$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa File: 1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa (raw, json) Hash identifier: s8sYsY5OTvp5RyToViYgjIE0RRKWrvYJMUaBXa+xysc= Subject key identifier: E6:82:86:8B:0C:CE:AE:00:68:3D:22:AD:E9:D7:D9:2A:C6:36:93:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1CB24975CB772408E2EDE835BC542BA523697F61 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa Signing time: Tue 28 Jul 2026 00:01:10 +0000 ROA not before: Tue 28 Jul 2026 00:01:10 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 00:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b2:49:75:cb:77:24:08:e2:ed:e8:35:bc:54:2b:a5:23:69:7f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 00:01:10 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=8f02d72a923e3cd4573cc30770825290d8b2edff649b72da01cf7edf6ca1998a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:de:d2:bf:a3:05:43:4a:69:77:68:5c:3a:92: 2a:43:f2:77:c3:30:e0:fd:0e:b0:23:e0:b1:2d:f5: ab:13:49:04:eb:16:b8:65:b4:2a:5b:80:b7:69:bc: ed:4a:f7:db:47:b7:04:bc:bd:ce:78:09:37:ac:52: 97:e7:97:04:e6:e4:24:dd:d1:ca:08:ea:59:c1:35: 2e:e7:ac:97:62:a6:fe:a2:d8:35:46:94:6d:dd:26: dc:a0:3c:2f:e1:5f:18:97:b1:1c:4e:21:87:90:7d: 8c:10:dc:f1:89:79:cf:66:7e:26:86:60:ff:97:6d: 83:03:da:c9:25:2d:86:22:43:59:04:fd:99:99:d2: 97:a6:6f:bd:86:b0:ea:2d:90:85:e3:4c:6d:47:be: 7f:65:cf:61:a7:c0:fa:24:af:bb:ce:9d:e4:46:d1: 94:0a:f2:c9:55:c7:a7:4f:4f:cc:c2:e7:ad:41:fe: 53:ad:9c:ca:45:78:b2:f3:64:11:36:16:fb:f9:33: b0:df:f4:68:68:8e:94:90:bc:1b:f9:72:c2:4d:96: 0b:19:61:97:ee:41:88:ce:4f:b5:7e:aa:e8:3a:2e: f4:2b:bb:03:8a:32:91:38:a5:59:3e:19:2f:a3:4c: 3c:45:5e:96:de:07:6e:c2:e6:75:b3:89:1c:da:c7: 9c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:82:86:8B:0C:CE:AE:00:68:3D:22:AD:E9:D7:D9:2A:C6:36:93:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f040::/48 Signature Algorithm: sha256WithRSAEncryption 4b:56:a1:28:8e:df:2a:ce:01:8e:d7:5d:c2:6d:b3:f4:1c:3d: 00:e1:5c:2b:2b:c1:77:1a:1d:bf:18:b1:c3:f4:e2:42:19:b7: c4:57:9b:35:10:60:b1:a9:1e:5a:dd:12:4e:c9:db:bd:a3:b0: 24:f2:ce:0c:36:c6:a6:59:40:1a:3f:ec:35:1a:b2:9d:40:e7: 5b:2a:8a:6c:59:dd:47:69:3c:31:7d:d4:8d:26:b1:b3:7c:30: f1:38:e1:05:e0:88:29:9e:d7:cc:f9:4a:32:3e:97:b2:3b:d5: bb:31:48:45:6c:c8:a2:4b:6b:bb:28:ff:2a:3e:0e:cf:cc:96: 3e:ce:78:3b:64:4e:68:b3:ce:23:12:7c:31:1e:7a:9f:24:1c: c7:3c:d8:b3:5c:de:b9:9f:d9:9a:80:98:c7:3a:8e:26:89:31: f3:d7:87:86:40:b8:d0:9d:20:6a:b1:ad:5f:f6:09:2d:10:2b: d1:15:2f:80:e1:c1:6e:cd:bd:f9:60:56:80:2d:e6:af:1b:fa: 36:e3:a5:03:9e:67:09:49:af:28:e7:50:bf:ea:7c:7f:52:f0: 72:37:35:38:f7:cb:c0:7e:e4:db:f0:35:e1:91:36:ab:81:68: 92:2e:6f:c8:1c:cb:23:ae:e2:34:cb:5d:fe:21:81:b8:94:2e: dd:9b:1a:b4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHLJJdct3JAji7eg1vFQrpSNpf2EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyODAwMDExMFoX DTI2MTAyNjIzNTk1OVowejFJMEcGA1UEBRNAOGYwMmQ3MmE5MjNlM2NkNDU3M2Nj MzA3NzA4MjUyOTBkOGIyZWRmZjY0OWI3MmRhMDFjZjdlZGY2Y2ExOTk4YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA397Sv6MFQ0ppd2hcOpIqQ/J3wzDg /Q6wI+CxLfWrE0kE6xa4ZbQqW4C3abztSvfbR7cEvL3OeAk3rFKX55cE5uQk3dHK COpZwTUu56yXYqb+otg1RpRt3SbcoDwv4V8Yl7EcTiGHkH2MENzxiXnPZn4mhmD/ l22DA9rJJS2GIkNZBP2ZmdKXpm+9hrDqLZCF40xtR75/Zc9hp8D6JK+7zp3kRtGU CvLJVcenT0/MwuetQf5TrZzKRXiy82QRNhb7+TOw3/RoaI6UkLwb+XLCTZYLGWGX 7kGIzk+1fqroOi70K7sDijKROKVZPhkvo0w8RV6W3gduwuZ1s4kc2sec1QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOaChosMzq4AaD0irenX2SrGNpMfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlYWU0YzRmLTQ0NWItNGJmNS1hZTdlLTE3NTZkODdkZWExNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAPBAMA0GCSqGSIb3DQEBCwUAA4IBAQBLVqEojt8qzgGO113C bbP0HD0A4VwrK8F3Gh2/GLHD9OJCGbfEV5s1EGCxqR5a3RJOydu9o7Ak8s4MNsam WUAaP+w1GrKdQOdbKopsWd1HaTwxfdSNJrGzfDDxOOEF4IgpntfM+UoyPpeyO9W7 MUhFbMiiS2u7KP8qPg7PzJY+zng7ZE5os84jEnwxHnqfJBzHPNizXN65n9magJjH Oo4miTHz14eGQLjQnSBqsa1f9gktECvRFS+A4cFuzb35YFaALeavG/o246UDnmcJ Sa8o51C/6nx/UvByNzU498vAfuTb8DXhkTargWiSLm/IHMsjruI0y13+IYG4lC7d mxq0 -----END CERTIFICATE-----Generated at Wed Jul 29 05:29:25 2026 by rpki-client