$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a198eb49-1497-483a-ae8b-bfc84a056462.roa File: a198eb49-1497-483a-ae8b-bfc84a056462.roa (raw, json) Hash identifier: eZ4B74a7dDGdnOg1gwWO/Ez2mtYwsqiJmGUqDITS9Wg= Subject key identifier: E1:4E:16:D0:E6:4C:C6:CB:F8:C4:2C:6B:52:AB:02:98:70:6F:89:04 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2FF750B0DB19BF49B9735F9D0B5657803CDDF1F0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a198eb49-1497-483a-ae8b-bfc84a056462.roa Signing time: Sat 25 Jul 2026 00:00:09 +0000 ROA not before: Sat 25 Jul 2026 00:00:09 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f7:50:b0:db:19:bf:49:b9:73:5f:9d:0b:56:57:80:3c:dd:f1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 25 00:00:09 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=55318660ae959397a2e99d6ef26c7f5790ff2fa856a148ccddfb4ab01adfead7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:2a:80:f1:55:80:ee:ce:df:fe:ef:90:be: 8a:e7:5d:46:96:e0:d0:e3:98:d3:9d:89:a7:76:2a: 18:04:30:c3:cd:bf:57:f3:0e:d9:1c:b4:7c:86:60: 87:ec:90:55:1f:06:b9:c9:3c:97:cc:38:64:2b:d9: df:53:ad:e5:76:4c:0f:4d:a3:a9:d7:d1:7b:59:c6: 3e:7d:86:6d:72:bd:19:29:7f:c8:a4:e9:e9:87:4d: ea:35:21:e5:ce:6d:97:f0:04:5d:02:a9:de:75:37: fe:98:32:a8:c8:76:6e:1d:81:08:79:95:42:79:1c: f7:b8:71:ca:19:47:af:ea:4a:2a:1b:69:81:79:81: 86:9a:22:95:1d:d8:1d:cc:1e:07:b8:a8:b7:80:33: 6b:6a:ce:36:5b:63:11:d5:ca:14:bb:a4:4d:5e:c3: 96:38:7a:09:67:f8:bf:b6:ec:27:80:59:dc:e3:99: e9:97:b6:b6:e9:4e:0b:c8:08:fa:62:b1:89:e9:7e: da:f2:a2:20:b7:b7:4d:5c:13:37:05:81:4e:77:19: f4:56:d3:6d:2e:80:20:73:20:44:ca:17:37:4f:cc: 09:37:8a:22:57:43:6f:fa:5f:37:ef:f2:34:51:3b: cf:c8:ca:ee:2a:34:6e:33:66:69:d7:4f:1b:b5:d4: d9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4E:16:D0:E6:4C:C6:CB:F8:C4:2C:6B:52:AB:02:98:70:6F:89:04 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a198eb49-1497-483a-ae8b-bfc84a056462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:c800::/40 Signature Algorithm: sha256WithRSAEncryption bf:b3:db:3f:68:95:fb:4e:73:35:1e:39:0f:c2:ab:d2:b1:93: 74:7c:e1:62:83:84:79:30:fd:26:97:f9:23:e8:e7:42:dc:cc: 8c:9f:22:73:06:17:71:65:ba:39:cf:95:cf:2b:13:87:5b:70: 7b:a0:f3:6b:0d:33:47:7d:37:d7:8a:85:fa:5b:21:61:ba:ae: 32:08:a9:54:3a:9b:77:39:b6:8c:f1:f4:29:d7:ac:9d:33:2c: b5:c6:42:e8:d0:0e:6f:41:a8:07:2b:37:aa:33:da:38:5d:72: c1:2c:9c:8f:72:ca:ae:ae:dd:af:51:af:85:19:38:9e:0a:2f: 96:38:28:f5:81:20:de:46:ee:fe:03:42:95:82:e6:38:5f:6b: a5:6f:ae:f6:4e:cc:59:ab:41:90:81:ea:91:bb:d2:a6:f1:84: b4:a3:c6:c4:5d:23:ac:39:fc:af:a8:62:34:a7:26:7f:6c:b3: ad:e8:91:0f:be:e4:76:22:72:66:0d:97:1f:f0:23:81:91:e8: e0:c9:5f:94:15:36:71:10:e8:82:31:2b:e1:1a:b5:f4:81:cc: a7:f5:f7:6b:0a:93:97:5f:87:02:52:82:c4:d3:c3:4c:e5:9b: 59:5c:fd:d2:94:84:6d:f2:a0:ce:c3:c2:f1:bd:27:25:6d:b2: de:34:df:f8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUL/dQsNsZv0m5c1+dC1ZXgDzd8fAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNTAwMDAwOVoX DTI2MTAyMzIzNTk1OVowejFJMEcGA1UEBRNANTUzMTg2NjBhZTk1OTM5N2EyZTk5 ZDZlZjI2YzdmNTc5MGZmMmZhODU2YTE0OGNjZGRmYjRhYjAxYWRmZWFkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1kqgPFVgO7O3/7vkL6K511GluDQ 45jTnYmndioYBDDDzb9X8w7ZHLR8hmCH7JBVHwa5yTyXzDhkK9nfU63ldkwPTaOp 19F7WcY+fYZtcr0ZKX/IpOnph03qNSHlzm2X8ARdAqnedTf+mDKoyHZuHYEIeZVC eRz3uHHKGUev6koqG2mBeYGGmiKVHdgdzB4HuKi3gDNras42W2MR1coUu6RNXsOW OHoJZ/i/tuwngFnc45npl7a26U4LyAj6YrGJ6X7a8qIgt7dNXBM3BYFOdxn0VtNt LoAgcyBEyhc3T8wJN4oiV0Nv+l837/I0UTvPyMruKjRuM2Zp108btdTZLwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOFOFtDmTMbL+MQsa1KrAphwb4kEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ExOThlYjQ5LTE0OTctNDgzYS1hZThiLWJmYzg0YTA1NjQ2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYMgwDQYJKoZIhvcNAQELBQADggEBAL+z2z9olftOczUeOQ/C q9Kxk3R84WKDhHkw/SaX+SPo50LczIyfInMGF3FlujnPlc8rE4dbcHug82sNM0d9 N9eKhfpbIWG6rjIIqVQ6m3c5tozx9CnXrJ0zLLXGQujQDm9BqAcrN6oz2jhdcsEs nI9yyq6u3a9Rr4UZOJ4KL5Y4KPWBIN5G7v4DQpWC5jhfa6VvrvZOzFmrQZCB6pG7 0qbxhLSjxsRdI6w5/K+oYjSnJn9ss63okQ++5HYicmYNlx/wI4GR6ODJX5QVNnEQ 6IIxK+EatfSBzKf192sKk5dfhwJSgsTTw0zlm1lc/dKUhG3yoM7DwvG9JyVtst40 3/g= -----END CERTIFICATE-----Generated at Tue Jul 28 22:44:37 2026 by rpki-client