$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34418644-e5bc-49e0-b5df-6ef63db08788.roa File: 34418644-e5bc-49e0-b5df-6ef63db08788.roa (raw, json) Hash identifier: z9NaodRAsZhuvv/fFwukGhA4w6V6K4eO8QZGMSuzwUg= Subject key identifier: 12:89:E0:D4:A3:B6:52:8D:8E:70:B5:BB:DE:F3:B1:79:A6:DD:F1:28 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6BBE22BA71C058E0455CDE020671F9264D4EF317 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34418644-e5bc-49e0-b5df-6ef63db08788.roa Signing time: Wed 19 Aug 2026 00:10:43 +0000 ROA not before: Wed 19 Aug 2026 00:10:43 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:be:22:ba:71:c0:58:e0:45:5c:de:02:06:71:f9:26:4d:4e:f3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:43 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=fdbcf9d0431e0ee776bbbbed817008d6e57f0951b44196e7e1d5d3122091600e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:35:35:f0:50:a0:fd:bc:d4:97:fd:73:41: 13:c2:32:92:32:5d:16:f7:53:64:ec:59:86:57:b0: fc:8e:05:01:8c:d0:14:3d:db:6d:17:66:1a:85:79: 62:2c:3c:3f:56:3c:4c:d8:8b:66:0a:32:40:e6:79: 47:42:87:96:bd:31:2a:35:3c:68:fc:6b:7b:05:9b: 98:54:81:16:80:c1:eb:d5:32:06:49:0a:af:31:f6: 0e:c2:16:4a:90:fd:68:fc:cc:ef:3b:fc:62:55:c8: 7b:c6:3a:53:d1:2c:ab:ac:2d:2c:31:2a:9c:bc:8e: a6:f1:fa:a0:83:88:e7:85:9b:46:f7:fd:16:e8:33: f9:0e:e4:f6:f6:55:45:b5:49:0e:3b:76:e0:af:2c: c9:12:6c:3a:09:a6:95:a8:85:79:06:8d:5a:42:72: f6:a1:ad:49:33:5c:c2:62:0f:b3:33:86:33:57:e5: 27:34:5e:6e:ee:98:34:10:70:92:b4:b7:64:30:21: 5c:14:b1:df:8f:1e:d6:25:db:d0:f9:bb:d7:06:24: 79:0e:8f:e7:8d:f7:30:7a:c6:2a:6b:7e:a1:c7:60: 0c:06:c3:9f:aa:39:64:f4:50:5c:dd:6c:4a:29:4f: 05:d1:0a:b4:0d:49:0d:c8:c0:08:56:c5:63:0c:f1: 3b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:89:E0:D4:A3:B6:52:8D:8E:70:B5:BB:DE:F3:B1:79:A6:DD:F1:28 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34418644-e5bc-49e0-b5df-6ef63db08788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:e040::/48 Signature Algorithm: sha256WithRSAEncryption cb:2a:c4:7f:cd:e0:1f:f1:17:58:ea:33:e8:ea:26:b3:ed:2b: 64:03:e0:13:c3:f1:e4:48:46:34:fe:f6:19:02:c7:8f:64:7c: 51:8c:59:d4:7f:f3:b8:76:12:05:c0:ad:0a:3f:26:cc:8c:8c: cc:b2:85:b8:0d:35:c3:45:51:14:b0:0b:c1:67:79:c7:bd:c1: 66:2c:f5:e4:d9:4b:0f:87:3b:5a:60:a4:cd:61:5d:91:e0:c7: ac:f0:b4:f5:bc:ba:9b:7c:19:dd:f7:ba:5b:cd:45:30:83:8c: 47:eb:68:da:30:d5:d0:fd:00:68:12:72:a0:79:bf:94:73:1a: 50:c6:db:f9:eb:22:c3:63:94:93:87:19:c9:d6:7f:ba:6c:0a: cc:36:d2:fa:69:ca:25:e5:31:01:1b:1f:35:aa:3c:63:7d:bf: ff:2c:19:34:87:c1:5a:31:43:1c:81:7c:01:78:af:8b:84:40: 1d:da:20:f3:bd:c3:15:9d:58:7c:b9:3a:12:ba:88:5a:d4:33: 6e:67:ce:40:c4:c0:5a:00:63:cd:3d:bc:65:c6:cb:5b:fe:35: 7a:24:90:56:49:f4:4e:9c:d2:76:f3:45:06:74:26:4d:18:c9: 3b:68:4e:be:61:c9:c7:c1:62:64:db:08:2c:2c:8c:9b:80:54: 11:98:4b:05 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUa74iunHAWOBFXN4CBnH5Jk1O8xcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTA0M1oX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAZmRiY2Y5ZDA0MzFlMGVlNzc2YmJi YmVkODE3MDA4ZDZlNTdmMDk1MWI0NDE5NmU3ZTFkNWQzMTIyMDkxNjAwZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiM1NfBQoP281Jf9c0ETwjKSMl0W 91Nk7FmGV7D8jgUBjNAUPdttF2YahXliLDw/VjxM2ItmCjJA5nlHQoeWvTEqNTxo /Gt7BZuYVIEWgMHr1TIGSQqvMfYOwhZKkP1o/MzvO/xiVch7xjpT0SyrrC0sMSqc vI6m8fqgg4jnhZtG9/0W6DP5DuT29lVFtUkOO3bgryzJEmw6CaaVqIV5Bo1aQnL2 oa1JM1zCYg+zM4YzV+UnNF5u7pg0EHCStLdkMCFcFLHfjx7WJdvQ+bvXBiR5Do/n jfcwesYqa36hx2AMBsOfqjlk9FBc3WxKKU8F0Qq0DUkNyMAIVsVjDPE7ywIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBKJ4NSjtlKNjnC1u97zsXmm3fEoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM0NDE4NjQ0LWU1YmMtNDllMC1iNWRmLTZlZjYzZGIwODc4OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauuBAMA0GCSqGSIb3DQEBCwUAA4IBAQDLKsR/zeAf8RdY6jPo 6iaz7StkA+ATw/HkSEY0/vYZAsePZHxRjFnUf/O4dhIFwK0KPybMjIzMsoW4DTXD RVEUsAvBZ3nHvcFmLPXk2UsPhztaYKTNYV2R4Mes8LT1vLqbfBnd97pbzUUwg4xH 62jaMNXQ/QBoEnKgeb+UcxpQxtv56yLDY5SThxnJ1n+6bArMNtL6acol5TEBGx81 qjxjfb//LBk0h8FaMUMcgXwBeK+LhEAd2iDzvcMVnVh8uToSuoha1DNuZ85AxMBa AGPNPbxlxstb/jV6JJBWSfROnNJ280UGdCZNGMk7aE6+YcnHwWJk2wgsLIybgFQR mEsF -----END CERTIFICATE-----Generated at Wed Aug 26 13:04:32 2026 by rpki-client