$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/791379f0-fd5d-4abd-b91c-cd60f33d45a9.roa File: 791379f0-fd5d-4abd-b91c-cd60f33d45a9.roa (raw, json) Hash identifier: gb1zdnXgoslkPcXKSmwr/sSR2CYMbcHqTovsE6zS0uc= Subject key identifier: E6:67:E9:D2:28:07:3A:71:B0:27:9E:F4:CF:DE:BB:3A:BC:3B:E3:21 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 21D637AFF1207B03C978AAD4F819550E4693B1AC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/791379f0-fd5d-4abd-b91c-cd60f33d45a9.roa Signing time: Mon 22 Jun 2026 00:01:17 +0000 ROA not before: Mon 22 Jun 2026 00:01:17 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d6:37:af:f1:20:7b:03:c9:78:aa:d4:f8:19:55:0e:46:93:b1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:01:17 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=babc9288ef09f4882a584544fcf087ebb76604a84842346400fa9f5d1892ca5b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:a3:cf:bb:5c:0b:d8:3c:57:c6:04:ac:75: 3c:a7:9c:54:f3:15:62:f1:21:a2:ab:a1:c5:f7:2c: 27:b8:17:45:a9:78:5e:5a:c2:68:94:bd:76:07:a0: 26:de:b2:39:94:7d:c1:a2:5a:04:6a:4a:0c:44:db: 5e:d0:d5:bb:b2:fa:8f:0c:1e:a8:62:fb:e0:18:ae: 46:86:78:a2:3f:1b:11:c8:ed:e1:f5:bf:0c:2c:aa: e9:cf:5e:4b:47:1d:ca:5a:70:58:bb:30:12:5d:89: 4a:de:19:d7:0f:bb:d6:b4:a9:f7:60:56:3c:7c:41: 63:43:c1:48:6a:83:94:4c:b4:0f:c3:fa:3b:41:51: 25:4f:4e:6f:39:71:b5:2a:e6:9c:08:67:29:b7:dc: c9:ad:26:59:be:03:83:0e:74:76:fe:eb:6b:bc:48: 75:48:9c:c6:ea:f8:11:6a:04:8f:8b:55:a2:f9:ce: b3:08:60:75:c0:90:87:19:a5:eb:0a:75:b7:db:d8: 17:4d:ab:42:2a:ab:4a:77:fa:07:8b:73:ee:42:c0: 1c:d9:bb:b3:d4:4e:f1:4f:01:32:3e:3f:74:a1:38: 75:1e:2c:37:cb:10:9a:ec:10:d7:0c:5b:ec:51:e3: 99:98:91:9d:99:9c:dc:3d:cd:10:ba:31:6c:48:65: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:67:E9:D2:28:07:3A:71:B0:27:9E:F4:CF:DE:BB:3A:BC:3B:E3:21 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/791379f0-fd5d-4abd-b91c-cd60f33d45a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:880::/48 Signature Algorithm: sha256WithRSAEncryption aa:04:9a:63:98:11:d7:30:7c:fb:02:e1:fc:a2:90:0d:31:91: 88:32:ce:4f:79:b4:e9:00:ec:ca:45:fc:e6:41:ae:b9:5c:a3: 18:89:f9:ec:61:25:5e:5c:7b:a0:8b:cb:b1:96:c2:26:40:ce: 73:68:08:d0:f1:a8:e7:e1:fa:9a:2c:4d:a8:54:0b:dc:35:bb: b7:38:4b:16:0e:6c:6c:be:cf:71:08:95:38:37:51:4c:b4:3b: a9:86:7c:d1:e0:c4:b1:4a:be:ec:ad:da:7b:6c:55:f2:b7:fa: 77:45:88:d4:81:be:e0:56:f0:c1:67:8f:ea:f0:92:be:5f:b5: bb:9d:46:6c:b3:8c:82:94:b3:72:23:90:06:5b:45:a6:19:36: a8:7b:51:4c:be:eb:d7:0b:45:78:25:1f:55:c7:54:5f:9b:7e: f1:39:9b:3a:98:a8:4e:ab:39:e7:ae:b3:f1:81:fd:88:48:4e: cd:98:97:cf:51:fe:13:3f:79:e6:92:5f:d6:5b:cc:7d:91:76: 2c:f9:63:1a:91:23:cf:88:a1:d6:9f:49:84:6b:e9:33:ff:da: 9a:3e:69:69:5b:6a:2e:97:90:51:90:02:aa:7b:cf:6b:27:64: d4:ec:d3:b1:60:77:09:ec:33:2e:9f:b0:21:5f:f5:1f:73:57: 4e:aa:56:cb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIdY3r/EgewPJeKrU+BlVDkaTsawwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDExN1oX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAYmFiYzkyODhlZjA5ZjQ4ODJhNTg0 NTQ0ZmNmMDg3ZWJiNzY2MDRhODQ4NDIzNDY0MDBmYTlmNWQxODkyY2E1YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8+jz7tcC9g8V8YErHU8p5xU8xVi 8SGiq6HF9ywnuBdFqXheWsJolL12B6Am3rI5lH3BoloEakoMRNte0NW7svqPDB6o YvvgGK5GhniiPxsRyO3h9b8MLKrpz15LRx3KWnBYuzASXYlK3hnXD7vWtKn3YFY8 fEFjQ8FIaoOUTLQPw/o7QVElT05vOXG1KuacCGcpt9zJrSZZvgODDnR2/utrvEh1 SJzG6vgRagSPi1Wi+c6zCGB1wJCHGaXrCnW329gXTatCKqtKd/oHi3PuQsAc2buz 1E7xTwEyPj90oTh1Hiw3yxCa7BDXDFvsUeOZmJGdmZzcPc0QujFsSGVilQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOZn6dIoBzpxsCee9M/euzq8O+MhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc5MTM3OWYwLWZkNWQtNGFiZC1iOTFjLWNkNjBmMzNkNDVhOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6wiAMA0GCSqGSIb3DQEBCwUAA4IBAQCqBJpjmBHXMHz7AuH8 opANMZGIMs5PebTpAOzKRfzmQa65XKMYifnsYSVeXHugi8uxlsImQM5zaAjQ8ajn 4fqaLE2oVAvcNbu3OEsWDmxsvs9xCJU4N1FMtDuphnzR4MSxSr7srdp7bFXyt/p3 RYjUgb7gVvDBZ4/q8JK+X7W7nUZss4yClLNyI5AGW0WmGTaoe1FMvuvXC0V4JR9V x1Rfm37xOZs6mKhOqznnrrPxgf2ISE7NmJfPUf4TP3nmkl/WW8x9kXYs+WMakSPP iKHWn0mEa+kz/9qaPmlpW2oul5BRkAKqe89rJ2TU7NOxYHcJ7DMun7AhX/Ufc1dO qlbL -----END CERTIFICATE-----Generated at Thu Jul 9 11:02:12 2026 by rpki-client