$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c26e4656-a14f-4e44-8442-773fbd76e2f0.roa File: c26e4656-a14f-4e44-8442-773fbd76e2f0.roa (raw, json) Hash identifier: o69BtSjpXmQsfm1awGPOSaHod+3fnrP8Z6JDi/kIxHM= Subject key identifier: 1C:6F:B4:50:73:BA:17:AE:01:EA:C3:01:47:02:61:57:35:58:11:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 78C90B26796E3E6FB5C45D482522F96D51DE3599 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c26e4656-a14f-4e44-8442-773fbd76e2f0.roa Signing time: Mon 22 Jun 2026 00:00:08 +0000 ROA not before: Mon 22 Jun 2026 00:00:08 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c9:0b:26:79:6e:3e:6f:b5:c4:5d:48:25:22:f9:6d:51:de:35:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:00:08 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=35076dd22c08ec670f2bc6e049b2eb0bc56bcb7ebebb19019bdcacbfc4a33bdb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:de:f6:28:e7:44:00:cc:90:7c:e9:42:58:f4: 8b:38:c8:f6:cb:44:e8:51:67:2f:ef:71:0a:cc:3f: 7a:c8:8f:16:82:33:d5:e3:7e:a5:ab:f6:50:d4:b5: 95:cc:d3:2a:18:c8:00:ac:d7:10:9f:12:8e:63:ea: 00:fd:66:7a:5c:fb:28:88:91:dc:5b:93:a2:a4:19: b3:95:aa:46:3d:4d:1b:58:8a:c5:c2:4f:2f:17:22: bb:b6:fb:ad:bc:a0:cd:95:d0:75:5e:e6:d2:fc:23: bc:c9:fd:12:28:cb:41:9b:09:a0:40:2d:0f:9d:04: 6d:f9:22:84:44:40:53:52:72:1b:bc:3c:4d:20:22: 6b:0d:0f:c6:49:a5:cc:c0:25:85:c0:54:e4:40:c8: 05:78:a3:13:23:63:cb:1a:6b:b1:c4:f0:3d:df:5f: 8d:b8:75:34:d4:1e:01:6e:b4:3a:c1:9f:ec:5c:00: b2:99:51:64:18:0c:eb:d0:41:0f:45:37:40:61:cd: b7:db:33:7c:32:b9:db:ed:f9:61:d0:77:db:ab:22: 8d:28:18:86:ad:7c:74:67:cf:44:11:8c:3a:e1:d8: 3e:b2:a1:56:fc:ab:68:15:7d:2f:d1:83:e1:85:1d: a2:53:42:e7:e1:a9:65:37:07:19:6c:61:c9:cc:b8: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6F:B4:50:73:BA:17:AE:01:EA:C3:01:47:02:61:57:35:58:11:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c26e4656-a14f-4e44-8442-773fbd76e2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:9080::/48 Signature Algorithm: sha256WithRSAEncryption cb:44:b9:1b:48:92:b0:20:7d:17:2d:29:f8:73:9a:1f:04:88: 62:56:69:6e:7c:7c:47:3a:c0:bd:75:7a:d8:97:87:ba:b9:15: b1:b8:4a:8a:98:69:86:41:1e:d3:20:52:08:06:bb:f8:fa:4c: 72:78:3c:ac:0e:c6:ff:71:43:15:f2:c2:84:88:17:44:06:f8: f0:62:f1:73:84:79:5c:55:e9:e7:04:1d:f3:95:f5:30:a5:ce: 24:43:2c:44:12:d6:41:d8:4b:8f:db:03:40:ea:4b:8f:cc:41: 87:e7:f9:be:c4:45:bd:42:97:56:41:8c:17:28:31:f8:a4:30: af:05:47:30:a1:24:e4:7b:4d:bb:0c:3e:6a:04:90:0d:03:4c: f2:de:3a:3f:28:79:b8:a0:47:bf:f9:10:24:e9:8c:bb:5b:56: 48:b2:05:b6:49:1f:2a:4e:1f:aa:e7:2c:5e:4e:3c:75:4a:fb: 01:8d:a0:f2:dc:5a:ce:ce:1e:66:19:8d:20:f3:a4:01:d8:e0: fc:90:71:d2:29:e2:b6:a8:6d:28:bd:c0:97:7d:ab:b1:16:db: 7e:dc:00:98:00:f7:b4:e8:7e:2a:f0:aa:87:0a:78:0a:26:f0: f2:56:47:2e:56:a1:17:1d:a5:d6:fd:40:4c:54:06:62:17:fe: aa:a5:09:e5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeMkLJnluPm+1xF1IJSL5bVHeNZkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDAwOFoX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAMzUwNzZkZDIyYzA4ZWM2NzBmMmJj NmUwNDliMmViMGJjNTZiY2I3ZWJlYmIxOTAxOWJkY2FjYmZjNGEzM2JkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3972KOdEAMyQfOlCWPSLOMj2y0To UWcv73EKzD96yI8WgjPV436lq/ZQ1LWVzNMqGMgArNcQnxKOY+oA/WZ6XPsoiJHc W5OipBmzlapGPU0bWIrFwk8vFyK7tvutvKDNldB1XubS/CO8yf0SKMtBmwmgQC0P nQRt+SKEREBTUnIbvDxNICJrDQ/GSaXMwCWFwFTkQMgFeKMTI2PLGmuxxPA931+N uHU01B4BbrQ6wZ/sXACymVFkGAzr0EEPRTdAYc232zN8Mrnb7flh0HfbqyKNKBiG rXx0Z89EEYw64dg+sqFW/KtoFX0v0YPhhR2iU0Ln4allNwcZbGHJzLhNwQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBxvtFBzuheuAerDAUcCYVc1WBHiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyNmU0NjU2LWExNGYtNGU0NC04NDQyLTc3M2ZiZDc2ZTJmMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba65CAMA0GCSqGSIb3DQEBCwUAA4IBAQDLRLkbSJKwIH0XLSn4 c5ofBIhiVmlufHxHOsC9dXrYl4e6uRWxuEqKmGmGQR7TIFIIBrv4+kxyeDysDsb/ cUMV8sKEiBdEBvjwYvFzhHlcVennBB3zlfUwpc4kQyxEEtZB2EuP2wNA6kuPzEGH 5/m+xEW9QpdWQYwXKDH4pDCvBUcwoSTke027DD5qBJANA0zy3jo/KHm4oEe/+RAk 6Yy7W1ZIsgW2SR8qTh+q5yxeTjx1SvsBjaDy3FrOzh5mGY0g86QB2OD8kHHSKeK2 qG0ovcCXfauxFtt+3ACYAPe06H4q8KqHCngKJvDyVkcuVqEXHaXW/UBMVAZiF/6q pQnl -----END CERTIFICATE-----Generated at Thu Jul 9 11:02:13 2026 by rpki-client