$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19c2d4e6-f756-4329-8ef7-563420636cfb.roa File: 19c2d4e6-f756-4329-8ef7-563420636cfb.roa (raw, json) Hash identifier: gF0t7UaNCSC8gcFEydy8yR66OXDLnMtqjgUjAzhURiw= Subject key identifier: CE:FC:0F:48:80:01:47:B2:76:DF:A5:D1:2E:76:BE:5E:70:4F:10:D5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5A48767CDB27A46BB897147BA8992CB37DEFA35C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19c2d4e6-f756-4329-8ef7-563420636cfb.roa Signing time: Mon 27 Jul 2026 00:00:43 +0000 ROA not before: Mon 27 Jul 2026 00:00:43 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:48:76:7c:db:27:a4:6b:b8:97:14:7b:a8:99:2c:b3:7d:ef:a3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 27 00:00:43 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=bd20777ad8328d5115b263e5d9c7ef640cac2a2af685b21592c0d5513e3e425f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:34:7d:38:c5:28:63:71:8d:2d:f1:69:4a: 53:d2:ac:58:8d:70:4b:aa:27:80:58:fd:a8:8c:88: f2:a7:b9:ef:92:8e:92:30:f6:e4:de:e1:b2:03:f9: 48:6b:aa:49:95:ac:c7:da:32:be:d2:f9:61:d4:76: bf:7c:0c:51:03:7f:a5:a2:18:57:f3:ce:e2:9e:0e: ba:f4:a9:b4:ef:96:8f:6f:89:fd:30:ed:75:a2:6b: b0:5f:2b:60:3d:2a:fa:50:da:13:a2:b6:99:1c:12: 5d:b3:20:a0:fb:3e:90:ab:e2:f1:93:75:9d:b5:bd: ae:11:b1:f7:5a:14:ef:a2:9d:6d:a9:df:0c:12:f1: d6:9c:0a:6a:ac:64:2e:d2:83:b5:4c:2f:0f:2c:42: 36:da:c3:36:50:14:88:f2:5c:93:7b:95:a1:c5:57: e4:75:2b:63:fe:18:f9:3d:9f:13:34:e9:66:8e:9f: fb:64:96:0e:3b:63:d2:24:da:cf:2d:cb:37:f6:9a: 96:a7:3c:87:62:b8:7d:eb:5a:6c:01:d4:c8:57:21: c8:d9:e2:85:5d:22:88:e3:07:46:b4:da:0f:b3:7c: 11:94:48:39:fc:0e:04:c9:ac:2b:1b:26:ae:ae:81: 17:4a:1a:06:89:5c:ee:0a:e4:21:e1:1b:db:e9:a6: ab:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FC:0F:48:80:01:47:B2:76:DF:A5:D1:2E:76:BE:5E:70:4F:10:D5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19c2d4e6-f756-4329-8ef7-563420636cfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:4000::/48 Signature Algorithm: sha256WithRSAEncryption 76:ff:8b:07:d1:e1:45:32:27:6e:49:72:95:62:ed:b6:45:90: 10:9b:c3:48:2c:28:b4:6c:01:2a:50:fb:a3:1d:e4:29:13:03: 2b:eb:eb:78:b3:75:01:a7:74:0e:ed:47:17:df:7f:85:77:5b: ce:c9:f6:d8:0c:96:c5:14:3b:4b:45:1e:eb:f3:7a:52:53:c1: 63:2f:6d:bb:bc:5c:61:1e:4c:3a:c1:dc:19:13:51:ed:7e:f6: d4:21:1d:39:07:34:57:b3:57:e5:69:76:00:a8:b2:f0:46:1a: 4e:34:50:16:f2:02:d7:5c:e3:28:ef:20:1c:2c:32:00:d1:eb: 9c:7b:56:f2:b2:2c:83:25:3a:61:75:05:a2:8b:73:dd:c2:1a: 2e:64:c4:2b:ec:17:ba:81:9a:46:df:fd:26:3b:8b:bc:d4:12: 40:d1:cc:71:fc:35:ff:24:60:79:4d:23:46:e6:7a:25:f5:26: a9:72:cd:cf:f4:60:16:9b:2c:5f:80:3d:2f:5f:9b:73:a9:73: ef:e4:e5:49:d8:1e:4b:29:3b:e7:85:28:95:2f:cd:8d:0b:09: a5:2c:c7:1c:41:a1:4e:03:17:02:e1:3f:6e:c9:51:8e:a5:bc: 19:ef:41:2e:03:46:a0:79:9d:c9:b4:42:86:00:8e:3e:92:91: e0:e0:0f:56 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWkh2fNsnpGu4lxR7qJkss33vo1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNzAwMDA0M1oX DTI2MTAyNTIzNTk1OVowejFJMEcGA1UEBRNAYmQyMDc3N2FkODMyOGQ1MTE1YjI2 M2U1ZDljN2VmNjQwY2FjMmEyYWY2ODViMjE1OTJjMGQ1NTEzZTNlNDI1ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0M0fTjFKGNxjS3xaUpT0qxYjXBL qieAWP2ojIjyp7nvko6SMPbk3uGyA/lIa6pJlazH2jK+0vlh1Ha/fAxRA3+lohhX 887ing669Km075aPb4n9MO11omuwXytgPSr6UNoToraZHBJdsyCg+z6Qq+Lxk3Wd tb2uEbH3WhTvop1tqd8MEvHWnApqrGQu0oO1TC8PLEI22sM2UBSI8lyTe5WhxVfk dStj/hj5PZ8TNOlmjp/7ZJYOO2PSJNrPLcs39pqWpzyHYrh961psAdTIVyHI2eKF XSKI4wdGtNoPs3wRlEg5/A4EyawrGyauroEXShoGiVzuCuQh4Rvb6aarEQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFM78D0iAAUeydt+l0S52vl5wTxDVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE5YzJkNGU2LWY3NTYtNDMyOS04ZWY3LTU2MzQyMDYzNmNmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9kAAMA0GCSqGSIb3DQEBCwUAA4IBAQB2/4sH0eFFMiduSXKV Yu22RZAQm8NILCi0bAEqUPujHeQpEwMr6+t4s3UBp3QO7UcX33+Fd1vOyfbYDJbF FDtLRR7r83pSU8FjL227vFxhHkw6wdwZE1HtfvbUIR05BzRXs1flaXYAqLLwRhpO NFAW8gLXXOMo7yAcLDIA0euce1bysiyDJTphdQWii3PdwhouZMQr7Be6gZpG3/0m O4u81BJA0cxx/DX/JGB5TSNG5nol9Sapcs3P9GAWmyxfgD0vX5tzqXPv5OVJ2B5L KTvnhSiVL82NCwmlLMccQaFOAxcC4T9uyVGOpbwZ70EuA0ageZ3JtEKGAI4+kpHg 4A9W -----END CERTIFICATE-----Generated at Tue Jul 28 22:45:13 2026 by rpki-client