$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa File: 2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa (raw, json) Hash identifier: ZuUzMPR614vT+uR0iDSUYLRy6V8co1TR0sauNWV+WC4= Subject key identifier: 20:95:A5:B3:D1:B4:2D:61:8F:58:73:30:D7:D6:03:F6:60:23:CD:90 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 20CC3E86CEDB88A9148A45721F0CBCA07AE31173 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa Signing time: Thu 30 Jul 2026 00:00:45 +0000 ROA not before: Thu 30 Jul 2026 00:00:45 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:cc:3e:86:ce:db:88:a9:14:8a:45:72:1f:0c:bc:a0:7a:e3:11:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:00:45 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=a551952e57df652367b857b7ef693384b1f0a608c02d5e75b9ebb5084fc0d217, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e6:a4:38:af:cb:ed:ae:a8:a4:a7:49:80:a9: b4:ac:37:28:8a:9d:b4:96:90:20:17:9e:94:54:bf: ac:0c:34:b7:48:94:a6:9e:83:0a:a5:d4:60:06:cd: 8d:78:1f:fc:f2:c0:88:8f:1c:59:b6:b8:cb:20:1f: fb:03:6b:d3:f1:f8:93:7e:51:66:55:58:35:8b:56: 79:4e:88:27:8f:06:7c:f4:d3:89:4b:58:99:d6:a0: a3:91:98:2d:df:7a:8c:6a:12:a1:60:54:0b:f4:90: 13:21:56:e0:c7:2f:ff:a0:55:47:af:a9:6d:95:cc: 13:36:d2:ce:d9:a9:53:bb:4e:b2:c7:e6:78:4f:f9: 11:4b:a5:d5:6b:68:25:3c:f8:bc:52:64:af:9c:83: c0:fc:51:04:07:22:7a:ae:38:8d:8f:0c:fe:f4:55: 36:5e:35:a7:8c:63:ff:87:d4:6e:30:a6:ad:27:a4: 93:1a:55:98:50:10:98:ff:62:d9:b6:ad:e2:62:1d: 18:e6:cd:ad:9a:ba:ef:9d:c1:d0:ae:04:c7:b7:33: 30:91:ac:77:46:80:c7:62:c9:40:d5:7f:2b:0e:d6: 05:2f:4e:7c:36:b8:a0:bb:ae:29:01:fb:3d:89:70: 29:9a:2f:80:7c:f0:74:36:47:03:e9:b5:ba:42:ea: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:95:A5:B3:D1:B4:2D:61:8F:58:73:30:D7:D6:03:F6:60:23:CD:90 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:a080::/48 Signature Algorithm: sha256WithRSAEncryption c5:cf:86:70:ac:ca:2a:9b:3c:3c:bc:ac:d2:ad:0d:fb:26:65: 8e:44:b0:36:11:fa:be:52:34:bc:7c:a0:2a:07:53:ae:24:61: ae:0c:47:14:37:ca:98:b5:cd:ae:c8:af:34:b5:48:cb:e3:4c: 80:c9:b9:0c:18:40:b9:e6:50:69:11:8f:1f:47:5e:05:f7:3d: 89:37:eb:7b:58:6c:dc:db:30:0f:73:dd:1a:af:63:1a:db:f5: ea:c6:ca:76:14:47:ba:92:01:47:cc:48:f0:b5:c2:d2:e6:13: ed:3d:d4:c8:c4:43:9e:3e:ff:94:52:e0:04:97:98:18:e9:30: 30:26:d9:e3:4c:85:d4:e6:80:3c:d9:01:7e:60:83:7c:e7:98: af:b6:7b:f5:a1:4a:27:a5:35:fb:da:59:fb:22:04:74:88:90: e7:36:4e:d0:88:ce:8f:0d:94:29:51:66:d5:aa:7b:98:21:36: e2:fb:58:e9:98:79:e7:e1:66:3c:f4:22:18:c9:84:2e:b7:0d: 1d:97:78:74:92:57:44:25:0c:ac:f2:95:82:7c:c8:89:40:3f: 9f:59:76:32:b9:3b:39:20:24:8e:f8:00:5c:7a:6b:d3:15:41: e2:95:46:56:99:d2:67:b9:b4:b9:36:80:fb:ad:60:ed:3e:23: 0d:0d:61:e3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIMw+hs7biKkUikVyHwy8oHrjEXMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMDA0NVoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAYTU1MTk1MmU1N2RmNjUyMzY3Yjg1 N2I3ZWY2OTMzODRiMWYwYTYwOGMwMmQ1ZTc1YjllYmI1MDg0ZmMwZDIxNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOakOK/L7a6opKdJgKm0rDcoip20 lpAgF56UVL+sDDS3SJSmnoMKpdRgBs2NeB/88sCIjxxZtrjLIB/7A2vT8fiTflFm VVg1i1Z5TognjwZ89NOJS1iZ1qCjkZgt33qMahKhYFQL9JATIVbgxy//oFVHr6lt lcwTNtLO2alTu06yx+Z4T/kRS6XVa2glPPi8UmSvnIPA/FEEByJ6rjiNjwz+9FU2 XjWnjGP/h9RuMKatJ6STGlWYUBCY/2LZtq3iYh0Y5s2tmrrvncHQrgTHtzMwkax3 RoDHYslA1X8rDtYFL058Nrigu64pAfs9iXApmi+AfPB0NkcD6bW6Qur1FwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCCVpbPRtC1hj1hzMNfWA/ZgI82QMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlYmRjMWU5LTBlNGItNDJmZi05YTI3LTgwMGI3Mzk4OTdhNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAKCAMA0GCSqGSIb3DQEBCwUAA4IBAQDFz4ZwrMoqmzw8vKzS rQ37JmWORLA2Efq+UjS8fKAqB1OuJGGuDEcUN8qYtc2uyK80tUjL40yAybkMGEC5 5lBpEY8fR14F9z2JN+t7WGzc2zAPc90ar2Ma2/Xqxsp2FEe6kgFHzEjwtcLS5hPt PdTIxEOePv+UUuAEl5gY6TAwJtnjTIXU5oA82QF+YIN855ivtnv1oUonpTX72ln7 IgR0iJDnNk7QiM6PDZQpUWbVqnuYITbi+1jpmHnn4WY89CIYyYQutw0dl3h0kldE JQys8pWCfMiJQD+fWXYyuTs5ICSO+ABcemvTFUHilUZWmdJnubS5NoD7rWDtPiMN DWHj -----END CERTIFICATE-----Generated at Wed Aug 26 13:04:27 2026 by rpki-client