$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa File: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (raw, json) Hash identifier: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4= Subject key identifier: 23:65:83:49:15:2B:F1:F2:01:09:14:79:3E:D5:B5:D8:66:44:C6:B8 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 115B5B1F9DDB34C90115D7160C347B01A51B83D9 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa Signing time: Thu 16 Jul 2026 00:00:35 +0000 ROA not before: Thu 16 Jul 2026 00:00:35 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5b:5b:1f:9d:db:34:c9:01:15:d7:16:0c:34:7b:01:a5:1b:83:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 16 00:00:35 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=d01829aab65ba521ea2ee188621861eac580c0886798def79daeb53e97de3d52, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:75:6a:f8:40:50:8d:1e:6a:ad:59:b4:5a:5e: d7:b7:fe:7e:3e:ce:6b:a7:14:1b:a7:2e:63:ed:12: 16:90:6c:8a:77:87:ae:86:68:ad:45:96:b3:78:42: 6e:12:f4:0b:51:dc:65:74:0d:33:9b:ac:0e:e2:19: a7:25:98:f1:50:a0:e6:96:fe:2a:24:eb:06:49:ed: 7e:13:9b:1f:27:97:cb:bd:d0:cd:f6:0f:4e:fd:51: f0:7e:21:5d:1d:04:e3:df:25:c9:cf:85:bb:ed:fe: 50:2e:0d:f3:18:58:d5:c7:d7:e7:50:02:50:69:4a: 33:ef:4f:69:ab:88:f1:c1:e1:64:96:ff:62:ea:55: b8:a0:17:a5:66:8a:6c:e4:91:a6:ab:96:86:d7:d3: 2d:cf:47:5e:01:20:3b:63:2f:ff:9a:05:41:d4:38: c2:49:a2:2a:b0:70:06:e7:cd:8d:b6:6f:98:e6:48: 94:89:b7:db:b8:9b:94:ca:e6:44:c4:04:a1:a5:05: 86:6e:7d:7f:a2:35:d5:42:9f:dc:f1:30:97:d5:38: 37:2f:a6:4c:f8:c1:61:46:d7:f9:01:67:ee:be:56: 54:fa:a2:f7:f0:46:a1:be:73:a4:74:7a:3b:aa:27: ab:9c:8c:41:ec:e1:9f:da:bd:20:26:93:89:8e:67: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:65:83:49:15:2B:F1:F2:01:09:14:79:3E:D5:B5:D8:66:44:C6:B8 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300::/32 Signature Algorithm: sha256WithRSAEncryption 30:f2:1e:b3:df:c2:e9:3f:5c:da:b5:d8:20:6f:80:6a:ce:71: 37:51:ec:75:fa:f1:39:de:ea:87:9d:16:08:b9:40:b8:5d:3f: 1b:fa:3c:cc:65:2d:0f:44:3a:37:4f:b2:f5:19:45:e5:5b:c2: b5:8f:52:e8:11:ab:a8:c8:b5:34:bd:8e:7c:cc:c1:d8:c0:0a: 55:10:73:a6:c3:00:a8:d2:e6:89:7c:af:6b:26:a7:43:2b:98: 36:9e:1b:00:1c:93:66:a9:e1:6f:74:dc:f1:13:27:25:bb:ef: 2f:71:31:24:21:82:68:e9:90:23:ea:24:be:aa:07:e4:ad:bc: 8d:ef:24:a8:10:ac:bb:2c:fd:0e:2f:cc:80:40:21:6d:e4:da: 56:43:96:a4:6c:37:34:66:1c:55:e4:c2:6b:5e:cc:d9:d7:7b: 0c:b3:dd:f2:df:2c:cb:7b:14:04:cc:36:7a:c9:e0:d1:3c:8d: 57:14:81:07:e6:aa:9b:c0:59:29:b9:a1:2f:e3:33:13:e4:db: 7f:e1:58:81:47:0a:a9:53:19:4f:99:ba:33:8f:25:01:ca:f9: 6e:29:e2:cd:75:c3:1b:c4:73:55:b0:62:ca:8a:9b:c0:69:a6: 6e:98:ac:9e:16:49:1d:ce:26:8f:6b:7a:da:a9:ff:3c:cf:24: b2:98:de:b2 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUEVtbH53bNMkBFdcWDDR7AaUbg9kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDcxNjAwMDAzNVoX DTI2MTAxNDIzNTk1OVowejFJMEcGA1UEBRNAZDAxODI5YWFiNjViYTUyMWVhMmVl MTg4NjIxODYxZWFjNTgwYzA4ODY3OThkZWY3OWRhZWI1M2U5N2RlM2Q1MjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Vq+EBQjR5qrVm0Wl7Xt/5+Ps5r pxQbpy5j7RIWkGyKd4euhmitRZazeEJuEvQLUdxldA0zm6wO4hmnJZjxUKDmlv4q JOsGSe1+E5sfJ5fLvdDN9g9O/VHwfiFdHQTj3yXJz4W77f5QLg3zGFjVx9fnUAJQ aUoz709pq4jxweFklv9i6lW4oBelZops5JGmq5aG19Mtz0deASA7Yy//mgVB1DjC SaIqsHAG582Ntm+Y5kiUibfbuJuUyuZExAShpQWGbn1/ojXVQp/c8TCX1Tg3L6ZM +MFhRtf5AWfuvlZU+qL38EahvnOkdHo7qiernIxB7OGf2r0gJpOJjmfjGQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFCNlg0kVK/HyAQkUeT7VtdhmRMa4MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi L2NjMmY3MDkzLTIxYTYtNDAwZi05ZGIxLTkzYzJmZTAyYmMxYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAOzADANBgkqhkiG9w0BAQsFAAOCAQEAMPIes9/C6T9c2rXYIG+A as5xN1HsdfrxOd7qh50WCLlAuF0/G/o8zGUtD0Q6N0+y9RlF5VvCtY9S6BGrqMi1 NL2OfMzB2MAKVRBzpsMAqNLmiXyvayanQyuYNp4bAByTZqnhb3Tc8RMnJbvvL3Ex JCGCaOmQI+okvqoH5K28je8kqBCsuyz9Di/MgEAhbeTaVkOWpGw3NGYcVeTCa17M 2dd7DLPd8t8sy3sUBMw2esng0TyNVxSBB+aqm8BZKbmhL+MzE+Tbf+FYgUcKqVMZ T5m6M48lAcr5binizXXDG8RzVbBiyoqbwGmmbpisnhZJHc4mj2t62qn/PM8kspje sg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:02:12 2026 by rpki-client