$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e87ceef5-41fe-4acd-bca2-376839210693.roa File: e87ceef5-41fe-4acd-bca2-376839210693.roa (raw, json) Hash identifier: bh93zr4c4VeOm0mWvbt0TFPkmpE+IwiAjrrkyJ/c8mA= Subject key identifier: 90:B6:23:5E:21:19:08:C5:5E:9A:36:3C:62:65:E2:B2:C3:4F:59:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 13DAAA99EA78AF15B0219E9A437BD17E66E47577 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e87ceef5-41fe-4acd-bca2-376839210693.roa Signing time: Tue 21 Jul 2026 00:01:15 +0000 ROA not before: Tue 21 Jul 2026 00:01:15 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:da:aa:99:ea:78:af:15:b0:21:9e:9a:43:7b:d1:7e:66:e4:75:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:01:15 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=14e96bcefe694b4a7ecb9a67118fbaa16d3922b6ebbdfab8bd331ed027d1d3d2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:b8:b5:0e:a2:ca:33:7d:f9:c2:5e:52:13: 0a:c7:26:fe:e0:1d:33:6b:1f:2e:e0:c6:a4:a4:f8: e0:07:76:e5:f7:71:de:12:e4:b5:02:b2:39:ab:99: 62:ca:8f:35:c7:9c:9e:1a:1a:41:92:9b:a5:a5:bd: 1a:ec:7a:1e:f0:0b:b8:ba:de:fc:c6:b6:a9:47:a7: 4d:0e:9d:de:de:b0:85:e3:3a:4d:40:69:e1:33:8b: ba:0b:18:94:3f:f1:f9:0a:4e:ef:31:2e:80:ac:7c: a0:70:e0:25:2f:56:2d:d4:4e:45:a9:83:11:44:29: 3d:7c:a1:43:21:75:5b:2c:69:58:76:39:da:56:f2: 54:74:a8:9b:a7:42:ff:84:1d:87:e1:ca:09:d6:26: fb:7c:5d:17:a4:f1:54:5f:ed:23:cb:e3:b7:34:64: 55:f3:8f:97:76:50:fe:72:fa:fa:10:c8:6a:6c:c5: 74:ae:3a:e2:2e:85:58:df:34:2d:3e:62:1c:bf:0a: a6:f2:e1:f4:8a:0f:55:c0:ef:c4:b3:28:bf:03:a0: 6c:b6:2a:76:70:9d:c4:50:7d:60:88:ae:d2:70:82: 7c:67:36:bb:28:bc:d6:87:0b:d4:14:47:c5:cc:54: 95:f0:41:97:80:9a:a3:74:73:7b:48:1b:74:a5:14: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B6:23:5E:21:19:08:C5:5E:9A:36:3C:62:65:E2:B2:C3:4F:59:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e87ceef5-41fe-4acd-bca2-376839210693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:6040::/48 Signature Algorithm: sha256WithRSAEncryption 9c:34:f0:2b:66:9b:38:e3:51:0f:b6:06:e0:e6:12:7a:44:30: 47:51:22:68:b1:13:29:06:fb:af:31:03:f1:c3:60:e5:eb:19: c1:d7:a3:c6:3a:ee:e6:79:70:f2:d1:76:eb:67:6f:c9:00:8f: a7:91:9c:c8:a4:36:6c:94:1c:6a:c0:3c:7b:af:cd:cc:40:2e: 87:bc:0c:70:45:d9:9c:e2:af:33:a4:fb:b8:56:93:24:f5:98: 36:0f:71:88:1f:d7:89:08:63:46:a6:96:f7:85:14:2e:ad:06: 65:39:dc:ea:a7:94:3e:07:56:6b:66:e4:94:9d:c7:54:b8:12: e8:46:92:a9:ee:f1:33:6a:22:2f:17:fd:67:de:c6:43:65:cb: 40:cc:5b:14:8e:a5:5e:93:0a:b6:19:09:3e:e4:5f:3a:9f:e3: a5:de:71:88:b7:65:e3:e4:90:b2:cb:c5:1c:a8:57:6d:ed:c5: a0:6e:c7:b6:df:74:8a:b3:22:61:4c:d7:09:41:15:96:c3:74: 95:34:9e:02:64:86:21:fa:ba:65:d6:50:13:23:3a:63:30:b1: 76:fc:2a:14:40:c9:22:ae:79:c2:50:3a:a3:1a:ec:7c:33:ba: 08:67:ff:71:16:1a:f1:1f:d2:c8:67:a7:26:db:62:4e:35:91: e7:cb:a6:e3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUE9qqmep4rxWwIZ6aQ3vRfmbkdXcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMDExNVoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAMTRlOTZiY2VmZTY5NGI0YTdlY2I5 YTY3MTE4ZmJhYTE2ZDM5MjJiNmViYmRmYWI4YmQzMzFlZDAyN2QxZDNkMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOu4tQ6iyjN9+cJeUhMKxyb+4B0z ax8u4MakpPjgB3bl93HeEuS1ArI5q5liyo81x5yeGhpBkpulpb0a7Hoe8Au4ut78 xrapR6dNDp3e3rCF4zpNQGnhM4u6CxiUP/H5Ck7vMS6ArHygcOAlL1Yt1E5FqYMR RCk9fKFDIXVbLGlYdjnaVvJUdKibp0L/hB2H4coJ1ib7fF0XpPFUX+0jy+O3NGRV 84+XdlD+cvr6EMhqbMV0rjriLoVY3zQtPmIcvwqm8uH0ig9VwO/Esyi/A6Bstip2 cJ3EUH1giK7ScIJ8Zza7KLzWhwvUFEfFzFSV8EGXgJqjdHN7SBt0pRSnCwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJC2I14hGQjFXpo2PGJl4rLDT1mRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U4N2NlZWY1LTQxZmUtNGFjZC1iY2EyLTM3NjgzOTIxMDY5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6mBAMA0GCSqGSIb3DQEBCwUAA4IBAQCcNPArZps441EPtgbg 5hJ6RDBHUSJosRMpBvuvMQPxw2Dl6xnB16PGOu7meXDy0XbrZ2/JAI+nkZzIpDZs lBxqwDx7r83MQC6HvAxwRdmc4q8zpPu4VpMk9Zg2D3GIH9eJCGNGppb3hRQurQZl Odzqp5Q+B1ZrZuSUncdUuBLoRpKp7vEzaiIvF/1n3sZDZctAzFsUjqVekwq2GQk+ 5F86n+Ol3nGIt2Xj5JCyy8UcqFdt7cWgbse233SKsyJhTNcJQRWWw3SVNJ4CZIYh +rpl1lATIzpjMLF2/CoUQMkirnnCUDqjGux8M7oIZ/9xFhrxH9LIZ6cm22JONZHn y6bj -----END CERTIFICATE-----Generated at Fri Jul 24 01:14:39 2026 by rpki-client