$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2fe581f4-7980-4419-b5e3-20febc635f17.roa File: 2fe581f4-7980-4419-b5e3-20febc635f17.roa (raw, json) Hash identifier: M2JEO5746Ru2NAzIK5aItBMYSJ+4eDSKOmhRnRxtg64= Subject key identifier: AF:C6:2E:6E:E6:F0:9B:1F:8F:BF:73:F6:CE:14:AB:3F:62:EE:D1:C9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74D0073A10D1F23F941A6F9442253694B1E5B8CD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2fe581f4-7980-4419-b5e3-20febc635f17.roa Signing time: Sat 01 Aug 2026 00:11:17 +0000 ROA not before: Sat 01 Aug 2026 00:11:17 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d0:07:3a:10:d1:f2:3f:94:1a:6f:94:42:25:36:94:b1:e5:b8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:11:17 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=18a3592916743b8286a60a12775fdad03ebd7cdfa093b6dd916708ed4d9fd63d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:97:aa:3e:5c:3d:ac:a3:1e:28:43:14:06: f7:a2:3e:e5:ea:65:27:62:76:32:4e:3c:0d:93:0f: e7:e6:ed:11:fb:92:38:7a:97:ec:b4:d4:d6:b5:89: b2:0a:35:9e:79:ec:0b:0b:2d:00:12:9d:fc:e9:61: c4:07:6c:62:e6:28:a4:07:6c:ac:95:0b:c6:70:eb: 0d:2c:28:c9:d2:9c:0e:97:cc:cb:7c:84:d1:08:c3: 05:c4:12:47:4e:8a:f1:53:c7:70:ae:86:0b:44:d8: 2e:fe:14:8f:17:9a:e5:01:dc:30:1f:17:53:1d:59: 90:86:0e:8f:40:55:4c:2f:67:46:f4:71:b0:e6:01: 90:51:02:6d:31:b7:56:14:ab:82:b5:ab:0e:27:bb: 70:0c:70:93:d9:6a:ec:66:63:88:bd:9b:e5:53:af: db:e2:1b:ef:49:02:bb:ce:a3:66:8f:2e:db:cf:0c: be:4e:d9:33:dd:00:1e:d3:72:41:bd:2b:b1:98:5a: 3d:e8:64:2d:95:bd:87:51:ff:7a:5f:99:7a:cd:fa: 9e:d7:34:55:62:e7:36:35:81:c3:cb:7a:e1:08:cb: 21:32:86:cc:52:ac:dd:ab:a7:25:98:91:b3:47:50: 1a:9c:30:0d:64:a7:c7:2c:d1:4b:60:13:b1:20:c5: 8d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C6:2E:6E:E6:F0:9B:1F:8F:BF:73:F6:CE:14:AB:3F:62:EE:D1:C9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2fe581f4-7980-4419-b5e3-20febc635f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:c800::/40 Signature Algorithm: sha256WithRSAEncryption 1a:f3:c5:6a:ed:f1:78:32:53:72:7c:c1:93:a1:ee:0b:95:43: 24:5b:6d:1e:4e:cc:f5:3f:b2:4d:7e:e5:31:9b:90:9b:42:93: b1:8b:2a:ed:49:07:9b:dc:a7:b7:f6:87:cc:32:c1:54:ed:b1: c2:a6:13:b1:c7:f8:45:fd:09:8e:7c:d7:77:0f:eb:0a:06:28: 6f:ce:4a:7a:bc:7b:0a:1b:6a:21:3c:b7:f8:35:cd:7b:e5:89: 17:f7:76:f1:51:66:b2:93:92:e1:81:5d:04:8f:b9:b3:87:b0: a0:f7:dd:8e:9f:dc:9d:0a:ad:55:9d:63:86:73:95:5c:65:13: db:25:15:0f:52:4b:96:e4:02:81:bc:ff:40:4a:6b:8a:b8:ca: 35:68:01:54:90:ec:ec:6a:52:c2:45:90:18:6b:25:81:25:9a: c6:f9:10:ee:22:4f:0c:d0:01:3f:dd:5e:0e:70:0a:b3:f6:b9: af:c6:a3:e7:94:4b:51:b7:16:bd:ae:9c:9b:2a:0d:ab:29:9e: 68:43:8c:3d:0d:06:4d:14:89:c8:d6:6b:a7:1a:9b:50:89:a0: 0c:81:0c:04:66:ce:59:81:73:90:6f:a6:3d:ee:f2:d3:29:63: 1f:df:ba:88:8d:91:c1:eb:8e:cf:76:da:06:27:0d:2f:9e:6e: 52:6e:44:f7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdNAHOhDR8j+UGm+UQiU2lLHluM0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMTExN1oX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAMThhMzU5MjkxNjc0M2I4Mjg2YTYw YTEyNzc1ZmRhZDAzZWJkN2NkZmEwOTNiNmRkOTE2NzA4ZWQ0ZDlmZDYzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ2Xqj5cPayjHihDFAb3oj7l6mUn YnYyTjwNkw/n5u0R+5I4epfstNTWtYmyCjWeeewLCy0AEp386WHEB2xi5iikB2ys lQvGcOsNLCjJ0pwOl8zLfITRCMMFxBJHTorxU8dwroYLRNgu/hSPF5rlAdwwHxdT HVmQhg6PQFVML2dG9HGw5gGQUQJtMbdWFKuCtasOJ7twDHCT2WrsZmOIvZvlU6/b 4hvvSQK7zqNmjy7bzwy+Ttkz3QAe03JBvSuxmFo96GQtlb2HUf96X5l6zfqe1zRV Yuc2NYHDy3rhCMshMobMUqzdq6clmJGzR1AanDANZKfHLNFLYBOxIMWNwQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK/GLm7m8Jsfj79z9s4Uqz9i7tHJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmZTU4MWY0LTc5ODAtNDQxOS1iNWUzLTIwZmViYzYzNWYxNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMsgwDQYJKoZIhvcNAQELBQADggEBABrzxWrt8XgyU3J8wZOh 7guVQyRbbR5OzPU/sk1+5TGbkJtCk7GLKu1JB5vcp7f2h8wywVTtscKmE7HH+EX9 CY5813cP6woGKG/OSnq8ewobaiE8t/g1zXvliRf3dvFRZrKTkuGBXQSPubOHsKD3 3Y6f3J0KrVWdY4ZzlVxlE9slFQ9SS5bkAoG8/0BKa4q4yjVoAVSQ7OxqUsJFkBhr JYElmsb5EO4iTwzQAT/dXg5wCrP2ua/Go+eUS1G3Fr2unJsqDaspnmhDjD0NBk0U icjWa6cam1CJoAyBDARmzlmBc5Bvpj3u8tMpYx/fuoiNkcHrjs922gYnDS+eblJu RPc= -----END CERTIFICATE-----Generated at Wed Aug 26 08:04:33 2026 by rpki-client