$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b77fc3ba-b44b-43dd-969b-de620869e65e.roa File: b77fc3ba-b44b-43dd-969b-de620869e65e.roa (raw, json) Hash identifier: x94XTioQOwFed1sKe0ZJzO9hRIXJNfVThfRX9vmFtNQ= Subject key identifier: 7F:C9:DA:80:39:01:60:CE:F6:7F:3A:F8:78:6D:A4:16:85:7C:F7:86 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 29F17704DC30FDDAF52A98172F8AA338C0C3A1C4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b77fc3ba-b44b-43dd-969b-de620869e65e.roa Signing time: Fri 22 May 2026 17:01:27 +0000 ROA not before: Fri 22 May 2026 17:01:27 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f1:77:04:dc:30:fd:da:f5:2a:98:17:2f:8a:a3:38:c0:c3:a1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:01:27 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=a4e2a4201cecfe8f18b2204c5f258ab8f000a4742f00405a9d43dccada380645, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d6:7f:ea:6d:d8:a1:ff:64:e4:11:01:de:d8: 65:c8:2b:0f:67:fc:d2:78:03:2b:f4:e6:20:b4:33: 0c:25:f6:97:47:fa:fb:23:b4:f1:9a:91:ee:92:d6: 56:18:6c:57:8f:bf:a7:19:42:93:4b:87:f0:80:30: e3:cc:c0:7c:ae:86:53:78:9b:fa:3a:c7:ba:5b:2f: ad:52:38:96:5c:bb:e0:ec:89:80:65:43:95:63:5c: 55:b6:e7:46:1c:e7:b2:af:0a:9e:fd:6f:ee:07:09: e2:11:2b:53:91:3c:f4:1e:4e:4c:67:60:e3:95:63: 68:27:17:38:70:aa:5d:d8:4d:81:b1:b6:5a:9f:a7: 63:87:c2:84:7e:8d:8d:d0:3e:60:e4:7e:48:17:16: 59:0d:68:56:e7:39:24:14:81:5a:c4:a0:93:22:d2: 79:f8:2f:41:11:ef:d5:76:2b:f5:36:50:95:9c:51: aa:85:c3:e4:ae:da:51:71:f0:7c:db:9d:ec:85:20: d0:13:23:4b:7f:da:c5:05:f3:b0:e7:dd:fc:1c:f2: ca:22:57:38:9b:1b:dc:c3:ba:76:b4:25:e9:40:eb: bb:22:74:76:bb:29:67:78:a8:12:d4:1a:a4:63:91: 37:4b:65:04:f1:14:6e:29:c3:bd:4d:b3:9d:b6:87: ac:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C9:DA:80:39:01:60:CE:F6:7F:3A:F8:78:6D:A4:16:85:7C:F7:86 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b77fc3ba-b44b-43dd-969b-de620869e65e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:6040::/48 Signature Algorithm: sha256WithRSAEncryption 89:02:8f:14:5a:03:53:50:0e:e1:b7:ca:37:72:55:02:27:c1: 63:e2:af:32:a7:3f:9f:75:a6:79:fa:ec:69:62:c2:3f:af:1e: 60:39:36:bc:97:ea:83:97:e8:67:d0:68:d7:15:96:ab:e7:dc: 4a:da:b1:97:96:c2:f0:1d:f2:73:58:46:35:01:d4:8c:cc:a8: f7:ba:ae:08:21:8f:6f:83:d5:27:ca:44:91:c4:a8:9e:63:1a: 6f:6c:a6:8e:2e:2e:6d:20:b5:5a:ff:00:6c:8d:d8:50:1e:47: 14:73:5a:a9:0a:aa:d1:6c:12:62:d1:c6:6c:39:a9:49:a4:e6: 37:07:16:1a:4f:4d:49:5d:b4:c5:38:0a:fb:b2:78:09:86:c7: 8e:49:5e:09:31:17:45:26:50:41:83:04:1b:c5:61:b6:9e:36: 58:e9:49:f3:0f:28:bf:78:ab:21:32:8d:64:70:a8:8a:80:d2: 7a:d7:5f:b3:0c:fa:d6:78:89:12:06:d1:a9:61:ec:18:27:a8: 35:1a:93:1d:02:3d:62:cc:1d:97:1c:cb:17:c0:68:ea:4f:34: fc:64:42:af:f1:9a:5d:75:0a:22:2a:42:7a:f6:fe:ad:d3:d6: 8f:49:01:58:87:0e:32:ea:d1:43:94:73:89:64:2e:2e:27:93: 0e:dd:2a:0d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKfF3BNww/dr1KpgXL4qjOMDDocQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MDEyN1oX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAYTRlMmE0MjAxY2VjZmU4ZjE4YjIy MDRjNWYyNThhYjhmMDAwYTQ3NDJmMDA0MDVhOWQ0M2RjY2FkYTM4MDY0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29Z/6m3Yof9k5BEB3thlyCsPZ/zS eAMr9OYgtDMMJfaXR/r7I7TxmpHuktZWGGxXj7+nGUKTS4fwgDDjzMB8roZTeJv6 Ose6Wy+tUjiWXLvg7ImAZUOVY1xVtudGHOeyrwqe/W/uBwniEStTkTz0Hk5MZ2Dj lWNoJxc4cKpd2E2BsbZan6djh8KEfo2N0D5g5H5IFxZZDWhW5zkkFIFaxKCTItJ5 +C9BEe/Vdiv1NlCVnFGqhcPkrtpRcfB8253shSDQEyNLf9rFBfOw5938HPLKIlc4 mxvcw7p2tCXpQOu7InR2uylneKgS1BqkY5E3S2UE8RRuKcO9TbOdtoesIQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH/J2oA5AWDO9n86+HhtpBaFfPeGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3N2ZjM2JhLWI0NGItNDNkZC05NjliLWRlNjIwODY5ZTY1ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6GBAMA0GCSqGSIb3DQEBCwUAA4IBAQCJAo8UWgNTUA7ht8o3 clUCJ8Fj4q8ypz+fdaZ5+uxpYsI/rx5gOTa8l+qDl+hn0GjXFZar59xK2rGXlsLw HfJzWEY1AdSMzKj3uq4IIY9vg9UnykSRxKieYxpvbKaOLi5tILVa/wBsjdhQHkcU c1qpCqrRbBJi0cZsOalJpOY3BxYaT01JXbTFOAr7sngJhseOSV4JMRdFJlBBgwQb xWG2njZY6UnzDyi/eKshMo1kcKiKgNJ611+zDPrWeIkSBtGpYewYJ6g1GpMdAj1i zB2XHMsXwGjqTzT8ZEKv8ZpddQoiKkJ69v6t09aPSQFYhw4y6tFDlHOJZC4uJ5MO 3SoN -----END CERTIFICATE-----Generated at Sun May 24 12:19:41 2026 by rpki-client