$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6ab0ed3-7114-491b-8669-ebd788538f5a.roa File: f6ab0ed3-7114-491b-8669-ebd788538f5a.roa (raw, json) Hash identifier: auhCMMA2EkjY8tVepFtXGmqya4QwSXhdS/le9XE1ljM= Subject key identifier: 3A:B9:87:25:E1:C0:90:FB:ED:4D:46:5C:BA:04:F1:90:AD:D5:8B:32 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6A1BA424B04FCFC7BD85819E1920B0C802472D23 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6ab0ed3-7114-491b-8669-ebd788538f5a.roa Signing time: Tue 19 May 2026 00:00:10 +0000 ROA not before: Tue 19 May 2026 00:00:10 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1b:a4:24:b0:4f:cf:c7:bd:85:81:9e:19:20:b0:c8:02:47:2d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 00:00:10 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=72e97d885915b7446268019ee3ef5a01e5e97a7b32d18b7b3ed14a4cadff11ea, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:fd:81:6c:29:98:a0:bb:aa:c6:78:1d:86: 1c:65:93:ab:bf:48:8d:e5:4c:0f:6b:1a:cc:09:eb: 7e:74:c4:c2:8e:f4:2d:8b:ac:ce:ea:72:9b:eb:42: 33:26:cd:91:11:f3:5e:a8:3c:51:0f:c0:5a:bb:03: 7c:74:8c:93:31:aa:66:88:37:28:5f:2e:93:71:7d: 61:c9:2e:3d:eb:09:85:65:04:09:1d:c5:1a:db:c0: dd:e5:6c:36:26:7c:c0:de:a4:c9:bf:d9:ce:8b:ec: 8e:68:1a:be:4b:d0:f4:b2:a5:92:d8:a5:3e:eb:6f: 2f:54:09:9d:55:a3:2a:80:37:be:3a:d4:bf:8d:1b: b0:6d:dc:da:60:95:c0:b6:fc:8f:a4:39:62:49:0e: b2:1a:b6:a0:5a:a9:e9:0c:ba:90:34:52:02:29:d1: 14:64:fd:cb:51:d4:29:b1:db:82:03:51:8b:ad:66: 8f:f6:bc:fe:91:c7:89:e0:76:26:f6:ac:39:99:86: ba:40:fd:d4:5c:3d:25:be:00:4d:c0:12:9d:91:c1: 35:93:58:40:21:da:c0:35:5f:15:33:3e:59:d2:3e: 7e:4c:fd:dc:9b:52:db:68:b4:71:4e:a3:e4:fb:de: c8:9f:f7:f4:f8:65:3b:59:01:31:2c:6a:80:d6:69: 64:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B9:87:25:E1:C0:90:FB:ED:4D:46:5C:BA:04:F1:90:AD:D5:8B:32 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6ab0ed3-7114-491b-8669-ebd788538f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:4800::/40 Signature Algorithm: sha256WithRSAEncryption a6:ec:78:40:12:5f:b4:50:1c:e6:6f:79:15:25:25:5f:76:e4: f9:3a:a4:e6:56:8b:17:28:ad:d7:1e:e0:02:ca:b5:49:ba:b6: 5f:31:d9:34:e5:e6:77:6f:ba:81:7e:b2:63:b3:27:92:dd:d9: e2:45:9f:b8:de:ed:57:49:18:06:3d:74:c7:15:a2:33:92:a3: 2a:82:37:e1:e2:d9:e9:3b:dc:87:ad:34:75:c2:e1:97:92:63: d9:18:d7:9c:eb:45:4c:72:7f:f7:ab:19:be:85:ed:bf:51:bd: 6e:9b:0f:af:b4:a5:c5:b7:37:26:0b:42:00:fc:77:b1:42:af: fb:11:e8:b0:6b:6c:1a:d4:41:83:20:ed:e8:8a:51:a2:e7:2e: b5:37:ec:23:e2:42:bf:66:5f:06:a5:51:bc:77:6a:a0:c3:03: c4:e7:07:4d:98:db:16:e6:bc:47:2e:5b:57:3a:a6:a4:2a:28: 1b:bc:b2:91:fb:c0:a2:70:30:51:83:43:d5:f3:2e:f4:1f:58: 4a:40:7b:24:58:79:45:0b:c6:78:34:00:a7:63:eb:05:50:9e: 51:42:48:99:ce:f5:b3:e6:3c:d2:7c:4c:3a:4b:99:e1:a9:80: da:af:79:90:cc:cb:50:6c:ce:ef:9a:9f:7b:83:7d:7b:89:13: 0e:bb:b4:bd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUahukJLBPz8e9hYGeGSCwyAJHLSMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxOTAwMDAxMFoX DTI2MDgxNzIzNTk1OVowejFJMEcGA1UEBRNANzJlOTdkODg1OTE1Yjc0NDYyNjgw MTllZTNlZjVhMDFlNWU5N2E3YjMyZDE4YjdiM2VkMTRhNGNhZGZmMTFlYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9r9gWwpmKC7qsZ4HYYcZZOrv0iN 5UwPaxrMCet+dMTCjvQti6zO6nKb60IzJs2REfNeqDxRD8BauwN8dIyTMapmiDco Xy6TcX1hyS496wmFZQQJHcUa28Dd5Ww2JnzA3qTJv9nOi+yOaBq+S9D0sqWS2KU+ 628vVAmdVaMqgDe+OtS/jRuwbdzaYJXAtvyPpDliSQ6yGragWqnpDLqQNFICKdEU ZP3LUdQpsduCA1GLrWaP9rz+kceJ4HYm9qw5mYa6QP3UXD0lvgBNwBKdkcE1k1hA IdrANV8VMz5Z0j5+TP3cm1LbaLRxTqPk+97In/f0+GU7WQExLGqA1mlkpwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDq5hyXhwJD77U1GXLoE8ZCt1YsyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2YWIwZWQzLTcxMTQtNDkxYi04NjY5LWViZDc4ODUzOGY1YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba70gwDQYJKoZIhvcNAQELBQADggEBAKbseEASX7RQHOZveRUl JV925Pk6pOZWixcordce4ALKtUm6tl8x2TTl5ndvuoF+smOzJ5Ld2eJFn7je7VdJ GAY9dMcVojOSoyqCN+Hi2ek73IetNHXC4ZeSY9kY15zrRUxyf/erGb6F7b9RvW6b D6+0pcW3NyYLQgD8d7FCr/sR6LBrbBrUQYMg7eiKUaLnLrU37CPiQr9mXwalUbx3 aqDDA8TnB02Y2xbmvEcuW1c6pqQqKBu8spH7wKJwMFGDQ9XzLvQfWEpAeyRYeUUL xng0AKdj6wVQnlFCSJnO9bPmPNJ8TDpLmeGpgNqveZDMy1Bszu+an3uDfXuJEw67 tL0= -----END CERTIFICATE-----Generated at Fri May 22 14:19:37 2026 by rpki-client