$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42fd5a96-21e9-4ef8-b27f-5a7f996b84d2.roa File: 42fd5a96-21e9-4ef8-b27f-5a7f996b84d2.roa (raw, json) Hash identifier: aMvPcdZI9ZE4qoygnKRXlOrlMSjZw6FcI3qT7I9ard0= Subject key identifier: 97:0B:7D:5F:80:77:0A:D6:B6:F8:C3:5F:72:4B:1D:75:FA:2A:34:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 67CA7BFD6247EB13909515F66A6234F27450FA8E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42fd5a96-21e9-4ef8-b27f-5a7f996b84d2.roa Signing time: Tue 28 Jul 2026 00:00:52 +0000 ROA not before: Tue 28 Jul 2026 00:00:52 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ca:7b:fd:62:47:eb:13:90:95:15:f6:6a:62:34:f2:74:50:fa:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 00:00:52 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=2a44b263d4a88bbe2e746f5d0d76b804fd73133031570b8fedb2565f3ffafe6d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fd:9e:6a:be:a6:99:59:58:bc:42:12:a0:9f: 25:8b:70:47:fc:b8:d4:c0:d5:3a:b5:49:56:53:27: c8:88:7c:0a:b9:e4:2c:e8:bc:a8:3e:3f:4a:d9:f5: 9e:cb:31:43:8d:f8:ea:78:5a:19:6c:98:8e:c7:03: 60:0e:91:b7:96:ca:6c:3b:bd:30:8f:9a:73:b3:19: 46:2f:21:94:e6:85:f9:c3:5e:b9:b6:69:0e:a7:ab: cf:06:7d:68:be:70:58:b1:66:2c:b4:25:e8:52:76: c7:cc:0d:dd:17:e1:3a:80:be:ef:e9:22:f2:8b:8c: c9:bb:01:63:4b:b4:1c:2e:a4:f2:c7:9a:1c:f8:40: db:56:f4:fc:72:10:8c:74:c7:48:c7:5d:c2:90:9f: eb:5b:3a:20:79:ff:01:f7:1f:0b:a7:6a:7b:56:dc: ff:5f:e3:f9:5d:25:27:54:8f:b1:c3:94:0e:ef:26: 11:cb:fa:1e:e9:95:9e:f4:f2:2d:72:d7:84:12:93: 95:57:88:8c:eb:a1:a5:2f:9c:9e:44:cc:2f:1f:ac: f1:34:f9:80:91:0a:93:62:c6:6d:67:66:19:7b:13: e0:98:0f:52:e5:b9:ff:90:1a:1d:d0:93:1a:78:3c: 8c:78:c6:3e:c4:0d:c1:8e:03:7b:66:20:b5:ed:a0: 90:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0B:7D:5F:80:77:0A:D6:B6:F8:C3:5F:72:4B:1D:75:FA:2A:34:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42fd5a96-21e9-4ef8-b27f-5a7f996b84d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption 97:ec:a9:76:cc:6d:36:15:38:f6:96:83:0c:48:db:6d:6e:f6: 61:dd:d5:05:c2:fa:4b:68:af:f0:6c:67:b2:84:cd:c6:52:67: 7e:d2:06:f0:9c:5e:9a:49:3f:bd:bf:26:fe:5f:8a:49:6c:6c: a4:9d:52:05:6e:6a:b3:12:f6:75:8f:db:bd:c7:c4:9d:88:ee: 54:a5:a3:e6:5b:fe:9e:4a:58:05:95:80:b5:d7:32:e3:b5:33: f2:68:ee:82:64:f3:0c:ce:0d:02:4b:ae:b1:6f:09:04:f2:a2: 9f:2c:1b:0d:bf:e6:b9:1f:70:08:22:fb:95:1a:f8:2d:60:e8: 2e:61:c2:b5:cf:a5:c8:ea:fc:ad:47:11:21:9e:2e:96:49:30: 30:bf:0e:64:f6:1c:42:05:07:fa:67:be:61:3b:15:4b:e6:ca: 8f:2c:b3:0e:44:2b:df:03:d4:01:9d:2e:6b:21:d0:56:f8:54: c5:4e:14:64:c8:1a:46:ef:bc:f1:3b:5a:f4:fe:bb:63:3a:f1: 84:0b:69:e3:72:d8:7e:16:be:fb:84:c6:ae:98:8e:99:19:d6: 06:ee:a9:6d:bb:3e:aa:51:71:db:6c:9f:a3:0e:fb:6f:72:a3: b7:a6:7b:a7:1f:3f:b7:8d:73:c2:72:29:48:df:82:f2:a3:87: 8b:72:33:d2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZ8p7/WJH6xOQlRX2amI08nRQ+o4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyODAwMDA1MloX DTI2MTAyNjIzNTk1OVowejFJMEcGA1UEBRNAMmE0NGIyNjNkNGE4OGJiZTJlNzQ2 ZjVkMGQ3NmI4MDRmZDczMTMzMDMxNTcwYjhmZWRiMjU2NWYzZmZhZmU2ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv2ear6mmVlYvEISoJ8li3BH/LjU wNU6tUlWUyfIiHwKueQs6LyoPj9K2fWeyzFDjfjqeFoZbJiOxwNgDpG3lspsO70w j5pzsxlGLyGU5oX5w165tmkOp6vPBn1ovnBYsWYstCXoUnbHzA3dF+E6gL7v6SLy i4zJuwFjS7QcLqTyx5oc+EDbVvT8chCMdMdIx13CkJ/rWzogef8B9x8Lp2p7Vtz/ X+P5XSUnVI+xw5QO7yYRy/oe6ZWe9PItcteEEpOVV4iM66GlL5yeRMwvH6zxNPmA kQqTYsZtZ2YZexPgmA9S5bn/kBod0JMaeDyMeMY+xA3BjgN7ZiC17aCQ/wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJcLfV+AdwrWtvjDX3JLHXX6KjQfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQyZmQ1YTk2LTIxZTktNGVmOC1iMjdmLTVhN2Y5OTZiODRkMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8uDAMA0GCSqGSIb3DQEBCwUAA4IBAQCX7Kl2zG02FTj2loMM SNttbvZh3dUFwvpLaK/wbGeyhM3GUmd+0gbwnF6aST+9vyb+X4pJbGyknVIFbmqz EvZ1j9u9x8SdiO5UpaPmW/6eSlgFlYC11zLjtTPyaO6CZPMMzg0CS66xbwkE8qKf LBsNv+a5H3AIIvuVGvgtYOguYcK1z6XI6vytRxEhni6WSTAwvw5k9hxCBQf6Z75h OxVL5sqPLLMORCvfA9QBnS5rIdBW+FTFThRkyBpG77zxO1r0/rtjOvGEC2njcth+ Fr77hMaumI6ZGdYG7qltuz6qUXHbbJ+jDvtvcqO3pnunHz+3jXPCcilI34Lyo4eL cjPS -----END CERTIFICATE-----Generated at Tue Jul 28 22:41:53 2026 by rpki-client