$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa File: 4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa (raw, json) Hash identifier: kivX/BxlWRChzZ1ETt3T1pLlst9t7YbUmhmnRcBbwJc= Subject key identifier: E6:6E:1F:5E:91:55:23:A1:8D:0B:E1:40:51:E2:BF:5B:78:9C:F8:C8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 445A5E91887E59EB58B5021F99CC5389E6942941 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa Signing time: Tue 28 Jul 2026 00:00:12 +0000 ROA not before: Tue 28 Jul 2026 00:00:12 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:5a:5e:91:88:7e:59:eb:58:b5:02:1f:99:cc:53:89:e6:94:29:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 00:00:12 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=9792c7fc18b85f01cde917fe130f22bc0ff0d8684cb5152b764abc7507a247ac, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:fe:92:7b:aa:d0:14:6c:1a:fe:35:3c:90: 35:04:fa:6b:9c:32:0c:86:12:da:0e:ad:de:cf:77: e5:d7:fd:08:d8:54:f5:49:55:61:f7:db:1e:bb:ac: a9:5a:57:fc:f6:f6:b8:e8:4c:76:43:ce:41:ec:2f: f0:28:9d:87:61:c3:34:58:f8:1f:2c:42:ea:a9:fe: 88:40:f6:9e:05:53:a3:15:41:e1:6a:48:bc:40:8e: 28:fd:55:54:0c:f3:d4:0b:30:8c:d4:b2:8b:d4:39: 40:9c:00:f3:ac:e4:52:0a:78:a7:50:e9:d2:24:41: 5d:de:96:08:a0:a0:02:eb:7d:3b:07:bf:d7:9d:1d: ff:52:d3:ed:05:2d:4a:85:69:32:39:46:65:5b:06: 2b:e8:9c:1c:9a:3e:df:a0:12:7b:0f:84:97:7b:87: db:f7:8e:3a:47:30:18:42:d1:23:8c:df:af:d5:fd: c7:88:93:ee:ee:c8:c0:f6:cd:5d:ee:07:d6:d2:ab: d8:c5:2f:e1:3e:f9:7b:04:32:ee:64:ef:89:67:11: 39:57:81:34:b4:28:51:b4:de:f1:8f:61:9f:0c:8a: 26:9f:e7:75:a0:1b:e7:12:88:1d:a0:47:83:ff:39: 9e:b1:00:2d:3d:7c:61:86:0e:3a:5c:76:19:c0:75: cf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6E:1F:5E:91:55:23:A1:8D:0B:E1:40:51:E2:BF:5B:78:9C:F8:C8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:80a0::/48 Signature Algorithm: sha256WithRSAEncryption 05:5e:9a:04:40:af:82:42:0d:57:7c:ff:6e:f9:f9:1c:7d:4f: a3:38:b4:43:8e:29:cd:d6:4a:0c:76:97:fb:24:99:d2:3f:3f: c6:ca:8f:a5:dd:e4:9f:4e:05:0d:90:d2:7c:e0:71:a6:c1:ce: 3f:da:ff:79:4d:e6:82:1a:44:46:6c:40:2d:08:c6:4f:fe:38: b4:3b:37:78:f6:95:77:2b:5c:e8:ee:c4:3f:82:95:a2:d0:07: 7c:cb:74:ea:58:19:bb:8c:09:ca:cd:01:7b:d7:3f:09:55:86: 07:b4:52:e6:20:d6:2c:b3:0a:1f:4d:e4:0a:99:af:4c:ec:bd: a4:fe:10:f4:41:ba:b8:9f:38:cf:8c:d4:7e:72:a7:0d:f8:36: 37:11:5e:ca:46:7b:11:39:99:3e:bd:8b:3d:5d:e7:71:a7:9a: 33:31:2f:bd:b7:be:e4:18:f6:78:85:c9:f7:ae:b8:d7:70:32: 56:e7:57:a2:cf:69:b8:23:ca:68:8b:b9:be:99:d4:c5:f5:28: e8:54:48:df:94:12:60:ed:b8:a4:83:0a:86:9b:dd:c7:9b:56: da:a3:f4:03:bc:be:7b:16:aa:04:78:c0:fc:81:6a:96:78:bc: 6b:e6:6e:9b:13:29:23:88:35:a2:25:6c:95:c4:45:f2:ce:5c: 9d:e9:96:b9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURFpekYh+WetYtQIfmcxTieaUKUEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyODAwMDAxMloX DTI2MTAyNjIzNTk1OVowejFJMEcGA1UEBRNAOTc5MmM3ZmMxOGI4NWYwMWNkZTkx N2ZlMTMwZjIyYmMwZmYwZDg2ODRjYjUxNTJiNzY0YWJjNzUwN2EyNDdhYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvz+knuq0BRsGv41PJA1BPprnDIM hhLaDq3ez3fl1/0I2FT1SVVh99seu6ypWlf89va46Ex2Q85B7C/wKJ2HYcM0WPgf LELqqf6IQPaeBVOjFUHhaki8QI4o/VVUDPPUCzCM1LKL1DlAnADzrORSCninUOnS JEFd3pYIoKAC6307B7/XnR3/UtPtBS1KhWkyOUZlWwYr6Jwcmj7foBJ7D4SXe4fb 9446RzAYQtEjjN+v1f3HiJPu7sjA9s1d7gfW0qvYxS/hPvl7BDLuZO+JZxE5V4E0 tChRtN7xj2GfDIomn+d1oBvnEogdoEeD/zmesQAtPXxhhg46XHYZwHXPKQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOZuH16RVSOhjQvhQFHiv1t4nPjIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiOTVlM2I0LTMwNDktNGVhMC1hMzljLTc1MjJjYzBiZWEwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAICgMA0GCSqGSIb3DQEBCwUAA4IBAQAFXpoEQK+CQg1XfP9u +fkcfU+jOLRDjinN1koMdpf7JJnSPz/Gyo+l3eSfTgUNkNJ84HGmwc4/2v95TeaC GkRGbEAtCMZP/ji0Ozd49pV3K1zo7sQ/gpWi0Ad8y3TqWBm7jAnKzQF71z8JVYYH tFLmINYsswofTeQKma9M7L2k/hD0Qbq4nzjPjNR+cqcN+DY3EV7KRnsROZk+vYs9 Xedxp5ozMS+9t77kGPZ4hcn3rrjXcDJW51eiz2m4I8poi7m+mdTF9SjoVEjflBJg 7bikgwqGm93Hm1bao/QDvL57FqoEeMD8gWqWeLxr5m6bEykjiDWiJWyVxEXyzlyd 6Za5 -----END CERTIFICATE-----Generated at Tue Jul 28 22:42:47 2026 by rpki-client