$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a4d73a5a-d292-42ce-817b-254a3c874b52.roa File: a4d73a5a-d292-42ce-817b-254a3c874b52.roa (raw, json) Hash identifier: z6ehwVmyureckFhHAVQfPYoZL0AtXKJUbxbA9QnqlWc= Subject key identifier: 52:4A:17:C3:40:25:DD:A7:73:84:B9:62:FF:71:4E:23:55:78:1D:72 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48AB583B4AE85582C80F0510406DEEBFDBF4232F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a4d73a5a-d292-42ce-817b-254a3c874b52.roa Signing time: Mon 22 Jun 2026 00:01:05 +0000 ROA not before: Mon 22 Jun 2026 00:01:05 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ab:58:3b:4a:e8:55:82:c8:0f:05:10:40:6d:ee:bf:db:f4:23:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:01:05 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=40193d450523bafc38f1f047796a2b984a811c60e0b8dd2c557b85c91919beb8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:71:cb:0c:d6:86:17:8d:15:89:ec:85:13: e3:19:62:ec:89:2f:ae:ff:ad:01:d7:84:50:1f:d5: 1a:cf:3f:76:64:27:d9:6a:5c:c9:e4:ca:3a:b6:2d: dc:2c:ac:58:85:8b:e8:c9:70:d0:7f:d3:61:65:a5: 14:b4:24:c6:7a:00:2e:0f:3b:72:c8:f8:7a:e5:6d: 48:b4:00:24:6c:ce:b5:d0:4d:76:d8:79:3a:24:ed: a3:1d:72:e1:52:eb:c5:55:bb:d6:3c:f0:25:89:89: ac:64:5f:aa:10:6c:36:d4:44:33:44:0b:65:bb:10: e6:d8:89:59:d5:3a:74:e7:20:a1:05:67:8c:18:cd: b9:51:24:8d:72:b3:04:ed:0b:33:a5:30:e0:7d:ce: 5d:60:12:40:92:49:76:26:26:ab:9d:1f:f3:1f:ec: 2d:c9:9f:6d:21:9e:a1:8a:7d:7c:72:04:9e:dc:75: 48:68:c2:9a:19:51:c1:d2:f5:29:b7:03:55:b9:6d: 6b:c8:59:59:88:06:5e:7b:d3:e0:cb:d4:b4:74:7f: 2c:2c:0a:1f:b4:5c:16:5f:f2:60:8d:c1:23:9c:17: 73:bd:ce:57:79:fd:5f:47:23:f0:26:f9:eb:44:af: f1:a0:ff:6a:ff:cb:16:52:4c:6c:7a:0a:d1:bf:b8: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4A:17:C3:40:25:DD:A7:73:84:B9:62:FF:71:4E:23:55:78:1D:72 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a4d73a5a-d292-42ce-817b-254a3c874b52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:b080::/48 Signature Algorithm: sha256WithRSAEncryption 2c:cc:a6:b8:9a:10:82:1e:a0:f5:b3:09:0f:5f:c1:fb:fc:19: 8c:1e:9e:08:c0:61:e4:28:5c:b1:4a:75:df:99:ba:56:b8:3b: 12:2d:90:6c:a0:94:ef:c3:ae:06:90:2b:2a:9f:8d:8b:e3:04: 9c:ea:8b:47:24:cb:bc:a1:28:28:0c:1c:09:d9:98:a0:6e:98: 1c:ce:33:33:33:e5:9d:bc:4a:89:1a:d2:3f:2e:39:a8:78:b1: 74:17:6d:1d:de:76:3f:19:c7:4f:4f:c8:78:1d:69:f4:3a:75: cf:ff:0c:ae:3f:45:05:4b:49:d3:a8:a1:e6:70:ba:b0:41:87: ca:f6:4a:e2:24:f7:74:eb:45:a5:97:89:1b:0d:de:21:a9:c3: 5a:7e:73:e0:3f:17:07:01:ef:92:57:8a:c7:d9:cd:56:97:8f: 51:9a:7b:cf:97:20:25:36:db:a0:9d:8e:0f:e7:6c:03:11:5f: 07:41:be:5e:8f:ef:cf:7d:e2:4a:ce:e6:ab:de:1c:11:94:cf: 9c:b8:ba:3c:81:40:8a:94:12:bc:7a:be:8c:e3:9a:7d:59:ef: 8d:1c:29:7a:d6:05:c1:01:dc:96:a0:0c:64:fb:23:d2:05:ed: 42:65:b9:28:ea:b0:0e:3b:17:58:31:e0:47:8e:9e:d7:4e:b2: a2:4e:90:b0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSKtYO0roVYLIDwUQQG3uv9v0Iy8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDEwNVoX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNANDAxOTNkNDUwNTIzYmFmYzM4ZjFm MDQ3Nzk2YTJiOTg0YTgxMWM2MGUwYjhkZDJjNTU3Yjg1YzkxOTE5YmViODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnpxywzWhheNFYnshRPjGWLsiS+u /60B14RQH9Uazz92ZCfZalzJ5Mo6ti3cLKxYhYvoyXDQf9NhZaUUtCTGegAuDzty yPh65W1ItAAkbM610E122Hk6JO2jHXLhUuvFVbvWPPAliYmsZF+qEGw21EQzRAtl uxDm2IlZ1Tp05yChBWeMGM25USSNcrME7QszpTDgfc5dYBJAkkl2JiarnR/zH+wt yZ9tIZ6hin18cgSe3HVIaMKaGVHB0vUptwNVuW1ryFlZiAZee9Pgy9S0dH8sLAof tFwWX/JgjcEjnBdzvc5Xef1fRyPwJvnrRK/xoP9q/8sWUkxsegrRv7gmjwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFJKF8NAJd2nc4S5Yv9xTiNVeB1yMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E0ZDczYTVhLWQyOTItNDJjZS04MTdiLTI1NGEzYzg3NGI1Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba67CAMA0GCSqGSIb3DQEBCwUAA4IBAQAszKa4mhCCHqD1swkP X8H7/BmMHp4IwGHkKFyxSnXfmbpWuDsSLZBsoJTvw64GkCsqn42L4wSc6otHJMu8 oSgoDBwJ2ZigbpgczjMzM+WdvEqJGtI/LjmoeLF0F20d3nY/GcdPT8h4HWn0OnXP /wyuP0UFS0nTqKHmcLqwQYfK9kriJPd060Wll4kbDd4hqcNafnPgPxcHAe+SV4rH 2c1Wl49RmnvPlyAlNtugnY4P52wDEV8HQb5ej+/PfeJKzuar3hwRlM+cuLo8gUCK lBK8er6M45p9We+NHCl61gXBAdyWoAxk+yPSBe1CZbko6rAOOxdYMeBHjp7XTrKi TpCw -----END CERTIFICATE-----Generated at Thu Jul 9 11:04:49 2026 by rpki-client