$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a565b279-b26e-4870-b5d3-ce46a4e5be10.roa File: a565b279-b26e-4870-b5d3-ce46a4e5be10.roa (raw, json) Hash identifier: m3mnAVbzqLGYdKlIAMsg0vGKK1BzNG7Nw20QSxUW9ts= Subject key identifier: 61:07:2D:80:30:1E:83:47:F0:95:54:EC:89:F1:54:6E:66:9A:E5:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5A80956D32EFF6D7B225555B4A0D224EBC3A9A91 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a565b279-b26e-4870-b5d3-ce46a4e5be10.roa Signing time: Tue 28 Jul 2026 18:03:00 +0000 ROA not before: Tue 28 Jul 2026 18:03:00 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da33:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:80:95:6d:32:ef:f6:d7:b2:25:55:5b:4a:0d:22:4e:bc:3a:9a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 18:03:00 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=98cf083cf39c3a0bb0b56c5998ba1a0c0c45ed02337e27b04c6326bd882ff0a9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:75:57:0b:67:3a:c9:94:9a:77:60:99:3e:80: e0:80:5f:dd:c5:98:31:9f:e8:cd:d1:68:89:66:f0: 67:1a:95:60:cf:67:f6:36:3d:4d:81:3c:37:d0:ed: df:6a:67:24:7f:46:1a:5f:9d:1b:93:aa:50:71:ee: 77:0a:c5:33:4c:ff:95:d4:87:46:78:8a:47:72:a1: 45:e2:87:4d:ed:2a:f4:f6:10:37:09:94:a3:b4:a2: cc:76:89:3c:26:d2:38:4a:02:45:bf:39:86:3b:da: 4e:bd:05:fa:16:7c:55:a3:48:2f:c7:9b:59:2f:c3: 35:cf:a3:2c:d0:e4:d0:16:99:d1:39:da:04:26:85: 33:7a:f2:f1:91:a9:71:78:eb:6c:72:bc:db:b8:f4: 7c:d8:7a:cb:af:c9:40:62:26:a6:77:5e:3b:11:99: 6f:3e:1c:ca:c3:ad:5d:77:41:6c:2c:ac:55:7d:c2: 79:04:e1:93:df:26:43:16:63:43:bd:74:c7:fc:a3: 81:00:72:a9:63:7f:d3:55:de:92:0c:9f:25:05:6f: de:c2:a2:49:ab:3c:69:e1:e0:d6:fd:a6:ec:53:06: 24:87:f7:62:de:3d:bc:a3:60:20:8d:c7:64:68:75: bd:a9:18:13:63:f0:85:c4:c9:5c:b4:57:d2:4c:b1: 21:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:07:2D:80:30:1E:83:47:F0:95:54:EC:89:F1:54:6E:66:9A:E5:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a565b279-b26e-4870-b5d3-ce46a4e5be10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:8000::/40 Signature Algorithm: sha256WithRSAEncryption 21:00:61:3d:06:07:93:3a:50:16:e5:58:28:6f:47:a3:81:c8: 0d:f3:e2:ec:91:d7:26:8a:1e:66:90:48:99:fb:75:03:0a:8f: 5c:6e:00:ec:30:d4:14:5d:e0:4b:6d:28:fb:61:c0:73:24:ff: 51:e2:1b:7a:0f:1d:04:45:cd:d4:7d:97:66:3d:f9:44:f7:65: 48:31:28:5a:e5:c7:6d:70:6a:4b:01:5a:52:dc:f4:cc:ad:fb: 3d:f0:bc:f2:cc:3c:71:12:65:93:e0:0e:3d:49:bc:2d:74:1d: 73:a1:f2:ed:63:fa:6c:42:f7:2c:bc:24:cf:d0:a0:87:aa:54: 03:4a:33:fd:5d:02:a5:7c:73:da:5d:00:a8:e5:82:04:e5:93: ec:d4:6e:e8:43:55:92:ed:07:f0:a7:27:d6:43:15:b0:7a:f4: fa:32:71:49:d1:c3:40:39:41:8b:e7:49:54:f0:d9:f9:81:fc: c2:33:66:92:ab:55:4a:91:89:3f:7f:22:7c:ee:70:06:61:ba: 47:55:07:e4:de:10:25:84:41:af:8c:27:94:87:db:7b:58:0b: bd:66:6e:de:d2:00:64:29:51:87:7f:41:b1:ef:70:92:b1:33: cf:ab:12:4a:2a:70:59:cc:ff:a9:d9:e8:2d:64:b1:b1:57:3f: 8a:d5:89:be -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWoCVbTLv9teyJVVbSg0iTrw6mpEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyODE4MDMwMFoX DTI2MTAyNjIzNTk1OVowejFJMEcGA1UEBRNAOThjZjA4M2NmMzljM2EwYmIwYjU2 YzU5OThiYTFhMGMwYzQ1ZWQwMjMzN2UyN2IwNGM2MzI2YmQ4ODJmZjBhOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnVXC2c6yZSad2CZPoDggF/dxZgx n+jN0WiJZvBnGpVgz2f2Nj1NgTw30O3famckf0YaX50bk6pQce53CsUzTP+V1IdG eIpHcqFF4odN7Sr09hA3CZSjtKLMdok8JtI4SgJFvzmGO9pOvQX6FnxVo0gvx5tZ L8M1z6Ms0OTQFpnROdoEJoUzevLxkalxeOtscrzbuPR82HrLr8lAYiamd147EZlv PhzKw61dd0FsLKxVfcJ5BOGT3yZDFmNDvXTH/KOBAHKpY3/TVd6SDJ8lBW/ewqJJ qzxp4eDW/absUwYkh/di3j28o2AgjcdkaHW9qRgTY/CFxMlctFfSTLEhawIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGEHLYAwHoNH8JVU7InxVG5mmuUUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E1NjViMjc5LWIyNmUtNDg3MC1iNWQzLWNlNDZhNGU1YmUxMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaM4AwDQYJKoZIhvcNAQELBQADggEBACEAYT0GB5M6UBblWChv R6OByA3z4uyR1yaKHmaQSJn7dQMKj1xuAOww1BRd4EttKPthwHMk/1HiG3oPHQRF zdR9l2Y9+UT3ZUgxKFrlx21waksBWlLc9Myt+z3wvPLMPHESZZPgDj1JvC10HXOh 8u1j+mxC9yy8JM/QoIeqVANKM/1dAqV8c9pdAKjlggTlk+zUbuhDVZLtB/CnJ9ZD FbB69PoycUnRw0A5QYvnSVTw2fmB/MIzZpKrVUqRiT9/InzucAZhukdVB+TeECWE Qa+MJ5SH23tYC71mbt7SAGQpUYd/QbHvcJKxM8+rEkoqcFnM/6nZ6C1ksbFXP4rV ib4= -----END CERTIFICATE-----Generated at Tue Jul 28 23:23:48 2026 by rpki-client