$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2fea660c-e087-434d-a5fe-fd9528b3dd55.roa File: 2fea660c-e087-434d-a5fe-fd9528b3dd55.roa (raw, json) Hash identifier: 68q5mgLu2jOWaC5TyxFPehl2HVynm69Ve59jQc0IjUQ= Subject key identifier: 75:55:27:CC:0A:CD:62:04:84:EB:0A:18:72:3F:48:12:5D:7D:8B:D5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 690B8A17523291E7BF5866E7E43815E44DC0780C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2fea660c-e087-434d-a5fe-fd9528b3dd55.roa Signing time: Fri 24 Jul 2026 00:00:54 +0000 ROA not before: Fri 24 Jul 2026 00:00:54 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0b:8a:17:52:32:91:e7:bf:58:66:e7:e4:38:15:e4:4d:c0:78:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 24 00:00:54 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=8e4ae19e0628a87ebff4a1b7ed573ff0beb514bd94f775c2a697e4489743d6ef, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:7f:85:48:59:91:64:40:27:d0:9a:51:a8: de:5e:da:55:e0:89:44:9c:36:92:15:66:1e:1f:43: 08:52:7c:a9:c8:0f:78:a8:54:f7:4a:ca:18:da:30: 4e:29:8e:b4:86:02:d1:07:94:93:59:25:da:3c:62: 2a:c0:42:46:62:e9:52:64:71:1a:52:c3:28:fa:24: 45:10:62:6f:ab:8c:62:6a:10:00:a1:17:43:21:38: 90:2e:a3:75:1d:db:ae:e2:19:ee:86:9e:37:d4:d0: a3:3f:a1:25:3a:b7:f3:23:68:5a:82:33:d6:3a:58: 91:9d:d5:72:20:d8:e9:82:0e:2d:c2:21:09:a4:6a: 4e:c4:a4:00:c0:7d:c9:e6:f6:a6:03:f5:27:fd:6f: e7:04:a7:3d:96:dc:c6:4b:9e:07:01:ef:f7:2a:8e: 69:ee:90:da:e7:62:20:e2:b6:25:72:c1:e8:98:d2: ca:01:56:6e:a6:50:fa:80:c0:66:59:a0:79:64:b0: 7b:35:df:56:12:86:4e:0d:ef:b9:14:c4:02:ba:31: 5f:c0:88:e8:18:ec:ce:d3:5a:6e:70:96:46:92:9e: 45:f7:91:0a:f0:45:3b:a5:1d:37:93:49:bd:dc:6c: 5e:af:92:a2:9c:1b:77:c1:96:9c:24:37:21:8a:bd: 65:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:55:27:CC:0A:CD:62:04:84:EB:0A:18:72:3F:48:12:5D:7D:8B:D5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2fea660c-e087-434d-a5fe-fd9528b3dd55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:b000::/40 Signature Algorithm: sha256WithRSAEncryption 47:43:3e:ea:31:d2:0d:34:7e:e7:7f:21:b1:29:2b:31:46:27: ac:7e:49:28:d2:2f:be:47:d4:3e:15:c2:7a:56:c8:21:10:c4: 7e:15:48:fc:be:9a:31:c8:2c:99:7a:ea:6b:a7:53:ef:48:c2: 7f:61:22:66:76:81:83:31:71:54:f8:a3:57:88:40:c8:24:c8: 75:b6:d0:5c:87:25:10:f6:62:15:91:8e:70:03:15:a0:3b:5c: 71:2c:7e:49:a2:7a:80:aa:bb:82:e3:78:6b:0f:bb:8e:b7:1d: 42:b0:dd:98:9c:a3:bf:39:a2:ed:bb:72:8f:96:3c:d6:df:7a: 97:89:b3:54:21:7b:2b:0c:aa:95:47:a2:d0:ea:44:19:c0:23: 09:34:fa:e2:51:4f:cb:93:14:db:b0:93:88:49:4a:67:55:c3: 5e:87:4c:b6:95:73:30:c2:05:f7:31:83:41:93:91:44:a3:b7: e6:0c:9c:28:13:a8:e7:1a:39:13:ad:d5:5a:49:06:cd:bd:31: ef:10:55:e9:40:6b:03:9b:ae:d6:98:04:95:cc:d7:4b:e2:9e: 49:57:6a:31:22:31:05:4c:9a:5d:41:d4:59:79:63:d7:50:a1: 47:c3:fa:8c:b1:43:13:96:d7:a0:5b:cd:61:13:61:18:80:f4: a9:07:98:5d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaQuKF1Iykee/WGbn5DgV5E3AeAwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNDAwMDA1NFoX DTI2MTAyMjIzNTk1OVowejFJMEcGA1UEBRNAOGU0YWUxOWUwNjI4YTg3ZWJmZjRh MWI3ZWQ1NzNmZjBiZWI1MTRiZDk0Zjc3NWMyYTY5N2U0NDg5NzQzZDZlZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF9/hUhZkWRAJ9CaUajeXtpV4IlE nDaSFWYeH0MIUnypyA94qFT3SsoY2jBOKY60hgLRB5STWSXaPGIqwEJGYulSZHEa UsMo+iRFEGJvq4xiahAAoRdDITiQLqN1Hduu4hnuhp431NCjP6ElOrfzI2hagjPW OliRndVyINjpgg4twiEJpGpOxKQAwH3J5vamA/Un/W/nBKc9ltzGS54HAe/3Ko5p 7pDa52Ig4rYlcsHomNLKAVZuplD6gMBmWaB5ZLB7Nd9WEoZODe+5FMQCujFfwIjo GOzO01pucJZGkp5F95EK8EU7pR03k0m93Gxer5KinBt3wZacJDchir1lqwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHVVJ8wKzWIEhOsKGHI/SBJdfYvVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmZWE2NjBjLWUwODctNDM0ZC1hNWZlLWZkOTUyOGIzZGQ1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaubAwDQYJKoZIhvcNAQELBQADggEBAEdDPuox0g00fud/IbEp KzFGJ6x+SSjSL75H1D4VwnpWyCEQxH4VSPy+mjHILJl66munU+9Iwn9hImZ2gYMx cVT4o1eIQMgkyHW20FyHJRD2YhWRjnADFaA7XHEsfkmieoCqu4LjeGsPu463HUKw 3Zico785ou27co+WPNbfepeJs1QheysMqpVHotDqRBnAIwk0+uJRT8uTFNuwk4hJ SmdVw16HTLaVczDCBfcxg0GTkUSjt+YMnCgTqOcaOROt1VpJBs29Me8QVelAawOb rtaYBJXM10vinklXajEiMQVMml1B1Fl5Y9dQoUfD+oyxQxOW16BbzWETYRiA9KkH mF0= -----END CERTIFICATE-----Generated at Fri Jul 24 07:23:56 2026 by rpki-client