$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/373dfcb8-1b1a-49a8-9b61-03b10edb88ea.roa File: 373dfcb8-1b1a-49a8-9b61-03b10edb88ea.roa (raw, json) Hash identifier: gX55geVQBzoWDh4EYn7hN1iAG8AEPIyI2agVZ5WDBEY= Subject key identifier: 90:B1:53:9C:5C:DB:B5:62:15:BE:08:F1:EE:BC:A8:2B:D7:30:A4:10 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 306864F0193E625E116C143B728B0F279954FC21 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/373dfcb8-1b1a-49a8-9b61-03b10edb88ea.roa Signing time: Wed 19 Aug 2026 00:10:28 +0000 ROA not before: Wed 19 Aug 2026 00:10:28 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:68:64:f0:19:3e:62:5e:11:6c:14:3b:72:8b:0f:27:99:54:fc:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:28 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=e81c917783609603a315cac2db9da97ab3aec0b353ea29f231d72d672d4ce4c7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:45:ce:7a:d1:3f:01:ea:16:47:43:a0:db:87: b3:f5:0d:2b:ef:1b:2f:08:e7:0d:d7:b8:28:2d:29: 1f:1d:99:59:b9:6c:db:19:6e:1d:41:8f:fb:54:ba: 4f:56:d8:c8:41:20:52:c1:f0:97:0e:0a:67:c5:b7: f5:c8:b7:16:d5:45:4b:2f:1e:82:c2:15:e0:84:6f: 0b:e5:d1:2f:91:d7:46:b2:8c:91:62:b1:28:1b:6e: e7:a6:33:af:ad:e8:06:31:7e:eb:e6:9b:4a:ea:de: 4b:92:d5:e8:4f:62:c8:7f:bf:3a:29:48:bc:6d:5d: bf:7b:85:d0:85:7b:d8:af:d1:f6:e3:0f:70:6d:74: 97:c9:41:80:5b:46:27:08:1c:78:02:0c:f3:6d:c4: 77:44:a3:39:27:48:7c:b8:24:9c:5e:de:20:b8:47: ba:62:4c:6a:a5:bf:b3:7e:67:8d:43:e8:e9:08:2f: f6:ca:2b:72:51:f3:fe:de:9c:a2:51:ec:73:c0:17: df:68:e3:2e:53:26:bd:77:31:5a:01:03:18:ae:2d: 0b:72:b5:3a:23:ee:ed:86:91:e0:bb:a7:0b:16:ed: 1d:cb:07:e9:8a:f9:99:37:a1:d4:ef:84:95:82:11: c3:25:12:ea:36:d5:9e:b3:64:aa:fd:22:c6:79:29: 0f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B1:53:9C:5C:DB:B5:62:15:BE:08:F1:EE:BC:A8:2B:D7:30:A4:10 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/373dfcb8-1b1a-49a8-9b61-03b10edb88ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:8000::/40 Signature Algorithm: sha256WithRSAEncryption 5b:e6:5c:68:83:a4:26:34:f2:4f:48:ce:ba:db:5e:8f:28:fe: dd:d8:77:71:e9:bf:cc:3c:d3:85:97:05:13:91:95:82:dd:77: e7:7d:f8:1a:b6:cc:82:bd:5a:b4:10:c3:b0:7b:34:0d:c6:2d: 2a:cd:f8:54:3c:91:c3:cd:08:52:e6:e5:6a:fb:87:37:e4:60: 49:4c:1f:00:ba:82:ae:31:34:f5:95:ae:a4:f1:cc:eb:94:81: 95:cd:8f:20:12:ed:8a:67:b9:b6:be:4b:f2:08:d0:a5:2d:a7: 2a:d7:fa:77:0d:a8:25:34:4e:d5:66:c1:9c:dd:0f:2a:fa:ee: c4:a7:14:84:ca:b6:f2:3a:94:9a:38:3e:a1:b5:a7:82:75:29: 92:e6:d7:19:35:2f:37:ba:c8:f8:c3:b2:61:04:60:5f:36:3a: 72:7a:e1:2c:29:15:4e:d9:c1:87:54:89:1e:67:a0:2f:0d:ca: b7:66:33:87:b5:8b:3d:fe:44:c8:e9:82:bb:4d:b5:01:51:98: 00:31:ee:df:b0:c8:2a:a4:fc:aa:6e:f0:66:9e:a1:0f:fa:e8: 0d:8a:82:01:5f:e8:7c:f1:31:68:8e:4d:67:cb:3d:66:40:e9: c4:24:e1:cb:bd:2d:2b:db:3a:94:dc:67:71:37:d2:b2:7e:29: 68:05:17:31 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMGhk8Bk+Yl4RbBQ7cosPJ5lU/CEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTAyOFoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAZTgxYzkxNzc4MzYwOTYwM2EzMTVj YWMyZGI5ZGE5N2FiM2FlYzBiMzUzZWEyOWYyMzFkNzJkNjcyZDRjZTRjNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEXOetE/AeoWR0Og24ez9Q0r7xsv COcN17goLSkfHZlZuWzbGW4dQY/7VLpPVtjIQSBSwfCXDgpnxbf1yLcW1UVLLx6C whXghG8L5dEvkddGsoyRYrEoG27npjOvregGMX7r5ptK6t5LktXoT2LIf786KUi8 bV2/e4XQhXvYr9H24w9wbXSXyUGAW0YnCBx4AgzzbcR3RKM5J0h8uCScXt4guEe6 Ykxqpb+zfmeNQ+jpCC/2yityUfP+3pyiUexzwBffaOMuUya9dzFaAQMYri0LcrU6 I+7thpHgu6cLFu0dywfpivmZN6HU74SVghHDJRLqNtWes2Sq/SLGeSkP4QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJCxU5xc27ViFb4I8e68qCvXMKQQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM3M2RmY2I4LTFiMWEtNDlhOC05YjYxLTAzYjEwZWRiODhlYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6YAwDQYJKoZIhvcNAQELBQADggEBAFvmXGiDpCY08k9Izrrb Xo8o/t3Yd3Hpv8w804WXBRORlYLdd+d9+Bq2zIK9WrQQw7B7NA3GLSrN+FQ8kcPN CFLm5Wr7hzfkYElMHwC6gq4xNPWVrqTxzOuUgZXNjyAS7Ypnuba+S/II0KUtpyrX +ncNqCU0TtVmwZzdDyr67sSnFITKtvI6lJo4PqG1p4J1KZLm1xk1Lze6yPjDsmEE YF82OnJ64SwpFU7ZwYdUiR5noC8NyrdmM4e1iz3+RMjpgrtNtQFRmAAx7t+wyCqk /Kpu8GaeoQ/66A2KggFf6HzxMWiOTWfLPWZA6cQk4cu9LSvbOpTcZ3E30rJ+KWgF FzE= -----END CERTIFICATE-----Generated at Wed Aug 26 02:11:01 2026 by rpki-client