$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3c7f488-a5da-473a-a62c-da4e7e53b953.roa File: e3c7f488-a5da-473a-a62c-da4e7e53b953.roa (raw, json) Hash identifier: pNy0EH90RBzyYMVmloz4n+P9Vgt46P/MQt7IJ+m4EOo= Subject key identifier: 0B:BB:51:DB:6D:A9:78:5C:8A:CC:46:0D:22:91:A4:96:05:A4:4F:C4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 455D66FDAB0EC2CB09C5F48B0D6CCC0F44D50647 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3c7f488-a5da-473a-a62c-da4e7e53b953.roa Signing time: Tue 21 Jul 2026 00:10:56 +0000 ROA not before: Tue 21 Jul 2026 00:10:56 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1a::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:5d:66:fd:ab:0e:c2:cb:09:c5:f4:8b:0d:6c:cc:0f:44:d5:06:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:10:56 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=01733fdb86eabedb3b6fbe129c24bc32eeb6ab2e49a1b256418bd09a38487530, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:63:cd:20:d1:ad:11:9d:6b:37:56:33:c3:9c: 1e:4a:84:ca:59:5b:af:83:3c:ae:48:3c:9b:f8:a8: e2:1b:bb:67:8c:f6:c3:4b:fe:68:4e:b5:cb:ca:5c: 84:ba:8b:63:49:37:37:a8:62:b8:8b:0f:fe:db:ee: d7:18:96:a0:08:dd:81:b9:9b:e9:c4:ca:d9:a2:c4: c7:3b:27:c7:79:e9:73:f9:8d:b1:7c:e6:8c:07:28: 74:ac:48:2f:da:14:6b:be:1c:aa:9e:9a:67:ef:fa: 94:9d:12:8d:6d:30:d4:c3:a1:00:7b:1c:a9:8b:9f: 51:7d:c4:29:c2:d3:8e:b3:e0:8e:e8:fc:7b:a6:3b: 8e:7a:62:0b:f6:aa:9e:55:ee:fd:ea:f3:d9:2f:33: 7c:46:63:2f:f1:b3:f1:20:7f:f8:73:7c:97:ae:4c: 25:e4:19:3c:60:5c:2d:03:8d:83:06:39:c4:f5:e0: 69:22:6d:6e:f4:f9:af:2e:b7:78:76:43:74:81:0d: ec:40:e6:99:54:ef:ce:88:52:43:19:98:5a:64:ed: d0:c5:bb:66:95:66:58:e2:00:07:78:53:ff:a2:9d: ba:72:a0:2b:1e:ee:7e:6b:78:8f:cd:9e:da:22:ba: bf:39:f9:91:ef:67:c1:6e:d2:1b:28:e5:32:cd:a4: f9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BB:51:DB:6D:A9:78:5C:8A:CC:46:0D:22:91:A4:96:05:A4:4F:C4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3c7f488-a5da-473a-a62c-da4e7e53b953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1a::/35 Signature Algorithm: sha256WithRSAEncryption 1c:b2:84:e1:a4:3c:8a:72:75:6d:77:22:de:56:ae:f9:32:ca: a5:a6:91:fa:53:41:9f:8e:3d:f2:61:60:44:03:c0:71:cd:09: 36:9f:08:1d:0b:a5:03:8b:90:d6:13:f8:e6:4f:db:5d:be:66: 84:47:d2:72:8d:d9:c5:4d:c5:dd:b6:8e:1d:62:ab:d1:b1:b0: d0:47:ad:2b:29:bd:52:cb:a8:57:09:ff:90:0f:3d:63:a3:a7: 86:3e:d0:0b:f5:ae:84:73:e1:0f:a8:d7:a6:65:02:4d:eb:09: ce:e5:51:9d:6c:a2:f1:7c:a5:ee:90:83:3c:93:ec:e1:4c:dc: d9:0a:16:f8:cb:96:17:c9:30:db:1b:a3:6d:91:7b:a0:a8:7a: da:52:df:38:c9:56:6d:16:32:ba:55:1a:7e:f5:27:1d:95:14: fb:18:ea:47:2f:60:7d:e3:a0:de:e3:fa:80:d2:84:2b:5b:a7: ec:ea:64:06:73:13:ae:b6:ef:3c:c8:af:59:e0:a7:ba:5a:91: 82:42:51:c4:55:df:f1:7a:29:40:04:2e:5c:12:42:63:7f:ce: 1e:68:a2:cd:18:98:da:14:68:53:2f:f9:0d:31:8e:a2:37:02: c5:f5:61:ec:5b:1d:cb:d7:60:b8:a2:4c:73:24:95:86:3f:35: 1d:41:f1:08 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURV1m/asOwssJxfSLDWzMD0TVBkcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTA1NloX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAMDE3MzNmZGI4NmVhYmVkYjNiNmZi ZTEyOWMyNGJjMzJlZWI2YWIyZTQ5YTFiMjU2NDE4YmQwOWEzODQ4NzUzMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2PNINGtEZ1rN1Yzw5weSoTKWVuv gzyuSDyb+KjiG7tnjPbDS/5oTrXLylyEuotjSTc3qGK4iw/+2+7XGJagCN2BuZvp xMrZosTHOyfHeelz+Y2xfOaMByh0rEgv2hRrvhyqnppn7/qUnRKNbTDUw6EAexyp i59RfcQpwtOOs+CO6Px7pjuOemIL9qqeVe796vPZLzN8RmMv8bPxIH/4c3yXrkwl 5Bk8YFwtA42DBjnE9eBpIm1u9PmvLrd4dkN0gQ3sQOaZVO/OiFJDGZhaZO3Qxbtm lWZY4gAHeFP/op26cqArHu5+a3iPzZ7aIrq/OfmR72fBbtIbKOUyzaT56wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAu7UdttqXhcisxGDSKRpJYFpE/EMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzYzdmNDg4LWE1ZGEtNDczYS1hNjJjLWRhNGU3ZTUzYjk1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYFJAbaGgAwDQYJKoZIhvcNAQELBQADggEBAByyhOGkPIpydW13It5W rvkyyqWmkfpTQZ+OPfJhYEQDwHHNCTafCB0LpQOLkNYT+OZP212+ZoRH0nKN2cVN xd22jh1iq9GxsNBHrSspvVLLqFcJ/5APPWOjp4Y+0Av1roRz4Q+o16ZlAk3rCc7l UZ1sovF8pe6QgzyT7OFM3NkKFvjLlhfJMNsbo22Re6CoetpS3zjJVm0WMrpVGn71 Jx2VFPsY6kcvYH3joN7j+oDShCtbp+zqZAZzE6627zzIr1ngp7pakYJCUcRV3/F6 KUAELlwSQmN/zh5oos0YmNoUaFMv+Q0xjqI3AsX1YexbHcvXYLiiTHMklYY/NR1B 8Qg= -----END CERTIFICATE-----Generated at Fri Jul 24 01:12:20 2026 by rpki-client