$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b660a4f9-3eab-4a9a-a2db-560d6997eaf9.roa File: b660a4f9-3eab-4a9a-a2db-560d6997eaf9.roa (raw, json) Hash identifier: JpiUnY3+3v9Q0QJ253mNlv9GwO3vD958gpVUm/+oQDc= Subject key identifier: 76:E7:D3:2A:00:13:06:DE:D3:9C:B7:12:D9:D4:B3:11:FD:25:F5:4E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2DBFE06913473882DD206D8D69301247F35C5FC2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b660a4f9-3eab-4a9a-a2db-560d6997eaf9.roa Signing time: Thu 16 Jul 2026 00:00:31 +0000 ROA not before: Thu 16 Jul 2026 00:00:31 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daed:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bf:e0:69:13:47:38:82:dd:20:6d:8d:69:30:12:47:f3:5c:5f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:31 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=269e9cc3add93d5d20b7cb6b3f2cec0584314a59444879de445036b7c5b9d73a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:87:5b:9d:92:2e:27:ec:28:cb:a8:a4:dc: 37:0a:b1:a4:b7:ff:70:b9:35:69:86:9b:5a:25:dc: 34:71:1f:51:e9:28:8b:c4:be:ad:a1:33:8b:e7:b2: 92:e9:0a:6c:9b:e9:99:87:90:f8:42:9e:a5:c6:2e: 6c:f0:86:4c:23:5a:27:f9:e7:58:d9:06:ac:48:d4: 67:5c:08:76:15:bb:f9:c9:b3:63:04:e1:12:c1:72: 49:97:84:3a:e9:e1:fe:7b:1a:ac:d4:17:57:10:8c: b2:3d:76:75:da:33:76:30:3c:b3:a5:e2:1a:9a:22: d4:4c:05:c2:62:7e:07:22:19:f2:6f:99:77:9a:58: 20:19:35:54:ea:a1:2f:a3:d6:72:58:4e:cb:da:8d: 53:d3:b2:ea:05:91:70:a4:7d:d5:66:d2:e1:7a:ee: 86:45:78:58:d6:f2:99:d5:08:55:92:dd:2b:5c:65: 5b:55:63:48:31:57:8b:a7:05:e9:e9:45:bb:83:b8: 70:7a:3a:b7:f4:09:ac:37:06:29:7a:55:dd:e0:5c: a2:de:a5:8e:01:6b:04:ec:2b:2d:1f:ae:16:5b:15: 9b:ec:af:79:d0:19:fc:d9:88:cb:e5:f1:00:65:c5: 88:75:04:81:be:a6:36:7b:7e:84:3e:60:28:f3:2d: f0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E7:D3:2A:00:13:06:DE:D3:9C:B7:12:D9:D4:B3:11:FD:25:F5:4E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b660a4f9-3eab-4a9a-a2db-560d6997eaf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption 42:95:1f:8c:85:d6:af:85:45:2b:fd:af:3e:b1:82:3f:97:c6: b3:55:43:c6:fb:0c:9e:27:15:ca:f1:4f:94:3b:18:52:ce:95: 4f:42:6a:3a:0b:b9:54:ff:58:f9:63:64:7d:81:61:bd:df:e4: 42:51:d4:68:25:70:3c:58:69:70:ee:1e:6b:4d:74:a3:8d:f7: 86:ae:c7:03:4d:e7:40:d8:7b:dd:e4:2c:81:13:4c:cf:22:bc: af:6b:26:af:ef:2c:34:c8:ae:65:76:fd:de:e3:8a:7e:bf:cd: 3c:45:b4:bb:30:07:f6:0f:62:b5:42:fd:ca:62:20:da:69:48: 4c:4f:f4:16:3f:83:a0:7f:b6:56:8a:dc:84:43:ca:9d:e8:1a: 98:8e:84:af:3c:76:dd:78:53:fa:48:fe:c1:c6:a0:9e:94:7e: 1b:d6:3b:68:63:98:4e:1d:e1:ff:66:dc:b8:8e:56:3c:0d:d3: d0:d8:fc:98:62:ef:9c:f8:06:ae:f0:34:11:70:5f:c8:5a:04: 5d:74:57:94:31:e3:1f:58:ad:cb:3f:33:e5:34:39:fe:07:71: c0:0d:18:b4:51:13:79:d9:f6:e4:40:ae:1d:7c:f1:1d:7f:7f: 1c:77:bd:aa:0f:fb:77:36:3c:a3:30:36:60:44:fc:93:03:7b: 90:0b:d9:dc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULb/gaRNHOILdIG2NaTASR/NcX8IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcxNjAwMDAzMVoX DTI2MTAxNDIzNTk1OVowejFJMEcGA1UEBRNAMjY5ZTljYzNhZGQ5M2Q1ZDIwYjdj YjZiM2YyY2VjMDU4NDMxNGE1OTQ0NDg3OWRlNDQ1MDM2YjdjNWI5ZDczYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR6HW52SLifsKMuopNw3CrGkt/9w uTVphptaJdw0cR9R6SiLxL6toTOL57KS6Qpsm+mZh5D4Qp6lxi5s8IZMI1on+edY 2QasSNRnXAh2Fbv5ybNjBOESwXJJl4Q66eH+exqs1BdXEIyyPXZ12jN2MDyzpeIa miLUTAXCYn4HIhnyb5l3mlggGTVU6qEvo9ZyWE7L2o1T07LqBZFwpH3VZtLheu6G RXhY1vKZ1QhVkt0rXGVbVWNIMVeLpwXp6UW7g7hwejq39AmsNwYpelXd4Fyi3qWO AWsE7CstH64WWxWb7K950Bn82YjL5fEAZcWIdQSBvqY2e36EPmAo8y3wOwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHbn0yoAEwbe05y3EtnUsxH9JfVOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I2NjBhNGY5LTNlYWItNGE5YS1hMmRiLTU2MGQ2OTk3ZWFmOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7aDAMA0GCSqGSIb3DQEBCwUAA4IBAQBClR+MhdavhUUr/a8+ sYI/l8azVUPG+wyeJxXK8U+UOxhSzpVPQmo6C7lU/1j5Y2R9gWG93+RCUdRoJXA8 WGlw7h5rTXSjjfeGrscDTedA2Hvd5CyBE0zPIryvayav7yw0yK5ldv3e44p+v808 RbS7MAf2D2K1Qv3KYiDaaUhMT/QWP4Ogf7ZWityEQ8qd6BqYjoSvPHbdeFP6SP7B xqCelH4b1jtoY5hOHeH/Zty4jlY8DdPQ2PyYYu+c+Aau8DQRcF/IWgRddFeUMeMf WK3LPzPlNDn+B3HADRi0URN52fbkQK4dfPEdf38cd72qD/t3NjyjMDZgRPyTA3uQ C9nc -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:12 2026 by rpki-client