$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e2dd8ffd-5ddf-4d66-8796-87f096579505.roa File: e2dd8ffd-5ddf-4d66-8796-87f096579505.roa (raw, json) Hash identifier: rkZNSJgvOzGIF1Z0OebL5+oLqOMWhnYCIR2KpgOU+Y0= Subject key identifier: 9E:FF:06:31:0E:39:85:1D:16:05:09:51:AF:31:2E:50:4F:50:F2:13 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1B14C95161E950D5DED029BC2C4C243D4B609DD8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e2dd8ffd-5ddf-4d66-8796-87f096579505.roa Signing time: Sat 18 Jul 2026 00:00:05 +0000 ROA not before: Sat 18 Jul 2026 00:00:05 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:14:c9:51:61:e9:50:d5:de:d0:29:bc:2c:4c:24:3d:4b:60:9d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 18 00:00:05 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=2dfe7fe93828688729d0e43867d028244e7bef730c1ac85b2adfc709336cc10d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:d9:95:ff:cb:cf:9f:38:61:02:6f:c7:2e: 49:a4:bb:b2:96:1e:0b:bb:77:2a:f5:d0:c1:98:e1: 95:aa:73:6c:8d:0c:4c:5e:33:fc:fe:bc:95:d8:54: ff:c7:a2:30:1f:c4:9d:d2:fc:43:f7:7c:00:43:82: 3f:84:95:e1:62:5c:2e:9c:6e:7a:e3:9b:ae:81:d5: 63:01:c3:60:e1:73:71:5f:23:be:2a:1d:11:8c:36: 00:e0:5f:d3:19:bd:d8:54:44:9f:64:7d:89:8f:45: 0b:05:34:a3:09:a1:94:0a:ec:b2:a9:08:cb:20:70: 1c:40:7e:2f:01:56:29:93:86:db:53:89:50:9d:85: 86:55:04:e2:5a:3a:e7:01:6e:17:6e:9c:d4:2e:6a: de:ee:92:88:c3:8f:23:6f:e2:ff:0c:3c:3b:3a:26: 48:d6:e6:7f:17:e0:05:bd:48:18:e4:4c:f5:a7:eb: fd:66:b6:15:aa:93:0a:a4:2e:47:e3:41:74:58:b5: 25:16:f9:61:31:a7:77:70:4f:79:ea:eb:85:30:27: f1:19:49:da:1f:68:49:49:a8:0d:38:cf:63:a3:af: fe:7d:d9:40:ec:51:32:4a:60:8a:08:9d:25:82:31: 5b:15:cf:32:da:a0:69:a3:e4:13:80:3c:cb:66:1d: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FF:06:31:0E:39:85:1D:16:05:09:51:AF:31:2E:50:4F:50:F2:13 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e2dd8ffd-5ddf-4d66-8796-87f096579505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da30::/32 Signature Algorithm: sha256WithRSAEncryption 11:8a:c8:af:aa:d0:3a:50:81:40:6a:40:fa:92:23:22:5c:72: c3:59:a7:25:0d:e2:b2:7c:58:d0:cc:18:ad:55:b0:86:cd:db: 43:1e:40:3d:34:90:19:12:88:77:c8:49:ce:17:6a:f2:f4:49: 98:c3:97:fe:21:9e:cf:e1:ed:fc:b9:5a:3f:97:cb:42:19:38: 81:dc:80:3d:ac:e9:e9:6f:a0:52:25:18:36:99:1b:06:83:ce: 19:1e:2c:9e:af:e4:ec:27:79:ba:e7:a9:ec:03:01:6f:73:50: a1:ca:c5:b2:1b:38:0a:da:07:f4:fe:d4:28:a7:7f:e5:2c:f0: 92:d5:4d:d6:5e:4c:e8:d7:8e:10:1b:e0:6d:33:9b:66:86:24: 42:ba:36:02:11:f8:b8:14:42:77:e3:6c:1d:cd:ff:e7:9e:51: 0e:20:b4:3f:12:77:6b:b3:01:1a:c9:4b:33:6e:72:43:2e:5c: 4f:79:4f:72:78:53:e4:37:6b:d0:2f:06:83:dd:d0:11:0b:f8: f9:b7:4d:69:91:f1:ae:25:61:5b:5f:34:7e:4c:6b:57:b6:8c: 5b:a5:37:ff:f9:7d:d8:e3:3e:89:c5:fa:be:ca:0c:cb:ba:95: ae:c5:13:d4:c4:38:b1:88:54:89:14:d9:18:b3:a2:6a:c7:c2: e9:df:c1:bd -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUGxTJUWHpUNXe0Cm8LEwkPUtgndgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcxODAwMDAwNVoX DTI2MTAxNjIzNTk1OVowejFJMEcGA1UEBRNAMmRmZTdmZTkzODI4Njg4NzI5ZDBl NDM4NjdkMDI4MjQ0ZTdiZWY3MzBjMWFjODViMmFkZmM3MDkzMzZjYzEwZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvInZlf/Lz584YQJvxy5JpLuylh4L u3cq9dDBmOGVqnNsjQxMXjP8/ryV2FT/x6IwH8Sd0vxD93wAQ4I/hJXhYlwunG56 45uugdVjAcNg4XNxXyO+Kh0RjDYA4F/TGb3YVESfZH2Jj0ULBTSjCaGUCuyyqQjL IHAcQH4vAVYpk4bbU4lQnYWGVQTiWjrnAW4XbpzULmre7pKIw48jb+L/DDw7OiZI 1uZ/F+AFvUgY5Ez1p+v9ZrYVqpMKpC5H40F0WLUlFvlhMad3cE956uuFMCfxGUna H2hJSagNOM9jo6/+fdlA7FEySmCKCJ0lgjFbFc8y2qBpo+QTgDzLZh1RzwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFJ7/BjEOOYUdFgUJUa8xLlBPUPITMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UyZGQ4ZmZkLTVkZGYtNGQ2Ni04Nzk2LTg3ZjA5NjU3OTUwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaMDANBgkqhkiG9w0BAQsFAAOCAQEAEYrIr6rQOlCBQGpA+pIj Ilxyw1mnJQ3isnxY0MwYrVWwhs3bQx5APTSQGRKId8hJzhdq8vRJmMOX/iGez+Ht /LlaP5fLQhk4gdyAPazp6W+gUiUYNpkbBoPOGR4snq/k7Cd5uuep7AMBb3NQocrF shs4CtoH9P7UKKd/5SzwktVN1l5M6NeOEBvgbTObZoYkQro2AhH4uBRCd+NsHc3/ 555RDiC0PxJ3a7MBGslLM25yQy5cT3lPcnhT5Ddr0C8Gg93QEQv4+bdNaZHxriVh W180fkxrV7aMW6U3//l92OM+icX6vsoMy7qVrsUT1MQ4sYhUiRTZGLOiasfC6d/B vQ== -----END CERTIFICATE-----Generated at Fri Jul 24 02:08:21 2026 by rpki-client