$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f270c0f-8558-4d31-85d5-eef46790c938.roa File: 4f270c0f-8558-4d31-85d5-eef46790c938.roa (raw, json) Hash identifier: kaqX9VbHdUBwJLtWSf/PT5qngy8nGO2KPWzniqHgrgk= Subject key identifier: 02:95:9F:11:E2:E1:2F:96:B2:FE:6E:AB:85:B9:D2:2D:5B:35:88:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7E2D709A0330CEE61A0B9D17099FC691ECFF9210 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f270c0f-8558-4d31-85d5-eef46790c938.roa Signing time: Fri 31 Jul 2026 00:11:18 +0000 ROA not before: Fri 31 Jul 2026 00:11:18 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2d:70:9a:03:30:ce:e6:1a:0b:9d:17:09:9f:c6:91:ec:ff:92:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:11:18 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=2760f9f140d258b84798275720261242b25659e36ba8683cd01d3cd4d29fba8e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:0a:3d:3a:cb:2e:56:23:89:de:45:96:64: 15:d8:c2:dc:10:a3:38:e1:52:fb:94:c2:03:07:94: a1:1a:70:cf:9c:ef:7a:36:b5:52:9f:10:67:c8:84: c9:4c:3a:db:60:be:ed:57:ce:c8:e6:0d:2a:3b:7f: d4:8d:10:48:e0:5b:41:0b:52:9e:5a:7b:57:b8:38: 25:24:35:83:14:21:85:04:8d:44:0d:dc:b2:a0:84: cd:72:27:88:1e:e8:35:16:8c:eb:1f:72:ee:d2:e4: 6c:10:48:3a:f4:b2:34:54:c2:88:00:70:6e:4c:d5: b9:e6:d1:56:f0:ea:d3:71:b4:54:b6:96:7b:55:bc: 66:68:ed:77:c8:cd:87:ec:d3:ff:aa:79:77:01:c7: 1b:24:11:a0:98:26:cc:a0:fd:8c:62:ea:3c:46:fc: 0a:72:83:ad:19:73:6c:8c:f1:9b:99:d8:6f:cf:67: a9:53:2b:ec:a4:4b:dc:7f:c3:37:a5:b3:6c:e9:e8: 24:3a:5d:a3:f6:b5:14:7c:50:60:b4:24:a6:81:ba: 35:c6:88:fa:a8:e4:16:6b:e9:86:2a:1b:41:52:dc: 9a:34:a8:43:23:cc:0a:18:19:8e:66:ac:13:66:59: 4b:6c:77:9e:60:0f:3c:d2:b1:4d:e8:83:5a:5b:e9: 49:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:95:9F:11:E2:E1:2F:96:B2:FE:6E:AB:85:B9:D2:2D:5B:35:88:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f270c0f-8558-4d31-85d5-eef46790c938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:a080::/48 Signature Algorithm: sha256WithRSAEncryption 77:18:b9:6a:b7:d4:84:62:b5:fd:df:07:61:3b:c6:0e:a2:c9: 83:72:c3:67:63:9a:33:fe:03:5d:81:dc:9c:a8:be:dc:06:2a: 7a:18:ff:62:36:25:5e:cf:7c:4a:d2:85:9a:f6:19:39:58:1a: 44:96:92:44:0d:63:e5:ee:ea:ea:64:f9:7c:3e:e2:95:a6:a3: 4f:b5:17:f0:fd:6e:4d:cf:05:12:02:ef:c0:2d:7b:97:bb:f4: 0a:51:87:64:3f:b6:13:bd:1c:f3:af:6f:46:4f:97:fe:f0:09: 9f:d3:ae:99:22:57:de:29:30:de:35:04:99:7a:42:3a:77:d9: 43:24:94:02:7f:a5:1c:93:5c:58:69:2c:72:fd:b9:f4:df:5f: 31:2b:cb:97:88:40:e5:a2:ea:75:d9:d3:78:10:ee:4e:56:3b: 05:f7:5e:0e:ba:83:83:bb:1c:72:61:29:c0:c8:d2:43:a2:32: a8:48:d1:e0:d2:d2:79:72:40:0e:10:83:4b:4c:26:09:3a:a6: 29:55:db:f3:23:dc:c7:71:b7:3f:da:14:c1:4e:36:39:58:41: 31:ef:ed:4e:0c:96:a0:40:6d:04:d0:26:2e:2a:11:16:fe:ff: 5f:ff:42:fc:17:3a:22:3e:79:19:1f:bb:d9:f2:b5:34:d5:54: 26:ea:80:88 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfi1wmgMwzuYaC50XCZ/Gkez/khAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMTExOFoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAMjc2MGY5ZjE0MGQyNThiODQ3OTgy NzU3MjAyNjEyNDJiMjU2NTllMzZiYTg2ODNjZDAxZDNjZDRkMjlmYmE4ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB4KPTrLLlYjid5FlmQV2MLcEKM4 4VL7lMIDB5ShGnDPnO96NrVSnxBnyITJTDrbYL7tV87I5g0qO3/UjRBI4FtBC1Ke WntXuDglJDWDFCGFBI1EDdyyoITNcieIHug1FozrH3Lu0uRsEEg69LI0VMKIAHBu TNW55tFW8OrTcbRUtpZ7VbxmaO13yM2H7NP/qnl3AccbJBGgmCbMoP2MYuo8RvwK coOtGXNsjPGbmdhvz2epUyvspEvcf8M3pbNs6egkOl2j9rUUfFBgtCSmgbo1xoj6 qOQWa+mGKhtBUtyaNKhDI8wKGBmOZqwTZllLbHeeYA880rFN6INaW+lJMwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAKVnxHi4S+Wsv5uq4W50i1bNYj0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmMjcwYzBmLTg1NTgtNGQzMS04NWQ1LWVlZjQ2NzkwYzkzOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8qCAMA0GCSqGSIb3DQEBCwUAA4IBAQB3GLlqt9SEYrX93wdh O8YOosmDcsNnY5oz/gNdgdycqL7cBip6GP9iNiVez3xK0oWa9hk5WBpElpJEDWPl 7urqZPl8PuKVpqNPtRfw/W5NzwUSAu/ALXuXu/QKUYdkP7YTvRzzr29GT5f+8Amf 066ZIlfeKTDeNQSZekI6d9lDJJQCf6Uck1xYaSxy/bn0318xK8uXiEDloup12dN4 EO5OVjsF914OuoODuxxyYSnAyNJDojKoSNHg0tJ5ckAOEINLTCYJOqYpVdvzI9zH cbc/2hTBTjY5WEEx7+1ODJagQG0E0CYuKhEW/v9f/0L8FzoiPnkZH7vZ8rU01VQm 6oCI -----END CERTIFICATE-----Generated at Wed Aug 26 16:08:07 2026 by rpki-client