$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa File: d1071032-5bb5-48fb-ad34-13668ce372b7.roa (raw, json) Hash identifier: 9eEweypLYv6c4ltxMnnv4a6UYg52T5DYkyZdhhV0tYQ= Subject key identifier: 39:A3:45:D1:28:73:66:3D:82:FA:1D:3C:08:0A:5E:C8:FA:87:98:59 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3E4228700BC423ACFBACF909F311AC1EED8C842F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa Signing time: Fri 24 Jul 2026 00:00:37 +0000 ROA not before: Fri 24 Jul 2026 00:00:37 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:42:28:70:0b:c4:23:ac:fb:ac:f9:09:f3:11:ac:1e:ed:8c:84:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 24 00:00:37 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=9f389e2a9467da591c31532822d97e15aa5d8c38d3a84b3a06a82b42def29d3d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8c:21:37:a4:cf:18:ef:d5:b9:4b:be:b5:0c: 08:86:2a:6f:34:85:9e:3b:c9:58:05:46:f3:3f:f1: f9:f3:07:f4:77:a0:57:52:7f:2e:0d:ed:51:e1:af: 37:22:80:e8:eb:0d:72:87:38:df:bd:01:c3:f1:e6: 14:b8:23:c4:df:f5:9f:a5:b9:71:8e:b9:24:57:c3: 56:79:89:3a:9d:33:2a:8a:e1:b8:b4:92:26:8b:d6: f3:9a:4b:89:b7:e0:22:29:e7:ae:7a:86:3c:96:9e: 62:cf:0b:2a:10:1a:22:f4:d6:2c:52:87:22:7e:21: c2:59:4b:7f:ef:05:ef:87:1d:85:11:be:e2:56:8a: 5b:a9:54:70:da:6d:8f:fa:76:cb:7a:c8:3b:04:7e: a3:1b:0f:0d:e7:d5:ae:19:24:25:01:9f:9a:1f:d7: 05:5a:e6:c1:24:bf:b0:8c:9b:1a:fd:9d:3a:71:39: 1d:57:73:88:a2:d0:87:8f:9b:32:02:c1:b8:7c:37: 79:df:5d:88:25:56:c7:c3:c0:35:52:46:d3:7b:39: ba:e4:da:7c:63:dd:cc:19:9b:8a:81:bf:95:7a:cb: a3:38:a8:95:16:4a:d0:e2:bb:bd:e6:a0:6b:d4:60: 84:8b:dc:9e:28:f1:44:40:78:f1:d7:ba:80:27:36: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A3:45:D1:28:73:66:3D:82:FA:1D:3C:08:0A:5E:C8:FA:87:98:59 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2d::/36 Signature Algorithm: sha256WithRSAEncryption 27:df:2c:c8:9d:f6:d5:50:98:42:7f:ed:b2:f7:d7:61:bd:2d: af:dc:76:5a:38:b3:a7:12:24:a9:7d:43:ea:fb:bc:ea:e1:7a: 08:f6:76:9e:9e:df:6b:58:c2:5a:f3:93:36:f7:b1:e1:2e:26: cc:7b:d1:9e:a6:eb:79:36:10:b2:b7:61:aa:0b:12:7f:27:fb: 73:40:83:06:e3:d0:9a:3d:bd:b9:41:ef:cd:f5:ab:a3:39:87: 95:2a:dc:58:3c:da:a1:93:9b:4c:69:a9:96:65:de:c1:dc:24: cf:74:89:71:ce:63:06:53:ff:4d:ca:fe:60:79:38:92:a9:1f: 19:95:c2:59:7d:54:8f:e0:b4:8a:a2:e6:40:e9:cc:b7:51:69: 8a:3e:b2:52:fc:63:b5:4e:0f:2a:a3:d7:ca:49:b2:d7:10:c5: a8:83:d7:ca:ae:db:e7:94:2f:af:4b:c9:56:f2:a3:c2:d1:cd: f5:01:42:88:32:30:34:e9:7b:2e:d5:39:96:3f:f3:f1:02:2a: f0:26:c6:62:5c:24:47:e6:3f:fd:24:9a:70:7e:37:34:1c:5d: 59:dd:2b:55:26:93:97:71:1d:23:29:43:1f:56:14:8a:e6:ca: 48:34:8f:d4:ec:0e:57:86:c6:02:3a:12:a5:92:c8:a4:a6:a2: d1:4d:07:ca -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPkIocAvEI6z7rPkJ8xGsHu2MhC8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNDAwMDAzN1oX DTI2MTAyMjIzNTk1OVowejFJMEcGA1UEBRNAOWYzODllMmE5NDY3ZGE1OTFjMzE1 MzI4MjJkOTdlMTVhYTVkOGMzOGQzYTg0YjNhMDZhODJiNDJkZWYyOWQzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlowhN6TPGO/VuUu+tQwIhipvNIWe O8lYBUbzP/H58wf0d6BXUn8uDe1R4a83IoDo6w1yhzjfvQHD8eYUuCPE3/Wfpblx jrkkV8NWeYk6nTMqiuG4tJImi9bzmkuJt+AiKeeueoY8lp5izwsqEBoi9NYsUoci fiHCWUt/7wXvhx2FEb7iVopbqVRw2m2P+nbLesg7BH6jGw8N59WuGSQlAZ+aH9cF WubBJL+wjJsa/Z06cTkdV3OIotCHj5syAsG4fDd5312IJVbHw8A1UkbTezm65Np8 Y93MGZuKgb+VesujOKiVFkrQ4ru95qBr1GCEi9yeKPFEQHjx17qAJzbpgwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDmjRdEoc2Y9gvodPAgKXsj6h5hZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QxMDcxMDMyLTViYjUtNDhmYi1hZDM0LTEzNjY4Y2UzNzJiNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLQAwDQYJKoZIhvcNAQELBQADggEBACffLMid9tVQmEJ/7bL3 12G9La/cdlo4s6cSJKl9Q+r7vOrhegj2dp6e32tYwlrzkzb3seEuJsx70Z6m63k2 ELK3YaoLEn8n+3NAgwbj0Jo9vblB7831q6M5h5Uq3Fg82qGTm0xpqZZl3sHcJM90 iXHOYwZT/03K/mB5OJKpHxmVwll9VI/gtIqi5kDpzLdRaYo+slL8Y7VODyqj18pJ stcQxaiD18qu2+eUL69LyVbyo8LRzfUBQogyMDTpey7VOZY/8/ECKvAmxmJcJEfm P/0kmnB+NzQcXVndK1Umk5dxHSMpQx9WFIrmykg0j9TsDleGxgI6EqWSyKSmotFN B8o= -----END CERTIFICATE-----Generated at Fri Jul 24 06:18:06 2026 by rpki-client