$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0656b440-62ae-427d-ab37-0f10b83127f9.roa File: 0656b440-62ae-427d-ab37-0f10b83127f9.roa (raw, json) Hash identifier: GsVptisRmFb++JCJ/xQoaNLKPlLiZiqrraj/08Q2tNg= Subject key identifier: C5:2A:12:83:3A:4F:A9:74:41:BD:C1:49:D5:77:6C:B8:04:31:8B:92 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 138298F93BCAA1882D6782A9DEA5787397B90242 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0656b440-62ae-427d-ab37-0f10b83127f9.roa Signing time: Wed 19 Aug 2026 00:00:58 +0000 ROA not before: Wed 19 Aug 2026 00:00:58 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:82:98:f9:3b:ca:a1:88:2d:67:82:a9:de:a5:78:73:97:b9:02:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:00:58 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=7f4bde1609bd962e8374ba3212bb5e24c3a83932bd5322b0f3027b08db750dc4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:36:1c:ee:b7:50:20:bd:57:59:92:47:ab: 42:7d:22:60:bc:4e:48:26:92:f5:97:13:6a:ad:10: dc:19:f3:20:91:de:4b:5e:93:d6:82:03:27:42:36: 64:2e:ba:6e:88:0c:60:0e:42:00:ef:1c:5c:d5:60: 0e:8e:2c:a3:f7:b1:12:ad:c5:83:f3:3c:fd:f7:4e: ff:04:a5:b3:81:d1:d6:1b:a6:f1:17:9a:f3:9a:50: f1:19:c4:7b:2a:6c:62:31:43:f1:f2:28:65:5c:01: b9:0a:b0:a9:67:22:ea:49:26:cb:5f:96:b2:84:75: 88:8c:ff:82:2f:b7:27:aa:ee:8f:81:c7:7c:8b:23: 66:05:e3:2d:23:a4:b2:9c:fe:5b:2b:9b:57:3e:4d: c6:5d:12:2b:b2:1a:67:b1:04:4d:04:ad:26:1b:e3: 68:9d:ee:03:d7:8d:87:34:dd:63:0f:02:ca:e6:16: 51:ac:32:1a:6f:be:7b:fa:e1:2b:29:52:ae:72:27: d0:5f:38:e4:cf:38:f2:25:4a:69:62:4e:21:51:de: f1:f8:c5:c8:59:83:4c:81:1b:c3:4d:0e:df:f1:ec: 36:a1:79:e4:04:84:2a:0d:37:f4:83:4c:48:90:8a: ac:84:69:47:e0:59:b0:6d:b9:25:9a:24:4f:00:bd: 18:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2A:12:83:3A:4F:A9:74:41:BD:C1:49:D5:77:6C:B8:04:31:8B:92 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0656b440-62ae-427d-ab37-0f10b83127f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:6040::/48 Signature Algorithm: sha256WithRSAEncryption 5b:cb:5e:71:29:30:c7:d1:87:b4:60:b8:ca:63:e0:8c:ae:16: 8f:a3:25:c6:67:06:d3:a3:bf:bc:2f:49:91:82:91:46:d9:18: 4a:43:f1:56:0c:d2:dc:d6:aa:89:ac:fa:a2:f2:a3:f0:05:f6: 85:dd:cb:63:94:d3:e0:49:2d:5d:b1:c9:5a:d1:46:ce:15:73: 67:30:6f:c5:6a:67:1c:36:11:08:56:e0:c2:52:af:ba:5b:c9: 1d:48:4e:4f:2d:79:37:2c:36:75:67:f9:f5:6e:1d:15:36:76: 27:32:f4:a3:e0:a8:72:4b:ea:c8:67:f8:1d:45:6b:fc:d8:e2: 46:f6:b4:a5:c6:29:4f:c6:30:50:f8:03:75:59:2b:e9:7a:d0: 93:c2:36:7b:bf:9b:3b:63:54:ac:98:94:da:43:f2:50:1d:10: 5f:de:47:11:0f:64:df:97:87:a3:ca:3f:7e:56:89:50:30:b9: 18:31:4e:8f:82:73:e8:1f:47:a3:1b:ee:32:d7:1c:f9:57:db: f7:58:08:88:9b:94:cb:0d:43:ab:da:fa:01:91:86:60:16:27: 2c:a6:10:c4:38:31:fb:56:93:61:b5:53:57:12:b1:2c:22:d2: 3a:db:8e:5e:37:23:6b:93:8f:da:f4:22:b9:00:b2:e7:7e:c4: 7b:77:f0:90 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUE4KY+TvKoYgtZ4Kp3qV4c5e5AkIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDA1OFoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAN2Y0YmRlMTYwOWJkOTYyZTgzNzRi YTMyMTJiYjVlMjRjM2E4MzkzMmJkNTMyMmIwZjMwMjdiMDhkYjc1MGRjNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3M2HO63UCC9V1mSR6tCfSJgvE5I JpL1lxNqrRDcGfMgkd5LXpPWggMnQjZkLrpuiAxgDkIA7xxc1WAOjiyj97ESrcWD 8zz9907/BKWzgdHWG6bxF5rzmlDxGcR7KmxiMUPx8ihlXAG5CrCpZyLqSSbLX5ay hHWIjP+CL7cnqu6Pgcd8iyNmBeMtI6SynP5bK5tXPk3GXRIrshpnsQRNBK0mG+No ne4D142HNN1jDwLK5hZRrDIab757+uErKVKucifQXzjkzzjyJUppYk4hUd7x+MXI WYNMgRvDTQ7f8ew2oXnkBIQqDTf0g0xIkIqshGlH4FmwbbklmiRPAL0YrQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMUqEoM6T6l0Qb3BSdV3bLgEMYuSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA2NTZiNDQwLTYyYWUtNDI3ZC1hYjM3LTBmMTBiODMxMjdmOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6WBAMA0GCSqGSIb3DQEBCwUAA4IBAQBby15xKTDH0Ye0YLjK Y+CMrhaPoyXGZwbTo7+8L0mRgpFG2RhKQ/FWDNLc1qqJrPqi8qPwBfaF3ctjlNPg SS1dscla0UbOFXNnMG/FamccNhEIVuDCUq+6W8kdSE5PLXk3LDZ1Z/n1bh0VNnYn MvSj4KhyS+rIZ/gdRWv82OJG9rSlxilPxjBQ+AN1WSvpetCTwjZ7v5s7Y1SsmJTa Q/JQHRBf3kcRD2Tfl4ejyj9+VolQMLkYMU6PgnPoH0ejG+4y1xz5V9v3WAiIm5TL DUOr2voBkYZgFicsphDEODH7VpNhtVNXErEsItI6245eNyNrk4/a9CK5ALLnfsR7 d/CQ -----END CERTIFICATE-----Generated at Wed Aug 26 16:09:56 2026 by rpki-client