$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f607473c-b847-4f33-9284-b75fe670bc74.roa File: f607473c-b847-4f33-9284-b75fe670bc74.roa (raw, json) Hash identifier: z7dCW/tLKppjFGNRkXvMEEVqY7UoElZwn7aFiYdwB1U= Subject key identifier: A3:58:BB:2A:44:4C:FF:1E:2C:B6:EE:5B:F1:AA:88:AB:BA:C1:58:DC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2623E67CFE14C76A79B863128711F0DA63838456 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f607473c-b847-4f33-9284-b75fe670bc74.roa Signing time: Fri 31 Jul 2026 00:00:40 +0000 ROA not before: Fri 31 Jul 2026 00:00:40 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:23:e6:7c:fe:14:c7:6a:79:b8:63:12:87:11:f0:da:63:83:84:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:00:40 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=e7a2ebd090087c64da78bf758cc10bb629b9da8fb3ebae8a5cdde547769acf3d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5e:ee:97:0a:6c:df:c1:ca:4c:ca:a3:5a:e1: 57:07:71:d2:52:99:98:f8:2f:96:c2:29:11:7b:f2: b0:80:3a:bc:8d:d6:81:64:b1:9c:44:18:3f:44:fa: b2:59:b7:99:66:0a:43:04:5d:97:d2:61:18:17:89: 16:f7:88:1b:09:65:7f:64:b6:d5:49:ae:73:50:79: 88:a4:8f:8c:40:8a:cb:91:5f:d2:a8:54:16:93:b8: ee:9e:c7:61:3e:67:2d:12:21:71:5f:47:1d:ef:55: 8e:c1:dd:3e:eb:bd:88:8e:e5:16:34:89:1c:0f:ba: 68:4e:4f:0b:17:2a:05:a9:47:df:8a:a3:a1:93:e1: 1f:41:99:0d:31:42:56:e3:6f:06:34:8d:1c:cd:84: 8d:32:80:ba:a3:0b:4f:3a:11:79:39:21:82:1f:0e: 8b:a3:86:27:97:89:d6:02:39:09:19:75:61:10:10: ad:65:0f:99:cf:46:88:4d:4d:ce:ae:d1:c0:fd:a0: b6:f7:ad:80:03:89:55:76:dd:a2:2f:e7:2f:0c:e8: a8:c5:a8:cc:ec:38:68:1d:a4:1c:bc:e2:32:9d:ab: c6:f8:df:da:2e:ae:5d:ff:40:17:4b:6d:63:a0:80: ce:17:82:02:0d:c6:71:20:43:2d:9a:e5:26:51:d1: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:58:BB:2A:44:4C:FF:1E:2C:B6:EE:5B:F1:AA:88:AB:BA:C1:58:DC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f607473c-b847-4f33-9284-b75fe670bc74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:c000::/40 Signature Algorithm: sha256WithRSAEncryption 47:ac:1e:42:c0:59:55:98:d6:9d:43:c8:d0:38:32:83:6b:87: fc:a1:86:66:42:f8:d0:d1:17:4c:fe:94:ba:75:ee:72:e1:3f: 2d:ed:7b:a3:ea:99:e0:61:ac:cb:e5:95:92:a5:80:47:e5:ed: 1e:6f:a4:01:17:64:90:9c:46:61:e7:95:02:fa:05:f3:05:96: 0b:60:2c:0c:60:37:77:98:33:d9:8b:ec:21:64:bf:7b:0b:15: 90:18:8b:e5:7a:a7:03:9c:82:56:ed:d4:2c:84:2b:76:42:4b: b4:e8:3c:32:cc:3a:4f:e4:90:78:37:e5:89:b7:26:67:cb:ee: 35:84:44:a5:bd:07:ad:eb:e6:b1:55:38:1e:c8:41:8c:a0:8d: 99:30:06:a0:ec:6b:b0:b5:57:ce:e7:ff:88:ba:cc:ed:df:cf: 1f:e7:50:9a:d0:5c:dc:04:b4:e0:a9:b8:9c:b8:f4:d4:b9:15: d9:09:40:8b:66:db:ce:9b:54:e3:8d:3e:37:bb:00:65:3c:f7: fc:0c:96:8e:75:b6:f5:34:eb:96:da:b5:75:e6:b8:21:68:2d: d0:6f:44:36:ab:ce:46:58:70:71:31:a1:db:b0:7d:b1:d5:8b: 31:1b:57:37:a9:38:35:27:61:af:10:bb:ac:e4:ac:be:67:1b: a7:0b:bf:4f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJiPmfP4Ux2p5uGMShxHw2mODhFYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMDA0MFoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAZTdhMmViZDA5MDA4N2M2NGRhNzhi Zjc1OGNjMTBiYjYyOWI5ZGE4ZmIzZWJhZThhNWNkZGU1NDc3NjlhY2YzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl7ulwps38HKTMqjWuFXB3HSUpmY +C+WwikRe/KwgDq8jdaBZLGcRBg/RPqyWbeZZgpDBF2X0mEYF4kW94gbCWV/ZLbV Sa5zUHmIpI+MQIrLkV/SqFQWk7junsdhPmctEiFxX0cd71WOwd0+672IjuUWNIkc D7poTk8LFyoFqUffiqOhk+EfQZkNMUJW428GNI0czYSNMoC6owtPOhF5OSGCHw6L o4Ynl4nWAjkJGXVhEBCtZQ+Zz0aITU3OrtHA/aC2962AA4lVdt2iL+cvDOioxajM 7DhoHaQcvOIynavG+N/aLq5d/0AXS21joIDOF4ICDcZxIEMtmuUmUdFEOQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKNYuypETP8eLLbuW/GqiKu6wVjcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2MDc0NzNjLWI4NDctNGYzMy05Mjg0LWI3NWZlNjcwYmM3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOMAwDQYJKoZIhvcNAQELBQADggEBAEesHkLAWVWY1p1DyNA4 MoNrh/yhhmZC+NDRF0z+lLp17nLhPy3te6PqmeBhrMvllZKlgEfl7R5vpAEXZJCc RmHnlQL6BfMFlgtgLAxgN3eYM9mL7CFkv3sLFZAYi+V6pwOcglbt1CyEK3ZCS7To PDLMOk/kkHg35Ym3JmfL7jWERKW9B63r5rFVOB7IQYygjZkwBqDsa7C1V87n/4i6 zO3fzx/nUJrQXNwEtOCpuJy49NS5FdkJQItm286bVOONPje7AGU89/wMlo51tvU0 65batXXmuCFoLdBvRDarzkZYcHExoduwfbHVizEbVzepODUnYa8Qu6zkrL5nG6cL v08= -----END CERTIFICATE-----Generated at Wed Aug 26 14:05:36 2026 by rpki-client