$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/521c545d-c900-4cdc-899b-10c823bce2bd.roa File: 521c545d-c900-4cdc-899b-10c823bce2bd.roa (raw, json) Hash identifier: iT4zqEhNcxk25DBe/F06GE11NS7p7XizYLtRRvlFPuU= Subject key identifier: 4E:17:BA:34:DF:D6:6D:78:1C:3D:70:C9:59:FD:5F:2A:79:B3:6A:F7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 31C1A5AF97C2506327CFB0C0622B074F33D1395C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/521c545d-c900-4cdc-899b-10c823bce2bd.roa Signing time: Wed 19 Aug 2026 00:01:00 +0000 ROA not before: Wed 19 Aug 2026 00:01:00 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c1:a5:af:97:c2:50:63:27:cf:b0:c0:62:2b:07:4f:33:d1:39:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:01:00 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=7081f9da8e76b79c0780495459231faaa5abec73f43edddaa9fc1188ee31d123, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c4:49:67:6f:5c:b8:6c:74:18:4d:a3:c3:28: cf:a8:e8:47:92:6d:09:af:d0:db:d2:0b:12:cf:c4: 55:29:60:25:3f:73:af:10:da:1d:bb:19:8b:be:7a: 56:16:bb:9d:aa:1b:a0:d5:e9:79:06:95:50:59:29: fa:7a:fa:94:78:2f:81:8c:da:bd:52:2d:65:68:8c: 31:82:4c:dc:31:8d:77:0f:da:01:bb:89:3d:1f:8f: d5:79:68:fa:87:d4:48:10:07:0b:0b:f9:d1:70:50: 54:ed:2d:20:ed:68:44:36:c0:e6:6e:ef:d9:eb:b0: 93:c0:93:6a:81:4a:db:5b:2f:e2:bd:fe:5e:28:89: 54:d9:47:13:d0:b5:90:6b:db:5d:17:fd:90:7c:42: 4b:84:24:37:c8:b7:4b:53:61:f4:f1:e8:f8:39:00: c8:b5:38:c7:77:17:bb:4d:ab:19:7c:a3:bf:5e:0d: d8:c6:aa:d7:58:b2:fc:a3:0a:04:05:94:bd:38:24: 83:11:d4:26:4b:8c:ab:b6:fd:4b:76:3e:fd:15:46: 44:f0:48:fb:ca:25:16:43:ab:44:4d:81:d5:71:5c: bd:ee:7e:5f:94:68:ef:12:d8:82:94:47:25:1c:2d: c0:02:4f:14:fe:a9:56:0d:85:ab:8e:59:86:fa:c8: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:17:BA:34:DF:D6:6D:78:1C:3D:70:C9:59:FD:5F:2A:79:B3:6A:F7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/521c545d-c900-4cdc-899b-10c823bce2bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:4840::/48 Signature Algorithm: sha256WithRSAEncryption 0a:4b:82:bf:86:14:c1:8d:72:c3:98:f1:40:b6:59:b3:a5:c5: 58:66:9a:09:13:7d:6b:52:c2:ef:2c:3d:5e:79:b1:e3:3a:b2: 2e:69:88:5d:e9:25:fb:b1:f2:e2:59:0e:6c:2e:37:c2:83:35: 7c:9d:38:36:ee:33:c6:f8:a4:87:81:44:b2:a0:d5:95:78:30: 6c:c1:08:2d:a3:30:11:10:27:a2:8d:55:58:19:3b:9d:9b:a4: 0c:86:78:75:56:f5:dd:af:cc:05:9d:60:ad:9a:07:34:85:04: fd:a4:19:82:5f:e0:ab:4b:e5:ca:34:73:17:33:11:12:1b:af: ef:d6:2b:b2:a0:06:f8:51:9a:a3:6a:9c:4b:76:14:d9:35:96: a9:f2:e5:43:d0:42:eb:8b:d3:84:40:60:90:f4:41:3a:76:39: fb:fb:57:3b:d3:f8:a3:cd:e0:04:ea:03:17:40:78:6a:13:30: e5:32:5b:5e:5a:c3:98:49:3b:e4:64:d9:8a:1a:e8:7c:49:c2: 59:a1:68:b5:16:2c:89:c3:84:6f:28:de:20:75:85:db:b5:70: 18:c1:73:dd:ea:ec:6a:23:7d:ad:f7:7a:c6:b9:3c:ff:58:b5: 5a:0e:37:02:9b:d2:c1:3d:9a:56:a6:37:4a:7f:28:1c:80:ad: 68:2d:15:de -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMcGlr5fCUGMnz7DAYisHTzPROVwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDEwMFoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNANzA4MWY5ZGE4ZTc2Yjc5YzA3ODA0 OTU0NTkyMzFmYWFhNWFiZWM3M2Y0M2VkZGRhYTlmYzExODhlZTMxZDEyMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MRJZ29cuGx0GE2jwyjPqOhHkm0J r9Db0gsSz8RVKWAlP3OvENoduxmLvnpWFrudqhug1el5BpVQWSn6evqUeC+BjNq9 Ui1laIwxgkzcMY13D9oBu4k9H4/VeWj6h9RIEAcLC/nRcFBU7S0g7WhENsDmbu/Z 67CTwJNqgUrbWy/ivf5eKIlU2UcT0LWQa9tdF/2QfEJLhCQ3yLdLU2H08ej4OQDI tTjHdxe7TasZfKO/Xg3YxqrXWLL8owoEBZS9OCSDEdQmS4yrtv1Ldj79FUZE8Ej7 yiUWQ6tETYHVcVy97n5flGjvEtiClEclHC3AAk8U/qlWDYWrjlmG+siduwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE4XujTf1m14HD1wyVn9Xyp5s2r3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyMWM1NDVkLWM5MDAtNGNkYy04OTliLTEwYzgyM2JjZTJiZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaukhAMA0GCSqGSIb3DQEBCwUAA4IBAQAKS4K/hhTBjXLDmPFA tlmzpcVYZpoJE31rUsLvLD1eebHjOrIuaYhd6SX7sfLiWQ5sLjfCgzV8nTg27jPG +KSHgUSyoNWVeDBswQgtozARECeijVVYGTudm6QMhnh1VvXdr8wFnWCtmgc0hQT9 pBmCX+CrS+XKNHMXMxESG6/v1iuyoAb4UZqjapxLdhTZNZap8uVD0ELri9OEQGCQ 9EE6djn7+1c70/ijzeAE6gMXQHhqEzDlMlteWsOYSTvkZNmKGuh8ScJZoWi1FiyJ w4RvKN4gdYXbtXAYwXPd6uxqI32t93rGuTz/WLVaDjcCm9LBPZpWpjdKfygcgK1o LRXe -----END CERTIFICATE-----Generated at Wed Aug 26 17:35:00 2026 by rpki-client