$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ed818df-143b-4879-87c8-ff614b5e443e.roa File: 8ed818df-143b-4879-87c8-ff614b5e443e.roa (raw, json) Hash identifier: dCTDoQkHIYvz5NB4OYbv36WLK1c3r5f47JPH2S9Cfl0= Subject key identifier: 74:AD:93:19:52:BA:C6:5A:87:2C:43:43:BC:C7:6E:7A:F5:4A:DB:DE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2B7D576E8A607F4C81BA1F817D631507C776DDD5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ed818df-143b-4879-87c8-ff614b5e443e.roa Signing time: Mon 22 Jun 2026 00:00:38 +0000 ROA not before: Mon 22 Jun 2026 00:00:38 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7d:57:6e:8a:60:7f:4c:81:ba:1f:81:7d:63:15:07:c7:76:dd:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:00:38 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=e351b71078a4d81a6c95633918833ad9f72dc73744a41dfd0057606a33d396b5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:d5:fb:c7:42:2b:43:a1:86:d0:2d:32:6b: ed:a5:05:f9:1f:8e:1a:cb:59:a5:b8:24:6c:cf:74: c8:72:a0:a5:5a:b0:3b:55:9a:8e:c8:bc:d5:70:a2: b3:a4:ea:81:d9:bd:0e:89:00:37:a8:d0:37:db:1d: 87:22:28:dd:12:1e:0e:f3:b8:98:1e:5f:1b:ac:0f: 79:0d:3f:25:63:31:51:0b:60:4f:4e:bb:84:f6:57: 0b:0a:29:db:a5:d3:1e:4a:99:02:17:08:4e:65:50: 0b:11:33:e6:42:2f:5a:c4:1e:3c:be:c2:66:30:43: 37:fd:b8:b9:16:48:d1:e2:98:c4:b7:db:20:2b:38: 73:b8:90:0a:bb:c6:1b:c9:83:7b:b1:55:90:a1:a0: 78:2c:ca:a8:3b:8d:9e:1e:4e:53:35:ab:b8:76:b2: ab:bd:57:93:5d:03:e2:bf:ae:9e:8e:bd:ac:2f:63: dc:2c:09:bc:63:8b:0f:0f:6e:b2:f7:a7:cf:02:dd: 06:0a:6e:f6:d2:fd:f3:dd:5f:86:c6:d5:0c:01:9a: 9d:02:96:bc:28:3f:21:2d:7d:95:71:1f:4a:e5:af: 1a:b4:bb:ac:bb:d5:18:ce:5c:ca:c7:9a:76:4f:d2: 8f:41:77:05:e8:3e:53:9f:56:cc:ed:0d:51:f7:6b: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AD:93:19:52:BA:C6:5A:87:2C:43:43:BC:C7:6E:7A:F5:4A:DB:DE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ed818df-143b-4879-87c8-ff614b5e443e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:b040::/48 Signature Algorithm: sha256WithRSAEncryption 83:1b:85:64:a2:fd:e6:57:bb:9b:5c:25:bc:c0:78:07:c4:c4: 64:30:49:e6:59:06:d3:b1:40:d8:61:1a:77:dd:c2:a7:a4:16: 6b:c6:ed:83:9a:7d:cb:2f:ca:37:28:e7:91:f5:8e:ac:0f:af: ea:99:a2:7e:dc:9b:44:53:ae:3c:62:8f:18:28:7d:ef:c7:f9: 43:b7:73:c3:33:bb:f5:88:f1:69:1b:0e:c4:6c:e6:8b:ba:67: 78:d6:04:8a:f8:bf:1a:f1:cc:1a:1e:26:06:50:b4:95:c7:64: 1e:e8:a9:5d:b5:6f:98:db:cb:92:d5:6c:a7:dd:4c:7f:f9:76: 53:e1:8d:aa:d9:7a:79:91:9f:78:ba:77:63:b1:f1:fb:63:76: 5f:b6:5b:fc:ce:26:b8:38:e9:b1:0a:b2:3c:cb:b5:29:d0:6e: 95:ac:6b:36:37:9f:b3:37:33:b4:6d:40:8d:24:6b:c0:80:d8: 1d:b8:66:98:fe:4b:97:0b:af:bc:3c:9b:db:90:68:96:46:fe: 9e:53:d4:92:43:be:19:da:f6:94:39:6a:30:2f:e4:fe:fc:f4: d7:46:ac:b9:6c:17:87:3e:ce:70:72:a2:e9:23:6f:7f:0a:35: 01:80:73:d8:4b:db:dc:dd:c9:d5:f3:d8:80:e9:15:17:de:58: 3e:84:27:c8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUK31Xbopgf0yBuh+BfWMVB8d23dUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDAzOFoX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAZTM1MWI3MTA3OGE0ZDgxYTZjOTU2 MzM5MTg4MzNhZDlmNzJkYzczNzQ0YTQxZGZkMDA1NzYwNmEzM2QzOTZiNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMnV+8dCK0OhhtAtMmvtpQX5H44a y1mluCRsz3TIcqClWrA7VZqOyLzVcKKzpOqB2b0OiQA3qNA32x2HIijdEh4O87iY Hl8brA95DT8lYzFRC2BPTruE9lcLCinbpdMeSpkCFwhOZVALETPmQi9axB48vsJm MEM3/bi5FkjR4pjEt9sgKzhzuJAKu8YbyYN7sVWQoaB4LMqoO42eHk5TNau4drKr vVeTXQPiv66ejr2sL2PcLAm8Y4sPD26y96fPAt0GCm720v3z3V+GxtUMAZqdApa8 KD8hLX2VcR9K5a8atLusu9UYzlzKx5p2T9KPQXcF6D5Tn1bM7Q1R92uCbwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHStkxlSusZahyxDQ7zHbnr1StveMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhlZDgxOGRmLTE0M2ItNDg3OS04N2M4LWZmNjE0YjVlNDQzZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba67BAMA0GCSqGSIb3DQEBCwUAA4IBAQCDG4Vkov3mV7ubXCW8 wHgHxMRkMEnmWQbTsUDYYRp33cKnpBZrxu2Dmn3LL8o3KOeR9Y6sD6/qmaJ+3JtE U648Yo8YKH3vx/lDt3PDM7v1iPFpGw7EbOaLumd41gSK+L8a8cwaHiYGULSVx2Qe 6KldtW+Y28uS1Wyn3Ux/+XZT4Y2q2Xp5kZ94undjsfH7Y3Zftlv8zia4OOmxCrI8 y7Up0G6VrGs2N5+zNzO0bUCNJGvAgNgduGaY/kuXC6+8PJvbkGiWRv6eU9SSQ74Z 2vaUOWowL+T+/PTXRqy5bBeHPs5wcqLpI29/CjUBgHPYS9vc3cnV89iA6RUX3lg+ hCfI -----END CERTIFICATE-----Generated at Thu Jul 9 11:03:18 2026 by rpki-client