$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/177c65cf-4881-4258-a16c-faa036e312e2.roa File: 177c65cf-4881-4258-a16c-faa036e312e2.roa (raw, json) Hash identifier: TI8BBGtvzELuwixI3qrtG5LNqW9tb/hA7qgBO6CN1AU= Subject key identifier: 47:5B:44:69:0D:12:1B:84:F2:6A:0D:84:E5:91:56:E7:D1:3D:CA:D1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 20316C39FAFE145A9F73B38A1813737CAF7A8156 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/177c65cf-4881-4258-a16c-faa036e312e2.roa Signing time: Sat 01 Aug 2026 00:01:08 +0000 ROA not before: Sat 01 Aug 2026 00:01:08 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Aug 2026 00:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:31:6c:39:fa:fe:14:5a:9f:73:b3:8a:18:13:73:7c:af:7a:81:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:01:08 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=a6173d6cde39f6544d89b084f163e999a7f7c85c1df81f226665ada49f386bc1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:eb:df:19:56:62:d5:34:f2:6e:60:eb:bd:ef: 1d:63:f6:1d:d7:56:b6:f3:ab:0f:e9:e5:e4:7c:51: 17:ae:4b:75:0e:2f:2d:9e:b7:99:a8:2a:f6:46:43: ab:81:00:66:e5:25:6d:18:b1:ba:29:3f:e6:69:30: 7d:cf:86:9a:28:6f:87:61:f9:8b:23:26:f6:ec:46: 0a:e9:83:dd:80:32:02:e0:3a:65:d2:a9:07:dd:ea: 0b:ce:0b:e9:fe:d0:29:ef:93:db:d5:71:58:2c:13: b6:29:4a:00:b8:2f:b1:99:c3:89:41:64:36:54:cb: f1:75:cf:a9:c2:3b:f9:0f:11:45:42:9f:da:5b:03: e7:80:37:2f:19:83:aa:6d:ee:d5:16:12:17:99:da: 40:5e:6c:3c:c9:83:d3:b5:f3:02:1c:e9:c4:8c:53: 1e:b6:12:c1:c2:1e:dc:32:a7:f8:ba:d0:09:0a:ac: 12:d2:3b:18:95:5a:87:02:b6:f2:76:44:ea:06:0b: 9b:84:be:4f:76:a7:aa:cf:79:ae:73:2c:63:c6:c2: dd:bc:29:98:13:cd:c5:1d:be:f5:5a:da:54:75:eb: e3:b3:6b:b8:5c:67:9a:43:b4:fb:8c:36:4e:64:c0: 5a:41:91:2d:95:2a:e6:84:b9:68:07:cb:4f:36:25: 08:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5B:44:69:0D:12:1B:84:F2:6A:0D:84:E5:91:56:E7:D1:3D:CA:D1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/177c65cf-4881-4258-a16c-faa036e312e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:8000::/40 Signature Algorithm: sha256WithRSAEncryption c2:f8:59:94:39:fa:50:d1:c8:b5:77:0c:0a:dd:fb:7c:c3:ef: b3:9c:e9:19:15:60:8c:ba:f8:c9:ee:6e:44:cf:23:a2:08:e1: a2:1b:46:83:99:2d:7e:e1:77:bb:af:a9:97:a9:13:7a:23:49: 44:47:c2:45:9b:cc:d0:be:d2:fb:04:6c:d2:58:92:d9:d6:73: a8:c0:7c:af:15:24:83:70:00:5d:4c:3c:e2:7c:b8:64:61:92: b7:cd:46:42:4f:44:03:20:99:da:02:02:28:4c:fd:36:6c:9b: 55:b2:98:18:ff:2e:cf:32:36:a2:bb:88:0e:79:e6:6c:2e:02: b8:a5:73:3e:60:24:0a:a3:f1:35:72:ee:e5:0f:7e:d2:01:50: cd:52:cc:43:3b:d1:da:e6:bb:a1:fd:d2:24:81:4f:83:31:a3: 6e:63:36:19:34:97:3d:3e:e6:3b:1e:1e:4e:92:2c:1e:7a:14: a5:bd:d4:11:2d:ff:9d:50:d3:f7:c2:80:9e:5e:36:89:4e:ed: 68:b7:6a:b2:11:c1:82:d1:29:a0:7c:2f:17:b2:66:ab:2b:3a: d5:3a:6b:69:c7:ac:f6:ea:0e:6a:ee:93:dd:71:e3:2f:fe:ce: 4e:a3:2b:e6:90:05:8d:57:e9:b2:42:e3:31:c6:6d:8f:03:ba: 96:d0:e4:d5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIDFsOfr+FFqfc7OKGBNzfK96gVYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMDEwOFoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAYTYxNzNkNmNkZTM5ZjY1NDRkODli MDg0ZjE2M2U5OTlhN2Y3Yzg1YzFkZjgxZjIyNjY2NWFkYTQ5ZjM4NmJjMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+vfGVZi1TTybmDrve8dY/Yd11a2 86sP6eXkfFEXrkt1Di8tnreZqCr2RkOrgQBm5SVtGLG6KT/maTB9z4aaKG+HYfmL Iyb27EYK6YPdgDIC4Dpl0qkH3eoLzgvp/tAp75Pb1XFYLBO2KUoAuC+xmcOJQWQ2 VMvxdc+pwjv5DxFFQp/aWwPngDcvGYOqbe7VFhIXmdpAXmw8yYPTtfMCHOnEjFMe thLBwh7cMqf4utAJCqwS0jsYlVqHArbydkTqBgubhL5Pdqeqz3mucyxjxsLdvCmY E83FHb71WtpUdevjs2u4XGeaQ7T7jDZOZMBaQZEtlSrmhLloB8tPNiUIcQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEdbRGkNEhuE8moNhOWRVufRPcrRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE3N2M2NWNmLTQ4ODEtNDI1OC1hMTZjLWZhYTAzNmUzMTJlMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauYAwDQYJKoZIhvcNAQELBQADggEBAML4WZQ5+lDRyLV3DArd +3zD77Oc6RkVYIy6+MnubkTPI6II4aIbRoOZLX7hd7uvqZepE3ojSURHwkWbzNC+ 0vsEbNJYktnWc6jAfK8VJINwAF1MPOJ8uGRhkrfNRkJPRAMgmdoCAihM/TZsm1Wy mBj/Ls8yNqK7iA555mwuArilcz5gJAqj8TVy7uUPftIBUM1SzEM70drmu6H90iSB T4Mxo25jNhk0lz0+5jseHk6SLB56FKW91BEt/51Q0/fCgJ5eNolO7Wi3arIRwYLR KaB8LxeyZqsrOtU6a2nHrPbqDmruk91x4y/+zk6jK+aQBY1X6bJC4zHGbY8DupbQ 5NU= -----END CERTIFICATE-----Generated at Thu Aug 20 21:55:27 2026 by rpki-client