$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97ecd44-7856-4171-b02c-67f43a4b316a.roa File: c97ecd44-7856-4171-b02c-67f43a4b316a.roa (raw, json) Hash identifier: KRqeQd14Oe1p4mLG72goRWPNwFcYQ1ix3xc7tRsBESs= Subject key identifier: 9C:40:3E:56:57:B2:2B:9C:0B:3A:B0:FF:B6:A9:1D:C9:97:E7:85:E4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 295C1BC6A312162134C76E9CFDC9E751ECEABDD6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97ecd44-7856-4171-b02c-67f43a4b316a.roa Signing time: Tue 21 Jul 2026 00:10:05 +0000 ROA not before: Tue 21 Jul 2026 00:10:05 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5c:1b:c6:a3:12:16:21:34:c7:6e:9c:fd:c9:e7:51:ec:ea:bd:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:10:05 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=3325d4005f36bbcf9e794b4989d15de42a35aa377797b8afcbbe817bb62c7cf6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a6:20:f1:22:d9:25:3f:f6:fa:ec:1b:40:c6: 88:34:f1:90:4b:c6:3c:ab:9a:4f:1f:a6:31:e9:97: 7b:7a:ec:c1:bb:b2:56:33:a9:94:48:49:77:ed:f6: 0c:70:6b:0c:c9:fa:9a:a7:22:6b:85:d7:9d:1a:c1: 7b:81:f4:8f:e8:0a:b0:4b:32:d7:a3:e9:9e:34:96: e6:41:62:85:ca:d5:e9:67:af:b0:59:27:77:c4:08: 30:2d:b4:a1:03:31:6d:97:30:da:bb:68:6c:04:bf: 03:a9:47:67:2a:e5:6e:5f:4d:ce:ea:d5:08:54:94: b9:68:b5:e4:53:24:ec:6c:32:6a:b7:cc:13:98:98: 15:e6:2b:1f:a4:eb:e1:a9:9b:98:65:76:3c:ac:ab: 32:44:68:f2:8f:4b:d8:e8:f4:f5:2e:08:0f:08:9b: e4:ac:9b:d3:ea:63:6d:2b:44:ec:2e:70:3e:7f:9c: d8:b4:5c:f3:ff:5f:79:50:ef:98:fe:c7:6e:be:89: 6e:fd:c1:60:f3:51:87:d4:7b:92:d6:5e:c5:d2:99: c0:fb:10:b9:63:8c:08:49:ce:21:f8:7d:34:ec:53: 6b:84:57:13:b2:a9:70:72:5c:7d:e4:74:f5:42:49: 09:fc:78:e9:fc:5c:e0:a6:49:b8:4e:0c:cb:4b:58: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:40:3E:56:57:B2:2B:9C:0B:3A:B0:FF:B6:A9:1D:C9:97:E7:85:E4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97ecd44-7856-4171-b02c-67f43a4b316a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c040::/46 Signature Algorithm: sha256WithRSAEncryption 4f:51:02:59:bf:75:b4:a2:d5:83:8a:cb:dc:bd:9d:db:04:c0: 35:fd:7b:d4:cb:68:97:ed:85:b6:1b:7c:0b:be:c2:8f:de:58: 38:c7:53:15:54:df:78:0a:1a:82:d6:b8:e7:14:ca:f0:1d:b2: 87:d5:6b:06:22:d8:96:06:7f:c6:99:f8:94:1e:6d:bf:46:47: e6:d1:62:ed:6e:fb:13:17:a2:72:1e:a0:30:e8:99:1e:d1:a6: 58:24:ad:1e:b9:cf:6a:83:08:61:b6:b1:ae:1f:0b:3d:b9:bc: 04:c7:07:6f:d5:e3:12:86:a6:d8:14:54:22:e2:3b:c2:8f:60: 05:55:d8:1f:aa:2a:84:83:3f:85:56:0f:d0:3b:ef:c9:5f:1c: db:fe:54:22:1d:87:21:11:68:aa:7e:0b:22:00:85:19:d0:d7: a2:3d:94:01:e3:23:71:29:6c:64:d2:7c:52:af:31:46:b9:29: 4c:44:ae:07:5f:39:e8:15:a8:c6:27:25:db:29:44:a3:97:84: 54:6a:35:9b:27:d3:28:0a:a2:df:d2:37:d9:12:3f:17:49:69: 33:4f:69:d4:70:87:0b:dc:e0:a8:cb:16:6f:f5:c1:de:8e:28: a1:d1:8a:19:6b:95:20:06:a2:0f:57:a1:59:e7:4b:0d:0d:a6: c7:79:ce:88 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKVwbxqMSFiE0x26c/cnnUezqvdYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTAwNVoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAMzMyNWQ0MDA1ZjM2YmJjZjllNzk0 YjQ5ODlkMTVkZTQyYTM1YWEzNzc3OTdiOGFmY2JiZTgxN2JiNjJjN2NmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqYg8SLZJT/2+uwbQMaINPGQS8Y8 q5pPH6Yx6Zd7euzBu7JWM6mUSEl37fYMcGsMyfqapyJrhdedGsF7gfSP6AqwSzLX o+meNJbmQWKFytXpZ6+wWSd3xAgwLbShAzFtlzDau2hsBL8DqUdnKuVuX03O6tUI VJS5aLXkUyTsbDJqt8wTmJgV5isfpOvhqZuYZXY8rKsyRGjyj0vY6PT1LggPCJvk rJvT6mNtK0TsLnA+f5zYtFzz/195UO+Y/sduvolu/cFg81GH1HuS1l7F0pnA+xC5 Y4wISc4h+H007FNrhFcTsqlwclx95HT1QkkJ/Hjp/Fzgpkm4TgzLS1iKgwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJxAPlZXsiucCzqw/7apHcmX54XkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5N2VjZDQ0LTc4NTYtNDE3MS1iMDJjLTY3ZjQzYTRiMzE2YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88BAMA0GCSqGSIb3DQEBCwUAA4IBAQBPUQJZv3W0otWDisvc vZ3bBMA1/XvUy2iX7YW2G3wLvsKP3lg4x1MVVN94ChqC1rjnFMrwHbKH1WsGItiW Bn/GmfiUHm2/Rkfm0WLtbvsTF6JyHqAw6Jke0aZYJK0euc9qgwhhtrGuHws9ubwE xwdv1eMShqbYFFQi4jvCj2AFVdgfqiqEgz+FVg/QO+/JXxzb/lQiHYchEWiqfgsi AIUZ0NeiPZQB4yNxKWxk0nxSrzFGuSlMRK4HXznoFajGJyXbKUSjl4RUajWbJ9Mo CqLf0jfZEj8XSWkzT2nUcIcL3OCoyxZv9cHejiih0YoZa5UgBqIPV6FZ50sNDabH ec6I -----END CERTIFICATE-----Generated at Fri Jul 24 01:17:33 2026 by rpki-client