$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9527f74b-7eee-4a36-8f8c-a845b7e60ae9.roa File: 9527f74b-7eee-4a36-8f8c-a845b7e60ae9.roa (raw, json) Hash identifier: 5J59dqiFCSb6SpSxA3MJtgIv0tEN2gTHkLDV+Ykf7a0= Subject key identifier: C0:10:06:93:A9:D8:3D:BC:62:38:35:54:36:37:C2:03:53:56:ED:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4421081DCE6785B3736182CB7D8F5A5A8B867D1E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9527f74b-7eee-4a36-8f8c-a845b7e60ae9.roa Signing time: Thu 16 Jul 2026 00:00:28 +0000 ROA not before: Thu 16 Jul 2026 00:00:28 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da68:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:21:08:1d:ce:67:85:b3:73:61:82:cb:7d:8f:5a:5a:8b:86:7d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:28 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=137f84217ce7d9a64ac197a8fce2760c8f5c7e1d02b02897a7c90b733de14a32, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:37:77:ac:07:73:bf:c1:4e:bc:00:6f:3c: 02:fa:72:85:82:c0:90:4b:a6:95:b4:ed:c3:c5:d7: c9:91:dc:d6:f9:fb:43:16:2f:01:eb:98:39:8a:33: cc:d4:1b:2a:d5:fb:ad:ef:d8:d3:70:4f:88:ac:04: 38:80:06:fe:af:7e:2e:19:72:31:60:15:2b:92:99: 56:ff:a7:e4:9f:d7:bd:4a:fc:43:5c:b7:fc:ec:ca: 80:e2:7a:e7:d3:2c:b9:d0:77:ce:2f:bb:92:96:25: 9e:5a:54:9b:7f:fb:f8:c5:d1:23:f1:04:55:a7:a3: 56:ca:20:a7:d7:4f:37:1b:9c:e9:a2:bc:f8:23:36: 00:70:6e:11:41:e5:ff:d1:d9:ff:87:f3:ee:e6:5c: 65:34:b2:b1:5b:79:9e:4b:03:2b:73:bd:bf:fb:ca: 39:7f:73:b8:d4:60:9a:fd:32:94:a6:b4:e7:eb:84: a2:af:eb:16:2c:63:bd:9a:f7:5e:8a:53:8c:7f:84: be:7e:fa:be:c6:df:c2:4f:79:1b:ff:1a:41:9c:50: f4:e5:d8:3f:14:13:b8:c5:01:00:c0:26:3f:22:79: 57:4e:3f:00:f7:c6:f1:dd:ad:cb:19:59:d6:c9:1d: 3f:26:d0:b5:33:e1:3a:a9:6b:05:98:f8:0a:2a:ad: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:10:06:93:A9:D8:3D:BC:62:38:35:54:36:37:C2:03:53:56:ED:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9527f74b-7eee-4a36-8f8c-a845b7e60ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:a080::/46 Signature Algorithm: sha256WithRSAEncryption 37:d4:28:4d:29:51:4f:1b:42:2f:57:b1:03:84:22:7e:01:20: 9b:fb:d0:4c:8b:2d:39:e7:ac:a1:38:78:2a:0f:ef:b4:5b:25: ca:ea:55:8a:28:ab:b8:29:cc:dd:73:26:99:f8:cf:53:20:24: 0c:98:f4:49:c8:c7:dd:29:09:04:83:eb:9b:cc:ad:64:a3:30: 2e:5e:f6:f1:c9:e9:5c:57:0f:01:6d:41:fd:86:bc:ab:3e:10: 26:0b:c7:14:ea:97:d3:00:9d:be:d3:dd:ec:bc:24:07:a7:72: 51:11:d1:d7:2a:74:f3:fd:83:66:5c:9b:b3:45:ad:ed:a3:20: 2b:d8:12:51:44:36:af:4f:a6:fc:43:8e:11:b7:89:8a:6a:11: b1:f3:b3:41:8b:6c:9f:d5:df:f6:b4:d7:f9:ee:19:c6:c3:1a: 5a:14:c1:c2:6b:ae:4d:45:8f:f1:0f:11:6d:d6:a2:be:32:1f: c5:f3:12:6a:d6:22:a3:96:30:10:ee:6e:38:a0:e1:00:2e:55: 65:7c:68:fc:da:c0:da:a6:27:70:ef:be:a8:25:66:7e:22:cf: 8c:14:07:2f:21:a1:9e:d3:0c:20:42:93:94:78:f2:32:58:2d: 6d:e6:1d:5d:fc:86:f4:7f:79:30:bd:42:d8:ec:38:47:5c:d7: 99:47:57:a6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURCEIHc5nhbNzYYLLfY9aWouGfR4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcxNjAwMDAyOFoX DTI2MTAxNDIzNTk1OVowejFJMEcGA1UEBRNAMTM3Zjg0MjE3Y2U3ZDlhNjRhYzE5 N2E4ZmNlMjc2MGM4ZjVjN2UxZDAyYjAyODk3YTdjOTBiNzMzZGUxNGEzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4w3d6wHc7/BTrwAbzwC+nKFgsCQ S6aVtO3DxdfJkdzW+ftDFi8B65g5ijPM1Bsq1fut79jTcE+IrAQ4gAb+r34uGXIx YBUrkplW/6fkn9e9SvxDXLf87MqA4nrn0yy50HfOL7uSliWeWlSbf/v4xdEj8QRV p6NWyiCn1083G5zporz4IzYAcG4RQeX/0dn/h/Pu5lxlNLKxW3meSwMrc72/+8o5 f3O41GCa/TKUprTn64Sir+sWLGO9mvdeilOMf4S+fvq+xt/CT3kb/xpBnFD05dg/ FBO4xQEAwCY/InlXTj8A98bx3a3LGVnWyR0/JtC1M+E6qWsFmPgKKq3kpQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMAQBpOp2D28Yjg1VDY3wgNTVu0PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk1MjdmNzRiLTdlZWUtNGEzNi04ZjhjLWE4NDViN2U2MGFlOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaKCAMA0GCSqGSIb3DQEBCwUAA4IBAQA31ChNKVFPG0IvV7ED hCJ+ASCb+9BMiy0556yhOHgqD++0WyXK6lWKKKu4KczdcyaZ+M9TICQMmPRJyMfd KQkEg+ubzK1kozAuXvbxyelcVw8BbUH9hryrPhAmC8cU6pfTAJ2+093svCQHp3JR EdHXKnTz/YNmXJuzRa3toyAr2BJRRDavT6b8Q44Rt4mKahGx87NBi2yf1d/2tNf5 7hnGwxpaFMHCa65NRY/xDxFt1qK+Mh/F8xJq1iKjljAQ7m44oOEALlVlfGj82sDa pidw776oJWZ+Is+MFAcvIaGe0wwgQpOUePIyWC1t5h1d/Ib0f3kwvULY7DhHXNeZ R1em -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:05 2026 by rpki-client