$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6ee8dd2d-118b-4944-8dc4-dc7103368204.roa File: 6ee8dd2d-118b-4944-8dc4-dc7103368204.roa (raw, json) Hash identifier: r6l5ZW2zqWMg18kDiWB5MMvZEbZJHqvQalmzKiJ3Unk= Subject key identifier: 7B:5B:F7:F3:3D:12:E9:EC:C8:D4:65:28:12:DC:28:C0:A1:12:A7:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5934CF46F5DF2CDCB6F1C62AFDBBDFA200C6C82E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6ee8dd2d-118b-4944-8dc4-dc7103368204.roa Signing time: Thu 23 Jul 2026 00:00:09 +0000 ROA not before: Thu 23 Jul 2026 00:00:09 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:34:cf:46:f5:df:2c:dc:b6:f1:c6:2a:fd:bb:df:a2:00:c6:c8:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 23 00:00:09 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=2addeffdad0cdf5a63ef9b6217e8d363a6052d5e5d6fdc285fe30f633f4a4a33, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c2:65:45:19:d7:15:98:67:36:84:67:aa:47: ac:1c:4f:8f:77:9d:95:e5:73:58:06:16:1d:99:f9: ab:22:76:6a:e1:37:c3:83:f2:63:5c:11:99:72:fa: 8c:8e:24:fb:b9:83:8d:fa:ad:e9:8a:b7:f3:70:84: fb:91:c4:5b:69:64:b7:26:1a:ef:1a:0f:1c:49:8c: da:ff:cd:8a:67:2e:ac:eb:89:f1:ee:2d:05:c6:61: b4:c6:f1:d7:ce:a9:ee:29:7a:38:39:22:7d:91:be: 7b:3d:dd:4b:42:e1:3a:08:aa:62:1a:bf:69:b2:f0: 79:c9:c6:03:39:88:27:d3:2d:d1:4c:cc:54:6d:7e: 6c:36:bc:97:98:70:2f:f5:d9:59:d5:63:e6:51:b6: f1:de:35:c0:13:88:b8:d9:09:57:64:1a:16:07:23: 98:7d:75:67:df:cd:71:a1:3a:6b:15:eb:97:7b:6f: e8:7a:99:30:7f:9c:7b:46:0a:23:bc:82:de:44:b6: e8:7d:12:55:4a:e2:12:83:00:cc:fb:1e:04:04:94: b9:cd:ab:3f:ba:9d:7f:93:d9:99:54:4c:28:80:b0: 11:50:00:4e:a7:93:ed:ee:4b:cf:29:79:05:1b:bd: c8:63:48:a5:80:c5:f1:05:6f:cd:93:28:58:36:cd: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5B:F7:F3:3D:12:E9:EC:C8:D4:65:28:12:DC:28:C0:A1:12:A7:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6ee8dd2d-118b-4944-8dc4-dc7103368204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:a000::/40 Signature Algorithm: sha256WithRSAEncryption 2d:0f:54:8d:6f:eb:9e:38:24:98:ed:01:5c:0b:ae:e2:1d:57: 14:8c:39:4b:05:5e:1b:37:5a:7a:81:2c:03:fd:02:d5:97:a7: 52:1f:0f:7e:21:f5:b1:d8:bd:ea:e7:f1:4a:22:c2:96:38:ce: 9e:1e:ef:ca:26:d2:cb:3c:ba:e6:27:1a:26:1a:40:49:4c:1d: 27:05:5c:3d:71:3f:db:4b:59:e6:0a:bf:6c:3c:6b:02:77:d9: 5e:7d:e6:1e:b6:b4:3e:d6:f5:11:39:b1:93:e8:1d:4b:e0:e6: 3b:b2:35:0f:57:9f:a4:d1:39:ce:26:74:60:f2:5d:4f:b7:34: 49:b0:15:f0:61:57:0c:f0:3c:fe:64:4f:30:e1:4e:18:48:58: 11:fd:e8:41:7e:66:0d:8d:d3:bf:fb:42:d7:80:d7:f6:7f:ef: e4:0a:4f:51:67:fc:a7:a7:fe:ea:ec:15:3e:fa:45:8e:6e:6f: d4:0e:9d:94:32:8b:0c:ef:ef:96:73:ba:e4:00:3d:aa:e0:0f: 01:e0:eb:6f:4e:aa:19:3a:98:96:1e:cd:7e:91:26:a1:2c:24: 69:b9:cd:23:9c:83:45:a4:21:8e:43:48:19:70:6a:05:ca:25: df:da:8f:c7:c0:37:a1:92:b4:19:c9:cd:8e:ce:e4:ba:dd:bd: 72:91:af:9a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWTTPRvXfLNy28cYq/bvfogDGyC4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMzAwMDAwOVoX DTI2MTAyMTIzNTk1OVowejFJMEcGA1UEBRNAMmFkZGVmZmRhZDBjZGY1YTYzZWY5 YjYyMTdlOGQzNjNhNjA1MmQ1ZTVkNmZkYzI4NWZlMzBmNjMzZjRhNGEzMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sJlRRnXFZhnNoRnqkesHE+Pd52V 5XNYBhYdmfmrInZq4TfDg/JjXBGZcvqMjiT7uYON+q3pirfzcIT7kcRbaWS3Jhrv Gg8cSYza/82KZy6s64nx7i0FxmG0xvHXzqnuKXo4OSJ9kb57Pd1LQuE6CKpiGr9p svB5ycYDOYgn0y3RTMxUbX5sNryXmHAv9dlZ1WPmUbbx3jXAE4i42QlXZBoWByOY fXVn381xoTprFeuXe2/oepkwf5x7RgojvILeRLbofRJVSuISgwDM+x4EBJS5zas/ up1/k9mZVEwogLARUABOp5Pt7kvPKXkFG73IY0ilgMXxBW/NkyhYNs0EbwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHtb9/M9EunsyNRlKBLcKMChEqcNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZlZThkZDJkLTExOGItNDk0NC04ZGM0LWRjNzEwMzM2ODIwNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9qAwDQYJKoZIhvcNAQELBQADggEBAC0PVI1v6544JJjtAVwL ruIdVxSMOUsFXhs3WnqBLAP9AtWXp1IfD34h9bHYvern8UoiwpY4zp4e78om0ss8 uuYnGiYaQElMHScFXD1xP9tLWeYKv2w8awJ32V595h62tD7W9RE5sZPoHUvg5juy NQ9Xn6TROc4mdGDyXU+3NEmwFfBhVwzwPP5kTzDhThhIWBH96EF+Zg2N07/7QteA 1/Z/7+QKT1Fn/Ken/ursFT76RY5ub9QOnZQyiwzv75ZzuuQAPargDwHg629Oqhk6 mJYezX6RJqEsJGm5zSOcg0WkIY5DSBlwagXKJd/aj8fAN6GStBnJzY7O5LrdvXKR r5o= -----END CERTIFICATE-----Generated at Fri Jul 24 02:32:13 2026 by rpki-client