$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524bbb59-fe5b-477a-80a0-854f6932264e.roa File: 524bbb59-fe5b-477a-80a0-854f6932264e.roa (raw, json) Hash identifier: Z8jmmVHlTxhBu3li2d1o0YkOnKdmcP36VXLyOM4W+LU= Subject key identifier: 07:F9:36:B7:B7:83:77:95:88:E6:FE:A3:02:CA:AE:DA:D6:73:26:24 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 124CBA2497E8240230759D2E00FCE98D98D7A168 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524bbb59-fe5b-477a-80a0-854f6932264e.roa Signing time: Fri 31 Jul 2026 00:10:54 +0000 ROA not before: Fri 31 Jul 2026 00:10:54 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4c:ba:24:97:e8:24:02:30:75:9d:2e:00:fc:e9:8d:98:d7:a1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:10:54 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=3cc23f456c1934c2e603d4887d3bee872e5dfeab7b0409213fd8179ae6994f75, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:20:1d:fa:5d:2d:e2:59:5e:a2:a6:1a:48: 7f:00:84:11:8d:9d:9c:70:eb:83:b5:8e:20:3c:16: f6:3f:d3:11:d0:0a:f9:2f:1f:1f:27:54:71:94:08: 11:af:45:a6:e5:d5:59:eb:17:b1:b0:c7:e8:3e:a3: aa:0e:80:eb:13:5a:58:c2:80:f2:4b:32:24:4a:6b: 3f:de:d3:8b:dd:40:26:4f:26:ae:0c:25:2c:7c:7f: e5:9d:2f:28:89:48:75:b1:e4:e5:45:30:b3:ac:b9: 08:aa:b1:26:50:7d:ab:b4:b2:f4:aa:32:85:f0:07: 23:eb:67:cc:53:61:29:93:21:ef:0d:d9:b1:d6:4b: 86:ac:7d:f5:42:49:cb:fc:db:de:6e:f7:72:98:58: 6b:ef:3d:b3:92:fc:24:be:d2:92:39:5b:24:f9:c3: 9b:32:dd:78:a7:f0:8c:92:0c:6e:03:8c:a0:8b:d9: e9:72:d0:d8:73:76:51:00:95:d2:34:ed:be:b0:3f: 45:05:10:a4:d8:09:7e:33:64:65:9e:20:c5:ea:eb: 5e:42:a7:c1:8d:fb:b1:0b:42:ea:e5:15:8e:86:60: c6:c3:9f:5f:7c:ec:d3:33:2a:57:4d:b6:e9:e5:96: 42:68:24:b3:55:9c:c2:6b:aa:2b:1f:8b:c1:c4:07: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F9:36:B7:B7:83:77:95:88:E6:FE:A3:02:CA:AE:DA:D6:73:26:24 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524bbb59-fe5b-477a-80a0-854f6932264e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c060::/48 Signature Algorithm: sha256WithRSAEncryption 3a:7b:7c:7f:eb:b1:87:60:df:31:f5:fe:28:0b:92:11:b6:8f: a1:40:26:8d:51:fe:35:e9:68:ad:2f:28:53:f1:fa:94:b2:e8: d9:b4:ba:33:a7:ab:50:b4:e7:c0:53:0a:63:fe:5c:7d:1b:fd: 4d:47:27:40:bd:93:cf:bc:79:01:dd:37:22:e0:e4:69:b4:2d: 86:ed:4e:32:fa:1b:42:b5:d1:79:8b:10:e7:b4:ae:12:d8:7f: 2f:05:b3:d6:35:8e:e0:89:59:92:ed:2d:ad:a6:fc:32:ae:c7: 7c:4d:7c:50:be:08:ac:fe:69:08:45:2d:96:5d:32:dd:84:0a: 38:81:1d:6b:ec:e2:d1:4d:7e:62:3d:f0:92:26:8c:1a:ca:ac: 5b:3f:45:ce:2b:96:68:cf:6a:08:2c:3d:98:4a:e6:3f:5f:a3: 6d:f2:e3:64:c3:30:0c:70:fa:2c:c7:95:bc:23:85:5f:7c:b9: 1a:4c:26:01:75:93:88:f7:09:e3:6f:28:c2:9d:39:36:b1:89: c3:c2:75:19:05:2e:e9:2b:d9:dc:a0:a5:c3:3e:d6:82:c2:6f: 38:06:0e:9d:70:66:d4:db:d0:5e:59:e2:4f:d3:34:60:9d:db: 6a:4b:53:d4:b5:be:38:43:69:8f:34:b4:37:c6:b7:19:1b:c3: aa:21:76:32 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEky6JJfoJAIwdZ0uAPzpjZjXoWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMTA1NFoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAM2NjMjNmNDU2YzE5MzRjMmU2MDNk NDg4N2QzYmVlODcyZTVkZmVhYjdiMDQwOTIxM2ZkODE3OWFlNjk5NGY3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3IgHfpdLeJZXqKmGkh/AIQRjZ2c cOuDtY4gPBb2P9MR0Ar5Lx8fJ1RxlAgRr0Wm5dVZ6xexsMfoPqOqDoDrE1pYwoDy SzIkSms/3tOL3UAmTyauDCUsfH/lnS8oiUh1seTlRTCzrLkIqrEmUH2rtLL0qjKF 8Acj62fMU2EpkyHvDdmx1kuGrH31QknL/NvebvdymFhr7z2zkvwkvtKSOVsk+cOb Mt14p/CMkgxuA4ygi9npctDYc3ZRAJXSNO2+sD9FBRCk2Al+M2RlniDF6uteQqfB jfuxC0Lq5RWOhmDGw59ffOzTMypXTbbp5ZZCaCSzVZzCa6orH4vBxAdRnwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAf5Nre3g3eViOb+owLKrtrWcyYkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyNGJiYjU5LWZlNWItNDc3YS04MGEwLTg1NGY2OTMyMjY0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8BgMA0GCSqGSIb3DQEBCwUAA4IBAQA6e3x/67GHYN8x9f4o C5IRto+hQCaNUf416WitLyhT8fqUsujZtLozp6tQtOfAUwpj/lx9G/1NRydAvZPP vHkB3Tci4ORptC2G7U4y+htCtdF5ixDntK4S2H8vBbPWNY7giVmS7S2tpvwyrsd8 TXxQvgis/mkIRS2WXTLdhAo4gR1r7OLRTX5iPfCSJowayqxbP0XOK5Zoz2oILD2Y SuY/X6Nt8uNkwzAMcPosx5W8I4VffLkaTCYBdZOI9wnjbyjCnTk2sYnDwnUZBS7p K9ncoKXDPtaCwm84Bg6dcGbU29BeWeJP0zRgndtqS1PUtb44Q2mPNLQ3xrcZG8Oq IXYy -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:58 2026 by rpki-client