$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71525ec8-f99c-4180-8e1b-a59672d69567.roa File: 71525ec8-f99c-4180-8e1b-a59672d69567.roa (raw, json) Hash identifier: Z8zEO8p9gNAaepqrltVQ28iWayUqr9rwTz3XQ2P93Nw= Subject key identifier: 24:4C:54:05:6E:EF:01:FE:9C:4C:97:36:7B:81:48:79:BA:43:AC:36 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1590D8F0BA14E7030424631AFEC962572289D20F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71525ec8-f99c-4180-8e1b-a59672d69567.roa Signing time: Thu 30 Jul 2026 00:10:42 +0000 ROA not before: Thu 30 Jul 2026 00:10:42 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:90:d8:f0:ba:14:e7:03:04:24:63:1a:fe:c9:62:57:22:89:d2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:10:42 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=55c5e75f8226230f3492192906ff41300e87dea390a57334f41b81ce3e073c57, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c6:0a:5a:d5:bc:61:f6:92:9a:02:33:c5:95: b4:55:46:9d:9e:e5:e9:05:3f:b2:7d:3a:fa:e6:a4: 4a:d3:01:df:d7:86:0f:aa:18:89:49:39:51:e4:ab: 7a:6d:e8:6e:b9:3b:0e:20:c6:0a:1a:f0:15:af:37: 96:64:2a:67:9a:2c:47:be:c4:94:f0:93:de:54:df: fb:82:9e:80:2b:9d:71:37:16:25:9c:a8:34:64:4c: b6:af:f1:c8:08:f4:b4:1c:79:bd:fc:b1:e4:41:ee: 6a:dd:1a:18:ce:93:a3:3b:ff:95:f8:3d:26:16:ff: 9c:15:1e:a7:26:26:35:da:da:33:33:0a:75:36:62: 13:3e:21:16:c1:77:d6:63:6e:af:23:ff:e0:73:ac: dc:31:21:96:14:63:81:74:92:a6:e4:d1:72:4a:ca: bc:2d:8a:2f:8a:b5:45:10:7b:9e:99:f1:b7:db:33: ac:38:b4:31:63:5f:1b:24:88:ef:d2:f6:d8:a8:96: fc:f8:20:47:37:a2:be:b4:41:63:cf:f3:3a:5c:aa: 7c:4d:8e:3f:38:f9:9b:b6:02:45:2f:8d:d7:4e:f5: 6f:cb:43:dc:32:d9:9e:1c:79:aa:86:3a:eb:34:f0: 21:77:73:bd:08:f0:ba:ed:d5:3f:90:c8:17:8d:d0: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4C:54:05:6E:EF:01:FE:9C:4C:97:36:7B:81:48:79:BA:43:AC:36 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71525ec8-f99c-4180-8e1b-a59672d69567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c040::/48 Signature Algorithm: sha256WithRSAEncryption 9a:a9:bc:21:dd:4e:ab:ba:e7:18:96:87:f7:f9:98:32:b3:43: 05:a6:bc:03:b8:7a:46:5a:6a:e5:c6:5f:fa:38:c1:bc:99:8c: 3e:1e:73:de:84:62:f5:83:66:04:2e:c6:94:11:9d:26:fd:fc: 68:e3:57:ea:da:4e:55:df:8a:a2:fa:9f:0d:68:47:3f:72:0b: 26:a0:09:4d:c5:e0:c1:0d:d7:f2:06:22:9c:41:9f:59:e0:a4: ef:f6:08:ca:a9:da:89:7a:e7:10:79:ee:01:7f:92:91:fd:8b: 56:f4:ea:65:cd:8c:d5:42:a8:f1:e5:aa:f9:24:4a:2a:4b:06: 84:a2:7a:2d:71:43:ee:72:be:a8:d0:57:bf:d7:cb:dc:0f:01: 1b:53:24:83:ac:21:f0:34:f0:5d:d0:c5:de:0e:2f:b0:e9:bb: 5b:6b:73:31:03:05:f1:17:39:5b:6f:18:5d:55:9c:07:c2:9d: 78:3b:65:d4:22:b1:e6:5f:5d:f9:1d:67:52:4a:75:08:4b:8b: 1d:1e:93:c0:08:de:b6:1a:ac:e1:f5:84:45:7e:7e:5a:95:93: 1d:ba:23:2e:7e:f3:05:36:79:f0:ca:30:3f:c4:5d:4f:37:d2: 8c:ea:72:ac:f4:12:c7:69:c5:6a:db:f1:d8:7c:68:00:0d:e5: dc:9e:a1:81 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFZDY8LoU5wMEJGMa/sliVyKJ0g8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTA0MloX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNANTVjNWU3NWY4MjI2MjMwZjM0OTIx OTI5MDZmZjQxMzAwZTg3ZGVhMzkwYTU3MzM0ZjQxYjgxY2UzZTA3M2M1NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cYKWtW8YfaSmgIzxZW0VUadnuXp BT+yfTr65qRK0wHf14YPqhiJSTlR5Kt6behuuTsOIMYKGvAVrzeWZCpnmixHvsSU 8JPeVN/7gp6AK51xNxYlnKg0ZEy2r/HICPS0HHm9/LHkQe5q3RoYzpOjO/+V+D0m Fv+cFR6nJiY12tozMwp1NmITPiEWwXfWY26vI//gc6zcMSGWFGOBdJKm5NFySsq8 LYovirVFEHuemfG32zOsOLQxY18bJIjv0vbYqJb8+CBHN6K+tEFjz/M6XKp8TY4/ OPmbtgJFL43XTvVvy0PcMtmeHHmqhjrrNPAhd3O9CPC67dU/kMgXjdDKWwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCRMVAVu7wH+nEyXNnuBSHm6Q6w2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxNTI1ZWM4LWY5OWMtNDE4MC04ZTFiLWE1OTY3MmQ2OTU2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8BAMA0GCSqGSIb3DQEBCwUAA4IBAQCaqbwh3U6ruucYlof3 +Zgys0MFprwDuHpGWmrlxl/6OMG8mYw+HnPehGL1g2YELsaUEZ0m/fxo41fq2k5V 34qi+p8NaEc/cgsmoAlNxeDBDdfyBiKcQZ9Z4KTv9gjKqdqJeucQee4Bf5KR/YtW 9OplzYzVQqjx5ar5JEoqSwaEonotcUPucr6o0Fe/18vcDwEbUySDrCHwNPBd0MXe Di+w6btba3MxAwXxFzlbbxhdVZwHwp14O2XUIrHmX135HWdSSnUIS4sdHpPACN62 Gqzh9YRFfn5alZMduiMufvMFNnnwyjA/xF1PN9KM6nKs9BLHacVq2/HYfGgADeXc nqGB -----END CERTIFICATE-----Generated at Wed Aug 26 17:55:27 2026 by rpki-client