$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8244432d-f274-4e0e-80bf-7e2cb27c2de2.roa File: 8244432d-f274-4e0e-80bf-7e2cb27c2de2.roa (raw, json) Hash identifier: qUqX+mXzUdtY/lOe6O+OdHhEbywph9Uh/wwyM5B07Zo= Subject key identifier: C9:6D:1E:22:37:51:9B:F6:6D:99:F3:FC:93:D0:31:56:73:8A:22:A7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A8D1343A0B2D96247DE3F42A98B6E285FBAFA73 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8244432d-f274-4e0e-80bf-7e2cb27c2de2.roa Signing time: Mon 22 Jun 2026 00:01:16 +0000 ROA not before: Mon 22 Jun 2026 00:01:16 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8d:13:43:a0:b2:d9:62:47:de:3f:42:a9:8b:6e:28:5f:ba:fa:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:01:16 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=4c2d04e1f43d7c86229f1feff1ea686e5c7860fc5570ddc0417969c67282aedf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e9:4e:f9:1a:18:83:ca:36:f9:05:76:d9:76: ff:e9:7b:89:6e:ab:7e:96:08:37:c3:35:c6:f6:05: 0b:75:5a:b0:04:51:da:e1:c4:65:78:cc:8f:72:79: e0:8e:ea:97:19:02:b1:e3:41:11:b3:80:6b:2d:93: 95:74:1c:21:1f:ae:02:4b:b8:23:62:48:c7:bd:1b: 9b:05:7e:48:1d:53:54:37:01:66:da:aa:e5:c7:e1: f4:26:ee:d3:77:13:dc:55:f1:8c:c3:8c:ef:39:b3: 14:e0:74:09:97:a3:3d:be:61:a7:d5:3a:d1:de:d8: df:47:7a:00:56:a5:7d:18:be:a6:5b:ef:36:65:f6: 1b:14:27:e8:32:71:8a:dd:4c:34:4b:69:60:2d:d4: 96:0e:0b:3c:7b:c7:b7:5d:be:2d:2e:dd:a2:66:7f: 03:64:5b:5d:a2:94:ac:7b:a9:04:bc:38:7e:d7:57: a7:9e:6b:8d:e0:ac:9a:25:6b:94:72:8f:47:e2:3a: 5a:35:e4:12:26:3d:9c:71:ad:b9:31:72:7a:27:c5: d5:c1:ca:d7:be:fb:d5:96:6d:0e:bc:46:62:64:4d: 55:0a:6d:10:ef:be:80:12:87:b2:b9:7d:cd:e2:9b: bb:09:f6:66:e6:98:71:da:ba:ed:d0:e9:91:c6:a1: dd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6D:1E:22:37:51:9B:F6:6D:99:F3:FC:93:D0:31:56:73:8A:22:A7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8244432d-f274-4e0e-80bf-7e2cb27c2de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:4840::/48 Signature Algorithm: sha256WithRSAEncryption 83:a1:09:06:3b:66:1e:38:1f:2c:26:df:50:b7:e3:80:2e:f0: b2:27:28:8a:63:5b:7e:c2:b7:c1:62:bc:6c:82:71:a0:65:54: 1c:31:cf:e4:9c:69:86:f0:30:e7:e0:73:fb:aa:9c:ef:88:82: f4:22:7e:e6:cb:8e:6d:27:d6:a9:ce:bd:a8:dd:a6:1e:72:c9: 98:d8:e9:d4:d0:f1:dd:4c:f6:a5:29:d4:93:78:a6:cd:21:53: 44:e6:c9:1c:9a:19:ea:52:ee:f3:80:98:88:a6:86:f5:eb:d8: 1c:6d:3b:90:ad:78:73:6b:a6:7d:46:6a:6a:a0:f3:f1:2f:33: bd:49:df:1f:96:fe:e2:6a:7d:9e:59:90:55:58:c6:1c:f3:5e: a9:b3:33:9a:83:3d:b6:61:1a:6c:2d:67:8d:5e:25:5f:ba:ed: bd:eb:7c:42:19:63:31:f0:01:1b:51:16:5f:4f:90:b2:e5:eb: 1f:8f:a7:2d:8d:ed:2a:ff:7f:3d:1f:fc:36:31:2e:2f:ff:25: 45:90:69:bf:1d:46:c6:ed:06:73:d6:57:c5:97:27:e7:96:46: 8e:65:98:c0:7a:25:79:13:72:2d:0a:9a:1e:df:43:c5:fa:96: b8:3e:7d:83:7a:3b:eb:86:f9:9c:42:64:2e:0b:87:42:cb:af: ab:fe:fe:58 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOo0TQ6Cy2WJH3j9CqYtuKF+6+nMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDExNloX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNANGMyZDA0ZTFmNDNkN2M4NjIyOWYx ZmVmZjFlYTY4NmU1Yzc4NjBmYzU1NzBkZGMwNDE3OTY5YzY3MjgyYWVkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OlO+RoYg8o2+QV22Xb/6XuJbqt+ lgg3wzXG9gULdVqwBFHa4cRleMyPcnngjuqXGQKx40ERs4BrLZOVdBwhH64CS7gj YkjHvRubBX5IHVNUNwFm2qrlx+H0Ju7TdxPcVfGMw4zvObMU4HQJl6M9vmGn1TrR 3tjfR3oAVqV9GL6mW+82ZfYbFCfoMnGK3Uw0S2lgLdSWDgs8e8e3Xb4tLt2iZn8D ZFtdopSse6kEvDh+11ennmuN4KyaJWuUco9H4jpaNeQSJj2cca25MXJ6J8XVwcrX vvvVlm0OvEZiZE1VCm0Q776AEoeyuX3N4pu7CfZm5phx2rrt0OmRxqHdfwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMltHiI3UZv2bZnz/JPQMVZziiKnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyNDQ0MzJkLWYyNzQtNGUwZS04MGJmLTdlMmNiMjdjMmRlMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba60hAMA0GCSqGSIb3DQEBCwUAA4IBAQCDoQkGO2YeOB8sJt9Q t+OALvCyJyiKY1t+wrfBYrxsgnGgZVQcMc/knGmG8DDn4HP7qpzviIL0In7my45t J9apzr2o3aYecsmY2OnU0PHdTPalKdSTeKbNIVNE5skcmhnqUu7zgJiIpob169gc bTuQrXhza6Z9RmpqoPPxLzO9Sd8flv7ian2eWZBVWMYc816pszOagz22YRpsLWeN XiVfuu2963xCGWMx8AEbURZfT5Cy5esfj6ctje0q/389H/w2MS4v/yVFkGm/HUbG 7QZz1lfFlyfnlkaOZZjAeiV5E3ItCpoe30PF+pa4Pn2DejvrhvmcQmQuC4dCy6+r /v5Y -----END CERTIFICATE-----Generated at Thu Jul 9 11:06:01 2026 by rpki-client