$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ca9837-1d67-452f-8fea-80250f36d360.roa File: a7ca9837-1d67-452f-8fea-80250f36d360.roa (raw, json) Hash identifier: M/vSqfZX9b2Fwivo4kyIHqGAXxBLSKAFy6MpkMfi/88= Subject key identifier: F6:49:38:AC:BB:A3:92:12:BA:AA:29:0B:3A:F7:C3:85:5C:03:32:47 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2DD0A56E389BBCF635A15DD6DE7F68A2BF4FAECD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ca9837-1d67-452f-8fea-80250f36d360.roa Signing time: Sat 01 Aug 2026 00:21:04 +0000 ROA not before: Sat 01 Aug 2026 00:21:04 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d0:a5:6e:38:9b:bc:f6:35:a1:5d:d6:de:7f:68:a2:bf:4f:ae:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:21:04 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=3f8790e6f010f681b4c14fd472ddea9762cb3614cd759d0207cd03aa50198286, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:de:a2:c0:d5:91:00:c1:5c:30:87:4e:b9: 46:44:2d:79:33:e9:24:58:6d:f6:96:63:91:00:e3: 21:af:e7:32:de:15:05:22:af:b3:78:07:54:c1:03: 1e:d5:fe:7c:1e:8f:4f:f7:3f:d9:9d:18:27:d6:1a: 14:14:e7:d7:77:82:ee:9a:9f:e9:f0:34:63:49:2e: d4:a3:3d:73:d5:cc:8a:f1:a1:78:fa:57:78:b9:17: ef:41:c1:04:e3:37:6d:85:1e:48:27:e3:b3:16:69: 70:de:57:91:48:1f:97:50:2d:ad:76:40:1b:60:d1: c2:2f:1d:cd:ba:d8:49:f8:86:12:ca:92:9d:5c:6d: 2a:57:60:8f:11:14:6f:4f:b2:fc:fe:c9:20:46:7b: 2e:7f:31:49:ac:29:23:19:a5:90:e5:0a:5a:63:3d: e8:90:3f:ca:43:82:b3:53:eb:e5:ea:8d:c9:1d:1f: 40:2c:9b:2c:b1:64:51:ac:0e:51:62:91:eb:5a:ed: 7f:13:6a:09:aa:79:57:08:bc:55:9e:25:63:5e:dc: bc:56:8a:ae:aa:37:31:19:b6:75:06:9d:d1:1a:cc: 07:55:f1:d9:a9:0d:ff:c4:0f:c2:cf:6d:aa:a3:60: 68:17:9f:bd:89:84:2d:12:3a:c8:4a:a8:72:12:47: 0c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:49:38:AC:BB:A3:92:12:BA:AA:29:0B:3A:F7:C3:85:5C:03:32:47 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ca9837-1d67-452f-8fea-80250f36d360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:1000::/40 Signature Algorithm: sha256WithRSAEncryption b5:09:10:61:a8:3e:bd:72:90:40:5b:b8:98:ad:7a:67:d9:39: 95:ff:3e:37:7a:89:ad:54:68:3e:aa:56:21:51:c7:98:81:87: 65:d7:74:a6:08:6f:4c:dc:fe:6f:18:2b:1a:bd:1c:d9:a4:43: d9:0a:54:5a:4e:6d:f8:2d:04:ef:44:42:c7:37:ce:7d:30:e6: d6:b0:4b:50:72:c0:af:44:ed:f0:cf:e2:ac:b3:fb:c3:c3:72: 16:27:6b:99:90:b0:60:88:ed:04:73:fc:fb:97:b4:ef:1a:b8: 91:26:fa:9c:68:e8:85:91:35:22:44:83:5e:e0:3b:62:84:88: fd:37:37:cf:08:de:e6:be:9b:d4:38:84:80:8c:cf:6c:25:c5: 4b:10:10:e4:20:6c:68:ce:a7:4d:61:1d:43:47:73:41:97:17: 2f:8d:68:38:1a:ee:ea:be:19:e9:ce:10:a1:54:1f:71:76:84: 14:bc:c9:cc:b4:1d:99:2a:67:30:9e:b0:52:55:57:fc:92:96: 1a:c1:a8:4e:85:3b:c3:10:a3:2e:12:cf:bc:ba:57:1c:83:99: a3:15:d2:58:18:c1:97:20:ed:ab:f0:a4:6f:7e:0c:81:93:0f: 25:17:89:85:8f:a7:02:01:14:da:7c:9f:29:d3:d1:af:a7:a7: 3a:f7:45:35 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULdClbjibvPY1oV3W3n9oor9Prs0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMjEwNFoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAM2Y4NzkwZTZmMDEwZjY4MWI0YzE0 ZmQ0NzJkZGVhOTc2MmNiMzYxNGNkNzU5ZDAyMDdjZDAzYWE1MDE5ODI4NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq7eosDVkQDBXDCHTrlGRC15M+kk WG32lmORAOMhr+cy3hUFIq+zeAdUwQMe1f58Ho9P9z/ZnRgn1hoUFOfXd4Lump/p 8DRjSS7Uoz1z1cyK8aF4+ld4uRfvQcEE4zdthR5IJ+OzFmlw3leRSB+XUC2tdkAb YNHCLx3NuthJ+IYSypKdXG0qV2CPERRvT7L8/skgRnsufzFJrCkjGaWQ5QpaYz3o kD/KQ4KzU+vl6o3JHR9ALJsssWRRrA5RYpHrWu1/E2oJqnlXCLxVniVjXty8Voqu qjcxGbZ1Bp3RGswHVfHZqQ3/xA/Cz22qo2BoF5+9iYQtEjrISqhyEkcMWQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPZJOKy7o5ISuqopCzr3w4VcAzJHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3Y2E5ODM3LTFkNjctNDUyZi04ZmVhLTgwMjUwZjM2ZDM2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+BAwDQYJKoZIhvcNAQELBQADggEBALUJEGGoPr1ykEBbuJit emfZOZX/Pjd6ia1UaD6qViFRx5iBh2XXdKYIb0zc/m8YKxq9HNmkQ9kKVFpObfgt BO9EQsc3zn0w5tawS1BywK9E7fDP4qyz+8PDchYna5mQsGCI7QRz/PuXtO8auJEm +pxo6IWRNSJEg17gO2KEiP03N88I3ua+m9Q4hICMz2wlxUsQEOQgbGjOp01hHUNH c0GXFy+NaDga7uq+GenOEKFUH3F2hBS8ycy0HZkqZzCesFJVV/ySlhrBqE6FO8MQ oy4Sz7y6VxyDmaMV0lgYwZcg7avwpG9+DIGTDyUXiYWPpwIBFNp8nynT0a+npzr3 RTU= -----END CERTIFICATE-----Generated at Sat Aug 1 12:20:31 2026 by rpki-client