$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa File: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (raw, json) Hash identifier: SBbAMoRoCEcPLDNU3aRXyoFbsg+b2tGAIka8WO5y1qA= Subject key identifier: 93:9F:2E:39:51:82:82:2E:64:27:63:D9:25:D0:43:A0:6B:C9:36:DD Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 5716548DFB3B569E41C127B4E9187FC77C025F2A Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa Signing time: Thu 16 Jul 2026 00:00:06 +0000 ROA not before: Thu 16 Jul 2026 00:00:06 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Jul 2026 00:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:16:54:8d:fb:3b:56:9e:41:c1:27:b4:e9:18:7f:c7:7c:02:5f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Jul 16 00:00:06 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=9c60a961127814fc7ef54aa74a315358495a49a4aeb90e4e3cf81351e3162fe2, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:46:4b:d1:f6:c8:99:cd:90:fe:0d:bb:88: 38:ef:59:e6:72:99:fb:4a:66:ca:87:6f:69:e1:f8: 9b:46:0e:6c:47:7f:8c:17:1b:40:fe:88:64:61:76: 35:ca:0a:fc:81:25:d7:71:3f:43:32:4c:2d:24:56: 96:46:59:8e:73:ea:fc:22:ca:c7:2f:2c:73:f6:d2: f1:c4:a6:88:52:0f:48:f1:8d:23:fe:2f:9e:18:df: 51:c8:79:74:76:29:24:dd:47:fa:05:d1:8c:36:b2: 72:95:1a:dd:d2:78:71:65:0a:9e:98:0a:b9:c1:97: a1:ba:44:01:b1:72:a4:cc:4c:3e:3e:fe:73:31:5c: 5c:59:b5:a4:62:0c:07:fd:ff:4d:bf:e6:83:b5:80: 65:7d:b0:e8:fb:79:74:c1:24:20:05:8e:51:9d:90: 58:f0:8d:a5:29:84:0b:10:fa:00:bf:f8:1e:a5:41: da:61:85:00:e6:53:91:b8:b7:8c:e0:83:a5:2b:00: e7:97:18:25:6b:3a:c8:37:eb:50:7d:02:4a:51:8a: 74:52:39:4a:c1:4c:4e:fd:29:2d:74:d6:53:77:9c: 5c:5d:41:c5:2a:98:23:66:f8:99:da:11:99:26:09: 6f:63:19:95:97:97:cf:e7:88:b4:04:26:48:5f:2e: 58:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9F:2E:39:51:82:82:2E:64:27:63:D9:25:D0:43:A0:6B:C9:36:DD X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6700::/32 Signature Algorithm: sha256WithRSAEncryption 8a:b4:f2:c0:0e:bb:32:83:35:d0:13:c1:a5:2f:0c:9a:11:3a: fc:80:12:99:9a:45:13:df:50:d1:5f:1f:56:1b:d8:d4:b5:a0: fb:23:43:95:0f:89:a6:42:05:dc:1a:d9:ed:e5:c8:dc:78:3e: fa:dd:dc:eb:ed:da:65:4a:f8:d5:16:04:56:38:e3:49:0b:b9: 38:ef:6e:35:94:e7:d1:94:0e:fb:f2:b3:b7:47:a7:d4:74:50: e8:82:19:32:71:dc:1f:8a:ef:25:82:2e:bb:0b:22:b5:af:96: aa:e7:82:3a:e9:3f:9d:eb:90:35:e5:8c:5d:6b:77:f4:f5:c5: d7:45:3c:80:4b:bd:c4:8c:aa:c9:1e:b1:5b:50:17:71:d4:53: 33:a7:ff:71:f9:23:63:0f:d7:f3:75:63:fe:03:6a:c0:c9:7c: 12:41:1c:f5:db:83:b1:41:aa:8b:cc:9b:c9:8d:38:42:72:52: c7:12:29:d0:e7:53:59:7f:4d:d3:bf:e1:2b:01:ac:94:0f:ae: 24:cb:06:2f:8c:32:48:ee:6b:3f:9b:1f:ec:df:4c:3f:ca:09: 14:ed:fa:7f:e2:bf:bd:c3:63:01:7f:ab:54:86:5b:d9:8e:88: d8:a1:58:e2:36:ba:27:a9:b9:45:e9:00:bf:7e:81:07:79:7f: d6:3b:de:86 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUVxZUjfs7Vp5BwSe06Rh/x3wCXyowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDcxNjAwMDAwNloX DTI2MTAxNDIzNTk1OVowejFJMEcGA1UEBRNAOWM2MGE5NjExMjc4MTRmYzdlZjU0 YWE3NGEzMTUzNTg0OTVhNDlhNGFlYjkwZTRlM2NmODEzNTFlMzE2MmZlMjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAtGS9H2yJnNkP4Nu4g471nmcpn7 SmbKh29p4fibRg5sR3+MFxtA/ohkYXY1ygr8gSXXcT9DMkwtJFaWRlmOc+r8IsrH Lyxz9tLxxKaIUg9I8Y0j/i+eGN9RyHl0dikk3Uf6BdGMNrJylRrd0nhxZQqemAq5 wZehukQBsXKkzEw+Pv5zMVxcWbWkYgwH/f9Nv+aDtYBlfbDo+3l0wSQgBY5RnZBY 8I2lKYQLEPoAv/gepUHaYYUA5lORuLeM4IOlKwDnlxglazrIN+tQfQJKUYp0UjlK wUxO/SktdNZTd5xcXUHFKpgjZviZ2hGZJglvYxmVl5fP54i0BCZIXy5YnwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFJOfLjlRgoIuZCdj2SXQQ6BryTbdMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzM0MDdlNWI2LWE4M2QtNDY2OC04OThmLWZkYmIyMzA5MjUwMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJABnADANBgkqhkiG9w0BAQsFAAOCAQEAirTywA67MoM10BPBpS8M mhE6/IASmZpFE99Q0V8fVhvY1LWg+yNDlQ+JpkIF3BrZ7eXI3Hg++t3c6+3aZUr4 1RYEVjjjSQu5OO9uNZTn0ZQO+/Kzt0en1HRQ6IIZMnHcH4rvJYIuuwsita+WqueC Ouk/neuQNeWMXWt39PXF10U8gEu9xIyqyR6xW1AXcdRTM6f/cfkjYw/X83Vj/gNq wMl8EkEc9duDsUGqi8ybyY04QnJSxxIp0OdTWX9N07/hKwGslA+uJMsGL4wySO5r P5sf7N9MP8oJFO36f+K/vcNjAX+rVIZb2Y6I2KFY4ja6J6m5RekAv36BB3l/1jve hg== -----END CERTIFICATE-----Generated at Wed Jul 22 03:04:40 2026 by rpki-client