$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa File: 5f4586d3-447b-4c16-87c7-c068a92e5e74.roa (raw, json) Hash identifier: PLbG7B+oC/33T0RYonrqTXUGBOq4bd59n6lGg1OGBLQ= Subject key identifier: CB:A7:A2:2A:E1:BF:0A:43:F1:28:84:7B:C2:27:AE:DB:5D:8D:79:7D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 617553FB01EC7C1F0A4E86D56F86E9AE8C05C9D8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa Signing time: Fri 31 Jul 2026 00:10:55 +0000 ROA not before: Fri 31 Jul 2026 00:10:55 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:75:53:fb:01:ec:7c:1f:0a:4e:86:d5:6f:86:e9:ae:8c:05:c9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:10:55 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=d7c3e0b17691452b2c5dbbfa40d5bfc57a1710639d1d1a2b293cf59784282aae, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:29:f6:21:da:a3:28:a2:4d:0f:4a:84:17: c0:b3:ae:70:97:8b:de:d1:d0:24:d6:86:0b:78:0e: 2b:33:c2:98:79:9e:94:00:6b:71:f8:e4:78:d2:fa: 88:07:7f:3f:9c:63:7a:5b:09:52:e8:e1:cf:2d:a0: de:00:53:92:7d:93:1d:76:cc:e3:15:60:11:03:69: 0f:f2:1e:04:db:cc:c4:ef:19:69:b2:76:ba:34:53: b7:a1:da:47:65:66:c9:9d:9d:41:98:55:d4:3e:6b: 92:22:bb:fa:7a:1f:c3:00:06:76:fc:fe:70:51:9b: 7f:60:fa:aa:8c:6e:c3:cd:bc:2d:85:c8:6c:fd:ad: 20:e3:0a:d7:2f:c0:2e:3b:98:3f:14:25:ca:ce:94: 38:ec:ba:b8:5f:5c:32:63:9a:24:bf:ba:21:e3:c4: 48:22:81:f8:c8:b0:96:12:9c:45:1e:72:ee:2d:f1: 33:09:af:89:21:e1:74:68:bc:61:73:1c:38:53:57: 95:ed:43:73:0e:95:63:40:fb:72:e7:ef:31:2f:ac: de:a9:19:76:01:d0:21:68:cd:ae:80:1b:fa:8f:23: ba:b1:ad:de:90:8c:91:fd:39:4a:a7:85:94:ab:95: 05:db:8d:f5:d7:ff:c2:d2:3c:ac:2a:71:3b:fa:e0: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A7:A2:2A:E1:BF:0A:43:F1:28:84:7B:C2:27:AE:DB:5D:8D:79:7D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1040::/48 Signature Algorithm: sha256WithRSAEncryption 44:31:b0:55:31:ec:23:64:41:4e:14:f6:ac:c7:da:48:13:af: 13:46:22:db:79:65:f7:17:fe:f5:93:0e:44:1b:4a:89:3c:9f: 03:f5:3e:a1:3e:81:38:af:22:97:54:d5:22:fd:7f:25:4c:28: 79:7a:3a:80:fa:42:28:f9:af:64:0d:ed:ca:c9:cd:61:56:6d: 78:b3:f8:5f:d5:84:fe:21:aa:eb:f2:da:7a:40:cb:92:8e:b3: 40:a1:d8:6c:46:99:b5:45:c9:b1:d6:0d:c2:d4:cb:55:59:bd: 49:bc:14:0c:7b:fa:43:d8:16:4e:9d:26:51:d2:5f:bb:81:2d: 43:11:14:12:f5:b1:0b:1e:b5:31:f7:0a:5b:84:d3:e3:bd:08: a8:35:25:4c:52:7e:79:17:dc:db:88:4d:68:17:d0:9b:93:6d: 08:54:85:8e:6a:5c:99:11:21:12:24:fd:10:dd:b7:33:6d:60: 38:a8:18:16:6c:6e:00:d3:43:a0:7e:40:22:68:10:03:55:8c: 57:25:22:3e:c1:9a:92:6f:38:f1:54:b8:82:56:04:9b:45:eb: 68:43:40:7a:2f:36:29:4b:09:b2:94:a2:39:f6:01:a3:9a:5a: 6e:12:f1:a3:d8:af:ab:33:4d:45:09:64:a8:8b:a8:e5:ed:20: da:e8:ab:d1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYXVT+wHsfB8KTobVb4bprowFydgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMTA1NVoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAZDdjM2UwYjE3NjkxNDUyYjJjNWRi YmZhNDBkNWJmYzU3YTE3MTA2MzlkMWQxYTJiMjkzY2Y1OTc4NDI4MmFhZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3cp9iHaoyiiTQ9KhBfAs65wl4ve 0dAk1oYLeA4rM8KYeZ6UAGtx+OR40vqIB38/nGN6WwlS6OHPLaDeAFOSfZMddszj FWARA2kP8h4E28zE7xlpsna6NFO3odpHZWbJnZ1BmFXUPmuSIrv6eh/DAAZ2/P5w UZt/YPqqjG7Dzbwthchs/a0g4wrXL8AuO5g/FCXKzpQ47Lq4X1wyY5okv7oh48RI IoH4yLCWEpxFHnLuLfEzCa+JIeF0aLxhcxw4U1eV7UNzDpVjQPty5+8xL6zeqRl2 AdAhaM2ugBv6jyO6sa3ekIyR/TlKp4WUq5UF24311//C0jysKnE7+uC0NwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMunoirhvwpD8SiEe8InrttdjXl9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmNDU4NmQzLTQ0N2ItNGMxNi04N2M3LWMwNjhhOTJlNWU3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hBAMA0GCSqGSIb3DQEBCwUAA4IBAQBEMbBVMewjZEFOFPas x9pIE68TRiLbeWX3F/71kw5EG0qJPJ8D9T6hPoE4ryKXVNUi/X8lTCh5ejqA+kIo +a9kDe3Kyc1hVm14s/hf1YT+Iarr8tp6QMuSjrNAodhsRpm1Rcmx1g3C1MtVWb1J vBQMe/pD2BZOnSZR0l+7gS1DERQS9bELHrUx9wpbhNPjvQioNSVMUn55F9zbiE1o F9Cbk20IVIWOalyZESESJP0Q3bczbWA4qBgWbG4A00OgfkAiaBADVYxXJSI+wZqS bzjxVLiCVgSbRetoQ0B6LzYpSwmylKI59gGjmlpuEvGj2K+rM01FCWSoi6jl7SDa 6KvR -----END CERTIFICATE-----Generated at Wed Aug 26 00:37:32 2026 by rpki-client