$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9bf499d1-1758-4906-a6cf-2459116db1aa.roa File: 9bf499d1-1758-4906-a6cf-2459116db1aa.roa (raw, json) Hash identifier: p9cwe2h2MD2IAF8agsEjpQDqye/wf5h7dbvn7AkdA+E= Subject key identifier: 1B:7A:82:C6:DA:4F:A8:D9:DE:4B:D9:2B:4E:48:6C:A3:84:DB:D4:C3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6ED544497CEBF46803E11E28229FF284E046CC95 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9bf499d1-1758-4906-a6cf-2459116db1aa.roa Signing time: Fri 22 May 2026 16:54:06 +0000 ROA not before: Fri 22 May 2026 16:54:06 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d5:44:49:7c:eb:f4:68:03:e1:1e:28:22:9f:f2:84:e0:46:cc:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:54:06 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=9892f096bcae7b367d9f1b3f310513ea5e9768210f649780a3165355fe1483cb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:72:a9:3e:22:c7:82:e3:9c:72:0d:04:ba: 23:04:59:21:4a:43:04:1a:fc:ff:20:aa:a5:76:fa: c1:59:46:a3:17:e2:66:e9:b5:ec:cb:42:57:37:c5: 79:38:ac:07:2a:6f:2f:91:34:f8:a7:6f:3c:e2:d0: 9a:94:d2:79:18:aa:ec:87:45:f3:4e:35:a9:99:59: 8b:a4:2a:13:00:02:84:98:ff:5c:57:1a:f1:29:2d: 6c:bd:46:d8:49:10:17:e4:eb:b0:c9:df:ad:40:6b: b9:5c:5a:84:b8:89:2f:4f:33:d1:91:8d:0f:26:4e: 97:24:07:9e:25:27:64:46:44:98:e8:b2:3c:89:e2: 57:e6:61:54:1a:bf:63:69:2f:39:cb:25:42:9a:10: 02:31:66:79:14:fb:f5:17:18:d4:c9:5f:80:54:42: 03:ec:5f:00:a7:d4:f2:9a:16:eb:0c:8a:71:eb:43: 0b:0b:72:63:07:4f:50:de:28:4d:d5:8d:56:88:c3: a8:93:8e:68:33:33:ca:af:9d:ea:48:be:a9:da:62: 89:d1:b6:13:4c:47:56:f7:ec:e2:33:a3:62:f7:d0: d7:3d:49:59:03:8b:19:76:e3:73:4a:7c:b6:e0:70: ef:f8:49:5b:29:c8:54:f4:cf:a0:10:46:17:c2:cb: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7A:82:C6:DA:4F:A8:D9:DE:4B:D9:2B:4E:48:6C:A3:84:DB:D4:C3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9bf499d1-1758-4906-a6cf-2459116db1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:2840::/48 Signature Algorithm: sha256WithRSAEncryption 39:dd:65:32:35:92:63:e5:0d:b8:84:ba:96:a2:11:74:57:10: 30:61:a3:d8:d4:27:9e:70:2a:62:43:34:a4:03:4c:15:83:77: 75:10:76:5f:1f:df:ad:50:7b:0e:3a:47:b6:1c:ff:d7:01:23: 3c:82:de:3f:6e:60:c2:7a:a0:af:cb:5b:f3:a3:8f:95:56:07: bc:d2:9c:d3:58:99:c8:5d:37:d1:d5:45:54:b8:2b:87:7f:0b: 5f:94:b5:34:1e:50:4e:16:7e:55:87:dd:76:e5:f6:62:0b:50: c2:96:35:d2:8e:b4:06:ae:33:11:0a:73:92:96:38:8a:cc:f9: 13:e1:cf:d9:2e:f0:52:28:de:d3:70:63:a1:10:9c:ca:27:2c: f5:9c:77:03:5c:b4:5e:26:bc:cb:b0:f8:c6:f5:b6:b8:f4:91: 14:92:46:cf:12:c8:43:ca:7b:20:e1:d5:8d:91:f4:e1:a1:f1: 98:51:ef:7e:74:7e:ea:62:b7:b8:62:7e:91:bf:eb:e4:5c:17: 03:20:20:50:63:01:df:9a:c1:9b:ae:23:55:fa:ba:80:7a:e3: 6a:9f:90:3e:21:25:41:72:e3:87:eb:9a:64:31:e0:f5:78:cd: f6:a3:69:a2:50:1b:ee:84:fb:40:50:eb:70:83:1e:60:47:12: 92:07:a3:e1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbtVESXzr9GgD4R4oIp/yhOBGzJUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTQwNloX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAOTg5MmYwOTZiY2FlN2IzNjdkOWYx YjNmMzEwNTEzZWE1ZTk3NjgyMTBmNjQ5NzgwYTMxNjUzNTVmZTE0ODNjYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXRyqT4ix4LjnHINBLojBFkhSkME Gvz/IKqldvrBWUajF+Jm6bXsy0JXN8V5OKwHKm8vkTT4p2884tCalNJ5GKrsh0Xz TjWpmVmLpCoTAAKEmP9cVxrxKS1svUbYSRAX5Ouwyd+tQGu5XFqEuIkvTzPRkY0P Jk6XJAeeJSdkRkSY6LI8ieJX5mFUGr9jaS85yyVCmhACMWZ5FPv1FxjUyV+AVEID 7F8Ap9TymhbrDIpx60MLC3JjB09Q3ihN1Y1WiMOok45oMzPKr53qSL6p2mKJ0bYT TEdW9+ziM6Ni99DXPUlZA4sZduNzSny24HDv+ElbKchU9M+gEEYXwstvNQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBt6gsbaT6jZ3kvZK05IbKOE29TDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzliZjQ5OWQxLTE3NTgtNDkwNi1hNmNmLTI0NTkxMTZkYjFhYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ChAMA0GCSqGSIb3DQEBCwUAA4IBAQA53WUyNZJj5Q24hLqW ohF0VxAwYaPY1CeecCpiQzSkA0wVg3d1EHZfH9+tUHsOOke2HP/XASM8gt4/bmDC eqCvy1vzo4+VVge80pzTWJnIXTfR1UVUuCuHfwtflLU0HlBOFn5Vh9125fZiC1DC ljXSjrQGrjMRCnOSljiKzPkT4c/ZLvBSKN7TcGOhEJzKJyz1nHcDXLReJrzLsPjG 9ba49JEUkkbPEshDynsg4dWNkfThofGYUe9+dH7qYre4Yn6Rv+vkXBcDICBQYwHf msGbriNV+rqAeuNqn5A+ISVBcuOH65pkMeD1eM32o2miUBvuhPtAUOtwgx5gRxKS B6Ph -----END CERTIFICATE-----Generated at Sun May 24 12:19:40 2026 by rpki-client