$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82480651-66ce-4ff9-972e-d2069a5e0821.roa File: 82480651-66ce-4ff9-972e-d2069a5e0821.roa (raw, json) Hash identifier: 1QaXw91qGxU4rMHJTd/ECY06Dj9j3ZKdEFWADwIjxzU= Subject key identifier: 00:1D:0E:E1:11:54:9F:6F:4D:1E:75:6C:1F:81:D7:32:7F:6D:53:8F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C29457B06CAF78876B8C28785395E32D14119BF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82480651-66ce-4ff9-972e-d2069a5e0821.roa Signing time: Mon 22 Jun 2026 00:10:06 +0000 ROA not before: Mon 22 Jun 2026 00:10:06 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:29:45:7b:06:ca:f7:88:76:b8:c2:87:85:39:5e:32:d1:41:19:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:10:06 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=f14fb7f3a9ac69124aa3d65e3ea3f26b02e57bf7b607ee45bdf7b88728955546, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:1a:bb:c9:83:ca:6b:b5:5f:8a:80:33:c6: c4:6d:d7:f8:a2:46:0c:38:e1:71:4d:dc:50:32:ce: e2:e1:3c:69:f7:25:38:e8:6f:c0:d5:9f:f5:3b:c2: 22:ae:32:2b:96:53:e2:28:3b:d7:27:81:41:7b:14: 86:81:7c:5d:4d:cc:9b:ff:a2:6e:5b:52:a0:8c:f1: d8:76:23:db:0a:3e:cc:b9:f0:31:5c:18:32:80:9a: fd:2c:3b:d7:1a:ea:46:80:c5:8c:84:91:6b:9c:ff: 68:4b:c1:8f:26:8e:1d:82:a8:ff:63:7b:db:c8:a8: f7:d0:2a:61:2f:f6:fa:fb:0b:40:18:d7:68:69:a6: 84:6b:11:79:54:4b:f5:b6:2f:a8:a6:e8:14:d1:89: dd:1d:5c:3e:90:73:86:60:f7:e8:f2:4c:05:4c:55: 37:d6:7d:88:7f:66:fa:2c:3b:35:3e:e7:dd:fa:7b: 38:1c:58:8c:c3:5f:5a:ad:93:04:49:c4:3d:c0:4d: a9:93:3e:db:6c:0e:03:92:98:7e:cd:a9:e8:73:00: ff:b6:a3:4c:a0:04:aa:df:aa:73:6a:4f:5d:1e:94: 50:e6:c0:20:bc:35:11:96:f4:48:81:bc:53:a5:21: 9b:4b:06:62:0e:8e:08:9f:b5:6a:2f:fa:32:44:1b: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1D:0E:E1:11:54:9F:6F:4D:1E:75:6C:1F:81:D7:32:7F:6D:53:8F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82480651-66ce-4ff9-972e-d2069a5e0821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:c080::/48 Signature Algorithm: sha256WithRSAEncryption 3f:d3:5f:ea:49:6e:1d:9d:21:d8:11:aa:bb:be:b2:5e:db:15: 77:7d:b0:02:4b:d8:03:07:e5:76:be:c1:b8:77:2a:fe:74:6e: c3:22:68:6a:a4:ad:08:83:ed:cf:c0:e5:73:01:ea:b1:5b:d8: 62:6b:90:78:2d:0e:4c:86:87:e3:68:9b:0b:81:59:9b:25:fa: 9a:17:06:05:95:1f:0f:98:06:72:24:54:04:39:dd:a8:d6:aa: 85:30:c0:32:09:45:67:86:4b:3f:5d:78:f3:0e:b4:ea:3c:ab: c9:80:61:70:13:fe:a6:bf:bf:0f:82:24:90:2f:ec:ae:f9:ce: a8:3e:16:f4:0f:22:1b:d7:b5:6d:27:7d:61:1c:29:bc:46:24: 87:df:31:ea:1c:8f:64:ac:a8:4f:43:62:83:93:ba:0c:12:ef: 4e:23:54:02:41:bf:bf:70:2e:ab:ef:28:ab:5f:99:0a:b8:ad: 49:ab:d3:e7:2a:d6:6f:4f:44:2e:63:47:3d:38:59:60:e3:82: 88:16:db:22:8b:2b:60:2d:b1:63:7c:71:79:25:40:22:be:df: 5b:62:21:ba:4f:06:94:e2:f2:d8:d5:ec:a7:48:bd:4a:63:8a: 6e:1a:00:ac:0b:f2:9f:38:e5:66:6b:f2:30:26:76:45:3c:f9: fb:a8:ec:c5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHClFewbK94h2uMKHhTleMtFBGb8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMTAwNloX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAZjE0ZmI3ZjNhOWFjNjkxMjRhYTNk NjVlM2VhM2YyNmIwMmU1N2JmN2I2MDdlZTQ1YmRmN2I4ODcyODk1NTU0NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oIau8mDymu1X4qAM8bEbdf4okYM OOFxTdxQMs7i4Txp9yU46G/A1Z/1O8IirjIrllPiKDvXJ4FBexSGgXxdTcyb/6Ju W1KgjPHYdiPbCj7MufAxXBgygJr9LDvXGupGgMWMhJFrnP9oS8GPJo4dgqj/Y3vb yKj30CphL/b6+wtAGNdoaaaEaxF5VEv1ti+opugU0YndHVw+kHOGYPfo8kwFTFU3 1n2If2b6LDs1Pufd+ns4HFiMw19arZMEScQ9wE2pkz7bbA4Dkph+zanocwD/tqNM oASq36pzak9dHpRQ5sAgvDURlvRIgbxTpSGbSwZiDo4In7VqL/oyRBvGPQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAAdDuERVJ9vTR51bB+B1zJ/bVOPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyNDgwNjUxLTY2Y2UtNGZmOS05NzJlLWQyMDY5YTVlMDgyMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba68CAMA0GCSqGSIb3DQEBCwUAA4IBAQA/01/qSW4dnSHYEaq7 vrJe2xV3fbACS9gDB+V2vsG4dyr+dG7DImhqpK0Ig+3PwOVzAeqxW9hia5B4LQ5M hofjaJsLgVmbJfqaFwYFlR8PmAZyJFQEOd2o1qqFMMAyCUVnhks/XXjzDrTqPKvJ gGFwE/6mv78PgiSQL+yu+c6oPhb0DyIb17VtJ31hHCm8RiSH3zHqHI9krKhPQ2KD k7oMEu9OI1QCQb+/cC6r7yirX5kKuK1Jq9PnKtZvT0QuY0c9OFlg44KIFtsiiytg LbFjfHF5JUAivt9bYiG6TwaU4vLY1eynSL1KY4puGgCsC/KfOOVma/IwJnZFPPn7 qOzF -----END CERTIFICATE-----Generated at Thu Jul 9 11:06:40 2026 by rpki-client