$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2f47557-cb9a-40d0-8e09-da9966cb3fbc.roa File: c2f47557-cb9a-40d0-8e09-da9966cb3fbc.roa (raw, json) Hash identifier: vRfGKAx5atDLsQdi7TeRcD8PlcK3T0KPlrYtfxffpzc= Subject key identifier: F5:AE:10:EA:43:7A:37:3A:66:74:DF:EC:67:6B:F5:67:78:92:A6:4A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0AE71085643126EE899B896F856C54C93C5439D1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2f47557-cb9a-40d0-8e09-da9966cb3fbc.roa Signing time: Tue 21 Jul 2026 00:10:38 +0000 ROA not before: Tue 21 Jul 2026 00:10:38 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e7:10:85:64:31:26:ee:89:9b:89:6f:85:6c:54:c9:3c:54:39:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:10:38 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=c1c83018ddcfb79493f13394fe101561c7c44f93cf2f3d724ed4e5211973cb63, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:ea:6f:22:a4:63:ba:43:82:f8:30:2b:2a: f2:6b:2d:9c:17:b6:b8:a6:3d:39:7f:cf:08:cf:5d: ee:ce:30:87:bd:0f:de:59:b7:67:7c:fe:53:b8:5f: b0:3e:c4:0b:76:3a:8e:15:b8:7a:75:b7:a6:0c:89: 85:4f:f4:5f:54:9c:98:ed:47:a5:3d:3c:03:d9:25: a3:60:55:6d:43:b2:81:28:18:c5:0c:ad:88:79:1f: 5a:b2:fb:7f:15:d6:64:0c:14:31:fe:52:7a:74:b0: 0e:fe:d9:6a:b5:d8:fb:b1:5d:3c:0b:e2:fe:3c:14: fb:93:3f:7a:e4:08:ef:36:ee:a4:1e:bd:b6:a0:b7: 71:f5:1a:5d:a5:70:a1:67:08:78:8d:69:d5:7f:9f: bb:62:b9:c1:e6:d0:4e:6d:04:d8:85:e3:3e:23:3e: 74:eb:95:5a:fe:0a:3a:23:47:74:89:fd:14:ba:4d: 0e:94:18:4f:63:46:5a:85:67:c9:20:e7:1d:45:fd: bb:ff:90:2b:83:c0:31:6b:2b:fb:8d:2c:d7:2d:31: 49:e0:4c:af:be:a1:78:ea:11:a7:42:bf:36:8e:6c: 75:59:e8:a0:3f:28:c9:56:7f:c3:0f:fe:ee:5f:b4: 82:f5:27:a0:e8:26:21:b8:db:ed:74:47:10:14:80: dc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AE:10:EA:43:7A:37:3A:66:74:DF:EC:67:6B:F5:67:78:92:A6:4A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2f47557-cb9a-40d0-8e09-da9966cb3fbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:2840::/48 Signature Algorithm: sha256WithRSAEncryption 0a:20:98:00:1d:a4:64:27:28:bd:ab:92:4d:e2:fc:06:2c:4c: 3d:b4:ca:b6:6e:9b:ae:33:dd:b4:bc:68:cf:e5:1e:8e:66:26: 22:88:ce:af:d6:d2:7b:07:13:6a:ac:cb:65:74:cd:43:ed:55: cf:25:f5:79:01:3f:19:ef:5f:50:10:45:08:68:78:b9:e7:7c: 17:91:7c:a0:62:f8:02:8d:77:c6:1d:e7:d1:9c:b3:2a:4d:76: 4b:d9:50:89:33:a9:28:30:fd:6b:35:e0:7e:24:f6:b0:36:dc: c8:fd:4f:9c:f0:38:57:91:38:d9:fa:b3:94:25:23:d5:24:c2: a1:73:5f:be:cc:9e:64:ff:88:f4:55:0a:15:6c:3b:23:9e:01: 92:79:58:02:b5:81:82:1d:cf:09:0b:b6:d7:d2:da:3e:43:b2: 3a:31:37:10:22:92:bb:fc:1b:35:90:2c:5f:67:4a:c1:f6:cf: 1d:2a:98:15:50:2b:fe:f6:fb:75:8d:3f:9d:2a:8a:b9:2f:27: ea:78:34:3d:da:bd:4d:89:c1:b1:25:2e:b5:f2:3e:80:41:81: f6:cd:d2:c7:b4:00:9d:94:ba:66:8d:b1:80:49:2a:5e:7b:5d: f5:c8:e0:d1:fd:ce:a9:36:d7:24:98:ec:6a:e8:ea:1a:29:e8: fc:8d:41:4b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCucQhWQxJu6Jm4lvhWxUyTxUOdEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTAzOFoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAYzFjODMwMThkZGNmYjc5NDkzZjEz Mzk0ZmUxMDE1NjFjN2M0NGY5M2NmMmYzZDcyNGVkNGU1MjExOTczY2I2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcfqbyKkY7pDgvgwKyryay2cF7a4 pj05f88Iz13uzjCHvQ/eWbdnfP5TuF+wPsQLdjqOFbh6dbemDImFT/RfVJyY7Uel PTwD2SWjYFVtQ7KBKBjFDK2IeR9asvt/FdZkDBQx/lJ6dLAO/tlqtdj7sV08C+L+ PBT7kz965AjvNu6kHr22oLdx9RpdpXChZwh4jWnVf5+7YrnB5tBObQTYheM+Iz50 65Va/go6I0d0if0Uuk0OlBhPY0ZahWfJIOcdRf27/5Arg8Axayv7jSzXLTFJ4Eyv vqF46hGnQr82jmx1WeigPyjJVn/DD/7uX7SC9Seg6CYhuNvtdEcQFIDcpwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPWuEOpDejc6ZnTf7Gdr9Wd4kqZKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyZjQ3NTU3LWNiOWEtNDBkMC04ZTA5LWRhOTk2NmNiM2ZiYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ihAMA0GCSqGSIb3DQEBCwUAA4IBAQAKIJgAHaRkJyi9q5JN 4vwGLEw9tMq2bpuuM920vGjP5R6OZiYiiM6v1tJ7BxNqrMtldM1D7VXPJfV5AT8Z 719QEEUIaHi553wXkXygYvgCjXfGHefRnLMqTXZL2VCJM6koMP1rNeB+JPawNtzI /U+c8DhXkTjZ+rOUJSPVJMKhc1++zJ5k/4j0VQoVbDsjngGSeVgCtYGCHc8JC7bX 0to+Q7I6MTcQIpK7/Bs1kCxfZ0rB9s8dKpgVUCv+9vt1jT+dKoq5LyfqeDQ92r1N icGxJS618j6AQYH2zdLHtACdlLpmjbGASSpee131yODR/c6pNtckmOxq6OoaKej8 jUFL -----END CERTIFICATE-----Generated at Fri Jul 24 01:11:52 2026 by rpki-client