$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39d9ccaa-9c45-4ebb-a444-c59334cce5f3.roa File: 39d9ccaa-9c45-4ebb-a444-c59334cce5f3.roa (raw, json) Hash identifier: qXF5DBM8SlSYhlwvpWLBpGhuw/PT0qc/wpp/YT23D6Y= Subject key identifier: 86:7B:79:4E:14:68:E8:EF:D8:C9:3E:F0:C1:9D:26:F2:CA:A2:A8:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 17614DD540C9DEE22E25F28E0D83092C3D38423F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39d9ccaa-9c45-4ebb-a444-c59334cce5f3.roa Signing time: Sat 01 Aug 2026 00:30:11 +0000 ROA not before: Sat 01 Aug 2026 00:30:11 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:61:4d:d5:40:c9:de:e2:2e:25:f2:8e:0d:83:09:2c:3d:38:42:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:30:11 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=298d0d575336ce5006879da2d444ce1445a65ac94e20fda02b12f9cc52bc66e5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:3f:59:af:e2:b4:5f:dc:d7:b6:d1:23:5b: 1e:63:62:3a:19:28:3e:1b:80:bc:38:cd:9a:4f:90: a3:58:d2:af:16:00:ad:c3:b4:b6:8e:99:81:61:ea: 12:8c:c2:a2:63:7e:c2:9b:96:95:8e:61:c6:b5:9e: e8:06:9c:d7:d9:68:e3:b9:3c:4e:33:76:9e:51:69: 28:00:d0:f5:c3:d4:b5:ac:41:fd:d1:2f:31:21:8a: 2b:d5:9c:64:a4:86:07:62:32:ff:f1:07:c8:73:c0: 7c:6a:06:19:17:38:54:46:d9:7b:b2:fa:f4:56:1c: 97:8d:e6:cf:c0:10:a9:be:33:f0:d7:8c:e3:df:3d: 07:ae:58:65:6d:ab:8b:a3:96:b3:98:2d:35:19:24: c1:4c:92:dc:5a:5e:13:2c:85:ad:32:28:64:00:b4: fd:89:fb:25:65:02:6b:b1:0d:fb:2d:c1:cd:7c:19: 6f:cb:c4:64:c8:bd:b5:5c:fd:49:a8:41:0f:be:27: c1:ea:99:c0:fc:cd:04:65:21:03:fc:5b:b4:f1:bd: 44:93:d8:bd:2a:15:71:90:71:a4:7a:1e:e9:89:4a: a1:53:b3:3f:ef:9b:db:d1:b9:e3:80:fd:b1:55:50: 8e:bc:7e:53:9e:e5:7d:59:ff:d6:1d:1e:6e:e6:47: 76:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7B:79:4E:14:68:E8:EF:D8:C9:3E:F0:C1:9D:26:F2:CA:A2:A8:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39d9ccaa-9c45-4ebb-a444-c59334cce5f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:b000::/40 Signature Algorithm: sha256WithRSAEncryption ad:da:75:84:d5:1a:4a:62:79:3a:7c:8f:76:da:d4:62:64:4f: dd:7f:95:7f:85:0b:fa:88:78:4c:0f:e6:42:d7:fe:70:03:37: c7:6d:9c:a1:d6:b3:db:6c:c3:ee:ee:46:cf:08:ae:07:4a:44: a6:a1:24:b2:8d:fc:90:31:bb:b2:2c:e2:07:40:71:be:44:78: 31:5f:80:a6:97:c0:59:bf:3b:fc:da:a1:09:46:90:68:f3:28: 98:b1:54:73:b5:69:3d:0b:39:e4:0f:38:55:31:db:6d:15:29: aa:97:f1:d2:f8:55:7a:36:1e:d6:a7:d3:a6:fb:12:9c:af:2c: 8b:71:7d:20:e8:54:e6:c0:0b:71:b6:ad:70:a0:52:6a:88:f4: 8d:71:2c:91:81:8f:47:88:a4:9f:fc:3e:6d:cc:22:90:99:b5: a6:df:86:20:4b:25:f6:d5:fa:7a:f9:2d:d1:d7:54:32:d5:3d: d1:32:86:d1:79:46:2e:b4:3e:fc:91:eb:26:76:b1:69:64:ba: 0c:da:19:c0:32:3b:25:06:fd:59:51:1c:13:64:ae:aa:c0:a4: dc:62:b1:52:eb:aa:7c:f8:48:d2:f7:b0:0e:6b:98:2d:b7:19: 0b:a9:82:27:71:5b:5a:10:5d:f6:61:a1:df:17:6c:65:a9:86: 89:65:0a:bc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUF2FN1UDJ3uIuJfKODYMJLD04Qj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMzAxMVoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAMjk4ZDBkNTc1MzM2Y2U1MDA2ODc5 ZGEyZDQ0NGNlMTQ0NWE2NWFjOTRlMjBmZGEwMmIxMmY5Y2M1MmJjNjZlNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Y/Wa/itF/c17bRI1seY2I6GSg+ G4C8OM2aT5CjWNKvFgCtw7S2jpmBYeoSjMKiY37Cm5aVjmHGtZ7oBpzX2WjjuTxO M3aeUWkoAND1w9S1rEH90S8xIYor1ZxkpIYHYjL/8QfIc8B8agYZFzhURtl7svr0 VhyXjebPwBCpvjPw14zj3z0HrlhlbauLo5azmC01GSTBTJLcWl4TLIWtMihkALT9 ifslZQJrsQ37LcHNfBlvy8RkyL21XP1JqEEPvifB6pnA/M0EZSED/Fu08b1Ek9i9 KhVxkHGkeh7piUqhU7M/75vb0bnjgP2xVVCOvH5TnuV9Wf/WHR5u5kd2qQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIZ7eU4UaOjv2Mk+8MGdJvLKoqhIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM5ZDljY2FhLTljNDUtNGViYi1hNDQ0LWM1OTMzNGNjZTVmMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacLAwDQYJKoZIhvcNAQELBQADggEBAK3adYTVGkpieTp8j3ba 1GJkT91/lX+FC/qIeEwP5kLX/nADN8dtnKHWs9tsw+7uRs8IrgdKRKahJLKN/JAx u7Is4gdAcb5EeDFfgKaXwFm/O/zaoQlGkGjzKJixVHO1aT0LOeQPOFUx220VKaqX 8dL4VXo2Htan06b7EpyvLItxfSDoVObAC3G2rXCgUmqI9I1xLJGBj0eIpJ/8Pm3M IpCZtabfhiBLJfbV+nr5LdHXVDLVPdEyhtF5Ri60PvyR6yZ2sWlkugzaGcAyOyUG /VlRHBNkrqrApNxisVLrqnz4SNL3sA5rmC23GQupgidxW1oQXfZhod8XbGWpholl Crw= -----END CERTIFICATE-----Generated at Wed Aug 26 17:35:12 2026 by rpki-client