$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa File: 124c546b-d995-4fdf-978d-19217a16b0c7.roa (raw, json) Hash identifier: pny/B+qtP8amo7rsm+AY5plxyOgemJ+6fWy8P57uG74= Subject key identifier: D7:C9:F2:8D:42:A7:CA:A3:D5:CB:0B:C2:1F:41:C9:66:0A:D9:D4:8A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73EB4813F1EAD0CC0FC148FC2FD616F930711861 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa Signing time: Sat 01 Aug 2026 00:11:18 +0000 ROA not before: Sat 01 Aug 2026 00:11:18 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da10:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:eb:48:13:f1:ea:d0:cc:0f:c1:48:fc:2f:d6:16:f9:30:71:18:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:11:18 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=519796cc0e5e412e4093d69c5a49350786550c0dac234581aedb6c2eeabb900d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:a0:21:de:e2:9d:d2:1e:64:d8:bb:5a:27: eb:09:47:99:44:39:6f:49:9b:f6:42:43:9d:e7:96: 95:6c:f7:15:d0:64:d3:ac:07:4e:98:c4:6d:c9:0a: 74:95:2c:fb:ad:e6:6e:40:d9:39:44:f6:70:47:3f: 49:b0:45:8d:c3:7e:a8:47:b9:4e:cc:62:e0:79:22: 8e:3a:47:9c:c4:a6:2c:c5:7f:b2:32:12:58:24:02: 67:1c:f5:b8:9e:c9:81:21:ad:59:94:cb:48:66:04: 86:49:59:98:53:44:96:fc:7f:8e:0e:1e:d0:38:ee: 07:9a:00:24:1c:40:54:e0:1a:b3:43:89:d1:71:b4: f0:54:0e:19:a7:a5:ed:7a:cc:5a:17:2f:59:3a:24: 28:9d:5e:2b:5c:34:9c:d6:f6:a8:59:b3:a2:d5:ee: 50:f1:1a:f7:b5:2c:d4:cc:aa:e4:29:f1:dd:9e:1d: 97:a0:33:fc:85:4e:0d:7b:3d:7b:2b:1d:a2:3c:a5: ca:05:8b:76:2c:4b:b3:10:fa:2d:5f:64:85:7b:ec: a8:fe:71:c7:20:25:8b:79:c6:87:31:03:02:c4:2a: c8:19:a4:4b:56:8d:41:f9:cd:0b:f4:bd:69:9c:95: d6:01:3b:b4:6d:9a:aa:40:4c:e7:dd:06:bf:20:5e: b5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C9:F2:8D:42:A7:CA:A3:D5:CB:0B:C2:1F:41:C9:66:0A:D9:D4:8A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da10:8000::/38 Signature Algorithm: sha256WithRSAEncryption 38:67:63:cf:e0:68:ed:60:73:2e:c6:23:0b:07:80:02:5b:d4: dc:63:f3:f2:3e:c1:63:a0:eb:9f:4d:5a:b6:f3:c2:20:6f:5f: f1:ce:c7:8d:3a:21:84:11:11:a9:3d:fa:c8:9e:9b:aa:8f:41: d1:2e:11:86:ae:1e:da:37:69:4e:81:68:a0:31:4f:8b:b7:91: 97:65:89:9d:1c:08:3b:83:2f:c1:c5:f0:99:11:d6:16:fa:54: e8:c8:7b:54:e2:56:a3:a9:73:2c:f3:97:04:84:85:77:10:be: 10:45:7d:5b:b3:93:43:26:01:f4:88:77:ff:7f:ae:95:ce:d0: ac:ba:0e:6d:f0:ee:4e:d2:0b:b6:6e:0b:be:45:ba:5a:c6:8c: 06:dd:46:ff:46:f7:d7:7a:11:de:ed:19:b3:69:b6:cf:cb:26: 0a:02:cb:c8:39:82:ff:6c:08:0a:f9:26:87:15:f9:1a:79:ce: 2d:ac:9b:41:0d:3a:0b:30:38:ce:77:1b:33:cf:da:6e:4f:7d: e7:3f:7d:4f:7f:e3:1d:30:ea:d1:43:5f:22:4f:d9:43:b2:93: f5:a4:9b:7b:ea:0a:e0:11:7b:82:c2:31:28:51:9e:df:6c:ec: 4d:96:35:91:c3:7c:56:5a:aa:29:87:70:70:93:e1:b0:32:e7: d1:6e:5d:ac -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUc+tIE/Hq0MwPwUj8L9YW+TBxGGEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMTExOFoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNANTE5Nzk2Y2MwZTVlNDEyZTQwOTNk NjljNWE0OTM1MDc4NjU1MGMwZGFjMjM0NTgxYWVkYjZjMmVlYWJiOTAwZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2CgId7indIeZNi7WifrCUeZRDlv SZv2QkOd55aVbPcV0GTTrAdOmMRtyQp0lSz7reZuQNk5RPZwRz9JsEWNw36oR7lO zGLgeSKOOkecxKYsxX+yMhJYJAJnHPW4nsmBIa1ZlMtIZgSGSVmYU0SW/H+ODh7Q OO4HmgAkHEBU4BqzQ4nRcbTwVA4Zp6XtesxaFy9ZOiQonV4rXDSc1vaoWbOi1e5Q 8Rr3tSzUzKrkKfHdnh2XoDP8hU4Nez17Kx2iPKXKBYt2LEuzEPotX2SFe+yo/nHH ICWLecaHMQMCxCrIGaRLVo1B+c0L9L1pnJXWATu0bZqqQEzn3Qa/IF619wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNfJ8o1Cp8qj1csLwh9ByWYK2dSKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEyNGM1NDZiLWQ5OTUtNGZkZi05NzhkLTE5MjE3YTE2YjBjNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEIAwDQYJKoZIhvcNAQELBQADggEBADhnY8/gaO1gcy7GIwsH gAJb1Nxj8/I+wWOg659NWrbzwiBvX/HOx406IYQREak9+siem6qPQdEuEYauHto3 aU6BaKAxT4u3kZdliZ0cCDuDL8HF8JkR1hb6VOjIe1TiVqOpcyzzlwSEhXcQvhBF fVuzk0MmAfSId/9/rpXO0Ky6Dm3w7k7SC7ZuC75FulrGjAbdRv9G99d6Ed7tGbNp ts/LJgoCy8g5gv9sCAr5JocV+Rp5zi2sm0ENOgswOM53GzPP2m5Pfec/fU9/4x0w 6tFDXyJP2UOyk/Wkm3vqCuARe4LCMShRnt9s7E2WNZHDfFZaqimHcHCT4bAy59Fu Xaw= -----END CERTIFICATE-----Generated at Wed Aug 26 03:54:43 2026 by rpki-client