6: 71:ec:dd:9e:80:9c:09:55:58:ef:b1:0d:6c:49:f0: c6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:78:22:25:CA:1D:A3:4C:B6:B6:85:63:2A:49:37:3E:06:2B:D3:C7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6602a63e-35ff-4691-9488-f64ca93504e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:4040::/48 Signature Algorithm: sha256WithRSAEncryption b9:76:54:08:c5:8d:ab:97:ba:e6:42:2e:e6:cb:1e:19:57:7e: 50:87:d5:a1:24:cb:40:14:ed:be:24:90:d6:06:01:40:fa:01: b0:4a:af:3f:8c:0e:6c:f2:75:14:3a:a2:f9:73:53:a1:f6:b4: f4:69:91:7d:b5:d7:c3:77:fa:4b:f1:f5:8c:b7:b7:2c:85:68: d0:60:9b:f9:b7:38:72:9c:8c:e5:c3:62:da:e4:90:50:18:16: 80:e6:8c:43:be:64:9f:72:5d:22:79:15:57:7b:87:85:8a:bf: 6a:b8:43:09:a9:9f:80:c9:7e:5a:30:68:cf:e4:64:4b:ea:29: f1:56:87:f5:56:2c:7f:62:93:78:7d:66:85:cc:a8:2f:c4:1a: a1:c0:b9:38:8a:99:d0:b4:5c:0b:21:58:ee:0c:36:fa:ce:4f: 03:f8:7b:b8:6d:15:0b:ac:e0:4e:d4:7f:7d:bd:77:2f:63:8f: dc:e2:c2:19:5d:62:fa:5e:45:79:2f:4b:50:90:2d:dc:9c:cc: 70:ce:28:1e:e6:d0:87:37:df:7e:86:7a:46:9b:21:bf:d2:bb: 31:9c:c7:6b:8e:9d:79:85:b7:f2:b8:8a:1c:9c:49:a0:da:28: 5a:bc:39:5f:32:9d:d2:30:37:66:69:9a:3a:8b:eb:ae:bd:6a: cc:f8:4d:0e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUj2HeCnvseKQPOFiKdZQIbLvzXIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDEwM1oX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAMjA5YzE1Yzc3NzEyOGJiZDA1ZTNh OGMzY2FkZTE0YjFmNDhkNWZmY2FlZjhkZTg0NjM4M2ZhMzYzZGE4YjgxNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WgBBSB8kddQ1WvTzokyVB1AoOje 7MvaALpuNxyVP93qdBk6H7LEB5srcjGZpchgB5/UwnLLCPZHO6/62KIEpvw49uFY qEqn+i1jKA3dH33/bI7IGGfrkTDPk7hCeEyi6JCLxj8/ZYaGAbwMKcX04lwW0Jah fbhptQ4K9LhKEhD6Ut3tTz4Qn6jy0fOBNlFRHL9+cq4dKwuItNXwIiHLVOIK/Nj/ uSbQJBvnb2IgULSujWqzL86FsK/ipZeVW9aXsBenI0z4GtwGQFmpOswzlA0blczB g378zfrxwCmKADU3SSBcOQPtC6JZwyayS9Zx7N2egJwJVVjvsQ1sSfDGDQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMp4IiXKHaNMtraFYypJNz4GK9PHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY2MDJhNjNlLTM1ZmYtNDY5MS05NDg4LWY2NGNhOTM1MDRlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba60BAMA0GCSqGSIb3DQEBCwUAA4IBAQC5dlQIxY2rl7rmQi7m yx4ZV35Qh9WhJMtAFO2+JJDWBgFA+gGwSq8/jA5s8nUUOqL5c1Oh9rT0aZF9tdfD d/pL8fWMt7cshWjQYJv5tzhynIzlw2La5JBQGBaA5oxDvmSfcl0ieRVXe4eFir9q uEMJqZ+AyX5aMGjP5GRL6inxVof1Vix/YpN4fWaFzKgvxBqhwLk4ipnQtFwLIVju DDb6zk8D+Hu4bRULrOBO1H99vXcvY4/c4sIZXWL6XkV5L0tQkC3cnMxwzige5tCH N99+hnpGmyG/0rsxnMdrjp15hbfyuIocnEmg2ihavDlfMp3SMDdmaZo6i+uuvWrM +E0O -----END CERTIFICATE-----Generated at Thu Jul 9 11:07:11 2026 by rpki-client