$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ec8e30b-3c80-41f9-b79f-1b3cfb3d9134.roa File: 1ec8e30b-3c80-41f9-b79f-1b3cfb3d9134.roa (raw, json) Hash identifier: 7uS6/u+24uZwrFzINg9YuV/SYbu30pZxf/26i6sJyh8= Subject key identifier: CC:CF:8E:82:D9:C3:B8:7C:AF:A4:73:90:99:D2:4C:E1:3A:E8:8F:29 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7076013CA4C9FE09A68910F316327817B17A4286 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ec8e30b-3c80-41f9-b79f-1b3cfb3d9134.roa Signing time: Mon 10 Aug 2026 00:00:13 +0000 ROA not before: Mon 10 Aug 2026 00:00:13 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:76:01:3c:a4:c9:fe:09:a6:89:10:f3:16:32:78:17:b1:7a:42:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:00:13 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=6f30879b8882b0c16df8c798df5ea2c36bbae56761a5a281361a985dfc4f68df, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e6:b5:ef:6a:c8:b9:66:83:18:cf:2b:1e:96: 8d:4e:27:4c:7d:a0:f8:9e:ad:fd:10:31:01:09:e1: f4:b3:3b:6a:36:6b:58:ea:9e:12:09:a1:d6:f7:a1: 08:70:ba:a7:b8:c8:50:33:2e:5d:9e:95:6d:51:ba: f1:79:09:3f:5b:b0:f2:52:b9:64:de:48:97:d6:97: c4:a5:a3:4a:94:5a:c1:dd:3b:b2:3e:68:99:c8:7f: b1:8f:03:f7:bf:fb:e9:bc:8e:17:89:b2:77:23:44: b8:76:cf:35:37:7d:90:eb:58:2f:f1:68:75:1c:1b: 28:e1:f1:19:e7:bf:c8:09:7f:ef:63:86:09:fc:60: db:ec:fb:30:2a:4e:55:dc:a3:cc:92:c2:dc:69:9e: 17:28:58:95:a2:2b:a2:3b:d2:8c:49:48:7f:cd:ae: d7:2b:cd:68:02:60:cc:f8:54:95:f1:26:a3:85:eb: b7:9f:75:4b:e6:ff:ad:f2:6a:4b:4b:c1:74:7b:75: e5:54:dd:c7:4a:c5:67:fa:0b:42:dc:f8:f7:4d:ab: af:38:9b:e4:c7:b9:cb:28:38:d5:16:4b:b6:33:4f: cb:e3:b4:bc:e4:1b:e0:64:c4:bc:d0:c9:2c:f7:20: 83:12:5b:52:fc:0f:1d:10:13:89:b1:1d:f9:d3:58: e4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CF:8E:82:D9:C3:B8:7C:AF:A4:73:90:99:D2:4C:E1:3A:E8:8F:29 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ec8e30b-3c80-41f9-b79f-1b3cfb3d9134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:28c0::/48 Signature Algorithm: sha256WithRSAEncryption b2:d5:43:25:9f:aa:09:1d:7c:bc:51:e1:61:cc:87:8f:cc:67: 59:79:a5:c8:43:50:62:72:2f:7e:52:5c:81:e8:88:f4:5e:ed: 64:1d:66:e5:3f:0b:83:9d:e4:ee:0b:a3:36:72:fe:e8:1d:6f: 21:56:0a:e5:cf:c8:6c:5f:61:d4:6d:71:57:44:e5:57:6f:52: 54:22:9d:d9:14:2b:61:1f:dc:5d:6c:81:0e:73:ab:61:30:21: ee:76:cb:bd:a9:66:83:07:2f:9d:5d:d2:05:0b:21:85:cc:64: 04:cf:a6:ca:54:da:7c:ea:f6:84:41:51:d8:fe:78:5e:11:70: 7f:bf:ef:6c:73:5c:48:51:28:2d:65:d5:ad:7c:b9:91:19:82: 83:f9:ac:fd:ba:75:79:d7:47:0c:01:c3:83:64:c0:f2:56:09: 9c:47:d7:a1:e3:50:b1:1c:c7:1b:4f:85:ef:22:9e:e8:e0:0b: ff:fc:78:d1:6a:a0:25:f1:2f:5b:94:33:e0:d5:d3:aa:68:1c: 21:5e:f8:0d:dc:f0:bc:be:2a:28:49:93:a7:2f:2d:85:6b:7e: 97:ef:70:57:a9:d5:f5:ca:29:0a:41:37:6f:a3:04:ed:96:29: 2c:7d:c1:7b:a6:52:ca:c0:83:7f:1d:79:72:a6:fa:46:ba:d2: 67:ae:7c:9e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcHYBPKTJ/gmmiRDzFjJ4F7F6QoYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDAxM1oX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNANmYzMDg3OWI4ODgyYjBjMTZkZjhj Nzk4ZGY1ZWEyYzM2YmJhZTU2NzYxYTVhMjgxMzYxYTk4NWRmYzRmNjhkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Oa172rIuWaDGM8rHpaNTidMfaD4 nq39EDEBCeH0sztqNmtY6p4SCaHW96EIcLqnuMhQMy5dnpVtUbrxeQk/W7DyUrlk 3kiX1pfEpaNKlFrB3TuyPmiZyH+xjwP3v/vpvI4XibJ3I0S4ds81N32Q61gv8Wh1 HBso4fEZ57/ICX/vY4YJ/GDb7PswKk5V3KPMksLcaZ4XKFiVoiuiO9KMSUh/za7X K81oAmDM+FSV8Sajheu3n3VL5v+t8mpLS8F0e3XlVN3HSsVn+gtC3Pj3TauvOJvk x7nLKDjVFku2M0/L47S85BvgZMS80Mks9yCDEltS/A8dEBOJsR3501jk2wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMzPjoLZw7h8r6RzkJnSTOE66I8pMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlYzhlMzBiLTNjODAtNDFmOS1iNzlmLTFiM2NmYjNkOTEzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6CjAMA0GCSqGSIb3DQEBCwUAA4IBAQCy1UMln6oJHXy8UeFh zIePzGdZeaXIQ1Bici9+UlyB6Ij0Xu1kHWblPwuDneTuC6M2cv7oHW8hVgrlz8hs X2HUbXFXROVXb1JUIp3ZFCthH9xdbIEOc6thMCHudsu9qWaDBy+dXdIFCyGFzGQE z6bKVNp86vaEQVHY/nheEXB/v+9sc1xIUSgtZdWtfLmRGYKD+az9unV510cMAcOD ZMDyVgmcR9eh41CxHMcbT4XvIp7o4Av//HjRaqAl8S9blDPg1dOqaBwhXvgN3PC8 viooSZOnLy2Fa36X73BXqdX1yikKQTdvowTtliksfcF7plLKwIN/HXlypvpGutJn rnye -----END CERTIFICATE-----Generated at Wed Aug 26 17:43:48 2026 by rpki-client