$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1567509-f31d-4739-a7a6-ed24530c598b.roa File: e1567509-f31d-4739-a7a6-ed24530c598b.roa (raw, json) Hash identifier: uecV0SzohNis6V4i9ggKZTumPdtNL5QDNrxdI6gEQOU= Subject key identifier: E4:9B:5B:83:B0:6C:67:54:4E:61:CA:AC:7B:AB:C7:37:82:2C:FD:4F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 57ACF78AB77C9C006599643D69DB1DE2C62B8F36 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1567509-f31d-4739-a7a6-ed24530c598b.roa Signing time: Thu 23 Jul 2026 00:00:06 +0000 ROA not before: Thu 23 Jul 2026 00:00:06 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ac:f7:8a:b7:7c:9c:00:65:99:64:3d:69:db:1d:e2:c6:2b:8f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 23 00:00:06 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=b9d8147c8d6bfe180f14375a175217feb8f2d6cabc582123a9a0618429559741, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:27:fb:90:ed:18:9e:22:5f:8d:f0:a4:b9: bb:a9:e3:e3:a1:f5:93:02:61:dd:c1:52:39:fd:73: ef:67:bc:53:94:6f:ca:29:49:67:93:91:44:f5:55: 84:64:1b:b1:d0:b7:bb:c9:29:68:19:7d:d1:32:cc: 4e:91:04:b9:20:78:c1:62:fa:4e:40:c6:34:e5:8c: 3b:60:a6:6b:c7:34:ad:2e:9b:6f:35:89:f1:da:67: fe:6b:aa:3b:96:73:6e:0b:94:42:af:65:ad:f6:17: f8:cd:1a:ee:df:bd:7e:74:40:fc:17:ec:5f:f0:90: 66:44:c6:a2:9b:45:21:23:0e:19:46:f3:06:93:fe: 2f:6c:bb:72:19:2b:21:d8:1c:ea:e0:3e:5b:44:af: a2:0a:68:1f:dc:83:8f:28:76:40:be:49:05:95:3a: bc:14:97:38:53:12:2b:46:db:7f:c7:c4:90:1d:af: 28:46:d1:66:8e:1e:a8:9e:cb:cf:94:1f:77:cc:09: ac:03:bb:8c:95:69:64:07:4e:d4:eb:b9:4d:fe:2c: 8a:22:8f:04:9b:7d:cb:3f:fd:95:66:b5:67:2e:62: 7d:33:7d:12:ca:8e:14:85:10:6f:b4:8b:cf:48:7d: 19:ce:54:38:1d:5c:9d:58:b0:13:31:3b:33:24:d8: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9B:5B:83:B0:6C:67:54:4E:61:CA:AC:7B:AB:C7:37:82:2C:FD:4F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1567509-f31d-4739-a7a6-ed24530c598b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:c000::/40 Signature Algorithm: sha256WithRSAEncryption 9e:21:a2:a8:70:06:6b:21:35:dd:f7:e8:e2:11:05:83:dd:8d: 44:36:86:68:00:ff:a1:25:ed:ce:38:1a:1f:07:8b:0d:58:74: 3f:07:b2:b6:0a:ae:ed:e9:0f:85:05:ee:4c:d7:32:51:d1:a6: 62:d1:99:cc:2e:47:9b:45:0a:84:5c:0f:2e:24:5e:bc:25:3e: 78:26:25:38:55:25:90:a8:a4:a2:3a:8d:fb:93:96:c0:30:d4: 08:2d:ed:57:4c:37:52:16:4c:cc:c8:bf:83:de:e4:d2:11:e9: ac:d1:7b:71:3e:b1:8d:63:00:cb:32:2e:92:3a:cf:ba:c7:de: 5d:a3:b9:c4:ae:bb:f3:2a:44:fb:5d:e8:cf:e4:00:16:0d:a7: 22:78:83:f3:32:80:b3:74:d8:1c:25:ba:c0:96:99:a9:90:2f: d7:b7:1b:ca:2c:c6:30:5b:2f:f0:e0:56:d2:6f:32:e9:53:e7: c7:e0:6d:2a:1d:84:d6:e7:32:ba:05:74:c2:88:3c:9d:fe:2a: 2b:fb:b8:41:28:f7:e2:a3:d5:af:e2:1e:f1:ec:07:bd:3b:27: a5:8c:ff:96:55:c0:56:42:8a:f7:4c:ee:e2:8a:89:9f:36:59: a6:58:80:d9:8d:9c:dd:48:bc:91:1c:10:00:09:54:5b:3c:83: 03:53:9a:b1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUV6z3ird8nABlmWQ9adsd4sYrjzYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMzAwMDAwNloX DTI2MTAyMTIzNTk1OVowejFJMEcGA1UEBRNAYjlkODE0N2M4ZDZiZmUxODBmMTQz NzVhMTc1MjE3ZmViOGYyZDZjYWJjNTgyMTIzYTlhMDYxODQyOTU1OTc0MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fwn+5DtGJ4iX43wpLm7qePjofWT AmHdwVI5/XPvZ7xTlG/KKUlnk5FE9VWEZBux0Le7ySloGX3RMsxOkQS5IHjBYvpO QMY05Yw7YKZrxzStLptvNYnx2mf+a6o7lnNuC5RCr2Wt9hf4zRru371+dED8F+xf 8JBmRMaim0UhIw4ZRvMGk/4vbLtyGSsh2Bzq4D5bRK+iCmgf3IOPKHZAvkkFlTq8 FJc4UxIrRtt/x8SQHa8oRtFmjh6onsvPlB93zAmsA7uMlWlkB07U67lN/iyKIo8E m33LP/2VZrVnLmJ9M30Syo4UhRBvtIvPSH0ZzlQ4HVydWLATMTszJNggzwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOSbW4OwbGdUTmHKrHurxzeCLP1PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxNTY3NTA5LWYzMWQtNDczOS1hN2E2LWVkMjQ1MzBjNTk4Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9cAwDQYJKoZIhvcNAQELBQADggEBAJ4hoqhwBmshNd336OIR BYPdjUQ2hmgA/6El7c44Gh8Hiw1YdD8HsrYKru3pD4UF7kzXMlHRpmLRmcwuR5tF CoRcDy4kXrwlPngmJThVJZCopKI6jfuTlsAw1Agt7VdMN1IWTMzIv4Pe5NIR6azR e3E+sY1jAMsyLpI6z7rH3l2jucSuu/MqRPtd6M/kABYNpyJ4g/MygLN02BwlusCW mamQL9e3G8osxjBbL/DgVtJvMulT58fgbSodhNbnMroFdMKIPJ3+Kiv7uEEo9+Kj 1a/iHvHsB707J6WM/5ZVwFZCivdM7uKKiZ82WaZYgNmNnN1IvJEcEAAJVFs8gwNT mrE= -----END CERTIFICATE-----Generated at Fri Jul 24 03:46:57 2026 by rpki-client