$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/442fee67-f3d9-4889-94d4-2a3b8bb5cfac.roa File: 442fee67-f3d9-4889-94d4-2a3b8bb5cfac.roa (raw, json) Hash identifier: Q82bakSDnIgzAbtwhsb3KP4VusHvqxQi8Xd0sy6SX5Y= Subject key identifier: 7C:EB:5F:57:52:CF:2B:E0:E5:05:36:0D:6C:3F:0F:49:73:B2:D7:96 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7647881C790F767CDA5469BA44E903A03D59CA0D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/442fee67-f3d9-4889-94d4-2a3b8bb5cfac.roa Signing time: Sat 01 Aug 2026 00:00:12 +0000 ROA not before: Sat 01 Aug 2026 00:00:12 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:47:88:1c:79:0f:76:7c:da:54:69:ba:44:e9:03:a0:3d:59:ca:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:00:12 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=2ff75cbbab90ce3ddb68ca210e0b8c21c8ccbe080ad41596b1608a7006d4593b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c5:c7:59:af:45:75:5b:27:2a:ff:b9:1f:4d: 30:ca:d6:56:20:0c:0c:e0:8d:6f:a1:37:5e:03:1a: 43:6a:b1:7c:6f:2f:46:42:3e:6a:35:e7:36:17:b9: 19:90:b5:e6:c7:48:48:5d:a9:5f:b6:25:d5:27:0b: 24:10:2e:f0:4f:d5:3f:b3:c4:04:1a:79:01:5f:31: b5:8a:06:6d:45:e0:75:88:25:89:2a:77:1b:22:87: 90:6b:10:39:2d:a8:9a:d3:d5:4c:11:01:49:d1:f5: f1:16:f5:c0:92:2c:4c:00:6e:90:aa:61:d1:5d:a4: 17:b1:61:6c:fe:76:bf:21:3b:e4:97:ac:15:79:e4: 63:8c:bb:de:c8:e4:18:1f:3b:ce:e9:54:2d:01:4d: 0c:8b:f7:d1:a5:ed:f3:4d:1f:da:d8:b4:34:a0:69: 10:d1:86:03:e5:dd:57:b6:4d:48:5d:e8:8a:25:75: ea:cf:7a:eb:65:5b:29:15:c1:99:9f:60:bd:d4:1a: bd:4c:a1:15:9f:9b:86:f4:56:a8:dd:6f:17:7b:26: f2:fb:7e:5e:ee:f7:06:54:97:28:61:f8:ba:49:d3: d5:b3:2e:3b:d0:c5:d3:25:b9:8c:f8:66:27:dd:8d: 14:69:90:ec:a6:5f:48:11:41:65:ee:11:20:08:a5: 33:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EB:5F:57:52:CF:2B:E0:E5:05:36:0D:6C:3F:0F:49:73:B2:D7:96 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/442fee67-f3d9-4889-94d4-2a3b8bb5cfac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:8800::/40 Signature Algorithm: sha256WithRSAEncryption 1a:44:79:7f:01:dd:8b:44:4b:de:7c:25:96:0f:b1:51:83:18: 49:85:66:62:ab:aa:86:e8:d9:fc:7b:41:f8:1e:44:ee:5a:35: b4:7c:87:c8:da:9c:91:77:d3:b4:d8:68:e0:26:06:1f:a0:21: 48:bd:7c:0c:02:ed:06:ad:7d:66:7e:89:23:1b:4b:37:5c:8a: c1:64:9a:22:5a:f3:ca:6f:5b:c6:5f:93:5c:e1:47:18:60:74: 09:a3:b6:0b:ee:5d:f9:1b:8e:19:6d:02:8d:9d:20:9b:b8:76: c4:fa:cc:d3:8b:3d:08:23:ec:59:28:d3:aa:9a:e9:6f:84:c6: 4f:a0:77:d5:7b:1a:7c:1f:1e:5f:22:5c:ff:ce:4a:bb:7b:a4: 53:ca:c4:3c:37:00:b1:a7:22:9e:60:8b:c5:47:96:5e:2e:5e: ab:f9:38:61:cc:fd:20:31:87:3a:7a:19:18:34:b8:d2:60:00: 90:a0:83:67:38:bf:d6:98:96:64:5b:d9:50:77:ff:1d:f2:0a: 8d:cd:40:29:dc:96:c6:d7:cd:98:78:bb:cf:73:75:b1:30:ba: a5:1c:8d:2b:dc:c9:d0:72:25:a4:6f:61:a6:26:41:56:28:4b: c7:64:0e:30:9f:bc:bf:ad:4a:1e:f5:b8:1b:d4:d4:64:5b:24: bd:de:60:83 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdkeIHHkPdnzaVGm6ROkDoD1Zyg0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMDAxMloX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAMmZmNzVjYmJhYjkwY2UzZGRiNjhj YTIxMGUwYjhjMjFjOGNjYmUwODBhZDQxNTk2YjE2MDhhNzAwNmQ0NTkzYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MXHWa9FdVsnKv+5H00wytZWIAwM 4I1voTdeAxpDarF8by9GQj5qNec2F7kZkLXmx0hIXalftiXVJwskEC7wT9U/s8QE GnkBXzG1igZtReB1iCWJKncbIoeQaxA5Laia09VMEQFJ0fXxFvXAkixMAG6QqmHR XaQXsWFs/na/ITvkl6wVeeRjjLveyOQYHzvO6VQtAU0Mi/fRpe3zTR/a2LQ0oGkQ 0YYD5d1Xtk1IXeiKJXXqz3rrZVspFcGZn2C91Bq9TKEVn5uG9Fao3W8Xeyby+35e 7vcGVJcoYfi6SdPVsy470MXTJbmM+GYn3Y0UaZDspl9IEUFl7hEgCKUzTQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHzrX1dSzyvg5QU2DWw/D0lzsteWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0MmZlZTY3LWYzZDktNDg4OS05NGQ0LTJhM2I4YmI1Y2ZhYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8YgwDQYJKoZIhvcNAQELBQADggEBABpEeX8B3YtES958JZYP sVGDGEmFZmKrqobo2fx7QfgeRO5aNbR8h8janJF307TYaOAmBh+gIUi9fAwC7Qat fWZ+iSMbSzdcisFkmiJa88pvW8Zfk1zhRxhgdAmjtgvuXfkbjhltAo2dIJu4dsT6 zNOLPQgj7Fko06qa6W+Exk+gd9V7GnwfHl8iXP/OSrt7pFPKxDw3ALGnIp5gi8VH ll4uXqv5OGHM/SAxhzp6GRg0uNJgAJCgg2c4v9aYlmRb2VB3/x3yCo3NQCnclsbX zZh4u89zdbEwuqUcjSvcydByJaRvYaYmQVYoS8dkDjCfvL+tSh71uBvU1GRbJL3e YIM= -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:05 2026 by rpki-client