$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c534d2c-91ca-45f7-8ffc-81e4ca7f473f.roa File: 7c534d2c-91ca-45f7-8ffc-81e4ca7f473f.roa (raw, json) Hash identifier: MIU40Gx0DQyAtmQMi7J+lpuTSb9l+V2d+ykJVTDsGXQ= Subject key identifier: 10:A0:01:FC:99:7C:E1:35:0B:F9:AE:8B:0F:33:F6:C5:A7:64:A4:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58F1235C9B6ADC685EC20F87D4C20285627B7C88 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c534d2c-91ca-45f7-8ffc-81e4ca7f473f.roa Signing time: Fri 31 Jul 2026 00:10:41 +0000 ROA not before: Fri 31 Jul 2026 00:10:41 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f1:23:5c:9b:6a:dc:68:5e:c2:0f:87:d4:c2:02:85:62:7b:7c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:10:41 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=b7cb63d1141ec2994f7136d6a3ce56b9a08b74e91b2c880d9566b32e47085ec0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:68:e6:dc:ec:af:c6:73:37:1c:0a:67:4e: 86:43:2b:1b:b3:c3:8c:05:2b:3e:31:63:c0:d6:cc: 94:35:96:d3:96:e5:bf:04:76:f2:fb:9e:a8:15:23: 9f:ef:00:7c:cc:dc:a6:71:25:36:bf:19:48:ac:cb: 74:32:af:f3:91:72:38:22:95:7f:4d:db:1e:ff:c5: a4:97:f4:6d:45:d7:72:57:39:fe:f7:bf:6a:41:e9: 26:95:6a:06:3e:e2:d3:51:7e:94:b8:7a:ff:ab:78: 9b:8e:e0:ef:1b:20:63:4c:95:cc:82:e2:5d:9e:9a: 33:84:5f:83:2d:f5:d5:bc:3c:1f:96:72:4e:0b:ce: e3:8d:19:51:a4:56:54:35:68:a7:fc:9e:de:ee:7f: 8c:40:99:08:6e:3c:ac:9a:af:cc:9e:b3:fa:af:5d: ca:43:ea:7f:6a:c3:74:cb:b4:f7:4c:44:78:ba:33: f9:34:9c:93:56:16:3c:d5:14:42:b3:c4:43:d5:52: 27:1b:be:7a:10:77:7f:a3:d8:00:fb:11:80:09:f3: 55:d2:13:fa:c1:7a:a9:13:a3:6a:46:0b:75:4a:b7: 8f:60:45:ae:58:2c:1d:8d:79:04:93:d4:ae:0b:88: bb:a8:ff:b3:16:3c:cc:48:9f:18:c7:c4:00:d6:f7: 71:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A0:01:FC:99:7C:E1:35:0B:F9:AE:8B:0F:33:F6:C5:A7:64:A4:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c534d2c-91ca-45f7-8ffc-81e4ca7f473f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c800::/40 Signature Algorithm: sha256WithRSAEncryption 73:cf:ec:08:db:a8:2f:02:de:f5:86:94:eb:ff:67:95:71:f6: 65:8e:bd:ed:43:39:75:de:3e:dd:67:f2:9b:7c:c8:bb:c3:51: f7:e7:08:93:5f:d1:db:79:75:d5:9f:e7:8e:a5:e8:6c:16:5a: 43:90:c1:b1:6e:4d:35:bf:4a:c4:4e:4d:ff:43:24:29:21:23: 31:43:7c:26:2b:ef:46:70:14:c7:d8:31:1e:c2:d0:e7:ee:26: 4b:18:c0:8c:64:2e:23:9b:16:c5:4d:42:e1:d9:c3:07:11:22: 9e:57:7c:68:b0:83:6c:90:67:d6:99:6c:43:6d:bb:1c:04:46: db:f6:30:1a:79:4e:b3:03:98:0d:80:05:c4:9e:80:ef:a7:90: 22:fc:fb:22:d0:67:c3:cb:1a:24:46:7b:70:16:33:fa:98:d3: 7b:71:1e:63:bd:09:a3:d7:eb:3a:f5:6e:65:70:48:33:57:fc: 13:22:9a:69:86:4a:c6:93:2f:b9:ea:8a:f4:e1:e3:af:17:30: f9:dc:0d:6b:9e:80:1b:ec:22:49:bd:06:de:12:2d:4d:70:96: ed:40:c8:da:ed:36:f8:0f:a9:13:4d:48:a1:04:c0:f8:3f:4e: d9:b9:4b:8b:8d:8a:9c:0b:7f:8e:12:4e:7c:5d:ec:4b:14:89: 0d:85:a3:ba -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWPEjXJtq3Ghewg+H1MIChWJ7fIgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMTA0MVoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAYjdjYjYzZDExNDFlYzI5OTRmNzEz NmQ2YTNjZTU2YjlhMDhiNzRlOTFiMmM4ODBkOTU2NmIzMmU0NzA4NWVjMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXFo5tzsr8ZzNxwKZ06GQysbs8OM BSs+MWPA1syUNZbTluW/BHby+56oFSOf7wB8zNymcSU2vxlIrMt0Mq/zkXI4IpV/ Tdse/8Wkl/RtRddyVzn+979qQekmlWoGPuLTUX6UuHr/q3ibjuDvGyBjTJXMguJd npozhF+DLfXVvDwflnJOC87jjRlRpFZUNWin/J7e7n+MQJkIbjysmq/MnrP6r13K Q+p/asN0y7T3TER4ujP5NJyTVhY81RRCs8RD1VInG756EHd/o9gA+xGACfNV0hP6 wXqpE6NqRgt1SrePYEWuWCwdjXkEk9SuC4i7qP+zFjzMSJ8Yx8QA1vdxfwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBCgAfyZfOE1C/muiw8z9sWnZKTgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdjNTM0ZDJjLTkxY2EtNDVmNy04ZmZjLTgxZTRjYTdmNDczZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/8gwDQYJKoZIhvcNAQELBQADggEBAHPP7AjbqC8C3vWGlOv/ Z5Vx9mWOve1DOXXePt1n8pt8yLvDUffnCJNf0dt5ddWf546l6GwWWkOQwbFuTTW/ SsROTf9DJCkhIzFDfCYr70ZwFMfYMR7C0OfuJksYwIxkLiObFsVNQuHZwwcRIp5X fGiwg2yQZ9aZbENtuxwERtv2MBp5TrMDmA2ABcSegO+nkCL8+yLQZ8PLGiRGe3AW M/qY03txHmO9CaPX6zr1bmVwSDNX/BMimmmGSsaTL7nqivTh468XMPncDWuegBvs Ikm9Bt4SLU1wlu1AyNrtNvgPqRNNSKEEwPg/Ttm5S4uNipwLf44STnxd7EsUiQ2F o7o= -----END CERTIFICATE-----Generated at Wed Aug 26 06:19:58 2026 by rpki-client