$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/375520d4-df61-4e6c-9222-5f7232d9f4b8.roa File: 375520d4-df61-4e6c-9222-5f7232d9f4b8.roa (raw, json) Hash identifier: VLojZB0AGf2DxMfpd3V7dxtjwsaPZFeQhJVymvAND5c= Subject key identifier: E3:30:35:C0:01:71:DE:DB:29:D6:00:B3:67:AD:56:D8:0E:4A:4C:6D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1BE72FBC5D1400AA36CF3715882D7B50CEB7DC40 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/375520d4-df61-4e6c-9222-5f7232d9f4b8.roa Signing time: Thu 30 Jul 2026 00:10:34 +0000 ROA not before: Thu 30 Jul 2026 00:10:34 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e7:2f:bc:5d:14:00:aa:36:cf:37:15:88:2d:7b:50:ce:b7:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:10:34 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=917fa4e5ebafe3952f7c07362de09aed5002e97975ff26673b0edcaf8a69e4e4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:67:88:fc:74:86:4b:5f:ea:ab:5b:12:5d: a2:6e:a6:24:f0:b7:c1:a9:f6:d4:d3:2a:71:f8:8a: 31:31:f2:ae:a6:30:29:1e:25:0c:43:e7:0a:b5:a5: 24:6b:20:a8:39:c5:b0:52:97:3c:1c:08:f0:11:f0: d4:00:b8:7e:05:e3:4f:6d:e8:b0:87:15:e9:03:13: 62:00:7d:1b:ff:44:ea:e1:07:b9:f0:8a:19:c2:53: 62:65:4b:cf:90:50:94:e8:32:29:ef:8d:e6:ef:6d: 69:aa:c1:7c:cc:eb:c0:6b:58:7c:65:bb:62:5c:f1: f0:2f:05:4a:29:1b:54:44:f8:1d:72:79:58:ee:ef: f3:3b:0e:69:d2:26:73:13:4f:1c:c8:a9:09:ab:80: b9:30:b2:93:d5:18:81:fd:0f:f4:24:ec:7f:cc:5a: d5:8a:60:15:0e:36:07:8e:11:e9:0a:3d:91:2f:19: 2a:42:8f:14:74:7c:7e:69:f4:3a:14:f6:db:7e:53: e4:a9:49:34:a2:ca:30:98:9c:86:60:88:4e:de:b9: 5d:93:49:ff:cd:7a:42:8d:03:26:c3:be:b1:17:ec: 81:5f:bb:9a:d6:ba:74:02:15:bc:ae:39:2f:ec:40: 07:42:dc:db:a4:f3:ac:61:ce:ff:57:26:ba:87:45: d0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:30:35:C0:01:71:DE:DB:29:D6:00:B3:67:AD:56:D8:0E:4A:4C:6D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/375520d4-df61-4e6c-9222-5f7232d9f4b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4020::/48 Signature Algorithm: sha256WithRSAEncryption 30:27:f4:22:69:8e:76:6b:31:40:20:9f:e3:3e:17:d8:90:12: 85:39:9f:ac:ee:c5:b5:7a:1a:20:f3:9c:dd:1f:82:b1:3a:1d: 9f:57:22:76:a5:82:6c:c1:06:af:a6:60:0a:7e:d4:46:89:df: ac:34:d6:ae:55:37:28:63:02:e2:aa:bc:76:4d:e5:43:ea:00: 48:0c:2f:3a:db:1e:c3:bb:12:01:ba:8d:ba:3c:93:9d:43:21: 3a:03:c7:a7:ee:43:02:6e:68:8f:c2:72:26:a8:e1:d6:fe:59: 82:b5:23:07:5a:a7:a9:f9:99:5a:7a:ce:01:42:30:96:9f:74: 91:95:c4:42:cb:bc:67:20:8b:3d:24:cc:ef:20:5a:45:3f:ea: 1d:92:da:76:40:67:1a:9e:93:57:ae:a4:b1:02:1c:e3:b4:32: eb:8d:72:27:2f:ac:c2:87:f3:c7:f6:c9:ad:42:4a:ff:2e:cd: ec:58:8a:c4:40:28:f0:89:aa:b2:f9:f0:51:b5:bb:1d:bb:26: 49:27:5d:cb:ad:b1:c8:cd:76:ab:56:60:7c:f8:6f:07:6c:67: 79:53:cc:30:0f:3e:f8:e5:e7:83:02:ef:89:54:e5:24:5f:9f: 96:cf:ac:7a:9d:83:28:ee:55:45:75:19:1b:65:a3:65:77:8e: 12:26:ed:48 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUG+cvvF0UAKo2zzcViC17UM633EAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTAzNFoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAOTE3ZmE0ZTVlYmFmZTM5NTJmN2Mw NzM2MmRlMDlhZWQ1MDAyZTk3OTc1ZmYyNjY3M2IwZWRjYWY4YTY5ZTRlNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnpniPx0hktf6qtbEl2ibqYk8LfB qfbU0ypx+IoxMfKupjApHiUMQ+cKtaUkayCoOcWwUpc8HAjwEfDUALh+BeNPbeiw hxXpAxNiAH0b/0Tq4Qe58IoZwlNiZUvPkFCU6DIp743m721pqsF8zOvAa1h8Zbti XPHwLwVKKRtURPgdcnlY7u/zOw5p0iZzE08cyKkJq4C5MLKT1RiB/Q/0JOx/zFrV imAVDjYHjhHpCj2RLxkqQo8UdHx+afQ6FPbbflPkqUk0osowmJyGYIhO3rldk0n/ zXpCjQMmw76xF+yBX7ua1rp0AhW8rjkv7EAHQtzbpPOsYc7/Vya6h0XQzwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOMwNcABcd7bKdYAs2etVtgOSkxtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM3NTUyMGQ0LWRmNjEtNGU2Yy05MjIyLTVmNzIzMmQ5ZjRiOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0AgMA0GCSqGSIb3DQEBCwUAA4IBAQAwJ/QiaY52azFAIJ/j PhfYkBKFOZ+s7sW1ehog85zdH4KxOh2fVyJ2pYJswQavpmAKftRGid+sNNauVTco YwLiqrx2TeVD6gBIDC862x7DuxIBuo26PJOdQyE6A8en7kMCbmiPwnImqOHW/lmC tSMHWqep+Zlaes4BQjCWn3SRlcRCy7xnIIs9JMzvIFpFP+odktp2QGcanpNXrqSx AhzjtDLrjXInL6zCh/PH9smtQkr/Ls3sWIrEQCjwiaqy+fBRtbsduyZJJ13LrbHI zXarVmB8+G8HbGd5U8wwDz745eeDAu+JVOUkX5+Wz6x6nYMo7lVFdRkbZaNld44S Ju1I -----END CERTIFICATE-----Generated at Wed Aug 26 14:05:23 2026 by rpki-client