$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/09befdff-9a96-4bae-899f-ded4a020e80d.roa File: 09befdff-9a96-4bae-899f-ded4a020e80d.roa (raw, json) Hash identifier: QX26auPeLJXkMBQoffLd4Tq+EFZWmBL5IF+dpUlCK98= Subject key identifier: FF:00:7D:E5:8F:FB:48:4E:8E:C5:B3:C0:AF:7C:C4:E4:95:54:FB:BE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 36E38583BA4926A3EEC098D456BB030D37A1AF34 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/09befdff-9a96-4bae-899f-ded4a020e80d.roa Signing time: Fri 31 Jul 2026 00:00:06 +0000 ROA not before: Fri 31 Jul 2026 00:00:06 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e3:85:83:ba:49:26:a3:ee:c0:98:d4:56:bb:03:0d:37:a1:af:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:00:06 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=bbc8a51d0caa2c17fe5c8ff744e273a104b8212b4d461c6a69936a494ed02298, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e3:b0:6d:20:86:33:46:52:18:cd:f7:c4:01: b0:18:76:c1:de:c3:01:fe:4a:b2:d7:b0:14:ae:65: 0c:75:b1:49:2c:97:62:d8:f2:53:59:9b:83:e9:9b: 38:0e:29:ce:14:98:de:03:ed:4b:6e:e8:81:b1:13: 5d:d3:cf:6b:4c:ad:a1:23:10:36:87:29:ad:13:7a: b7:12:d8:80:02:8d:da:04:d6:da:2b:1b:9f:ac:fe: a9:0b:27:ac:81:dc:f4:0a:72:07:49:9d:81:e1:ec: 95:3a:6a:f4:f1:50:af:13:c3:55:c6:d4:67:b9:0c: cb:22:bf:0f:12:f3:1a:fc:2f:49:22:e8:cb:4c:98: c5:0b:8f:9b:38:92:c8:93:66:92:0e:09:79:c2:7e: 75:8f:cf:e6:7a:66:b5:9b:27:54:50:ab:93:f5:ac: cf:6e:22:8e:ac:c5:c7:3e:d2:3d:8a:25:b2:55:56: 3b:d5:5b:1f:02:5b:3b:4c:33:f3:84:f1:a0:1d:28: c8:34:79:b9:6a:cd:dc:5b:6e:f1:38:d3:4e:9c:20: c1:75:25:bf:c7:a7:51:75:6d:05:72:c2:ad:30:71: 8d:a7:b5:b7:45:26:9f:04:ce:2d:fb:e8:2b:4d:a5: 22:1c:75:91:04:19:d1:7b:2c:b4:0d:1f:54:c1:01: 35:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:00:7D:E5:8F:FB:48:4E:8E:C5:B3:C0:AF:7C:C4:E4:95:54:FB:BE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/09befdff-9a96-4bae-899f-ded4a020e80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:6000::/40 Signature Algorithm: sha256WithRSAEncryption 0f:46:0e:c0:00:63:45:f2:e6:cf:56:3b:c4:c8:82:9b:ab:7e: 2c:99:61:b8:3c:5b:b1:d5:ef:42:3a:96:13:9b:f3:97:aa:f1: 5e:1f:5e:b9:a2:6e:79:92:b2:00:44:4d:54:66:41:9d:6a:d1: e4:5d:e3:a7:6a:f5:e7:74:bf:ac:8d:52:fa:27:cd:ff:7d:a6: 55:0a:11:61:8e:63:d8:85:9e:3f:25:06:b5:e8:b0:bf:9d:69: cb:71:3d:7f:0a:25:34:e6:69:a5:1e:7b:63:9f:c3:22:16:2f: 98:f6:b8:88:7d:bf:a0:a5:97:f6:e5:7c:99:a1:d7:82:f0:29: 84:42:9a:0f:4b:fb:3b:89:34:5f:49:ee:bb:ad:1b:e3:99:89: 25:62:41:69:6e:62:ee:84:e9:6a:46:16:cb:70:48:87:2c:ac: 9e:df:1f:b9:66:b5:0d:07:79:d1:c1:50:b5:06:d5:ac:e2:8e: 3e:8d:67:b3:83:bf:52:78:2f:85:fa:b0:57:26:56:59:d6:f0: 76:5e:dc:eb:c1:3d:75:ec:bf:ae:aa:d9:e2:1b:a5:b6:00:ce: bc:19:8d:5c:63:ff:0f:63:05:cb:92:3e:ab:d3:ab:cc:d8:48: ab:6a:36:16:88:0a:86:21:1d:83:b8:50:e7:5f:46:75:a0:43: 2a:fc:9f:4d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNuOFg7pJJqPuwJjUVrsDDTehrzQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMDAwNloX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAYmJjOGE1MWQwY2FhMmMxN2ZlNWM4 ZmY3NDRlMjczYTEwNGI4MjEyYjRkNDYxYzZhNjk5MzZhNDk0ZWQwMjI5ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleOwbSCGM0ZSGM33xAGwGHbB3sMB /kqy17AUrmUMdbFJLJdi2PJTWZuD6Zs4DinOFJjeA+1LbuiBsRNd089rTK2hIxA2 hymtE3q3EtiAAo3aBNbaKxufrP6pCyesgdz0CnIHSZ2B4eyVOmr08VCvE8NVxtRn uQzLIr8PEvMa/C9JIujLTJjFC4+bOJLIk2aSDgl5wn51j8/mema1mydUUKuT9azP biKOrMXHPtI9iiWyVVY71VsfAls7TDPzhPGgHSjINHm5as3cW27xONNOnCDBdSW/ x6dRdW0FcsKtMHGNp7W3RSafBM4t++grTaUiHHWRBBnReyy0DR9UwQE1qQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP8AfeWP+0hOjsWzwK98xOSVVPu+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA5YmVmZGZmLTlhOTYtNGJhZS04OTlmLWRlZDRhMDIwZTgwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+2AwDQYJKoZIhvcNAQELBQADggEBAA9GDsAAY0Xy5s9WO8TI gpurfiyZYbg8W7HV70I6lhOb85eq8V4fXrmibnmSsgBETVRmQZ1q0eRd46dq9ed0 v6yNUvonzf99plUKEWGOY9iFnj8lBrXosL+dactxPX8KJTTmaaUee2OfwyIWL5j2 uIh9v6Cll/blfJmh14LwKYRCmg9L+zuJNF9J7rutG+OZiSViQWluYu6E6WpGFstw SIcsrJ7fH7lmtQ0HedHBULUG1azijj6NZ7ODv1J4L4X6sFcmVlnW8HZe3OvBPXXs v66q2eIbpbYAzrwZjVxj/w9jBcuSPqvTq8zYSKtqNhaICoYhHYO4UOdfRnWgQyr8 n00= -----END CERTIFICATE-----Generated at Wed Aug 26 16:07:52 2026 by rpki-client