$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa File: 6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa (raw, json) Hash identifier: RlxkyvHw1iD5vE9tClt6O3O065esqKDd9EGCy8Ji8A4= Subject key identifier: 44:94:A5:1F:7C:BB:64:BF:F0:33:5C:15:E7:38:5D:C5:96:F1:EF:8A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3F6249FBD2B9E79438635974ADC60B09AA075DE1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa Signing time: Thu 30 Jul 2026 00:11:02 +0000 ROA not before: Thu 30 Jul 2026 00:11:02 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:62:49:fb:d2:b9:e7:94:38:63:59:74:ad:c6:0b:09:aa:07:5d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:11:02 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=a78973def3f364ebfe7662f2e0548e86e91801e9b17057ddd9d5ed5d143de720, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:f6:fd:41:de:a0:84:31:ae:1c:ab:11:5d: ea:f7:33:58:d0:87:5c:12:be:22:ef:1c:99:76:bc: f2:01:ca:ea:07:88:3c:db:3d:7a:ba:72:8b:a1:e5: be:a7:07:63:5e:09:16:27:3a:1d:6a:1b:26:4a:5d: b7:7d:11:5a:58:b4:30:18:1d:35:2e:2c:3f:75:e5: 42:29:54:ee:1f:2e:1d:24:68:e1:82:fe:cd:b5:2c: 8b:0b:65:49:92:f8:94:3b:7f:95:7a:7c:ee:89:b8: 06:8d:36:bc:50:64:64:41:af:65:cf:00:00:54:76: 1c:e1:20:a6:93:04:88:0f:08:fc:63:75:6c:7d:c9: 30:01:1c:d7:55:56:54:ac:5c:a3:8e:5b:ea:bd:93: 0f:76:0e:96:7a:41:a2:0c:d3:a3:85:10:a5:d3:f1: ad:30:06:8b:54:22:9c:b4:88:30:e1:91:98:13:3d: b5:9e:90:27:f3:65:7f:a9:70:13:14:00:2c:63:c9: 87:cf:a9:56:0c:11:91:ce:6b:83:5e:f6:c1:e7:cb: dc:8b:07:68:e8:ec:36:55:c4:da:7b:0a:39:8e:9f: a3:27:61:25:a5:58:d3:2f:11:cd:73:62:23:47:78: d4:30:37:4e:0d:90:7c:15:06:63:eb:99:87:8e:9f: 4e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:94:A5:1F:7C:BB:64:BF:F0:33:5C:15:E7:38:5D:C5:96:F1:EF:8A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c880::/48 Signature Algorithm: sha256WithRSAEncryption 61:c9:ae:40:fd:4c:80:55:f7:00:dd:0a:e0:20:68:17:07:53: 98:61:47:f8:e0:6b:6b:d9:41:5d:53:8c:ec:9c:7c:70:20:24: e8:f2:a4:c8:7e:ec:7e:4b:ca:4e:bd:da:61:97:24:55:67:72: 16:4f:1d:9f:11:6b:56:34:ed:a2:ae:c7:66:79:8d:3b:b5:27: ea:12:bb:3e:bd:86:97:4b:60:72:e7:08:59:68:6e:a2:dc:91: 50:8d:20:b5:d2:cd:d1:41:b2:3e:10:01:13:56:da:97:9f:ae: c1:b7:23:2d:54:76:14:20:c4:64:4c:0d:9d:dd:35:99:04:a5: 6f:61:c4:55:b2:fe:03:03:ed:71:83:30:67:07:f4:90:19:2b: 1f:e1:b5:09:45:30:c2:5d:d0:ad:a6:61:1c:93:83:cf:d7:18: f8:f4:18:e4:81:cb:2c:c2:d3:db:2e:cb:34:d8:b9:9e:e9:cc: b2:d6:e2:a3:05:19:56:9a:69:3a:88:bc:65:51:21:c3:b6:c5: 28:87:29:d3:00:ea:d1:57:a4:55:75:ad:0f:f0:72:b0:61:35: b6:48:dd:d4:34:38:44:83:d5:8c:1b:6b:7a:69:78:0b:e0:be: 91:dd:49:08:aa:0d:3d:ad:f9:17:53:06:c6:59:c6:74:95:ed: 82:c2:26:1d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUP2JJ+9K555Q4Y1l0rcYLCaoHXeEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTEwMloX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAYTc4OTczZGVmM2YzNjRlYmZlNzY2 MmYyZTA1NDhlODZlOTE4MDFlOWIxNzA1N2RkZDlkNWVkNWQxNDNkZTcyMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6P2/UHeoIQxrhyrEV3q9zNY0Idc Er4i7xyZdrzyAcrqB4g82z16unKLoeW+pwdjXgkWJzodahsmSl23fRFaWLQwGB01 Liw/deVCKVTuHy4dJGjhgv7NtSyLC2VJkviUO3+VenzuibgGjTa8UGRkQa9lzwAA VHYc4SCmkwSIDwj8Y3VsfckwARzXVVZUrFyjjlvqvZMPdg6WekGiDNOjhRCl0/Gt MAaLVCKctIgw4ZGYEz21npAn82V/qXATFAAsY8mHz6lWDBGRzmuDXvbB58vciwdo 6Ow2VcTaewo5jp+jJ2ElpVjTLxHNc2IjR3jUMDdODZB8FQZj65mHjp9OuQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFESUpR98u2S/8DNcFec4XcWW8e+KMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZmNmI1YTNjLWIzZjUtNDU3Ny1hMjI4LTJjZTFiNzMyN2MwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8iAMA0GCSqGSIb3DQEBCwUAA4IBAQBhya5A/UyAVfcA3Qrg IGgXB1OYYUf44Gtr2UFdU4zsnHxwICTo8qTIfux+S8pOvdphlyRVZ3IWTx2fEWtW NO2irsdmeY07tSfqErs+vYaXS2By5whZaG6i3JFQjSC10s3RQbI+EAETVtqXn67B tyMtVHYUIMRkTA2d3TWZBKVvYcRVsv4DA+1xgzBnB/SQGSsf4bUJRTDCXdCtpmEc k4PP1xj49BjkgcsswtPbLss02Lme6cyy1uKjBRlWmmk6iLxlUSHDtsUohynTAOrR V6RVda0P8HKwYTW2SN3UNDhEg9WMG2t6aXgL4L6R3UkIqg09rfkXUwbGWcZ0le2C wiYd -----END CERTIFICATE-----Generated at Wed Aug 26 13:04:03 2026 by rpki-client