$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/244183a3-f7dc-496f-9560-77200b99c0c5.roa File: 244183a3-f7dc-496f-9560-77200b99c0c5.roa (raw, json) Hash identifier: BvrYBqht3lZ5XTheBn+jwKrdsjtqDb8sDswIN3v8e90= Subject key identifier: 5D:5E:09:3F:DD:FB:E6:EB:44:B3:BF:F5:A1:88:2F:FF:FF:3C:E3:FE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0870A9F9C40C5CC718B80225C7D689A248C7DA3C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/244183a3-f7dc-496f-9560-77200b99c0c5.roa Signing time: Wed 19 Aug 2026 00:01:25 +0000 ROA not before: Wed 19 Aug 2026 00:01:25 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:70:a9:f9:c4:0c:5c:c7:18:b8:02:25:c7:d6:89:a2:48:c7:da:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:01:25 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=94eb91c3974a3a20b7c915a321f111b2baa1e0972dab5d312416e4d5cb8b35a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:a1:ae:40:b0:f7:68:d3:45:7a:c2:0a:fa: 30:5d:dc:7e:77:16:86:02:f2:b1:3b:ee:67:0d:51: 86:1d:0b:62:c7:ff:63:98:d9:b4:cc:01:fe:91:28: 6f:28:92:f7:c0:ad:d3:0a:35:c6:70:b1:70:c7:7f: ed:a2:d8:df:07:89:b9:29:79:cb:5e:b5:af:84:77: 86:65:b9:45:73:79:7c:2e:9e:45:e5:80:aa:92:ba: 9a:55:28:8f:89:6e:f2:c4:ea:cc:cd:72:b1:04:07: 4b:ea:e0:0c:db:c0:dc:9d:2c:e4:9c:7d:d5:74:ed: 2e:3c:35:d1:8a:70:42:d3:80:fa:76:0e:c2:dc:57: d5:31:7e:80:42:88:79:1f:47:4b:a9:07:62:f4:5c: c4:cd:8e:87:9a:c3:3e:af:3b:a8:e2:a5:0d:c8:37: 45:ce:76:d7:82:0f:f7:c4:91:8f:b0:b4:e6:72:c6: 98:55:9b:e7:2e:69:62:ec:1f:4e:8a:c6:7e:74:23: 9a:21:50:80:14:19:c7:f2:d4:77:6e:a0:36:f2:da: a5:fa:3a:28:ba:0f:68:cf:c1:dc:f2:bf:92:e0:2d: 28:cf:86:03:26:24:ac:4b:e3:2c:fe:50:d1:89:20: 6b:14:80:a0:fa:05:fa:fa:9c:39:57:64:90:a3:a5: 53:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5E:09:3F:DD:FB:E6:EB:44:B3:BF:F5:A1:88:2F:FF:FF:3C:E3:FE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/244183a3-f7dc-496f-9560-77200b99c0c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:8800::/40 Signature Algorithm: sha256WithRSAEncryption 23:c0:e3:a3:13:75:cd:9c:98:0a:3b:77:fa:b6:65:af:f1:fd: 46:f0:c7:36:26:c3:c7:2c:5e:ef:99:63:a3:89:8a:63:30:67: 70:6d:6d:ad:fc:20:ca:97:7e:05:ff:5a:27:a5:72:7b:bd:49: 55:cb:d3:70:55:c8:f9:7f:7f:16:ce:d3:c1:23:36:d0:d9:5e: 1f:5d:df:9c:d6:d6:93:df:8e:67:2c:59:3f:cd:dc:53:2a:78: 13:1d:f2:2f:bd:bc:a2:2b:1d:fd:d3:21:f6:53:51:1b:d7:d2: 05:48:60:21:5e:97:98:2e:01:94:65:fe:aa:13:70:51:2e:79: 0d:81:82:3f:a3:ad:9b:06:9a:59:5b:fb:ea:3b:44:e5:2c:21: b1:90:94:5b:3f:c5:6a:54:92:57:81:b4:9b:3d:6b:29:7b:33: af:49:09:1d:06:4a:1b:e0:a0:f1:2d:e6:de:de:33:e6:20:f1: 21:29:34:6b:36:63:b2:92:04:e2:f4:0d:5f:a2:0f:10:98:7d: fd:b2:d1:30:4a:2e:e5:fe:73:80:b7:66:33:ec:ce:c0:fc:de: b3:85:ce:9c:ad:84:e6:1a:18:03:57:64:ee:bd:02:58:85:4d: 0e:f5:14:64:ce:c7:c7:a5:6c:c2:a8:09:fe:fa:45:5b:b9:3a: 80:61:2d:3a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCHCp+cQMXMcYuAIlx9aJokjH2jwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDEyNVoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAOTRlYjkxYzM5NzRhM2EyMGI3Yzkx NWEzMjFmMTExYjJiYWExZTA5NzJkYWI1ZDMxMjQxNmU0ZDVjYjhiMzVhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDKhrkCw92jTRXrCCvowXdx+dxaG AvKxO+5nDVGGHQtix/9jmNm0zAH+kShvKJL3wK3TCjXGcLFwx3/totjfB4m5KXnL XrWvhHeGZblFc3l8Lp5F5YCqkrqaVSiPiW7yxOrMzXKxBAdL6uAM28DcnSzknH3V dO0uPDXRinBC04D6dg7C3FfVMX6AQoh5H0dLqQdi9FzEzY6HmsM+rzuo4qUNyDdF znbXgg/3xJGPsLTmcsaYVZvnLmli7B9OisZ+dCOaIVCAFBnH8tR3bqA28tql+joo ug9oz8Hc8r+S4C0oz4YDJiSsS+Ms/lDRiSBrFICg+gX6+pw5V2SQo6VT+wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFF1eCT/d++brRLO/9aGIL///POP+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0NDE4M2EzLWY3ZGMtNDk2Zi05NTYwLTc3MjAwYjk5YzBjNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauogwDQYJKoZIhvcNAQELBQADggEBACPA46MTdc2cmAo7d/q2 Za/x/UbwxzYmw8csXu+ZY6OJimMwZ3Btba38IMqXfgX/Wielcnu9SVXL03BVyPl/ fxbO08EjNtDZXh9d35zW1pPfjmcsWT/N3FMqeBMd8i+9vKIrHf3TIfZTURvX0gVI YCFel5guAZRl/qoTcFEueQ2Bgj+jrZsGmllb++o7ROUsIbGQlFs/xWpUkleBtJs9 ayl7M69JCR0GShvgoPEt5t7eM+Yg8SEpNGs2Y7KSBOL0DV+iDxCYff2y0TBKLuX+ c4C3ZjPszsD83rOFzpythOYaGANXZO69AliFTQ71FGTOx8elbMKoCf76RVu5OoBh LTo= -----END CERTIFICATE-----Generated at Wed Aug 26 20:15:35 2026 by rpki-client