$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/982d87a7-4e0b-42ab-a73f-f497b43a2a36.roa File: 982d87a7-4e0b-42ab-a73f-f497b43a2a36.roa (raw, json) Hash identifier: R2wKkk/J9FByvSMY/h35wlVbf1ZLX+OMih+iPrOv8iY= Subject key identifier: 26:59:F9:9A:44:19:F2:2D:3E:E5:D6:E9:45:F6:16:9C:C1:C5:9F:DA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C1DD5825462770FD2B516000DD5C3EC341B2BB9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/982d87a7-4e0b-42ab-a73f-f497b43a2a36.roa Signing time: Fri 24 Jul 2026 00:01:13 +0000 ROA not before: Fri 24 Jul 2026 00:01:13 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1d:d5:82:54:62:77:0f:d2:b5:16:00:0d:d5:c3:ec:34:1b:2b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 24 00:01:13 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=40a0c6f18c3e552e888926dd2e56f8afba07ead190cb0b76e652e066c89aa042, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:03:a1:d1:71:09:24:79:00:7b:1c:bd:d3: 89:36:dc:62:17:8d:6d:ce:38:71:03:6b:7f:c1:1b: 67:75:6b:3d:63:24:27:4a:93:cd:13:3a:a7:73:c7: d2:5b:08:79:3f:2b:3a:3f:5b:d7:68:7c:17:ce:e2: 6d:17:16:e5:29:02:ff:33:de:88:37:4e:12:60:c1: c1:00:2b:98:c3:87:0e:e5:3d:a4:a1:1f:eb:0a:04: af:79:1f:08:d6:f7:90:4b:33:6f:5d:84:96:fe:c4: f2:87:d8:4f:5e:13:b3:5f:fd:2e:5d:40:56:e4:4b: 4e:f8:24:bc:58:b1:f7:81:e8:f8:18:15:7b:c7:d0: cf:df:66:13:17:34:66:48:70:26:ee:0a:06:62:e4: 76:2f:f2:53:69:78:38:f4:f0:f8:6d:86:c1:63:c1: ab:66:7d:af:b8:9e:73:61:7d:7a:41:1d:82:8c:f8: 3c:74:a2:88:8a:af:d2:5a:6c:a2:81:be:49:0f:dc: 02:98:6e:ce:02:61:63:3d:b9:fa:6a:4c:7c:ac:15: 9b:73:34:49:71:f5:bf:36:17:b0:2e:02:5b:6d:7d: b9:23:9a:0f:e9:1b:7b:65:68:d3:16:f9:ae:e6:7c: a6:3d:8e:16:1b:0a:94:c8:c4:da:e8:9c:65:52:96: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:59:F9:9A:44:19:F2:2D:3E:E5:D6:E9:45:F6:16:9C:C1:C5:9F:DA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/982d87a7-4e0b-42ab-a73f-f497b43a2a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:800::/40 Signature Algorithm: sha256WithRSAEncryption 95:70:79:c2:07:7e:08:78:aa:ad:9f:75:66:ae:c3:dd:1c:0a: d1:07:e2:8a:0b:5a:4c:7d:ec:1d:21:27:73:42:94:45:07:43: a7:2f:87:71:06:13:21:9e:0c:50:ee:58:2c:25:c0:31:d1:c0: e8:08:64:50:20:6e:6b:65:e3:eb:6b:79:bf:12:72:f3:04:9f: af:fc:4a:7b:ed:28:1e:63:0c:c5:b4:ae:67:ec:aa:a8:d5:4e: cf:ee:50:34:23:81:a0:5b:e1:35:ce:d3:51:d3:99:43:b8:d4: c5:94:be:e3:90:14:d6:d4:9e:16:4e:af:cb:18:6a:f4:dc:ec: 64:89:7a:1c:ca:6f:4d:5c:5a:34:a0:2c:b7:94:71:a3:b5:e5: 74:5a:82:7e:28:e7:0e:29:e4:d2:0e:7f:bf:c7:4f:1d:24:f5: b8:aa:e2:3d:0e:d9:ad:b2:d8:24:b3:0d:b4:56:b5:7d:bb:84: 4b:73:8b:b7:34:72:69:4d:45:b8:f0:21:2d:04:95:51:8e:d3: 1c:f1:56:07:af:e7:ee:ad:44:1f:09:b6:70:a7:32:b8:0b:a5: 32:54:6e:1d:68:57:01:f3:b1:b9:13:18:85:5f:30:7f:9b:3d: d0:a1:2e:b8:a8:0f:ce:e1:ab:52:58:27:2d:b4:6a:15:62:7d: a9:28:21:51 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHB3VglRidw/StRYADdXD7DQbK7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNDAwMDExM1oX DTI2MTAyMjIzNTk1OVowejFJMEcGA1UEBRNANDBhMGM2ZjE4YzNlNTUyZTg4ODky NmRkMmU1NmY4YWZiYTA3ZWFkMTkwY2IwYjc2ZTY1MmUwNjZjODlhYTA0MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsacDodFxCSR5AHscvdOJNtxiF41t zjhxA2t/wRtndWs9YyQnSpPNEzqnc8fSWwh5Pys6P1vXaHwXzuJtFxblKQL/M96I N04SYMHBACuYw4cO5T2koR/rCgSveR8I1veQSzNvXYSW/sTyh9hPXhOzX/0uXUBW 5EtO+CS8WLH3gej4GBV7x9DP32YTFzRmSHAm7goGYuR2L/JTaXg49PD4bYbBY8Gr Zn2vuJ5zYX16QR2CjPg8dKKIiq/SWmyigb5JD9wCmG7OAmFjPbn6akx8rBWbczRJ cfW/NhewLgJbbX25I5oP6Rt7ZWjTFvmu5nymPY4WGwqUyMTa6JxlUpbrWQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCZZ+ZpEGfItPuXW6UX2FpzBxZ/aMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4MmQ4N2E3LTRlMGItNDJhYi1hNzNmLWY0OTdiNDNhMmEzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauQgwDQYJKoZIhvcNAQELBQADggEBAJVwecIHfgh4qq2fdWau w90cCtEH4ooLWkx97B0hJ3NClEUHQ6cvh3EGEyGeDFDuWCwlwDHRwOgIZFAgbmtl 4+treb8ScvMEn6/8SnvtKB5jDMW0rmfsqqjVTs/uUDQjgaBb4TXO01HTmUO41MWU vuOQFNbUnhZOr8sYavTc7GSJehzKb01cWjSgLLeUcaO15XRagn4o5w4p5NIOf7/H Tx0k9biq4j0O2a2y2CSzDbRWtX27hEtzi7c0cmlNRbjwIS0ElVGO0xzxVgev5+6t RB8JtnCnMrgLpTJUbh1oVwHzsbkTGIVfMH+bPdChLrioD87hq1JYJy20ahVifako IVE= -----END CERTIFICATE-----Generated at Fri Jul 24 07:34:27 2026 by rpki-client