$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f3b60eb-56a9-47ae-9183-268d07b9ce96.roa File: 4f3b60eb-56a9-47ae-9183-268d07b9ce96.roa (raw, json) Hash identifier: 3FTtN3G89+ugtoFMq62Hfy5B4bZ/vo7zvtN97miWU0o= Subject key identifier: 2B:D3:64:DD:D7:76:58:91:8C:49:7F:91:6A:E7:1D:11:DF:08:11:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6931EFA761F0A2962C09990BAD0C2116B9E14AAE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f3b60eb-56a9-47ae-9183-268d07b9ce96.roa Signing time: Thu 16 Jul 2026 00:00:45 +0000 ROA not before: Thu 16 Jul 2026 00:00:45 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da28:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:31:ef:a7:61:f0:a2:96:2c:09:99:0b:ad:0c:21:16:b9:e1:4a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:45 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=e1abed5d0fbdc0eff745ab55b6b451bafd57cebd4583a96c8e821f9f55570589, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ef:aa:30:96:a9:a8:96:f6:8f:9f:75:9a:17: c4:ec:0e:23:4a:e5:ac:9b:98:f2:25:c6:f3:9f:ec: 30:72:3e:a2:8b:3e:57:37:21:c5:0d:4e:3b:45:cf: 5e:43:a1:be:0e:88:b2:91:76:0e:29:40:bf:2b:3c: 82:48:c5:da:29:19:de:b2:56:c5:e1:66:db:7c:ca: 0b:82:3f:ce:1e:38:6b:64:31:e3:19:17:88:6d:4e: 22:f0:fa:80:96:9b:1d:3f:8d:8d:ed:98:da:e6:40: f7:3a:7e:0b:83:8e:00:b5:21:45:b1:f5:4a:2d:31: 8a:b9:92:6b:72:37:9a:e9:36:36:a8:b9:43:be:30: f0:0e:2f:32:99:c8:2b:90:ab:41:ec:0c:6e:4e:d9: 81:d0:bb:33:45:35:1f:56:d0:23:c4:d7:c6:38:e1: 3d:26:21:ce:f4:71:fc:a4:2c:7d:fa:98:80:af:2f: 2f:97:db:f0:a3:29:f1:8d:7e:cf:41:89:48:89:17: 12:fa:f4:89:ca:ed:40:f9:e4:42:67:2b:0e:d6:bc: 90:87:2d:4c:12:1e:13:ba:ee:fa:8c:b7:ea:7e:be: 53:d0:87:9c:18:26:3a:3a:10:d4:67:58:38:80:e4: b5:04:7d:d4:18:c3:3c:e5:75:de:43:59:d3:2b:b4: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D3:64:DD:D7:76:58:91:8C:49:7F:91:6A:E7:1D:11:DF:08:11:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f3b60eb-56a9-47ae-9183-268d07b9ce96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da28:8000::/36 Signature Algorithm: sha256WithRSAEncryption 3c:f5:fd:60:c8:13:b8:67:69:b1:22:e6:84:b2:75:a3:ba:36: 73:18:7a:2a:99:c5:24:1e:8f:28:8c:15:1a:ba:ee:d4:b8:23: 03:a4:7a:cb:f5:93:a3:d1:db:c0:ba:ba:a4:90:f5:63:cc:ee: b8:e4:24:7f:0f:4f:b4:ef:8d:97:11:45:54:f8:a1:99:ff:61: 4f:6a:ce:de:fd:5d:0a:c6:5f:da:66:e3:e6:68:9b:86:06:56: c7:32:97:2e:22:2b:58:aa:7b:bf:23:a9:47:86:ac:f6:07:bf: 72:d7:ae:64:c4:1e:04:6c:8c:ae:d2:65:86:e7:a9:93:a3:9e: 8c:ba:71:e3:dc:7d:75:34:8c:b7:a2:3d:ec:cf:5d:7a:ea:05: 49:bf:7b:27:2b:33:fc:5a:fd:94:a2:ea:d7:9e:a9:b8:2b:f0: f2:d3:48:e6:fd:6f:90:20:5b:5b:3b:83:3a:7f:14:ca:17:dd: 29:b7:e5:06:9a:92:51:68:7d:6f:cd:35:cf:ef:4b:b3:0a:d5: 5e:22:3b:ce:0d:de:cf:a8:95:63:3d:ec:b8:6d:f5:b2:ab:d1: 0d:78:18:30:71:38:e8:a0:6d:37:58:d2:84:73:8c:02:4b:21: ac:68:c7:8f:9d:f6:f8:29:71:0d:f8:1a:cb:10:c2:ad:1c:6d: 7b:ef:95:4b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaTHvp2HwopYsCZkLrQwhFrnhSq4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcxNjAwMDA0NVoX DTI2MTAxNDIzNTk1OVowejFJMEcGA1UEBRNAZTFhYmVkNWQwZmJkYzBlZmY3NDVh YjU1YjZiNDUxYmFmZDU3Y2ViZDQ1ODNhOTZjOGU4MjFmOWY1NTU3MDU4OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO+qMJapqJb2j591mhfE7A4jSuWs m5jyJcbzn+wwcj6iiz5XNyHFDU47Rc9eQ6G+DoiykXYOKUC/KzyCSMXaKRneslbF 4WbbfMoLgj/OHjhrZDHjGReIbU4i8PqAlpsdP42N7Zja5kD3On4Lg44AtSFFsfVK LTGKuZJrcjea6TY2qLlDvjDwDi8ymcgrkKtB7AxuTtmB0LszRTUfVtAjxNfGOOE9 JiHO9HH8pCx9+piAry8vl9vwoynxjX7PQYlIiRcS+vSJyu1A+eRCZysO1ryQhy1M Eh4Tuu76jLfqfr5T0IecGCY6OhDUZ1g4gOS1BH3UGMM85XXeQ1nTK7RVhwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCvTZN3XdliRjEl/kWrnHRHfCBFpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmM2I2MGViLTU2YTktNDdhZS05MTgzLTI2OGQwN2I5Y2U5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaKIAwDQYJKoZIhvcNAQELBQADggEBADz1/WDIE7hnabEi5oSy daO6NnMYeiqZxSQejyiMFRq67tS4IwOkesv1k6PR28C6uqSQ9WPM7rjkJH8PT7Tv jZcRRVT4oZn/YU9qzt79XQrGX9pm4+Zom4YGVscyly4iK1iqe78jqUeGrPYHv3LX rmTEHgRsjK7SZYbnqZOjnoy6cePcfXU0jLeiPezPXXrqBUm/eycrM/xa/ZSi6tee qbgr8PLTSOb9b5AgW1s7gzp/FMoX3Sm35QaaklFofW/NNc/vS7MK1V4iO84N3s+o lWM97Lht9bKr0Q14GDBxOOigbTdY0oRzjAJLIaxox4+d9vgpcQ34GssQwq0cbXvv lUs= -----END CERTIFICATE-----Generated at Fri Jul 24 08:37:33 2026 by rpki-client