$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa File: 445d78ad-29c7-49fd-ad71-7cd16140cfce.roa (raw, json) Hash identifier: 3ynxO6u20TdcXrCowN83jLgvFJqvX/KENH+Sm4Ta8qM= Subject key identifier: 4D:63:37:51:7C:0F:BD:53:09:47:C2:BC:2D:66:3B:B4:2A:7F:80:DF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0CB1844610000EF6581C8B140A8551B70FB2D438 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa Signing time: Fri 07 Aug 2026 00:00:39 +0000 ROA not before: Fri 07 Aug 2026 00:00:39 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Aug 2026 00:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b1:84:46:10:00:0e:f6:58:1c:8b:14:0a:85:51:b7:0f:b2:d4:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 7 00:00:39 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=8370e2c132992318ee9cf1bf113d9684a47a207553b93f11e456fa366c2b7554, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:55:36:55:0e:1a:5e:f2:b1:23:be:16:4f: b0:07:69:fe:84:73:17:33:eb:46:a4:27:03:99:75: 5e:81:63:1a:f6:06:15:58:c5:5c:75:d2:54:68:57: 18:9e:ed:0d:5b:3a:7f:91:9f:3b:01:f6:6b:58:74: a7:30:fe:fc:5e:4d:af:c2:88:15:1c:a7:8d:83:c5: 15:20:02:10:52:a6:2f:51:3a:ec:33:b4:c6:fc:4f: a8:dd:77:e7:df:fb:ec:ed:97:f2:b1:28:47:64:f5: 0d:14:16:49:6a:fe:7a:fb:6a:93:c5:ea:4a:d3:50: e3:d5:12:51:0c:bc:7a:98:a1:0b:96:42:19:97:10: a0:35:eb:ad:0f:a3:e2:0c:c5:45:5e:d0:f9:8c:85: 78:3d:82:4a:98:8d:45:2a:ce:5d:59:51:05:c1:a9: be:8c:b6:44:92:9d:6f:f9:5c:df:7e:fe:28:db:91: 09:1c:92:f3:fd:bf:e7:cd:7c:86:3e:8a:16:7c:74: db:8f:c3:4d:fc:33:b6:80:aa:b1:8c:55:9a:6a:99: a8:87:b4:f7:9f:ab:d6:4d:d9:c8:1a:af:af:42:8d: ca:02:d8:af:b4:0f:51:3d:10:f0:9e:2d:47:5c:97: 13:d1:0a:d2:54:f4:ad:10:3e:1f:5a:bf:08:6a:01: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:63:37:51:7C:0F:BD:53:09:47:C2:BC:2D:66:3B:B4:2A:7F:80:DF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:6000::/40 Signature Algorithm: sha256WithRSAEncryption 92:72:83:51:29:2d:79:82:e6:25:63:e0:77:5f:83:1e:b3:a1: 0e:94:2a:af:f7:a0:72:6b:3c:26:30:cf:83:dc:35:93:d1:d9: 9b:73:b1:d7:6a:90:0b:8c:06:b7:c3:5b:d9:7d:b7:19:03:14: b2:46:5e:fb:cf:5a:cd:6e:7f:32:34:cd:08:af:df:f1:72:88: e6:d6:14:68:a6:43:92:78:6d:91:94:f2:e4:bc:67:9e:7e:ac: 6c:82:73:06:5a:34:d6:43:9d:e0:b5:07:fd:db:cd:35:33:cc: 87:f4:27:2a:15:1e:e8:03:6d:c6:fb:a9:d9:49:10:b5:fe:f1: b7:fc:84:73:de:9e:7a:d6:40:cb:f1:b3:96:1e:33:d3:24:52: b9:91:23:a5:8b:10:ce:62:a7:00:17:76:e4:d0:dc:00:44:9d: ca:e4:6c:56:ae:90:44:b6:85:81:00:32:c3:88:d9:39:ef:ec: f0:7b:06:25:ee:f8:b9:0b:a8:bf:83:ec:18:0e:be:6a:32:55: 62:30:cc:7c:27:17:3f:e0:57:f1:41:8e:d9:b6:96:ad:45:9a: 77:b2:cc:7c:59:7f:e1:a1:e2:b1:82:97:a5:43:a4:65:70:46: 21:92:07:e1:4a:2c:da:ec:01:3b:0d:7f:d0:fa:80:8a:23:cb: 4f:c9:3d:9b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDLGERhAADvZYHIsUCoVRtw+y1DgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNzAwMDAzOVoX DTI2MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAODM3MGUyYzEzMjk5MjMxOGVlOWNm MWJmMTEzZDk2ODRhNDdhMjA3NTUzYjkzZjExZTQ1NmZhMzY2YzJiNzU1NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5BVNlUOGl7ysSO+Fk+wB2n+hHMX M+tGpCcDmXVegWMa9gYVWMVcddJUaFcYnu0NWzp/kZ87AfZrWHSnMP78Xk2vwogV HKeNg8UVIAIQUqYvUTrsM7TG/E+o3Xfn3/vs7ZfysShHZPUNFBZJav56+2qTxepK 01Dj1RJRDLx6mKELlkIZlxCgNeutD6PiDMVFXtD5jIV4PYJKmI1FKs5dWVEFwam+ jLZEkp1v+Vzffv4o25EJHJLz/b/nzXyGPooWfHTbj8NN/DO2gKqxjFWaapmoh7T3 n6vWTdnIGq+vQo3KAtivtA9RPRDwni1HXJcT0QrSVPStED4fWr8IagG8iQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE1jN1F8D71TCUfCvC1mO7Qqf4DfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0NWQ3OGFkLTI5YzctNDlmZC1hZDcxLTdjZDE2MTQwY2ZjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba72AwDQYJKoZIhvcNAQELBQADggEBAJJyg1EpLXmC5iVj4Hdf gx6zoQ6UKq/3oHJrPCYwz4PcNZPR2ZtzsddqkAuMBrfDW9l9txkDFLJGXvvPWs1u fzI0zQiv3/FyiObWFGimQ5J4bZGU8uS8Z55+rGyCcwZaNNZDneC1B/3bzTUzzIf0 JyoVHugDbcb7qdlJELX+8bf8hHPennrWQMvxs5YeM9MkUrmRI6WLEM5ipwAXduTQ 3ABEncrkbFaukES2hYEAMsOI2Tnv7PB7BiXu+LkLqL+D7BgOvmoyVWIwzHwnFz/g V/FBjtm2lq1FmneyzHxZf+Gh4rGCl6VDpGVwRiGSB+FKLNrsATsNf9D6gIojy0/J PZs= -----END CERTIFICATE-----Generated at Thu Aug 20 21:55:01 2026 by rpki-client