$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56cecdf0-d939-4f36-a536-da8aacae2529.roa File: 56cecdf0-d939-4f36-a536-da8aacae2529.roa (raw, json) Hash identifier: lRg6/f+pQ5u9W2OY8Q1EtEnjZovmg+IIwef4lMxTVNM= Subject key identifier: 87:53:EF:84:7F:C4:A0:7A:39:FA:FE:D5:A6:84:6E:B0:FE:0B:44:F0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5B9CB0365D0602219A53886C2311903EF8E270AE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56cecdf0-d939-4f36-a536-da8aacae2529.roa Signing time: Wed 19 Aug 2026 00:10:24 +0000 ROA not before: Wed 19 Aug 2026 00:10:24 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9c:b0:36:5d:06:02:21:9a:53:88:6c:23:11:90:3e:f8:e2:70:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:24 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=7c26beadfa79a87555c86af35d8de7045e9ae166c1b6c3fda44afd360d279b56, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:a0:f3:1d:a1:98:7b:ba:13:df:f6:bb:11: 9b:21:bf:50:e4:11:08:a1:22:60:56:6c:3a:d2:24: 7b:53:49:bf:f5:e4:48:87:43:8b:46:52:73:ca:61: 0a:54:80:40:37:5d:9f:22:a7:72:90:da:36:1a:bd: b1:cc:64:7f:af:86:04:08:42:eb:fe:f4:2a:97:34: 19:ac:01:dc:a3:2b:3e:0a:44:9c:34:30:da:db:4f: 56:b7:48:c0:83:81:d3:72:c9:ca:f0:85:c2:fc:4e: cf:e8:04:45:95:5f:56:00:2b:73:4c:86:2c:cd:16: 1d:ff:3e:fe:99:92:7a:a6:35:bd:e9:5c:96:f9:97: b1:cc:1b:d1:6d:ed:c6:5d:bb:a7:4a:48:c2:dc:0f: 62:bc:b5:1e:ea:50:00:db:0f:08:2e:8c:47:6d:51: f6:ab:18:d5:66:25:e4:4c:26:01:cc:a2:67:cf:e8: 24:8c:1c:d9:b1:fd:70:02:cd:38:40:8c:5c:63:f1: bd:de:8e:19:15:f2:2f:f4:1d:46:32:90:1a:1f:7f: f7:b8:c9:87:24:29:aa:a2:fb:38:30:27:e9:b8:a9: af:76:5f:7f:d2:c6:44:0c:b2:58:16:4f:75:3c:13: 2c:58:0d:ab:bc:74:b4:e5:b1:ed:63:e2:eb:73:3e: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:53:EF:84:7F:C4:A0:7A:39:FA:FE:D5:A6:84:6E:B0:FE:0B:44:F0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56cecdf0-d939-4f36-a536-da8aacae2529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:2800::/40 Signature Algorithm: sha256WithRSAEncryption ab:b3:73:e0:eb:23:ab:1f:ea:fa:0a:26:3e:d9:62:3d:22:83: 67:fa:21:b4:76:99:43:a8:19:1a:39:7f:87:4c:82:26:01:04: ad:f6:f5:5a:89:d6:42:db:d0:59:6e:7e:1e:1b:c3:28:d1:73: 17:be:94:9e:de:d9:e9:2d:ed:64:10:60:bb:b7:5d:45:cc:4a: a6:52:13:8e:b4:e8:14:47:54:9c:c8:c1:96:fb:15:41:e5:99: 49:ee:4c:6c:38:b0:77:cb:46:88:6a:0e:bc:a6:56:b2:01:93: 4b:09:50:fe:a5:0f:0e:da:ca:d6:38:c2:55:91:11:4c:20:2d: fa:36:d3:da:d0:08:d9:9d:13:c3:78:3e:9e:16:30:6f:fd:01: 25:57:8f:5a:d7:e7:98:61:12:cc:11:12:af:26:ba:a8:a4:30: 46:ca:3b:b2:15:36:be:f5:c3:db:3d:2a:b2:34:20:34:5e:79: f8:6e:92:4f:ad:b9:72:2a:a3:ef:c7:1b:b0:7a:c9:8f:87:00: 1b:ea:82:7f:c5:ea:8e:fd:53:3c:dc:be:9e:52:07:5f:a6:e6: 9d:2c:00:04:3c:12:3f:11:1c:68:d8:41:cb:57:d5:a4:db:ac: 15:50:44:71:6d:30:b3:53:6c:5a:0b:e8:ee:4c:98:6d:ef:10: b9:6d:68:5f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUW5ywNl0GAiGaU4hsIxGQPvjicK4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTAyNFoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAN2MyNmJlYWRmYTc5YTg3NTU1Yzg2 YWYzNWQ4ZGU3MDQ1ZTlhZTE2NmMxYjZjM2ZkYTQ0YWZkMzYwZDI3OWI1NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/2g8x2hmHu6E9/2uxGbIb9Q5BEI oSJgVmw60iR7U0m/9eRIh0OLRlJzymEKVIBAN12fIqdykNo2Gr2xzGR/r4YECELr /vQqlzQZrAHcoys+CkScNDDa209Wt0jAg4HTcsnK8IXC/E7P6ARFlV9WACtzTIYs zRYd/z7+mZJ6pjW96VyW+ZexzBvRbe3GXbunSkjC3A9ivLUe6lAA2w8ILoxHbVH2 qxjVZiXkTCYBzKJnz+gkjBzZsf1wAs04QIxcY/G93o4ZFfIv9B1GMpAaH3/3uMmH JCmqovs4MCfpuKmvdl9/0sZEDLJYFk91PBMsWA2rvHS05bHtY+Lrcz5fUwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIdT74R/xKB6Ofr+1aaEbrD+C0TwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2Y2VjZGYwLWQ5MzktNGYzNi1hNTM2LWRhOGFhY2FlMjUyOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauigwDQYJKoZIhvcNAQELBQADggEBAKuzc+DrI6sf6voKJj7Z Yj0ig2f6IbR2mUOoGRo5f4dMgiYBBK329VqJ1kLb0Flufh4bwyjRcxe+lJ7e2ekt 7WQQYLu3XUXMSqZSE4606BRHVJzIwZb7FUHlmUnuTGw4sHfLRohqDrymVrIBk0sJ UP6lDw7aytY4wlWREUwgLfo209rQCNmdE8N4Pp4WMG/9ASVXj1rX55hhEswREq8m uqikMEbKO7IVNr71w9s9KrI0IDReefhukk+tuXIqo+/HG7B6yY+HABvqgn/F6o79 Uzzcvp5SB1+m5p0sAAQ8Ej8RHGjYQctX1aTbrBVQRHFtMLNTbFoL6O5MmG3vELlt aF8= -----END CERTIFICATE-----Generated at Wed Aug 26 16:08:42 2026 by rpki-client