$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e316e1b-d1e7-47c4-a799-78ecfb9511d6.roa File: 3e316e1b-d1e7-47c4-a799-78ecfb9511d6.roa (raw, json) Hash identifier: t9m/FpIqtxPiZT1ILwiK5HHpoXLmUSGNU0L/ngGLe/g= Subject key identifier: 94:42:08:BF:E8:79:12:A2:D1:1F:50:CE:85:7C:3C:A1:E6:E8:AD:A3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 787A9318E0E888243B43AA75FC167F0E2C067CC2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e316e1b-d1e7-47c4-a799-78ecfb9511d6.roa Signing time: Mon 27 Jul 2026 00:00:43 +0000 ROA not before: Mon 27 Jul 2026 00:00:43 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7a:93:18:e0:e8:88:24:3b:43:aa:75:fc:16:7f:0e:2c:06:7c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 27 00:00:43 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=025854476fddaf39becee15338513d033d8459828a4b24950bc3333cabf1522b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:f4:b1:f6:97:59:3c:1f:2b:83:0e:a4:3d: a2:6f:4d:5e:c5:8b:68:fd:93:be:14:52:31:fd:51: a2:f0:d6:ee:ce:31:c1:b1:e8:a7:97:fc:14:f8:0d: 75:c2:8e:e1:9d:3c:17:a3:6c:1f:be:0b:50:65:96: a0:69:88:84:28:14:fa:1c:b0:2d:cc:ae:58:c6:91: de:79:7a:0e:53:a2:09:e3:bd:9b:72:49:60:5f:27: 24:ca:5f:5d:99:35:f4:55:d8:17:72:25:b6:61:3c: 7f:e6:96:e3:82:76:fc:b6:87:09:a5:dd:5e:4a:5d: 07:3c:91:52:65:0b:89:8a:00:92:a1:3b:fc:71:c1: 62:59:88:6c:5a:c3:52:dc:a5:f0:c0:ca:32:2e:80: ab:29:8f:02:5b:09:e8:e4:12:ab:9f:65:9b:5f:24: 21:2b:92:00:88:57:eb:62:fd:52:e3:0b:ac:f3:5a: 2d:e9:4d:fb:ee:21:b2:23:0d:38:8e:1d:d3:65:d1: 51:03:c4:66:e2:71:e3:da:25:50:70:e3:00:8b:e8: 59:df:52:50:d5:83:b1:76:91:e5:05:ee:4d:de:7d: 80:96:cb:64:a7:bb:32:39:32:e2:3f:38:b8:08:18: d4:95:36:b3:d0:4b:d5:1a:6c:8b:b5:77:e6:cb:f5: c4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:42:08:BF:E8:79:12:A2:D1:1F:50:CE:85:7C:3C:A1:E6:E8:AD:A3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e316e1b-d1e7-47c4-a799-78ecfb9511d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:c000::/48 Signature Algorithm: sha256WithRSAEncryption 9d:7a:57:57:08:96:f4:72:b9:c7:03:59:75:c6:c9:fa:30:ed: 58:78:64:95:3d:dc:16:52:a0:36:00:a8:c1:21:f0:a1:6e:c7: 34:b5:57:f5:2c:43:43:11:36:b5:61:5b:c8:7b:0b:31:6e:ea: c0:7d:94:05:71:73:20:9c:d1:7e:bd:7b:99:b3:fc:7a:07:ab: a9:f1:31:d0:19:0c:a8:c6:89:66:b7:b3:3f:1e:c2:85:e5:5b: 0f:cb:3e:d1:d4:df:8a:42:d3:7f:7e:01:d8:2d:bb:58:61:99: 11:05:65:fa:57:e5:87:14:c8:84:26:ba:08:db:0f:07:d9:a8: 68:44:9f:df:d5:4d:01:e3:6b:f8:c9:4e:2d:90:03:6a:76:8a: 23:8c:6d:65:cd:09:2c:96:ed:6f:7e:a9:2a:ce:f2:99:61:29: 2e:40:f3:59:93:1b:54:eb:94:53:95:7a:5d:1e:b0:54:a5:ec: ee:5a:a4:a0:41:86:94:22:af:ed:75:d3:8e:9c:28:db:99:f4: 6e:63:5c:d5:2a:ac:6c:2c:3f:0a:58:69:40:f4:1c:49:71:09: 1a:00:81:38:47:13:3e:0a:ad:20:b5:1c:49:58:96:03:ef:75: a2:1c:38:36:32:f5:2f:17:3c:59:19:fd:d2:ee:ab:41:96:c1: 47:da:e0:a9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeHqTGODoiCQ7Q6p1/BZ/DiwGfMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNzAwMDA0M1oX DTI2MTAyNTIzNTk1OVowejFJMEcGA1UEBRNAMDI1ODU0NDc2ZmRkYWYzOWJlY2Vl MTUzMzg1MTNkMDMzZDg0NTk4MjhhNGIyNDk1MGJjMzMzM2NhYmYxNTIyYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXv0sfaXWTwfK4MOpD2ib01exYto /ZO+FFIx/VGi8NbuzjHBseinl/wU+A11wo7hnTwXo2wfvgtQZZagaYiEKBT6HLAt zK5YxpHeeXoOU6IJ472bcklgXyckyl9dmTX0VdgXciW2YTx/5pbjgnb8tocJpd1e Sl0HPJFSZQuJigCSoTv8ccFiWYhsWsNS3KXwwMoyLoCrKY8CWwno5BKrn2WbXyQh K5IAiFfrYv1S4wus81ot6U377iGyIw04jh3TZdFRA8Rm4nHj2iVQcOMAi+hZ31JQ 1YOxdpHlBe5N3n2Alstkp7syOTLiPzi4CBjUlTaz0EvVGmyLtXfmy/XEawIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJRCCL/oeRKi0R9QzoV8PKHm6K2jMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNlMzE2ZTFiLWQxZTctNDdjNC1hNzk5LTc4ZWNmYjk1MTFkNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9sAAMA0GCSqGSIb3DQEBCwUAA4IBAQCdeldXCJb0crnHA1l1 xsn6MO1YeGSVPdwWUqA2AKjBIfChbsc0tVf1LENDETa1YVvIewsxburAfZQFcXMg nNF+vXuZs/x6B6up8THQGQyoxolmt7M/HsKF5VsPyz7R1N+KQtN/fgHYLbtYYZkR BWX6V+WHFMiEJroI2w8H2ahoRJ/f1U0B42v4yU4tkANqdoojjG1lzQkslu1vfqkq zvKZYSkuQPNZkxtU65RTlXpdHrBUpezuWqSgQYaUIq/tddOOnCjbmfRuY1zVKqxs LD8KWGlA9BxJcQkaAIE4RxM+Cq0gtRxJWJYD73WiHDg2MvUvFzxZGf3S7qtBlsFH 2uCp -----END CERTIFICATE-----Generated at Wed Aug 26 08:06:08 2026 by rpki-client