$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57ee342a-a57e-4da8-82e2-2f4296f4db43.roa File: 57ee342a-a57e-4da8-82e2-2f4296f4db43.roa (raw, json) Hash identifier: Yj0pDl16MArWWkBOlmdeD7u+WCrRUqPmcQSXuzwbXLI= Subject key identifier: 97:BF:0F:B9:F2:34:CE:6C:58:A7:B1:EF:6B:22:8D:D2:D7:2B:41:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2532C392EACC6DE5AE2A4B2E22F1A7B9194AEB48 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57ee342a-a57e-4da8-82e2-2f4296f4db43.roa Signing time: Fri 24 Jul 2026 00:00:38 +0000 ROA not before: Fri 24 Jul 2026 00:00:38 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2f::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:32:c3:92:ea:cc:6d:e5:ae:2a:4b:2e:22:f1:a7:b9:19:4a:eb:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 24 00:00:38 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=539b7b2712c93ec66602289f2aa0d07974d2c0833b038b0c266b618989b9dce0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:da:e1:bc:7b:14:0c:40:31:a7:98:c3:e5: 7e:8c:41:61:8c:fa:0d:a8:89:4c:25:51:28:10:8b: 5a:0e:a0:a2:8d:41:3c:a2:49:f6:04:89:36:22:ac: 96:97:8f:2c:de:bb:bf:f1:af:ab:b3:29:c4:25:fb: b6:c3:7f:af:46:2a:90:58:dc:96:f0:d3:79:de:f9: 9e:6a:2f:6d:51:c9:80:98:cc:18:d5:25:9a:cb:c0: 95:1a:6d:cb:b9:92:e8:61:49:50:a1:ca:0a:2b:a1: fa:15:3c:59:8d:f6:73:37:cb:e4:fc:fd:68:d1:87: 0d:b6:c9:e3:cc:3d:a5:31:15:f3:07:a5:c9:04:3d: 54:e8:66:77:fe:5c:2e:e3:eb:47:26:42:8f:6c:2d: 38:95:90:97:ce:79:32:25:6d:53:d4:ac:55:b4:0d: 2e:cb:26:38:2b:a3:ff:c0:d0:99:3e:f0:17:37:aa: b5:68:30:19:a8:ee:b3:57:dc:cf:e6:51:51:01:d8: 29:9c:f0:e3:97:32:f4:34:71:95:99:b3:e5:85:b3: 73:63:c9:49:17:76:8a:c1:74:f1:42:09:d2:1c:d1: 30:59:17:78:46:3a:0f:a0:63:c0:fc:0a:41:ea:15: d4:a3:0a:4c:68:2f:89:ba:35:d5:5c:7b:e9:6b:7a: aa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BF:0F:B9:F2:34:CE:6C:58:A7:B1:EF:6B:22:8D:D2:D7:2B:41:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57ee342a-a57e-4da8-82e2-2f4296f4db43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2f::/36 Signature Algorithm: sha256WithRSAEncryption 57:35:26:c7:d5:90:db:90:0b:62:d1:c4:a7:aa:e3:51:e7:b9: e8:54:2e:a2:62:2c:51:35:b6:af:70:2e:ac:9e:e4:b5:28:be: 4e:bf:06:5d:28:51:63:06:f8:e2:14:73:d1:f0:0b:c5:a2:56: a2:03:de:2f:7b:c0:4b:10:fc:bc:d4:52:22:c9:2f:39:fc:e2: 2c:da:05:9c:cd:82:0d:f9:e2:9f:56:f3:0a:1c:fb:0f:62:7f: 25:f4:d4:0f:4a:85:ca:10:5d:cc:2d:3c:10:47:59:28:fa:a6: f0:37:3d:de:bd:40:eb:6b:56:f0:74:86:5d:a2:82:3d:a7:89: 61:76:fd:48:59:a3:92:d3:ea:8b:9c:8b:55:7f:17:43:51:b1: ef:d4:68:ef:95:d3:1d:5a:a6:b1:a0:8d:5a:8d:bd:11:e5:75: 3a:e3:e4:15:63:d2:ff:d4:09:ea:d8:d3:3f:62:eb:49:25:fd: 1b:b4:c1:22:e0:64:a6:05:85:c2:7f:53:03:65:d7:9d:e0:9f: d8:0c:cd:72:6d:3b:8f:83:a2:25:6b:72:fd:49:83:93:d1:7c: ad:c2:e5:a1:c1:9d:ba:fd:73:aa:96:df:ea:36:8a:fd:a4:3f: 05:ad:03:a2:f5:31:5e:50:34:18:f1:0e:95:53:23:4e:c1:2a: 74:0d:67:19 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJTLDkurMbeWuKksuIvGnuRlK60gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNDAwMDAzOFoX DTI2MTAyMjIzNTk1OVowejFJMEcGA1UEBRNANTM5YjdiMjcxMmM5M2VjNjY2MDIy ODlmMmFhMGQwNzk3NGQyYzA4MzNiMDM4YjBjMjY2YjYxODk4OWI5ZGNlMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ7a4bx7FAxAMaeYw+V+jEFhjPoN qIlMJVEoEItaDqCijUE8okn2BIk2IqyWl48s3ru/8a+rsynEJfu2w3+vRiqQWNyW 8NN53vmeai9tUcmAmMwY1SWay8CVGm3LuZLoYUlQocoKK6H6FTxZjfZzN8vk/P1o 0YcNtsnjzD2lMRXzB6XJBD1U6GZ3/lwu4+tHJkKPbC04lZCXznkyJW1T1KxVtA0u yyY4K6P/wNCZPvAXN6q1aDAZqO6zV9zP5lFRAdgpnPDjlzL0NHGVmbPlhbNzY8lJ F3aKwXTxQgnSHNEwWRd4RjoPoGPA/ApB6hXUowpMaC+JujXVXHvpa3qqWQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJe/D7nyNM5sWKex72sijdLXK0FEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU3ZWUzNDJhLWE1N2UtNGRhOC04MmUyLTJmNDI5NmY0ZGI0My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLwAwDQYJKoZIhvcNAQELBQADggEBAFc1JsfVkNuQC2LRxKeq 41HnuehULqJiLFE1tq9wLqye5LUovk6/Bl0oUWMG+OIUc9HwC8WiVqID3i97wEsQ /LzUUiLJLzn84izaBZzNgg354p9W8woc+w9ifyX01A9KhcoQXcwtPBBHWSj6pvA3 Pd69QOtrVvB0hl2igj2niWF2/UhZo5LT6ouci1V/F0NRse/UaO+V0x1aprGgjVqN vRHldTrj5BVj0v/UCerY0z9i60kl/Ru0wSLgZKYFhcJ/UwNl153gn9gMzXJtO4+D oiVrcv1Jg5PRfK3C5aHBnbr9c6qW3+o2iv2kPwWtA6L1MV5QNBjxDpVTI07BKnQN Zxk= -----END CERTIFICATE-----Generated at Wed Jul 29 01:23:15 2026 by rpki-client