$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3df16135-87fe-480c-90d5-ba22a1787aa1.roa File: 3df16135-87fe-480c-90d5-ba22a1787aa1.roa (raw, json) Hash identifier: Rq4HENsBatkVAt311Q6iySTrUebQGKiOlodYU22gnC8= Subject key identifier: 64:57:8B:B8:57:10:91:69:A2:22:B0:61:58:35:F2:5B:D0:75:A2:77 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5638FE4BFDF4080545C67F66E7A7AF3B09A17D91 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3df16135-87fe-480c-90d5-ba22a1787aa1.roa Signing time: Fri 31 Jul 2026 00:00:06 +0000 ROA not before: Fri 31 Jul 2026 00:00:06 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:38:fe:4b:fd:f4:08:05:45:c6:7f:66:e7:a7:af:3b:09:a1:7d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:00:06 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=c521c5b0ec5c665761b41f2cacdfae5a38ecb49cc37439573559e03b4d2cef89, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:cb:3a:96:b7:28:a4:a3:9e:e3:53:3b:c9: 08:ab:3d:33:fc:3c:cf:60:98:31:26:25:5f:d2:2f: 07:91:23:77:89:b0:64:34:7f:72:8d:4b:a6:e1:1a: 80:e5:83:38:ff:2a:f7:a3:91:f7:ce:54:67:e0:d2: f8:43:29:2d:17:99:f4:9d:96:8a:57:80:bf:f6:dc: 09:38:7b:2e:cf:a1:0a:25:48:7d:4e:d2:74:60:6f: a3:ba:27:a1:50:c1:c9:1e:2e:9e:8e:11:75:00:bb: 65:01:7e:1d:63:0c:a3:01:aa:34:8d:07:20:ba:b0: a9:95:72:d6:13:a3:72:75:89:d8:aa:a1:22:19:8d: 44:17:ca:b3:f1:15:91:e3:6a:e4:31:51:4b:c8:53: 39:91:1f:a3:07:71:f7:66:82:74:c6:40:25:33:af: 47:b3:1b:8c:eb:d6:bd:55:a8:2b:44:bc:c6:76:bc: 2f:a3:54:42:19:39:32:a1:ca:77:79:e7:c2:ed:1f: df:1f:e7:68:24:0f:a8:4e:57:2b:3f:c5:a6:0c:38: a3:66:8a:b6:34:af:84:5f:8c:e7:79:bd:b4:ba:02: 3d:68:34:ed:35:24:f8:48:d2:32:aa:43:9f:c7:68: 85:82:09:b3:d4:03:be:3e:b3:3a:09:fb:f4:5f:3a: 64:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:57:8B:B8:57:10:91:69:A2:22:B0:61:58:35:F2:5B:D0:75:A2:77 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3df16135-87fe-480c-90d5-ba22a1787aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:f000::/40 Signature Algorithm: sha256WithRSAEncryption a6:62:4d:91:0b:c5:4a:2f:1c:0b:ea:2c:d6:fd:af:da:d8:0f: 10:e8:26:5e:21:36:98:2d:cd:9c:19:ec:91:de:43:9f:32:6d: dd:39:0f:dc:6a:95:eb:b2:5e:11:2a:32:2d:94:3e:35:94:ff: 39:3f:70:8c:74:e7:51:20:fc:ea:a9:e8:9a:20:d4:53:7c:62: 81:1c:33:c1:9c:49:e8:a7:4e:4c:94:eb:d0:34:20:89:5f:c5: a6:1b:03:ae:a2:2b:a9:58:7d:29:58:92:a4:64:6d:04:ab:75: 7c:4a:6e:66:0e:bc:d0:86:5f:c6:1b:18:34:d9:76:1e:92:43: 03:97:de:40:89:82:10:39:e9:9e:1d:6d:11:4a:44:a0:25:24: 72:fa:56:80:37:69:a3:f8:8a:aa:4c:87:7d:71:ed:52:12:0b: 70:9f:18:76:c5:ee:00:d1:bf:07:42:f6:6e:2b:b7:a1:dd:72: 68:c8:4e:d7:fe:e7:e8:c6:16:69:92:24:fc:ba:b9:5f:f7:e1: a7:8e:17:f2:c6:e3:1c:22:28:a2:f1:90:db:8a:63:3d:a6:b9: 30:e4:1a:94:0d:61:78:56:4a:94:97:17:61:b8:6e:c1:b6:ae: 61:13:6f:67:61:c4:34:6f:b9:a8:43:49:58:f8:46:e7:8e:95: 21:55:8a:8f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVjj+S/30CAVFxn9m56evOwmhfZEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMDAwNloX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAYzUyMWM1YjBlYzVjNjY1NzYxYjQx ZjJjYWNkZmFlNWEzOGVjYjQ5Y2MzNzQzOTU3MzU1OWUwM2I0ZDJjZWY4OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve/LOpa3KKSjnuNTO8kIqz0z/DzP YJgxJiVf0i8HkSN3ibBkNH9yjUum4RqA5YM4/yr3o5H3zlRn4NL4QyktF5n0nZaK V4C/9twJOHsuz6EKJUh9TtJ0YG+juiehUMHJHi6ejhF1ALtlAX4dYwyjAao0jQcg urCplXLWE6NydYnYqqEiGY1EF8qz8RWR42rkMVFLyFM5kR+jB3H3ZoJ0xkAlM69H sxuM69a9VagrRLzGdrwvo1RCGTkyocp3eefC7R/fH+doJA+oTlcrP8WmDDijZoq2 NK+EX4zneb20ugI9aDTtNST4SNIyqkOfx2iFggmz1AO+PrM6Cfv0XzpkFQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGRXi7hXEJFpoiKwYVg18lvQdaJ3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNkZjE2MTM1LTg3ZmUtNDgwYy05MGQ1LWJhMjJhMTc4N2FhMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+/AwDQYJKoZIhvcNAQELBQADggEBAKZiTZELxUovHAvqLNb9 r9rYDxDoJl4hNpgtzZwZ7JHeQ58ybd05D9xqleuyXhEqMi2UPjWU/zk/cIx051Eg /Oqp6Jog1FN8YoEcM8GcSeinTkyU69A0IIlfxaYbA66iK6lYfSlYkqRkbQSrdXxK bmYOvNCGX8YbGDTZdh6SQwOX3kCJghA56Z4dbRFKRKAlJHL6VoA3aaP4iqpMh31x 7VISC3CfGHbF7gDRvwdC9m4rt6HdcmjITtf+5+jGFmmSJPy6uV/34aeOF/LG4xwi KKLxkNuKYz2muTDkGpQNYXhWSpSXF2G4bsG2rmETb2dhxDRvuahDSVj4RueOlSFV io8= -----END CERTIFICATE-----Generated at Wed Aug 26 08:04:41 2026 by rpki-client