$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3627d10a-1926-4271-b849-8cb3cd31f066.roa File: 3627d10a-1926-4271-b849-8cb3cd31f066.roa (raw, json) Hash identifier: xVJxcSdTrjdKeuK/NITMR4qRmIcbUoYW1WO+h+St7F8= Subject key identifier: 59:1C:9E:89:F0:66:5B:25:5F:4A:3B:CA:35:BE:9A:CA:D9:F5:89:09 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C6D2EA2E09E140F5049C5D93CD3E947592AFF1F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3627d10a-1926-4271-b849-8cb3cd31f066.roa Signing time: Tue 21 Jul 2026 00:20:22 +0000 ROA not before: Tue 21 Jul 2026 00:20:22 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6d:2e:a2:e0:9e:14:0f:50:49:c5:d9:3c:d3:e9:47:59:2a:ff:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:20:22 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=4c5c69a35478b2d9b5c5df980ccacb5780cd71bdf05f310aa82adb1d08113ab4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:cd:40:45:9a:21:10:ec:76:85:fb:51:00: 03:8a:d8:e8:f0:83:b4:fd:0f:42:f3:26:15:7b:2c: f5:b1:bb:a1:cb:d0:76:fb:66:75:34:a4:40:a1:57: fd:0f:41:65:35:36:47:c8:a8:31:9c:0b:e6:d1:5b: f4:83:5b:b3:4c:e9:9a:a9:56:e2:7a:8b:2e:fd:1c: 02:21:64:e7:3c:89:0a:6b:d4:60:c6:94:ff:a7:d6: 69:b2:6b:c2:e0:25:a0:bb:23:15:3e:8d:5d:36:bd: 37:d0:f3:b8:d0:8a:9a:47:7c:00:df:4a:08:92:25: 7a:97:aa:5f:fc:57:75:ad:fb:f9:b9:38:10:3a:b3: 5e:1c:ed:e0:64:52:ef:79:94:e6:a5:ae:1b:3b:17: 75:39:68:3b:f4:7a:40:a0:e9:7a:c5:14:d2:e6:51: 1b:8b:d3:33:8f:5b:54:a4:0c:3b:d8:6d:11:64:59: e9:2c:b8:5c:fa:d9:77:3e:f8:15:28:ec:93:aa:d9: 96:3d:4b:6e:46:cb:b0:fc:cb:b7:81:29:79:50:c0: 78:64:d4:69:9f:ea:eb:11:19:db:f5:fe:79:80:d7: 7e:02:00:49:37:59:08:13:ab:de:9b:f0:59:b0:ea: a7:82:96:86:12:c9:92:b0:1f:f9:70:5c:c4:e9:2b: b3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1C:9E:89:F0:66:5B:25:5F:4A:3B:CA:35:BE:9A:CA:D9:F5:89:09 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3627d10a-1926-4271-b849-8cb3cd31f066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:6080::/48 Signature Algorithm: sha256WithRSAEncryption 2c:89:15:76:7d:86:d7:e1:d1:69:92:ac:8f:fa:e4:a9:35:bf: 76:5b:52:a8:5e:f3:67:2c:8b:df:b9:54:4e:cd:eb:80:fc:98: 0f:50:0e:8e:08:8d:23:37:8b:e2:83:ee:8e:07:59:63:dc:2d: 34:ca:1a:7a:fe:04:5c:f8:63:f2:e4:65:a7:ba:d2:31:54:f0: f5:35:9d:50:dc:52:52:33:ab:0a:39:20:4d:35:58:5a:8d:79: 5d:70:8b:af:64:9a:da:b9:2a:12:71:48:7a:96:8c:25:13:73: ff:1d:15:7b:d7:e7:f0:5b:8a:61:ef:d0:ca:c1:90:06:19:2c: 54:46:4c:36:34:20:03:61:24:7d:86:a9:a9:74:b6:7b:2a:3b: a2:5d:04:4c:22:84:44:00:a6:2c:07:f0:ee:e6:0f:9a:6d:0f: dd:09:86:f1:1c:d1:22:22:03:0e:8b:f7:93:df:2a:7d:b2:ba: fe:e6:36:7f:16:b8:39:e5:2b:7e:f9:94:c6:47:be:60:2c:8d: 64:44:d3:4a:b0:37:35:40:a1:73:9e:85:9f:51:5e:8a:9f:83: 89:53:30:67:32:a3:84:ef:2d:34:51:11:78:c3:6e:6f:be:6b: de:91:33:dd:8c:91:5b:c6:7e:fd:8d:81:a4:39:0a:df:f4:4e: ca:fb:3e:d3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfG0uouCeFA9QScXZPNPpR1kq/x8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMjAyMloX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNANGM1YzY5YTM1NDc4YjJkOWI1YzVk Zjk4MGNjYWNiNTc4MGNkNzFiZGYwNWYzMTBhYTgyYWRiMWQwODExM2FiNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF3NQEWaIRDsdoX7UQADitjo8IO0 /Q9C8yYVeyz1sbuhy9B2+2Z1NKRAoVf9D0FlNTZHyKgxnAvm0Vv0g1uzTOmaqVbi eosu/RwCIWTnPIkKa9RgxpT/p9ZpsmvC4CWguyMVPo1dNr030PO40IqaR3wA30oI kiV6l6pf/Fd1rfv5uTgQOrNeHO3gZFLveZTmpa4bOxd1OWg79HpAoOl6xRTS5lEb i9Mzj1tUpAw72G0RZFnpLLhc+tl3PvgVKOyTqtmWPUtuRsuw/Mu3gSl5UMB4ZNRp n+rrERnb9f55gNd+AgBJN1kIE6vem/BZsOqngpaGEsmSsB/5cFzE6SuzGwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFkcnonwZlslX0o7yjW+msrZ9YkJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM2MjdkMTBhLTE5MjYtNDI3MS1iODQ5LThjYjNjZDMxZjA2Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6mCAMA0GCSqGSIb3DQEBCwUAA4IBAQAsiRV2fYbX4dFpkqyP +uSpNb92W1KoXvNnLIvfuVROzeuA/JgPUA6OCI0jN4vig+6OB1lj3C00yhp6/gRc +GPy5GWnutIxVPD1NZ1Q3FJSM6sKOSBNNVhajXldcIuvZJrauSoScUh6lowlE3P/ HRV71+fwW4ph79DKwZAGGSxURkw2NCADYSR9hqmpdLZ7KjuiXQRMIoREAKYsB/Du 5g+abQ/dCYbxHNEiIgMOi/eT3yp9srr+5jZ/Frg55St++ZTGR75gLI1kRNNKsDc1 QKFznoWfUV6Kn4OJUzBnMqOE7y00URF4w25vvmvekTPdjJFbxn79jYGkOQrf9E7K +z7T -----END CERTIFICATE-----Generated at Fri Jul 24 03:57:06 2026 by rpki-client