$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1be81b8b-723f-40f7-b725-279fceb1a1b2.roa File: 1be81b8b-723f-40f7-b725-279fceb1a1b2.roa (raw, json) Hash identifier: d+P8wcpgrYMWlwDROYO+YPHq3DhM4gcuDo4MJBPg0jw= Subject key identifier: F9:88:38:9B:D7:E0:0F:33:B9:05:80:75:96:39:B7:16:08:13:C6:95 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 54902FFB3B3D4D26F0C11C8983B0837A0E0012F5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1be81b8b-723f-40f7-b725-279fceb1a1b2.roa Signing time: Fri 07 Aug 2026 00:00:11 +0000 ROA not before: Fri 07 Aug 2026 00:00:11 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:90:2f:fb:3b:3d:4d:26:f0:c1:1c:89:83:b0:83:7a:0e:00:12:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 7 00:00:11 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=aff42e9ff350f876f36d7de815714227c68ef325458a637a858f68e189e3703e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:45:79:1c:bd:bc:54:e0:a0:93:7d:37:2b:2d: a9:9d:0a:d8:ba:2e:1b:ab:14:10:ce:5d:86:34:a4: a1:30:de:c9:cf:1f:81:ca:c5:b6:e3:3b:2c:66:06: be:68:d4:a1:5d:46:d5:12:9c:ee:dd:42:c6:db:95: 66:2c:5e:03:cd:98:bd:33:24:12:b6:7d:98:56:57: 35:2f:87:b9:58:ff:20:c5:d5:c5:74:f7:db:48:7d: 8a:50:36:a0:dd:dc:b7:37:70:b6:5e:84:ed:c4:5f: 8d:da:bc:35:51:a6:73:9c:6e:02:4a:b9:60:14:63: 76:9c:56:c3:e0:6c:44:65:7a:95:23:54:32:d8:ab: 63:ce:fa:b4:83:eb:1f:12:d0:42:45:c7:a8:b4:b7: de:1a:27:ea:14:d8:57:6c:93:e4:3a:8f:47:f6:4a: 84:a6:a9:c9:8f:25:0a:bd:15:d9:86:27:18:3f:bb: 60:22:8b:04:f2:0d:c9:4d:c9:03:96:ab:17:15:6c: ad:ba:c8:a8:b0:a8:bd:03:b9:c8:d1:cb:5a:14:cc: ed:67:69:b8:42:8a:01:f5:e5:3a:b8:12:32:44:54: 7e:89:dd:b5:3a:4b:06:f9:3e:4f:df:6f:39:80:45: 6b:92:eb:9b:d8:cc:1a:2b:15:a7:6b:90:9c:1c:5f: 4e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:88:38:9B:D7:E0:0F:33:B9:05:80:75:96:39:B7:16:08:13:C6:95 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1be81b8b-723f-40f7-b725-279fceb1a1b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:4000::/40 Signature Algorithm: sha256WithRSAEncryption 1c:fb:91:f0:23:d2:8d:34:71:20:76:2c:4d:31:99:80:5b:1d: 3f:d0:57:90:73:69:8c:0a:78:7a:fa:db:f2:d0:17:f3:3c:61: 7f:35:36:cd:e0:0f:a8:01:4f:68:1f:a9:4b:97:7e:01:a3:dc: ed:55:4c:b5:4f:f8:7d:26:ff:ca:7d:9b:1c:9f:f5:c3:fa:05: 01:c4:5d:58:72:c7:db:7b:45:bf:8b:70:4f:64:9f:44:5d:20: ef:c2:0a:d6:9e:46:1c:09:63:f0:f6:df:48:d4:a3:b3:9d:ff: 88:7a:3a:19:64:6e:ab:36:aa:d4:59:fa:6b:af:17:51:50:96: 19:33:33:15:b8:65:17:c4:c2:e1:0c:9a:c4:1b:7a:7c:35:21: be:41:aa:82:c3:c7:b6:d5:ce:a0:46:0c:0e:90:fc:59:a0:78: 8d:23:d3:18:f3:84:cf:bb:80:a2:62:fa:11:f5:31:46:24:4b: d1:ce:6f:62:73:70:ec:65:15:37:2e:98:d2:ab:5b:35:a6:39: c2:6d:e6:59:0e:46:42:07:6b:db:b7:a2:e3:f0:ed:53:0e:85: 5d:a4:11:58:e8:bb:e7:cb:e5:9c:8b:f8:86:71:00:75:64:aa: 4a:d9:9d:c1:3b:35:b1:47:4a:10:18:bc:93:41:1a:08:2e:f1: 29:79:8f:33 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVJAv+zs9TSbwwRyJg7CDeg4AEvUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNzAwMDAxMVoX DTI2MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAYWZmNDJlOWZmMzUwZjg3NmYzNmQ3 ZGU4MTU3MTQyMjdjNjhlZjMyNTQ1OGE2MzdhODU4ZjY4ZTE4OWUzNzAzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UV5HL28VOCgk303Ky2pnQrYui4b qxQQzl2GNKShMN7Jzx+BysW24zssZga+aNShXUbVEpzu3ULG25VmLF4DzZi9MyQS tn2YVlc1L4e5WP8gxdXFdPfbSH2KUDag3dy3N3C2XoTtxF+N2rw1UaZznG4CSrlg FGN2nFbD4GxEZXqVI1Qy2Ktjzvq0g+sfEtBCRceotLfeGifqFNhXbJPkOo9H9kqE pqnJjyUKvRXZhicYP7tgIosE8g3JTckDlqsXFWytusiosKi9A7nI0ctaFMztZ2m4 QooB9eU6uBIyRFR+id21OksG+T5P3285gEVrkuub2MwaKxWna5CcHF9O1wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPmIOJvX4A8zuQWAdZY5txYIE8aVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiZTgxYjhiLTcyM2YtNDBmNy1iNzI1LTI3OWZjZWIxYTFiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba70AwDQYJKoZIhvcNAQELBQADggEBABz7kfAj0o00cSB2LE0x mYBbHT/QV5BzaYwKeHr62/LQF/M8YX81Ns3gD6gBT2gfqUuXfgGj3O1VTLVP+H0m /8p9mxyf9cP6BQHEXVhyx9t7Rb+LcE9kn0RdIO/CCtaeRhwJY/D230jUo7Od/4h6 Ohlkbqs2qtRZ+muvF1FQlhkzMxW4ZRfEwuEMmsQbenw1Ib5BqoLDx7bVzqBGDA6Q /FmgeI0j0xjzhM+7gKJi+hH1MUYkS9HOb2JzcOxlFTcumNKrWzWmOcJt5lkORkIH a9u3ouPw7VMOhV2kEVjou+fL5ZyL+IZxAHVkqkrZncE7NbFHShAYvJNBGggu8Sl5 jzM= -----END CERTIFICATE-----Generated at Wed Aug 26 16:06:34 2026 by rpki-client