$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19b08616-0394-4684-b38e-1239c67c73c3.roa File: 19b08616-0394-4684-b38e-1239c67c73c3.roa (raw, json) Hash identifier: rgfIIuQegkSLMJiCESheCdr/SlieupJgovDTWHQ6n4U= Subject key identifier: 7E:F5:E0:AB:6A:3B:44:44:D9:D7:94:34:D7:FF:94:7C:1F:4D:59:B4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4BDAE80A4D61ADB5D938F30820A2D85DECDA795E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19b08616-0394-4684-b38e-1239c67c73c3.roa Signing time: Tue 18 Aug 2026 18:03:41 +0000 ROA not before: Tue 18 Aug 2026 18:03:41 +0000 ROA not after: Mon 16 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da33:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Aug 2026 00:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:da:e8:0a:4d:61:ad:b5:d9:38:f3:08:20:a2:d8:5d:ec:da:79:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 18:03:41 2026 GMT Not After : Nov 16 23:59:59 2026 GMT Subject: serialNumber=1b6fc10c316966e7466492a7674a25a4614d7e28723aef6e5f9e8a3baa4f69c1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:a5:16:22:c7:20:15:9c:3e:c6:ac:8b:96: b1:2c:e8:97:1d:e7:4e:77:4e:f7:b2:06:48:b9:88: db:f3:04:b9:59:3b:db:7d:cc:58:10:10:db:0b:41: f8:67:ca:99:aa:b7:6d:a7:0e:c5:1d:89:70:fa:18: 29:28:15:d6:77:50:c8:90:0a:29:24:33:2a:e2:d8: de:b3:9e:fc:2a:f7:65:6a:95:bb:89:54:a7:15:f8: 15:13:2e:28:33:eb:3f:a7:c2:94:bb:df:ee:68:6e: fe:eb:98:cc:fc:77:13:09:e5:36:10:66:a2:b5:ca: bc:e2:28:7e:7a:86:08:05:e8:79:af:09:66:79:50: 13:1d:88:23:4f:6e:b5:2f:19:b6:d0:3e:3e:32:f3: 61:22:06:e6:54:83:0b:33:39:60:76:fc:64:3a:3d: 3d:e9:2c:96:5a:1c:b2:1e:0a:14:e8:5d:b0:89:4b: 85:d7:b8:c2:76:9e:3c:33:4d:cf:ee:c8:c0:e9:76: 78:83:e8:63:01:2e:16:31:f8:d6:af:72:b4:95:0a: 5a:54:ce:9d:e4:c7:9f:e9:0b:4b:b4:7a:4f:31:8f: 93:a1:44:35:ba:a6:b4:1b:98:64:f1:9b:7e:c2:87: 2d:54:eb:6a:4c:85:bc:d0:3a:49:02:c4:8c:c6:06: 07:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F5:E0:AB:6A:3B:44:44:D9:D7:94:34:D7:FF:94:7C:1F:4D:59:B4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19b08616-0394-4684-b38e-1239c67c73c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:7000::/40 Signature Algorithm: sha256WithRSAEncryption 27:35:57:19:7e:37:f2:22:22:f5:b1:d6:02:c7:18:38:11:7d: a4:9e:f2:d2:6b:4e:ea:b3:b4:0e:6d:c7:28:f4:1d:97:22:74: 6d:95:95:a7:76:4f:03:c5:9f:a7:74:88:40:a3:bf:79:a1:24: c4:73:a5:f2:48:65:9b:a5:fa:10:0b:e3:a7:de:2c:4d:e5:7c: 2c:31:10:ca:f3:98:5b:c7:60:56:3e:be:36:17:2f:87:c6:7a: fc:70:30:8e:95:6f:b0:f1:e2:ed:30:3c:65:ee:85:3f:62:28: 07:41:7a:4a:01:5e:04:f1:48:88:05:49:34:de:7b:3b:19:0c: 5f:a2:9c:06:76:49:21:32:70:d6:6c:ff:e3:fe:77:ba:f8:b1: 9e:fd:4e:82:ca:76:2d:1e:7a:2c:2f:a9:7a:11:b6:e9:f3:d8: 5a:54:7a:72:e3:8b:2f:d8:3c:df:36:3e:93:4a:ba:21:1b:13: 70:6d:06:a8:a9:44:50:31:43:f9:03:a1:ad:f2:21:17:77:a3: 79:c6:45:73:9e:72:7a:c8:c4:e7:5f:ac:07:6a:1d:fc:d3:d1: 75:12:37:0c:6d:d0:65:d5:b3:ca:f2:7c:3e:da:40:de:c1:4a: 80:77:1f:8e:ad:ff:77:2b:a6:4a:9e:96:e4:40:0d:fe:50:93: 62:bc:bc:c8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUS9roCk1hrbXZOPMIIKLYXezaeV4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxODE4MDM0MVoX DTI2MTExNjIzNTk1OVowejFJMEcGA1UEBRNAMWI2ZmMxMGMzMTY5NjZlNzQ2NjQ5 MmE3Njc0YTI1YTQ2MTRkN2UyODcyM2FlZjZlNWY5ZThhM2JhYTRmNjljMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRqlFiLHIBWcPsasi5axLOiXHedO d073sgZIuYjb8wS5WTvbfcxYEBDbC0H4Z8qZqrdtpw7FHYlw+hgpKBXWd1DIkAop JDMq4tjes578KvdlapW7iVSnFfgVEy4oM+s/p8KUu9/uaG7+65jM/HcTCeU2EGai tcq84ih+eoYIBeh5rwlmeVATHYgjT261Lxm20D4+MvNhIgbmVIMLMzlgdvxkOj09 6SyWWhyyHgoU6F2wiUuF17jCdp48M03P7sjA6XZ4g+hjAS4WMfjWr3K0lQpaVM6d 5Mef6QtLtHpPMY+ToUQ1uqa0G5hk8Zt+woctVOtqTIW80DpJAsSMxgYH5QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH714KtqO0RE2deUNNf/lHwfTVm0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE5YjA4NjE2LTAzOTQtNDY4NC1iMzhlLTEyMzljNjdjNzNjMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaM3AwDQYJKoZIhvcNAQELBQADggEBACc1Vxl+N/IiIvWx1gLH GDgRfaSe8tJrTuqztA5txyj0HZcidG2Vlad2TwPFn6d0iECjv3mhJMRzpfJIZZul +hAL46feLE3lfCwxEMrzmFvHYFY+vjYXL4fGevxwMI6Vb7Dx4u0wPGXuhT9iKAdB ekoBXgTxSIgFSTTeezsZDF+inAZ2SSEycNZs/+P+d7r4sZ79ToLKdi0eeiwvqXoR tunz2FpUenLjiy/YPN82PpNKuiEbE3BtBqipRFAxQ/kDoa3yIRd3o3nGRXOecnrI xOdfrAdqHfzT0XUSNwxt0GXVs8ryfD7aQN7BSoB3H46t/3crpkqeluRADf5Qk2K8 vMg= -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:08 2026 by rpki-client