$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1c51b7ba-2c76-4941-8e3a-8cc90869a99b.roa File: 1c51b7ba-2c76-4941-8e3a-8cc90869a99b.roa (raw, json) Hash identifier: eWd6O8DaylgQFqZxqAW3eTWmdb8D/c2+Oc5wg5wtImc= Subject key identifier: 6E:46:E0:96:6B:C8:94:8D:60:7A:ED:0E:97:69:BE:25:AC:00:DB:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2CC2B5C6F4A2C6B8A40AD81E3FF809F83F87FC02 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1c51b7ba-2c76-4941-8e3a-8cc90869a99b.roa Signing time: Mon 10 Aug 2026 00:00:54 +0000 ROA not before: Mon 10 Aug 2026 00:00:54 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c2:b5:c6:f4:a2:c6:b8:a4:0a:d8:1e:3f:f8:09:f8:3f:87:fc:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:00:54 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=4b88802813193f44be9def85745f2f5a89f8fe1ae644cdaafe4af8bb6f7f88f5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:fa:2d:f4:00:c7:6e:f2:b5:43:45:2c:66: 31:8f:dd:21:73:e9:8a:3e:c0:c9:37:65:b5:75:5e: 75:96:7b:e4:e1:88:10:a6:16:c1:73:19:7d:3f:ba: b1:f3:68:4c:05:a4:b0:ab:f4:7c:da:fc:d3:82:ff: cd:96:ca:dd:50:d3:be:17:d8:c3:9c:b7:c3:e1:03: 20:b0:5b:4b:41:ea:97:36:eb:5b:1e:4d:c6:b2:61: 04:45:c8:76:06:5e:a0:cb:7d:ab:7c:0e:77:8f:9e: 1f:0e:1a:6a:ef:b5:72:7e:81:ad:bb:f3:40:82:ae: da:98:ad:cb:af:0b:f8:af:1f:2c:4d:61:01:58:2d: 92:22:b2:02:b5:07:04:aa:2c:0a:35:68:21:9e:41: 46:33:9b:56:94:a5:31:2e:64:4a:e5:cd:a4:6e:01: 3b:c3:8b:fc:e4:9b:7e:26:93:0a:1f:30:4e:d4:b3: 3d:67:b5:e3:8b:93:95:65:0d:f1:ad:53:f6:6c:8c: 79:5a:ac:b0:86:aa:24:ff:58:03:5a:dc:b3:aa:63: fd:d2:14:d6:bd:4e:f7:30:df:c2:55:be:04:4e:a1: d0:68:0b:a4:bf:e3:ab:a5:95:07:4c:14:c0:5e:36: c3:65:0b:0c:e0:15:14:be:c4:9d:00:1b:45:f9:3c: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:46:E0:96:6B:C8:94:8D:60:7A:ED:0E:97:69:BE:25:AC:00:DB:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1c51b7ba-2c76-4941-8e3a-8cc90869a99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 01:b9:26:31:c9:5a:f7:b3:ec:26:f3:a1:96:47:24:f7:7f:39: 66:8e:02:37:2a:dc:19:49:d6:e3:16:c7:2d:46:93:f0:fe:bb: 02:8d:30:cd:e5:ec:44:52:1a:e4:ac:54:11:28:9a:45:a6:40: d3:34:b0:61:7e:ad:2c:4d:4e:de:f5:c7:93:d6:89:ad:98:99: fb:e4:14:2c:9d:f1:a5:81:9f:d7:01:ad:fb:2b:f0:25:e0:60: 94:1e:fd:ab:b3:ac:41:82:41:85:ca:dc:45:d8:1c:1f:7b:cf: 6f:f0:6e:83:65:ce:90:8f:bd:c7:98:d0:1e:7c:74:ab:93:0e: a1:7b:bf:db:51:a8:98:d6:cf:e5:c7:05:18:20:f7:67:dd:4e: fc:24:3e:96:ac:96:8e:eb:b4:42:21:8b:55:2d:e2:3e:b1:12: 0a:0c:ab:cc:12:be:05:27:23:19:a4:92:44:63:58:a0:f7:a7: 1f:08:1d:e6:d6:43:58:8d:7c:8a:bd:b3:be:e4:da:c5:8e:93: 0b:4f:fc:97:ea:42:33:62:65:e7:d4:d5:bc:70:5b:78:8b:fe: 3a:1c:19:2d:02:dd:c5:eb:af:91:9a:5d:3f:d9:06:06:c9:5b: a5:2b:be:cc:5b:96:38:4a:56:48:a8:04:2c:d0:b1:ce:7e:f6: 78:99:e3:7a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULMK1xvSixrikCtgeP/gJ+D+H/AIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDA1NFoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNANGI4ODgwMjgxMzE5M2Y0NGJlOWRl Zjg1NzQ1ZjJmNWE4OWY4ZmUxYWU2NDRjZGFhZmU0YWY4YmI2ZjdmODhmNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15H6LfQAx27ytUNFLGYxj90hc+mK PsDJN2W1dV51lnvk4YgQphbBcxl9P7qx82hMBaSwq/R82vzTgv/NlsrdUNO+F9jD nLfD4QMgsFtLQeqXNutbHk3GsmEERch2Bl6gy32rfA53j54fDhpq77VyfoGtu/NA gq7amK3Lrwv4rx8sTWEBWC2SIrICtQcEqiwKNWghnkFGM5tWlKUxLmRK5c2kbgE7 w4v85Jt+JpMKHzBO1LM9Z7Xji5OVZQ3xrVP2bIx5Wqywhqok/1gDWtyzqmP90hTW vU73MN/CVb4ETqHQaAukv+OrpZUHTBTAXjbDZQsM4BUUvsSdABtF+TyEkwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFG5G4JZryJSNYHrtDpdpviWsANtBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFjNTFiN2JhLTJjNzYtNDk0MS04ZTNhLThjYzkwODY5YTk5Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6PDAMA0GCSqGSIb3DQEBCwUAA4IBAQABuSYxyVr3s+wm86GW RyT3fzlmjgI3KtwZSdbjFsctRpPw/rsCjTDN5exEUhrkrFQRKJpFpkDTNLBhfq0s TU7e9ceT1omtmJn75BQsnfGlgZ/XAa37K/Al4GCUHv2rs6xBgkGFytxF2Bwfe89v 8G6DZc6Qj73HmNAefHSrkw6he7/bUaiY1s/lxwUYIPdn3U78JD6WrJaO67RCIYtV LeI+sRIKDKvMEr4FJyMZpJJEY1ig96cfCB3m1kNYjXyKvbO+5NrFjpMLT/yX6kIz YmXn1NW8cFt4i/46HBktAt3F66+Rml0/2QYGyVulK77MW5Y4SlZIqAQs0LHOfvZ4 meN6 -----END CERTIFICATE-----Generated at Wed Aug 26 00:38:18 2026 by rpki-client