$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c643ac0a-302e-4bac-b9a7-867f72e93fb2.roa File: c643ac0a-302e-4bac-b9a7-867f72e93fb2.roa (raw, json) Hash identifier: JHfyAh4OHRYiIHf9Iy8uDZOUhpa7zv9r+OGbGv0f6ms= Subject key identifier: 60:99:CE:6D:E0:BA:F8:54:A5:E2:90:AA:DC:46:B3:3A:37:D7:E1:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3EFF8699552589B038D1A1FEBFDFE702B7B9674E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c643ac0a-302e-4bac-b9a7-867f72e93fb2.roa Signing time: Mon 27 Jul 2026 00:01:02 +0000 ROA not before: Mon 27 Jul 2026 00:01:02 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ff:86:99:55:25:89:b0:38:d1:a1:fe:bf:df:e7:02:b7:b9:67:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 27 00:01:02 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=0403a0fb805081a9903f19559034ac251e245e0e32d63b68dff169591dd8db9c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:8a:b4:31:0b:57:55:d0:22:cd:7d:ca:34: 3b:12:12:42:26:a0:8c:fc:92:79:4d:d6:aa:2d:6e: 2a:60:b3:aa:cb:c4:8b:f1:40:20:55:e1:36:35:fc: 8b:59:59:97:ee:35:f9:c4:aa:49:eb:68:0b:2d:2f: 60:93:11:78:73:9a:2e:5d:37:20:33:d0:b0:96:e4: ce:3a:e0:73:7d:b7:63:3d:9a:24:76:d5:50:cd:e4: 8e:6f:db:a6:7c:dd:c7:8c:ab:fa:71:4d:40:0a:69: 93:01:ec:11:e9:73:08:c2:e0:b5:17:97:3f:e0:68: 8d:12:81:9f:dd:91:bc:25:b0:6d:a9:9d:a4:1c:37: 02:cd:95:7f:00:8c:b1:5f:2c:54:4b:ec:dd:12:9c: 33:d0:92:41:e1:ab:d7:cc:f1:29:d2:a5:6d:c2:79: cb:69:43:2f:c5:50:38:47:19:5e:04:81:6e:6b:3c: 17:4b:8e:43:8f:64:97:1a:4b:7e:a3:33:5a:3f:46: 22:e2:dd:0e:1e:57:33:8b:60:e2:69:21:ba:cc:a3: bd:48:d0:f0:d1:5d:96:fb:8b:e9:29:d5:1c:4d:1c: b1:1c:0c:1b:f4:d1:5e:92:fd:41:43:90:d9:c7:4e: 07:f4:d9:8e:e1:50:c2:f0:c9:22:24:d1:0b:e5:37: db:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:99:CE:6D:E0:BA:F8:54:A5:E2:90:AA:DC:46:B3:3A:37:D7:E1:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c643ac0a-302e-4bac-b9a7-867f72e93fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:e000::/40 Signature Algorithm: sha256WithRSAEncryption 8b:27:88:24:c1:17:36:7d:e8:db:20:bc:19:58:df:47:6c:46: 0b:d2:3c:dc:ec:e5:15:97:47:bd:12:6a:80:3e:26:f7:ff:4e: ad:2e:64:90:f2:c1:d5:d1:20:7c:1f:94:48:26:e6:32:ac:70: 71:ac:3f:a4:ca:a4:f0:0b:66:6b:40:c6:d9:04:a2:71:7a:6f: 9a:18:ab:18:2b:b0:dc:35:21:3f:52:34:c7:85:f9:c5:af:0b: b2:a4:dd:c4:2e:e8:4e:f2:cf:50:05:ca:60:3f:5c:7f:8c:36: 1a:c2:4d:c5:12:49:65:2c:ea:70:00:5f:72:4c:d1:b7:c0:18: b2:fe:20:29:2a:51:96:a1:d0:c2:1d:68:eb:89:90:05:a5:43: 0c:f4:43:8f:bb:31:8f:a7:d7:c2:04:9e:fe:b1:61:49:45:0a: fb:f7:a4:72:34:fa:77:26:64:20:b1:1b:1f:a3:9e:ba:7a:80: 06:32:de:c0:03:1c:cb:2b:1a:5b:5d:b1:7c:61:d1:f5:52:86: 7f:38:38:aa:5e:40:3c:ea:8c:4a:67:2d:79:8d:9d:ce:b6:85: f8:e5:d3:6d:e6:98:55:2c:b0:5f:96:87:d9:e4:e3:dd:d0:08: 13:75:61:92:42:b5:a7:19:01:a4:ce:97:38:53:30:0f:51:0d: 54:f7:44:f4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPv+GmVUlibA40aH+v9/nAre5Z04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNzAwMDEwMloX DTI2MTAyNTIzNTk1OVowejFJMEcGA1UEBRNAMDQwM2EwZmI4MDUwODFhOTkwM2Yx OTU1OTAzNGFjMjUxZTI0NWUwZTMyZDYzYjY4ZGZmMTY5NTkxZGQ4ZGI5YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo6KtDELV1XQIs19yjQ7EhJCJqCM /JJ5TdaqLW4qYLOqy8SL8UAgVeE2NfyLWVmX7jX5xKpJ62gLLS9gkxF4c5ouXTcg M9CwluTOOuBzfbdjPZokdtVQzeSOb9umfN3HjKv6cU1ACmmTAewR6XMIwuC1F5c/ 4GiNEoGf3ZG8JbBtqZ2kHDcCzZV/AIyxXyxUS+zdEpwz0JJB4avXzPEp0qVtwnnL aUMvxVA4RxleBIFuazwXS45Dj2SXGkt+ozNaP0Yi4t0OHlczi2DiaSG6zKO9SNDw 0V2W+4vpKdUcTRyxHAwb9NFekv1BQ5DZx04H9NmO4VDC8MkiJNEL5TfbNwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGCZzm3guvhUpeKQqtxGszo31+EHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M2NDNhYzBhLTMwMmUtNGJhYy1iOWE3LTg2N2Y3MmU5M2ZiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9OAwDQYJKoZIhvcNAQELBQADggEBAIsniCTBFzZ96NsgvBlY 30dsRgvSPNzs5RWXR70SaoA+Jvf/Tq0uZJDywdXRIHwflEgm5jKscHGsP6TKpPAL ZmtAxtkEonF6b5oYqxgrsNw1IT9SNMeF+cWvC7Kk3cQu6E7yz1AFymA/XH+MNhrC TcUSSWUs6nAAX3JM0bfAGLL+ICkqUZah0MIdaOuJkAWlQwz0Q4+7MY+n18IEnv6x YUlFCvv3pHI0+ncmZCCxGx+jnrp6gAYy3sADHMsrGltdsXxh0fVShn84OKpeQDzq jEpnLXmNnc62hfjl023mmFUssF+Wh9nk493QCBN1YZJCtacZAaTOlzhTMA9RDVT3 RPQ= -----END CERTIFICATE-----Generated at Wed Jul 29 00:03:36 2026 by rpki-client