$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38953cd-42bb-4366-8bc6-17e1a01d2f4a.roa File: f38953cd-42bb-4366-8bc6-17e1a01d2f4a.roa (raw, json) Hash identifier: KApB7uipDIXhTpUxMHLkXF40gYOXVlEAEkgT7FY1NuA= Subject key identifier: 87:8E:AC:22:88:2E:74:84:F8:6D:4B:1E:01:C0:9A:02:26:B3:CD:96 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62C6BB66A135D67A221EDE947220DA3C65507FD6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38953cd-42bb-4366-8bc6-17e1a01d2f4a.roa Signing time: Sat 25 Jul 2026 00:00:08 +0000 ROA not before: Sat 25 Jul 2026 00:00:08 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c6:bb:66:a1:35:d6:7a:22:1e:de:94:72:20:da:3c:65:50:7f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 25 00:00:08 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=9389b5950b2ca35f998af3ccc7b6effa1b1ee3ae681e2e7cafa72b7a106629d3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:da:47:d9:9f:e9:aa:c7:97:19:e8:4b:c3:e5: f3:e1:e9:36:e5:09:f2:bd:a7:40:d0:90:40:5f:24: f2:43:a7:6e:b9:70:a6:b3:6b:b7:d9:b1:84:4b:6e: 1f:7e:de:7a:a3:95:8b:60:21:a1:eb:be:2f:ad:e5: 8f:19:ac:0f:75:7d:8c:89:43:6c:e7:4d:bd:bc:4d: 3f:8f:2b:c4:5c:4e:9a:e8:2d:24:96:0b:fd:ff:64: 39:b1:df:f4:97:33:e3:df:3d:8c:a1:e5:c0:f0:db: 28:0d:35:c0:a9:f5:8f:3d:32:0d:87:3a:77:66:00: 4d:7f:95:f6:e8:84:fa:e2:ff:e3:e7:90:db:db:22: 0b:d9:83:17:d0:af:b3:20:7f:bc:0a:5e:12:d1:83: 95:6d:b8:93:7e:3d:f0:50:87:1c:8b:c2:bb:b6:bb: 3a:07:ff:e5:41:d7:07:bd:63:3f:3a:ff:3f:ad:fe: 3d:cc:cb:26:30:20:7a:30:79:8d:d6:85:60:b0:8f: a9:16:9f:f0:5f:a0:12:02:6e:f4:92:e7:f7:f5:01: 49:11:6b:cb:1c:9a:c5:22:1d:e2:b1:cb:5f:61:78: dd:2b:db:ef:7e:a9:8b:08:d0:f9:2e:3c:65:fa:5e: 46:3a:e1:80:08:90:27:d0:38:94:b0:9d:bd:27:78: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8E:AC:22:88:2E:74:84:F8:6D:4B:1E:01:C0:9A:02:26:B3:CD:96 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38953cd-42bb-4366-8bc6-17e1a01d2f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:7000::/40 Signature Algorithm: sha256WithRSAEncryption 93:24:3c:f8:e0:cf:0e:cb:a1:8c:41:48:00:c8:e4:7d:aa:1d: 79:93:51:09:a2:d2:d4:a2:47:4e:a9:0b:f5:8d:3b:2c:77:88: 8f:19:b4:2a:2e:a3:d0:41:d7:d6:d5:36:64:32:1b:5c:cf:7f: 30:90:c6:8d:9f:98:9b:9a:f7:1b:bc:14:5e:98:9e:00:4b:55: 31:31:46:12:1a:33:c3:dd:3a:2e:e8:22:48:63:9b:cf:33:e2: e7:7b:0f:a6:3d:91:cf:90:13:7c:20:41:b4:64:c0:1a:46:bc: 2a:1e:53:06:c2:fc:0e:b4:63:3f:79:db:35:72:ae:9b:8c:5a: 3d:3b:87:a3:d2:46:8c:43:71:46:83:e0:39:9a:1f:13:27:02: 62:30:43:53:0c:ce:49:9a:7f:1c:c1:8c:38:1f:9f:f8:a7:ba: e1:ba:2b:ca:10:82:4a:f6:a5:83:2b:a0:be:bf:23:18:50:27: 6d:eb:c9:35:2d:7a:6e:9d:80:39:9e:63:d6:64:03:45:5e:50: 7d:0d:47:4f:da:83:89:09:67:0b:86:54:ec:5f:f2:0e:01:61: 2f:b1:83:b7:d3:64:6b:de:cc:4d:49:d8:4e:f7:43:74:ef:22: 0c:95:e4:a9:06:9f:01:1f:f7:4b:8c:77:ba:f8:ca:4b:79:cc: 9a:d1:3a:c0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYsa7ZqE11noiHt6UciDaPGVQf9YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNTAwMDAwOFoX DTI2MTAyMzIzNTk1OVowejFJMEcGA1UEBRNAOTM4OWI1OTUwYjJjYTM1Zjk5OGFm M2NjYzdiNmVmZmExYjFlZTNhZTY4MWUyZTdjYWZhNzJiN2ExMDY2MjlkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdpH2Z/pqseXGehLw+Xz4ek25Qny vadA0JBAXyTyQ6duuXCms2u32bGES24fft56o5WLYCGh674vreWPGawPdX2MiUNs 5029vE0/jyvEXE6a6C0klgv9/2Q5sd/0lzPj3z2MoeXA8NsoDTXAqfWPPTINhzp3 ZgBNf5X26IT64v/j55Db2yIL2YMX0K+zIH+8Cl4S0YOVbbiTfj3wUIcci8K7trs6 B//lQdcHvWM/Ov8/rf49zMsmMCB6MHmN1oVgsI+pFp/wX6ASAm70kuf39QFJEWvL HJrFIh3isctfYXjdK9vvfqmLCND5Ljxl+l5GOuGACJAn0DiUsJ29J3hf/wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIeOrCKILnSE+G1LHgHAmgIms82WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YzODk1M2NkLTQyYmItNDM2Ni04YmM2LTE3ZTFhMDFkMmY0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYHAwDQYJKoZIhvcNAQELBQADggEBAJMkPPjgzw7LoYxBSADI 5H2qHXmTUQmi0tSiR06pC/WNOyx3iI8ZtCouo9BB19bVNmQyG1zPfzCQxo2fmJua 9xu8FF6YngBLVTExRhIaM8PdOi7oIkhjm88z4ud7D6Y9kc+QE3wgQbRkwBpGvCoe UwbC/A60Yz952zVyrpuMWj07h6PSRoxDcUaD4DmaHxMnAmIwQ1MMzkmafxzBjDgf n/inuuG6K8oQgkr2pYMroL6/IxhQJ23ryTUtem6dgDmeY9ZkA0VeUH0NR0/ag4kJ ZwuGVOxf8g4BYS+xg7fTZGvezE1J2E73Q3TvIgyV5KkGnwEf90uMd7r4ykt5zJrR OsA= -----END CERTIFICATE-----Generated at Tue Jul 28 21:16:53 2026 by rpki-client