$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42c26878-927c-479a-8e26-c3de3d16df9c.roa File: 42c26878-927c-479a-8e26-c3de3d16df9c.roa (raw, json) Hash identifier: V/U7Y4oKUHnAs9ZMt0ifIK3f1ITQzk5QscoH5jtHJAo= Subject key identifier: B7:F3:AD:0E:A6:E0:89:B4:22:D5:DC:A4:EF:59:98:81:5E:D3:40:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 047EAF1F8B4F98FEB0179A9C45EA21F7513A5D1A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42c26878-927c-479a-8e26-c3de3d16df9c.roa Signing time: Fri 31 Jul 2026 00:00:44 +0000 ROA not before: Fri 31 Jul 2026 00:00:44 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7e:af:1f:8b:4f:98:fe:b0:17:9a:9c:45:ea:21:f7:51:3a:5d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:00:44 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=528ac4c0d88cd5d077171b7586a573e5b8c811ddb3ef856af843009da4a3dc61, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:47:22:0a:74:0e:68:8e:5e:ff:fd:6f:02: e1:87:eb:78:f9:3d:09:c3:de:ca:15:c3:86:5d:a4: d1:c7:7d:9f:0b:7d:4f:75:d3:de:e8:3a:2d:43:5b: 8e:0a:39:0c:9f:fc:63:d2:c9:0d:2f:e9:e1:9e:9a: 0e:e6:39:46:e4:17:cd:25:8c:3c:ec:d5:59:99:21: f4:36:c0:10:3b:ba:16:02:b0:bb:ec:42:98:2c:cd: ee:8b:a8:fe:a5:80:f1:d8:b6:f8:bc:45:e5:c9:46: 32:39:12:a7:44:70:31:76:c4:9b:2a:6a:9f:a4:43: 3a:1c:74:42:07:0e:fc:82:50:93:f0:b7:cd:80:28: 80:ea:28:4e:2e:6c:93:01:f1:c2:12:73:18:b6:23: 8d:d2:61:51:00:66:62:8e:e5:80:99:40:96:fb:e7: 9e:db:0e:d8:73:c9:37:94:ca:d9:b8:6b:22:d8:29: fb:10:3f:1e:f9:47:0f:23:14:6d:b2:7f:38:e9:03: f5:4f:8f:dc:f0:ee:1f:f3:51:79:6d:42:10:dd:f7: f2:06:bb:c1:99:e8:55:2a:7c:07:ba:86:2b:29:51: d6:06:66:0d:03:dd:ca:b0:f4:8f:8f:e8:3f:69:5f: 00:be:ca:9d:6a:d6:95:ab:54:5d:88:98:78:dd:49: 41:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F3:AD:0E:A6:E0:89:B4:22:D5:DC:A4:EF:59:98:81:5E:D3:40:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42c26878-927c-479a-8e26-c3de3d16df9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:e000::/48 Signature Algorithm: sha256WithRSAEncryption 89:84:9b:93:79:bd:64:bf:86:43:84:9c:a6:5a:35:8b:52:09: 6f:8e:71:78:8a:fc:0c:a8:64:3a:ed:ae:6b:0d:5a:8c:e0:81: ed:6c:8f:9e:04:d2:2b:cc:c2:fb:e0:87:f4:7c:1e:29:28:f5: e8:82:a4:9f:e8:f2:fc:81:bd:99:92:07:6d:58:30:ab:40:08: 83:6d:e0:1d:d5:87:d2:11:56:39:4a:fc:98:25:b1:0a:59:db: 87:3e:9a:f3:c6:c3:ee:4f:c2:c8:76:03:15:17:9a:ba:8b:e6: a6:b3:6e:2e:fa:45:d2:f8:84:c4:7c:e8:e2:32:d8:35:3f:b1: a4:23:87:54:54:2e:9a:e3:9f:8d:3f:ce:85:ef:80:0d:a4:59: ef:d5:e8:59:eb:11:2f:5e:7a:c0:a3:69:59:d1:52:2c:38:5d: b8:e3:df:c4:1a:8d:b0:d8:d0:66:24:3f:c7:51:b9:05:6f:66: 4f:a6:63:fc:49:6f:5d:24:19:d7:a7:1c:04:25:a1:62:5c:de: 57:bb:57:84:75:82:00:07:ef:ef:ca:8c:f9:39:7b:8f:23:84: 08:86:a5:27:e8:cb:bb:54:24:58:07:17:5a:c9:92:13:c7:de: 57:b8:cb:25:be:fb:ac:e7:65:8d:dc:83:d4:7a:a2:69:e3:a0: 5a:de:fa:ce -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBH6vH4tPmP6wF5qcReoh91E6XRowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMDA0NFoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNANTI4YWM0YzBkODhjZDVkMDc3MTcx Yjc1ODZhNTczZTViOGM4MTFkZGIzZWY4NTZhZjg0MzAwOWRhNGEzZGM2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBBHIgp0DmiOXv/9bwLhh+t4+T0J w97KFcOGXaTRx32fC31PddPe6DotQ1uOCjkMn/xj0skNL+nhnpoO5jlG5BfNJYw8 7NVZmSH0NsAQO7oWArC77EKYLM3ui6j+pYDx2Lb4vEXlyUYyORKnRHAxdsSbKmqf pEM6HHRCBw78glCT8LfNgCiA6ihOLmyTAfHCEnMYtiON0mFRAGZijuWAmUCW++ee 2w7Yc8k3lMrZuGsi2Cn7ED8e+UcPIxRtsn846QP1T4/c8O4f81F5bUIQ3ffyBrvB mehVKnwHuoYrKVHWBmYNA93KsPSPj+g/aV8AvsqdataVq1RdiJh43UlBjQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLfzrQ6m4Im0ItXcpO9ZmIFe00ALMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQyYzI2ODc4LTkyN2MtNDc5YS04ZTI2LWMzZGUzZDE2ZGY5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7OAAMA0GCSqGSIb3DQEBCwUAA4IBAQCJhJuTeb1kv4ZDhJym WjWLUglvjnF4ivwMqGQ67a5rDVqM4IHtbI+eBNIrzML74If0fB4pKPXogqSf6PL8 gb2ZkgdtWDCrQAiDbeAd1YfSEVY5SvyYJbEKWduHPprzxsPuT8LIdgMVF5q6i+am s24u+kXS+ITEfOjiMtg1P7GkI4dUVC6a45+NP86F74ANpFnv1ehZ6xEvXnrAo2lZ 0VIsOF2449/EGo2w2NBmJD/HUbkFb2ZPpmP8SW9dJBnXpxwEJaFiXN5Xu1eEdYIA B+/vyoz5OXuPI4QIhqUn6Mu7VCRYBxdayZITx95XuMslvvus52WN3IPUeqJp46Ba 3vrO -----END CERTIFICATE-----Generated at Wed Aug 26 08:02:41 2026 by rpki-client