$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/558bbfc5-2ba2-4940-97a7-299b91f181e3.roa File: 558bbfc5-2ba2-4940-97a7-299b91f181e3.roa (raw, json) Hash identifier: AgGrB8BV6CmnzIJJs7UXZvqaEz2S8JxKMGl7Jww7fF0= Subject key identifier: 4C:D3:CB:8D:E0:F1:AC:76:83:F8:AC:6C:F7:4E:89:8E:01:45:77:5A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0460DFBCE390692FEE6B17AE7C4F94609B85F05A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/558bbfc5-2ba2-4940-97a7-299b91f181e3.roa Signing time: Wed 05 Aug 2026 00:00:16 +0000 ROA not before: Wed 05 Aug 2026 00:00:16 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:60:df:bc:e3:90:69:2f:ee:6b:17:ae:7c:4f:94:60:9b:85:f0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 5 00:00:16 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=ae4181aecc33e8c5008f681740c911b6478b04a5af5488d2751e9adf708a83c5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3a:47:67:e5:7f:e0:9d:03:d1:39:34:8c:d2: 0d:a8:32:e5:e5:7e:56:f4:33:01:e9:ae:19:d4:de: 58:93:0a:ad:72:1f:cc:87:b9:08:44:bb:bb:41:98: 2d:89:e2:a1:4d:01:41:9b:3c:a1:55:54:79:2c:e0: 24:ac:cb:7c:5d:80:80:a7:8b:e8:0a:ee:ea:2c:ba: 51:03:79:6f:b3:54:dc:42:ec:e6:a1:2d:bc:f6:b3: a2:d6:26:82:64:54:fd:38:83:35:31:e8:db:5b:81: c4:c8:99:cf:b0:57:e1:02:a8:2b:71:32:5c:b6:ac: 09:ce:ff:75:b3:0e:56:16:24:dc:e4:a8:cd:8f:de: 06:25:53:f1:26:6e:41:c6:a7:e6:14:d9:f7:8e:11: 94:8b:11:3b:64:65:92:00:9c:f1:0c:17:26:67:45: 6a:cc:af:9a:fe:12:a9:f5:97:e3:3f:14:4c:37:7c: 6c:de:f5:2e:25:24:08:bb:c6:ab:8a:25:31:80:17: da:d3:c8:8c:8f:28:3d:9b:4a:9f:ce:48:6b:a9:d4: 3c:fe:50:69:69:7b:f4:b1:68:59:88:d0:56:92:83: 32:9d:47:7c:b1:85:b6:7d:a6:6e:33:d0:2a:8e:26: 15:87:a1:2d:4c:fd:1f:5c:61:1c:c9:1d:d7:d1:ea: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D3:CB:8D:E0:F1:AC:76:83:F8:AC:6C:F7:4E:89:8E:01:45:77:5A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/558bbfc5-2ba2-4940-97a7-299b91f181e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:c000::/40 Signature Algorithm: sha256WithRSAEncryption b4:9e:e9:3b:f0:e3:97:89:d6:b9:70:b0:9d:98:8e:de:d5:16: 96:95:89:fc:2e:03:31:fd:58:05:c5:d4:c8:d3:5b:89:83:72: c4:be:57:82:b9:5d:5e:88:22:b1:25:50:a0:52:83:48:5e:2b: d4:00:c8:4a:74:91:39:6a:f7:bd:08:0c:81:5b:1f:77:90:58: f9:72:82:a8:20:0e:d6:8d:c3:75:c6:b6:12:59:a3:d7:72:d3: 98:a1:37:61:ee:3a:49:2f:fb:63:d8:af:7f:6c:0c:6f:05:d4: bd:3f:ef:90:89:96:c4:01:15:bc:1a:59:1f:db:92:f9:96:4b: ca:64:75:1d:88:0a:27:52:08:a3:70:89:31:63:e3:f8:da:53: 41:5d:2f:d3:57:b9:e0:3d:37:48:ff:6b:cd:ae:b2:76:97:8a: 8f:e1:48:56:47:de:4e:76:36:77:4e:bc:3c:9a:a3:e0:7e:e3: 00:2a:91:a4:f1:9b:c0:3b:3d:2d:d1:a6:84:99:6e:c2:53:a1: 9d:9b:c3:bb:6a:78:ce:27:09:e0:51:e9:a8:1d:b7:67:b5:b1: b0:c6:01:5d:97:d5:5f:ae:f4:c2:89:d9:74:a5:fc:b1:69:e4: 95:91:40:6e:e0:b2:11:10:40:dd:65:af:c1:4a:98:57:52:12: f3:5a:93:e2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBGDfvOOQaS/uaxeufE+UYJuF8FowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNTAwMDAxNloX DTI2MTEwMzIzNTk1OVowejFJMEcGA1UEBRNAYWU0MTgxYWVjYzMzZThjNTAwOGY2 ODE3NDBjOTExYjY0NzhiMDRhNWFmNTQ4OGQyNzUxZTlhZGY3MDhhODNjNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zpHZ+V/4J0D0Tk0jNINqDLl5X5W 9DMB6a4Z1N5Ykwqtch/Mh7kIRLu7QZgtieKhTQFBmzyhVVR5LOAkrMt8XYCAp4vo Cu7qLLpRA3lvs1TcQuzmoS289rOi1iaCZFT9OIM1MejbW4HEyJnPsFfhAqgrcTJc tqwJzv91sw5WFiTc5KjNj94GJVPxJm5BxqfmFNn3jhGUixE7ZGWSAJzxDBcmZ0Vq zK+a/hKp9ZfjPxRMN3xs3vUuJSQIu8ariiUxgBfa08iMjyg9m0qfzkhrqdQ8/lBp aXv0sWhZiNBWkoMynUd8sYW2faZuM9AqjiYVh6EtTP0fXGEcyR3X0epHWwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEzTy43g8ax2g/isbPdOiY4BRXdaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1OGJiZmM1LTJiYTItNDk0MC05N2E3LTI5OWI5MWYxODFlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7cAwDQYJKoZIhvcNAQELBQADggEBALSe6Tvw45eJ1rlwsJ2Y jt7VFpaVifwuAzH9WAXF1MjTW4mDcsS+V4K5XV6IIrElUKBSg0heK9QAyEp0kTlq 970IDIFbH3eQWPlygqggDtaNw3XGthJZo9dy05ihN2HuOkkv+2PYr39sDG8F1L0/ 75CJlsQBFbwaWR/bkvmWS8pkdR2ICidSCKNwiTFj4/jaU0FdL9NXueA9N0j/a82u snaXio/hSFZH3k52NndOvDyao+B+4wAqkaTxm8A7PS3RpoSZbsJToZ2bw7tqeM4n CeBR6agdt2e1sbDGAV2X1V+u9MKJ2XSl/LFp5JWRQG7gshEQQN1lr8FKmFdSEvNa k+I= -----END CERTIFICATE-----Generated at Wed Aug 26 07:59:18 2026 by rpki-client