$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/544e7031-781b-4e29-9730-b21cc2781435.roa File: 544e7031-781b-4e29-9730-b21cc2781435.roa (raw, json) Hash identifier: +mdblJOFu/sBkfBFIwZNfMXNlBPOLcdBUar+Db+SOBA= Subject key identifier: 85:9A:94:CF:00:AD:23:F5:BD:D5:9A:A9:E0:F0:F6:4F:B0:B4:57:0E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4FDEF5724825176ADFDB825A89C041213E62CE21 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/544e7031-781b-4e29-9730-b21cc2781435.roa Signing time: Tue 04 Aug 2026 00:00:33 +0000 ROA not before: Tue 04 Aug 2026 00:00:33 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:de:f5:72:48:25:17:6a:df:db:82:5a:89:c0:41:21:3e:62:ce:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 4 00:00:33 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=f7ee523cdf1f344b279e1109ba0999fecc73a197718199504a56dcde6b1b1790, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f8:7e:8a:f2:4f:f2:39:09:27:93:2d:93:33: fe:19:c2:f7:86:ca:1a:9b:7b:33:2f:31:b8:87:73: 1f:3a:eb:cc:65:13:84:64:f1:40:57:10:90:6a:2b: 41:0f:25:bb:6a:cb:ba:48:1b:8b:65:5f:49:b6:9f: 9e:26:1e:f0:07:39:c8:b6:98:19:8a:c8:5e:7b:25: a3:7b:1a:4f:22:75:e3:59:73:e3:ec:01:97:e5:6e: e9:46:82:ac:3e:67:10:b7:6f:e9:a1:fa:13:e2:4b: d3:d0:4d:ae:f9:c6:93:e8:42:6c:8d:b6:e5:ea:12: d3:d2:62:84:26:6c:8f:b7:8e:d0:05:fe:ec:66:4a: 70:8d:b2:08:59:50:50:73:f6:72:01:78:f1:11:83: 45:92:e1:45:37:97:4c:72:e4:0d:11:30:75:20:93: 8c:34:bf:78:8c:8e:88:81:40:ff:f2:4e:16:32:7d: 34:34:e5:20:ce:61:fc:bb:b0:b4:97:f3:07:6c:09: f7:35:23:2b:5e:8d:eb:7e:8c:e9:ba:67:5e:8e:c6: c0:d4:49:b3:d0:71:be:47:2d:1c:3a:66:26:86:4f: df:d0:5e:a5:da:85:08:47:52:d8:80:91:18:9b:62: 15:d8:d8:aa:68:c0:d9:16:d6:3f:ac:73:09:e7:c6: a3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9A:94:CF:00:AD:23:F5:BD:D5:9A:A9:E0:F0:F6:4F:B0:B4:57:0E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/544e7031-781b-4e29-9730-b21cc2781435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:a000::/40 Signature Algorithm: sha256WithRSAEncryption a3:5f:d6:66:57:36:81:5d:fa:35:a6:37:3b:f0:53:ad:65:31: 76:02:2b:b2:79:62:da:90:28:8a:81:21:92:76:f2:c3:9a:90: c1:b8:0a:43:c5:6e:11:14:de:23:e4:e2:40:c6:b5:ca:bb:63: 4b:a2:09:aa:26:f0:a1:7a:e2:3e:15:dc:f2:d9:f1:d5:2e:32: 15:cb:b5:7e:63:f5:a0:6e:07:8f:aa:0e:0f:bc:96:e2:3f:d7: bd:1e:7c:3a:d0:d9:7c:e8:87:0b:c4:c9:99:9b:6c:23:06:67: 68:1c:cb:72:f0:af:21:63:7f:4f:bb:d9:cb:1e:b8:ca:f3:57: 11:08:ff:45:c3:c9:ec:73:78:ee:d1:14:9b:40:a8:2f:a4:bb: ff:c1:01:2f:54:76:45:f2:5e:58:67:de:44:c1:3c:e0:7d:22: 2c:70:9f:ae:31:a3:1a:eb:a9:eb:0f:9f:9a:57:2e:4d:a8:f8: 00:87:1c:6a:50:d0:74:d0:6c:dc:ad:6e:0a:21:31:90:cc:9d: b0:cb:13:43:01:c0:3c:5b:27:79:8f:f5:52:8f:49:37:37:bc: 06:c4:fa:db:f5:41:98:eb:dc:bd:af:21:27:98:40:b8:1d:e0: 95:32:aa:97:d9:32:bb:9f:45:d1:5e:f4:97:46:98:ac:48:9b: 86:09:93:5f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUT971ckglF2rf24JaicBBIT5iziEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNDAwMDAzM1oX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAZjdlZTUyM2NkZjFmMzQ0YjI3OWUx MTA5YmEwOTk5ZmVjYzczYTE5NzcxODE5OTUwNGE1NmRjZGU2YjFiMTc5MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/h+ivJP8jkJJ5MtkzP+GcL3hsoa m3szLzG4h3MfOuvMZROEZPFAVxCQaitBDyW7asu6SBuLZV9Jtp+eJh7wBznItpgZ isheeyWjexpPInXjWXPj7AGX5W7pRoKsPmcQt2/pofoT4kvT0E2u+caT6EJsjbbl 6hLT0mKEJmyPt47QBf7sZkpwjbIIWVBQc/ZyAXjxEYNFkuFFN5dMcuQNETB1IJOM NL94jI6IgUD/8k4WMn00NOUgzmH8u7C0l/MHbAn3NSMrXo3rfozpumdejsbA1Emz 0HG+Ry0cOmYmhk/f0F6l2oUIR1LYgJEYm2IV2NiqaMDZFtY/rHMJ58aj2wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIWalM8ArSP1vdWaqeDw9k+wtFcOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0NGU3MDMxLTc4MWItNGUyOS05NzMwLWIyMWNjMjc4MTQzNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNqAwDQYJKoZIhvcNAQELBQADggEBAKNf1mZXNoFd+jWmNzvw U61lMXYCK7J5YtqQKIqBIZJ28sOakMG4CkPFbhEU3iPk4kDGtcq7Y0uiCaom8KF6 4j4V3PLZ8dUuMhXLtX5j9aBuB4+qDg+8luI/170efDrQ2XzohwvEyZmbbCMGZ2gc y3LwryFjf0+72cseuMrzVxEI/0XDyexzeO7RFJtAqC+ku//BAS9UdkXyXlhn3kTB POB9Iixwn64xoxrrqesPn5pXLk2o+ACHHGpQ0HTQbNytbgohMZDMnbDLE0MBwDxb J3mP9VKPSTc3vAbE+tv1QZjr3L2vISeYQLgd4JUyqpfZMrufRdFe9JdGmKxIm4YJ k18= -----END CERTIFICATE-----Generated at Wed Aug 26 11:26:47 2026 by rpki-client