$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83375d68-232d-4999-9b8f-cbf59f65a3fb.roa File: 83375d68-232d-4999-9b8f-cbf59f65a3fb.roa (raw, json) Hash identifier: jyLRKm00PLWj59N3VbQbbn3KN85ILhYaY6YkVN7ztxQ= Subject key identifier: 4F:F4:B0:79:37:91:32:C3:4E:1B:92:51:F4:39:C2:E7:60:BE:97:30 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6EFB232204DFF042618123AD12BEEC7C431D92CC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83375d68-232d-4999-9b8f-cbf59f65a3fb.roa Signing time: Thu 16 Jul 2026 00:00:33 +0000 ROA not before: Thu 16 Jul 2026 00:00:33 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daed:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fb:23:22:04:df:f0:42:61:81:23:ad:12:be:ec:7c:43:1d:92:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:33 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=732e3c36ff78d3258b58856230862249394e69d9f3f879eed9b1a9b503a46c18, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:98:31:92:04:06:fe:22:c8:5b:45:02:b5:aa: 9c:49:c7:17:f5:85:79:4a:7c:14:4b:8d:15:a0:28: 2c:3d:9a:8c:4c:07:73:b8:be:b5:d8:23:74:6a:b2: 5d:1d:0d:07:45:2f:ed:2d:d5:30:c1:7a:08:7d:29: 26:97:58:69:d6:cd:ad:1e:d2:69:30:b7:72:9b:6e: 63:d0:17:15:65:23:13:fc:8e:8e:c1:c1:76:48:ba: 48:c5:be:6b:fd:12:b3:51:b4:e8:c0:01:66:54:2d: 7e:dd:ff:7c:96:2d:ae:4d:51:e0:94:57:83:a1:cd: d7:7d:cd:4c:38:db:ad:9b:3f:ff:9f:3f:69:c0:64: 02:48:b3:b8:83:ff:78:bf:4f:fa:54:67:78:78:4a: bf:77:30:a6:cb:ef:0f:06:2a:3e:1b:5c:15:39:fd: a7:96:c8:8d:de:be:10:79:20:be:0b:6c:b9:cc:81: 33:68:1d:d8:9e:cb:d3:01:5f:fa:2f:46:3c:8a:ff: 66:a6:0f:5b:25:01:55:83:5b:f5:0a:a5:38:76:4b: 23:15:21:ff:13:4a:cc:84:d0:fc:fc:92:0d:9d:27: d5:ac:51:8c:51:4c:e6:a3:68:7f:ae:82:ac:48:4f: 68:85:a5:a2:46:87:8d:7b:ce:d6:44:67:ae:51:2c: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F4:B0:79:37:91:32:C3:4E:1B:92:51:F4:39:C2:E7:60:BE:97:30 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83375d68-232d-4999-9b8f-cbf59f65a3fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:4040::/48 Signature Algorithm: sha256WithRSAEncryption 18:3e:d4:8a:c0:82:30:ac:4c:ae:fc:fb:61:70:60:08:c8:11: 0a:d0:cf:69:a6:4a:b0:11:e8:c4:f7:82:d7:25:6c:f3:d4:6e: 41:da:5d:52:26:44:15:2c:b6:1e:75:9c:6a:24:03:57:f5:a6: 3c:78:ba:0e:b1:bd:51:4f:f9:f5:f8:ce:fa:1c:16:bf:7a:21: a5:6a:cf:84:1e:b7:94:05:99:bc:d6:11:a4:35:c9:ab:cd:6f: b8:44:d7:20:20:83:6d:23:9d:d0:91:bf:e8:c4:4a:c7:cf:f9: 5b:d2:1c:1b:ad:09:fb:d9:c9:bc:72:dd:c6:59:0a:3b:59:31: 07:14:ce:9f:13:cd:f9:00:8b:7a:78:03:38:1b:ef:88:0a:45: fe:82:bb:9e:75:28:01:4b:8b:41:19:45:55:5b:87:df:e0:02: 8c:37:94:69:1b:6b:be:61:a5:6b:d7:cf:d5:b4:37:e7:9d:cd: 48:6f:ee:e7:c9:86:9d:1e:bc:03:11:2d:c3:96:68:6b:48:a4: 56:be:26:0e:73:2d:59:a5:b3:e7:ba:88:63:55:f9:65:13:49: 76:ce:97:fb:e5:19:46:18:ea:51:31:77:01:e7:54:06:ef:3d: 6c:fa:fb:c3:ee:8d:9f:2c:e6:c7:40:72:40:45:e4:ad:f1:a0: 4d:dc:55:5d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbvsjIgTf8EJhgSOtEr7sfEMdkswwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcxNjAwMDAzM1oX DTI2MTAxNDIzNTk1OVowejFJMEcGA1UEBRNANzMyZTNjMzZmZjc4ZDMyNThiNTg4 NTYyMzA4NjIyNDkzOTRlNjlkOWYzZjg3OWVlZDliMWE5YjUwM2E0NmMxODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pgxkgQG/iLIW0UCtaqcSccX9YV5 SnwUS40VoCgsPZqMTAdzuL612CN0arJdHQ0HRS/tLdUwwXoIfSkml1hp1s2tHtJp MLdym25j0BcVZSMT/I6OwcF2SLpIxb5r/RKzUbTowAFmVC1+3f98li2uTVHglFeD oc3Xfc1MONutmz//nz9pwGQCSLO4g/94v0/6VGd4eEq/dzCmy+8PBio+G1wVOf2n lsiN3r4QeSC+C2y5zIEzaB3YnsvTAV/6L0Y8iv9mpg9bJQFVg1v1CqU4dksjFSH/ E0rMhND8/JINnSfVrFGMUUzmo2h/roKsSE9ohaWiRoeNe87WRGeuUSxY+wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE/0sHk3kTLDThuSUfQ5wudgvpcwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMzc1ZDY4LTIzMmQtNDk5OS05YjhmLWNiZjU5ZjY1YTNmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7UBAMA0GCSqGSIb3DQEBCwUAA4IBAQAYPtSKwIIwrEyu/Pth cGAIyBEK0M9ppkqwEejE94LXJWzz1G5B2l1SJkQVLLYedZxqJANX9aY8eLoOsb1R T/n1+M76HBa/eiGlas+EHreUBZm81hGkNcmrzW+4RNcgIINtI53Qkb/oxErHz/lb 0hwbrQn72cm8ct3GWQo7WTEHFM6fE835AIt6eAM4G++ICkX+gruedSgBS4tBGUVV W4ff4AKMN5RpG2u+YaVr18/VtDfnnc1Ib+7nyYadHrwDES3DlmhrSKRWviYOcy1Z pbPnuohjVfllE0l2zpf75RlGGOpRMXcB51QG7z1s+vvD7o2fLObHQHJAReSt8aBN 3FVd -----END CERTIFICATE-----Generated at Fri Jul 24 04:55:49 2026 by rpki-client