$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d6fe0f1-724c-4c3e-89cd-47a1c9a0efcf.roa File: 7d6fe0f1-724c-4c3e-89cd-47a1c9a0efcf.roa (raw, json) Hash identifier: NObUPKCRxcMN5ToDWEQXL+KW0fByyypj1698Hn3MdEQ= Subject key identifier: 28:7C:8F:70:10:AF:9C:BD:48:0E:15:F2:B3:0B:51:A9:60:18:F4:6F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 21A8CE34A2E572EA2DA96E02D4A0C16E1D1366E4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d6fe0f1-724c-4c3e-89cd-47a1c9a0efcf.roa Signing time: Mon 27 Jul 2026 00:00:42 +0000 ROA not before: Mon 27 Jul 2026 00:00:42 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a8:ce:34:a2:e5:72:ea:2d:a9:6e:02:d4:a0:c1:6e:1d:13:66:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 27 00:00:42 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=2d92e51635f22dc6d8544f26a01581c70d37df0a93e123bb58ed31e173baf681, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:44:ee:0d:02:68:1b:a3:b9:13:35:5c:37: f3:81:ec:a0:d7:42:5b:0a:fd:b5:e6:01:31:0e:b4: 08:10:01:94:0b:1f:5b:8c:fd:f8:8a:ec:46:b1:fc: 0a:ee:cf:7c:2d:b9:41:e7:d4:22:aa:7f:86:de:b7: 7a:3d:28:fd:27:29:7b:11:cb:4e:b8:ee:a5:93:bb: b1:39:c9:2d:91:08:0d:2d:40:b9:46:79:7c:19:4f: 14:7e:f9:72:47:be:30:9e:ce:c0:47:77:7a:19:03: f6:d2:18:03:a6:df:5a:1b:72:bb:f7:37:96:7e:85: ba:84:be:5e:97:fa:e8:a3:6b:b9:2d:b9:5a:4a:1f: 4a:14:74:41:4c:70:03:16:5a:ce:de:6c:00:ed:5b: 0c:50:db:49:39:38:20:fe:18:3f:d0:e3:bd:5d:d2: fd:8a:dd:e2:21:7b:9a:ca:79:db:42:68:b2:d9:7f: ca:6c:08:26:a1:e7:09:8c:9f:b6:99:1f:4e:f7:db: 07:ad:9c:37:74:c3:25:46:c8:77:ed:62:fe:7d:ea: 2a:91:ac:c6:97:79:b7:f5:e8:2a:f2:b8:85:fb:8d: 46:e3:c4:20:ef:9c:e1:82:d4:b0:4c:1b:ce:af:82: 2d:4d:cb:6f:f7:c2:b6:4f:8b:18:21:ed:de:e9:64: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7C:8F:70:10:AF:9C:BD:48:0E:15:F2:B3:0B:51:A9:60:18:F4:6F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d6fe0f1-724c-4c3e-89cd-47a1c9a0efcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:6000::/48 Signature Algorithm: sha256WithRSAEncryption 73:91:24:70:77:4e:a3:93:7e:c1:bc:dd:46:01:4c:e8:a6:9a: 9f:5a:b4:c9:60:cb:98:fb:07:6b:94:f2:76:bb:8b:ac:7d:7a: 00:72:2b:27:60:94:20:88:d7:a6:11:ec:5c:9d:99:89:44:ac: c0:7e:0a:7b:2b:76:52:75:a1:f4:16:10:8f:7e:3c:90:68:2d: 48:3f:3a:2a:bc:7b:65:6c:b8:94:17:33:ad:ed:47:28:f4:78: 66:7c:bc:7f:87:12:f2:6b:94:2b:d4:40:15:1d:cb:48:be:5f: 70:83:57:a8:44:a5:18:95:e6:8d:e3:30:64:99:27:d4:5d:e1: 7c:19:f8:cb:e5:17:c9:0e:c8:3e:48:5f:de:08:8a:8e:10:4e: 2f:cc:f1:55:40:04:73:98:17:61:50:42:af:5f:e1:9e:e1:77: 07:c2:1f:33:e1:7c:60:c3:15:bd:e2:d6:73:40:f4:0e:d6:b3: 4e:83:ba:3c:2c:b4:a2:87:32:3e:0e:b4:dc:b6:8b:99:1c:56: 36:6c:e4:8f:de:3f:96:58:a8:7c:62:c4:97:a4:ac:0c:3a:5a: eb:a3:be:4d:60:4c:48:d5:29:2e:c5:13:cf:a2:b1:50:05:90: 2b:5f:ed:f2:41:6d:ea:3c:c4:55:54:58:6a:91:96:bf:29:d2: 03:53:ff:72 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIajONKLlcuotqW4C1KDBbh0TZuQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNzAwMDA0MloX DTI2MTAyNTIzNTk1OVowejFJMEcGA1UEBRNAMmQ5MmU1MTYzNWYyMmRjNmQ4NTQ0 ZjI2YTAxNTgxYzcwZDM3ZGYwYTkzZTEyM2JiNThlZDMxZTE3M2JhZjY4MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g1E7g0CaBujuRM1XDfzgeyg10Jb Cv215gExDrQIEAGUCx9bjP34iuxGsfwK7s98LblB59Qiqn+G3rd6PSj9Jyl7EctO uO6lk7uxOcktkQgNLUC5Rnl8GU8UfvlyR74wns7AR3d6GQP20hgDpt9aG3K79zeW foW6hL5el/roo2u5LblaSh9KFHRBTHADFlrO3mwA7VsMUNtJOTgg/hg/0OO9XdL9 it3iIXuaynnbQmiy2X/KbAgmoecJjJ+2mR9O99sHrZw3dMMlRsh37WL+feoqkazG l3m39egq8riF+41G48Qg75zhgtSwTBvOr4ItTctv98K2T4sYIe3e6WTfCwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCh8j3AQr5y9SA4V8rMLUalgGPRvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdkNmZlMGYxLTcyNGMtNGMzZS04OWNkLTQ3YTFjOWEwZWZjZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9mAAMA0GCSqGSIb3DQEBCwUAA4IBAQBzkSRwd06jk37BvN1G AUzoppqfWrTJYMuY+wdrlPJ2u4usfXoAcisnYJQgiNemEexcnZmJRKzAfgp7K3ZS daH0FhCPfjyQaC1IPzoqvHtlbLiUFzOt7Uco9HhmfLx/hxLya5Qr1EAVHctIvl9w g1eoRKUYleaN4zBkmSfUXeF8GfjL5RfJDsg+SF/eCIqOEE4vzPFVQARzmBdhUEKv X+Ge4XcHwh8z4XxgwxW94tZzQPQO1rNOg7o8LLSihzI+DrTctouZHFY2bOSP3j+W WKh8YsSXpKwMOlrro75NYExI1SkuxRPPorFQBZArX+3yQW3qPMRVVFhqkZa/KdID U/9y -----END CERTIFICATE-----Generated at Wed Jul 29 00:01:09 2026 by rpki-client