$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a704be4-d8e4-46be-b918-26288201efec.roa File: 3a704be4-d8e4-46be-b918-26288201efec.roa (raw, json) Hash identifier: 8IS3xT5Y1Sym2H9OOKmAlPLt7gKatQKRZC6vOIGi+Po= Subject key identifier: 76:10:55:09:FE:E0:FB:8D:F4:BC:58:85:EE:B8:30:6D:70:81:31:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 78D122322C686B94B58E620F8AEE5550DEBECB63 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a704be4-d8e4-46be-b918-26288201efec.roa Signing time: Tue 18 Aug 2026 18:03:37 +0000 ROA not before: Tue 18 Aug 2026 18:03:37 +0000 ROA not after: Mon 16 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da33:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Aug 2026 00:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d1:22:32:2c:68:6b:94:b5:8e:62:0f:8a:ee:55:50:de:be:cb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 18:03:37 2026 GMT Not After : Nov 16 23:59:59 2026 GMT Subject: serialNumber=6e3e10de36e9bf9af269e67eb356c1d3dc6de7c7957ee53a88df5c34d1270740, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e5:13:7f:fc:98:99:b5:d0:2e:f6:48:b0:b0: 37:93:23:6b:5a:40:37:dc:1e:8e:9e:c0:b1:04:e4: f1:89:ee:2d:70:74:90:d3:52:cb:ec:2c:bf:a1:7f: 0d:9a:f1:cf:a7:d4:26:3e:e5:18:22:95:df:25:af: 40:31:af:98:98:0e:50:46:a8:3a:96:54:ca:e5:a8: c9:d9:16:39:df:10:e8:ea:de:d1:08:75:36:39:50: bc:c6:66:1b:24:52:27:89:84:59:48:c1:e8:cd:80: 8b:00:3f:10:04:6b:19:c0:80:16:1f:a0:f7:89:13: 5e:fc:44:ab:78:0b:37:0b:be:65:fa:58:bc:47:19: 4d:07:6a:07:20:dc:9a:29:f6:a3:12:e2:11:0e:e7: 45:90:d4:b4:bd:0f:39:3b:91:dd:59:eb:eb:20:ba: 83:ac:6a:b8:fe:c3:99:95:df:54:03:4c:54:3e:4e: b5:90:c7:7b:0d:50:c2:22:b9:12:b7:62:f5:84:17: 7b:0b:f6:a7:24:0f:1a:d6:68:17:7a:4b:38:61:85: a1:1b:7e:13:5e:d2:f3:d9:e7:92:cf:83:46:d5:02: c3:30:8d:f7:53:21:ee:15:14:1f:e1:09:54:41:57: 9c:6a:03:4b:8d:cb:c9:00:e4:71:ab:b8:6d:52:b2: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:10:55:09:FE:E0:FB:8D:F4:BC:58:85:EE:B8:30:6D:70:81:31:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a704be4-d8e4-46be-b918-26288201efec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:2000::/40 Signature Algorithm: sha256WithRSAEncryption 91:b6:85:9c:7a:68:4d:f3:31:7e:b4:db:bf:37:b5:ad:92:dc: 96:d1:c1:57:0b:71:3f:47:40:73:76:a1:b2:8e:a8:b2:53:d7: b4:e1:ad:a8:ec:c0:03:2e:1b:30:3e:88:ef:de:32:0c:52:b5: 7b:44:ce:bc:ee:8d:fb:55:20:3b:f7:fd:c1:58:53:f8:38:57: 7d:16:4a:d3:3d:e3:1c:55:94:44:12:ca:5d:c3:8a:ef:a0:55: 7d:4e:a5:69:f4:5f:29:d7:44:85:3e:f7:df:6f:b2:51:d0:d8: b5:2a:1c:99:52:f3:7d:a4:3b:a4:fb:9b:e9:6e:3e:8d:80:5a: 7d:b2:d1:5d:17:b8:79:2c:6e:9b:3b:84:ef:41:69:e3:10:b5: 78:99:0b:9e:cb:a7:5b:ab:1c:dc:fb:3f:10:e2:0d:cf:43:58: d7:fb:63:e2:d5:b6:3d:e3:56:ab:1b:ef:9d:dc:9f:3b:9a:90: 25:a8:ae:8c:95:70:66:39:d6:76:d4:1e:43:a4:04:ac:e8:a6: c9:1d:d4:e8:92:a7:a0:e1:0e:ff:2e:2d:25:23:61:81:be:ef: d7:20:69:e7:9c:fc:84:28:61:cc:f8:3c:d5:0a:86:ce:43:03: 33:46:90:31:d4:19:4f:d2:5a:41:89:4b:29:f0:0e:ee:bc:63: a5:c2:dd:83 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeNEiMixoa5S1jmIPiu5VUN6+y2MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxODE4MDMzN1oX DTI2MTExNjIzNTk1OVowejFJMEcGA1UEBRNANmUzZTEwZGUzNmU5YmY5YWYyNjll NjdlYjM1NmMxZDNkYzZkZTdjNzk1N2VlNTNhODhkZjVjMzRkMTI3MDc0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuUTf/yYmbXQLvZIsLA3kyNrWkA3 3B6OnsCxBOTxie4tcHSQ01LL7Cy/oX8NmvHPp9QmPuUYIpXfJa9AMa+YmA5QRqg6 llTK5ajJ2RY53xDo6t7RCHU2OVC8xmYbJFIniYRZSMHozYCLAD8QBGsZwIAWH6D3 iRNe/ESreAs3C75l+li8RxlNB2oHINyaKfajEuIRDudFkNS0vQ85O5HdWevrILqD rGq4/sOZld9UA0xUPk61kMd7DVDCIrkSt2L1hBd7C/anJA8a1mgXeks4YYWhG34T XtLz2eeSz4NG1QLDMI33UyHuFRQf4QlUQVecagNLjcvJAORxq7htUrKDCQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHYQVQn+4PuN9LxYhe64MG1wgTFEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhNzA0YmU0LWQ4ZTQtNDZiZS1iOTE4LTI2Mjg4MjAxZWZlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMyAwDQYJKoZIhvcNAQELBQADggEBAJG2hZx6aE3zMX602783 ta2S3JbRwVcLcT9HQHN2obKOqLJT17ThrajswAMuGzA+iO/eMgxStXtEzrzujftV IDv3/cFYU/g4V30WStM94xxVlEQSyl3Diu+gVX1OpWn0XynXRIU+999vslHQ2LUq HJlS832kO6T7m+luPo2AWn2y0V0XuHksbps7hO9BaeMQtXiZC57Lp1urHNz7PxDi Dc9DWNf7Y+LVtj3jVqsb753cnzuakCWoroyVcGY51nbUHkOkBKzopskd1OiSp6Dh Dv8uLSUjYYG+79cgaeec/IQoYcz4PNUKhs5DAzNGkDHUGU/SWkGJSynwDu68Y6XC 3YM= -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:10 2026 by rpki-client