$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bcbf4a7-a7e0-4f59-b932-d60f1940dff7.roa File: 2bcbf4a7-a7e0-4f59-b932-d60f1940dff7.roa (raw, json) Hash identifier: 9zYmE4kc3e0K0c6sZUnphYpagS5PWHnqsQ1pJhZ5aVQ= Subject key identifier: 3A:0D:4C:DA:6C:2C:C9:E5:47:25:3D:AF:60:36:ED:C4:E4:38:B7:70 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0FBB03994D55D411EE21D0263CA27B2B3ADC9C35 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bcbf4a7-a7e0-4f59-b932-d60f1940dff7.roa Signing time: Thu 30 Jul 2026 00:20:51 +0000 ROA not before: Thu 30 Jul 2026 00:20:51 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:40a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:bb:03:99:4d:55:d4:11:ee:21:d0:26:3c:a2:7b:2b:3a:dc:9c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:20:51 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=d920800a4046dbff1806f2860bc85f289fd80c799b8603c0242ca75019dcc7d8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:91:44:25:62:c9:9b:7e:5c:b6:56:98:02:de: be:57:25:89:97:61:e1:57:22:4e:83:73:46:66:eb: e5:ce:8b:8a:8b:6b:a2:53:24:95:3b:a0:df:1d:e6: a9:fa:3d:2d:e4:ae:b3:ea:39:80:32:00:ef:c4:80: 6a:50:be:2d:5c:f0:08:ed:20:61:a7:eb:b0:2a:7f: e5:75:a0:e5:3f:2a:78:56:cb:46:5e:c2:ef:17:c3: 86:cb:87:89:54:c1:3c:32:f9:bc:0e:5b:c7:f9:79: 0e:fa:a1:1f:e2:0f:ea:0d:32:de:56:71:9a:ef:48: 35:c6:63:4f:55:90:ef:85:5e:0f:7d:2c:05:85:59: 7d:d3:94:9c:51:92:ac:fb:de:64:06:a8:fd:52:3e: e3:0d:cb:e2:50:eb:b4:77:37:45:b7:6a:46:2c:a2: 0f:04:bc:d5:bc:86:81:e8:e9:38:dc:61:b2:d6:dc: e9:bb:f7:b4:d9:65:e9:99:5b:f1:06:8e:79:db:35: 5a:5c:1a:25:f0:5b:a7:b1:80:3c:33:3a:25:c9:58: a8:c6:bd:40:03:c4:c6:c9:fc:5e:17:e1:2e:13:9b: fd:be:f3:03:de:a4:3e:2f:8d:76:32:1d:ca:a2:2e: f8:51:d4:c8:b6:aa:e1:61:6e:4e:30:5b:01:f6:06: 1d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0D:4C:DA:6C:2C:C9:E5:47:25:3D:AF:60:36:ED:C4:E4:38:B7:70 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bcbf4a7-a7e0-4f59-b932-d60f1940dff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:40a0::/48 Signature Algorithm: sha256WithRSAEncryption 71:88:a6:ab:4b:69:a0:eb:43:4e:ab:42:e0:de:34:65:d5:2f: 93:e6:2f:0d:f9:31:68:1c:b7:46:e6:b5:9d:a6:7a:89:04:1e: b2:47:9e:ae:cf:ab:6e:9c:ae:b5:6b:f8:78:c0:1c:41:13:5c: fe:3e:e5:ff:e9:ce:5b:86:4a:24:4d:d8:01:41:46:0a:38:00: 05:9b:11:98:c7:15:5c:cb:40:67:93:69:1d:29:2e:a2:f5:16: 04:71:75:58:8a:03:e0:15:64:19:d7:43:78:57:cf:0b:dc:e6: 80:cb:3d:71:b6:3d:ce:d5:de:4b:7d:a0:3f:57:dc:3f:83:c8: be:92:d2:7b:71:bf:8e:f3:af:3c:52:02:58:2c:7b:af:6c:48: a9:02:07:51:2c:88:00:33:84:85:da:0a:34:df:f0:eb:24:b0: 4b:83:c1:09:6e:d4:4c:69:a4:01:e4:a8:77:1e:5a:1f:26:e8: cc:0d:04:7c:e5:47:c1:71:43:96:5a:60:8e:13:67:25:a7:5a: 07:02:cb:bd:a6:6a:6f:be:ee:41:34:44:c1:73:27:87:eb:d5: 73:b2:41:9f:77:6a:8d:fc:7d:c0:62:09:60:7f:51:c3:93:f9: 29:58:c8:5c:7a:dd:05:9f:93:4c:81:1d:57:c0:43:0c:19:d4: ff:b8:81:13 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUD7sDmU1V1BHuIdAmPKJ7KzrcnDUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMjA1MVoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAZDkyMDgwMGE0MDQ2ZGJmZjE4MDZm Mjg2MGJjODVmMjg5ZmQ4MGM3OTliODYwM2MwMjQyY2E3NTAxOWRjYzdkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45FEJWLJm35ctlaYAt6+VyWJl2Hh VyJOg3NGZuvlzouKi2uiUySVO6DfHeap+j0t5K6z6jmAMgDvxIBqUL4tXPAI7SBh p+uwKn/ldaDlPyp4VstGXsLvF8OGy4eJVME8Mvm8DlvH+XkO+qEf4g/qDTLeVnGa 70g1xmNPVZDvhV4PfSwFhVl905ScUZKs+95kBqj9Uj7jDcviUOu0dzdFt2pGLKIP BLzVvIaB6Ok43GGy1tzpu/e02WXpmVvxBo552zVaXBol8FunsYA8MzolyVioxr1A A8TGyfxeF+EuE5v9vvMD3qQ+L412Mh3Koi74UdTItqrhYW5OMFsB9gYdNQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDoNTNpsLMnlRyU9r2A27cTkOLdwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJiY2JmNGE3LWE3ZTAtNGY1OS1iOTMyLWQ2MGYxOTQwZGZmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAECgMA0GCSqGSIb3DQEBCwUAA4IBAQBxiKarS2mg60NOq0Lg 3jRl1S+T5i8N+TFoHLdG5rWdpnqJBB6yR56uz6tunK61a/h4wBxBE1z+PuX/6c5b hkokTdgBQUYKOAAFmxGYxxVcy0Bnk2kdKS6i9RYEcXVYigPgFWQZ10N4V88L3OaA yz1xtj3O1d5LfaA/V9w/g8i+ktJ7cb+O8688UgJYLHuvbEipAgdRLIgAM4SF2go0 3/DrJLBLg8EJbtRMaaQB5Kh3HlofJujMDQR85UfBcUOWWmCOE2clp1oHAsu9pmpv vu5BNETBcyeH69VzskGfd2qN/H3AYglgf1HDk/kpWMhcet0Fn5NMgR1XwEMMGdT/ uIET -----END CERTIFICATE-----Generated at Wed Aug 26 17:41:16 2026 by rpki-client