$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7169bc70-b9db-4e83-beac-24cc0c5a1537.roa File: 7169bc70-b9db-4e83-beac-24cc0c5a1537.roa (raw, json) Hash identifier: 7phIKC2FqzOtUqEADq7MY1aVoNOJkuLDWPQyMSMBgms= Subject key identifier: F4:83:75:3C:F9:53:41:F5:D3:D7:49:52:63:55:70:29:4C:1C:24:28 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0EDC233759A8F64786F49EC858127455FD6FF5B3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7169bc70-b9db-4e83-beac-24cc0c5a1537.roa Signing time: Sat 01 Aug 2026 00:21:22 +0000 ROA not before: Sat 01 Aug 2026 00:21:22 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:dc:23:37:59:a8:f6:47:86:f4:9e:c8:58:12:74:55:fd:6f:f5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:21:22 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=abbc9974a17fee5bf1f6faccdf306682240a2cea80ae0a47883bd62c0b8b01d3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:55:fd:22:b1:c5:7f:84:76:21:c6:71:bc: 59:7a:24:04:8d:ba:41:db:61:73:47:17:bb:f9:b0: aa:3f:bb:c5:f0:14:09:94:d6:11:38:44:19:43:47: 82:37:df:93:1f:e6:17:b1:a8:5f:b6:3d:a3:cd:67: f5:cf:75:0d:dd:3d:64:b4:36:3c:5a:98:8f:cc:1f: 6e:4b:0a:ca:bb:89:00:f3:19:83:65:45:53:43:68: 3e:9f:8d:c0:05:61:0f:21:9b:2e:b5:c1:02:64:ab: 72:98:2a:94:d0:ab:d6:2a:40:69:a7:2c:67:dc:b6: fc:fa:2d:20:2d:91:83:dd:54:8f:fc:56:f0:d9:71: 46:d0:19:58:70:9a:fe:67:9e:fb:3c:94:9e:bf:bd: f0:94:5a:bc:35:08:28:38:93:de:52:6c:c7:a6:e5: 66:4e:e6:f0:a8:85:f9:92:c4:d4:4d:91:c1:1d:5f: 79:78:4d:c6:e4:f1:b0:28:00:11:95:e8:b6:d4:90: 0b:d9:f8:5b:14:48:5e:d8:cc:f3:d9:6a:ba:2a:54: 91:6b:95:24:6d:4b:4d:3a:f4:3b:08:47:25:1d:12: fd:d7:e6:1a:23:ba:72:63:a5:09:58:d0:ed:76:cf: b2:46:20:a6:fc:a0:79:6d:09:a6:19:6e:50:2b:1e: a8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:83:75:3C:F9:53:41:F5:D3:D7:49:52:63:55:70:29:4C:1C:24:28 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7169bc70-b9db-4e83-beac-24cc0c5a1537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:8000::/40 Signature Algorithm: sha256WithRSAEncryption 1d:ca:e7:fe:a2:7e:5c:e7:db:ac:48:de:80:5e:f0:02:67:e0: 81:f6:c9:fe:d7:56:05:f6:ab:cc:df:95:5d:98:37:6a:6e:55: 76:73:9e:64:fc:6a:eb:db:fd:57:30:06:e0:f4:bc:d0:ad:bc: 15:cb:40:a3:a7:9a:0f:60:5c:5f:e8:a8:1e:79:86:8a:48:2f: dc:f0:a8:a5:f2:cd:a8:9c:71:98:74:7f:61:17:5c:08:cf:78: 57:70:3a:ce:d7:5a:8f:2b:4a:df:8e:47:cf:03:84:98:83:c4: cb:a1:92:49:1c:c0:15:81:64:b4:78:48:75:8e:39:12:4d:7d: fd:dd:db:8a:62:ed:2e:4e:cf:f5:3e:aa:d2:1c:88:e7:c6:cc: d0:e3:fa:3f:10:88:8c:f7:7d:16:b5:df:71:f4:e0:5d:ba:1b: f9:4b:86:47:6a:52:a6:19:7c:1f:15:4a:7f:9a:b4:26:c3:4b: 29:97:e5:3f:dc:9c:46:de:f0:ad:f7:95:f2:53:c5:ef:3f:87: 13:6a:21:aa:fa:39:8f:8f:ae:53:a0:33:e1:de:95:d5:e9:a4: af:ea:57:9f:71:9b:5f:90:aa:6b:8a:37:5b:15:13:81:11:8e: fb:14:18:d7:eb:dd:0c:f9:e6:26:66:6d:bb:ca:b6:72:33:e9: 14:14:a3:9f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDtwjN1mo9keG9J7IWBJ0Vf1v9bMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMjEyMloX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAYWJiYzk5NzRhMTdmZWU1YmYxZjZm YWNjZGYzMDY2ODIyNDBhMmNlYTgwYWUwYTQ3ODgzYmQ2MmMwYjhiMDFkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK5V/SKxxX+EdiHGcbxZeiQEjbpB 22FzRxe7+bCqP7vF8BQJlNYROEQZQ0eCN9+TH+YXsahftj2jzWf1z3UN3T1ktDY8 WpiPzB9uSwrKu4kA8xmDZUVTQ2g+n43ABWEPIZsutcECZKtymCqU0KvWKkBppyxn 3Lb8+i0gLZGD3VSP/Fbw2XFG0BlYcJr+Z577PJSev73wlFq8NQgoOJPeUmzHpuVm TubwqIX5ksTUTZHBHV95eE3G5PGwKAARlei21JAL2fhbFEhe2Mzz2Wq6KlSRa5Uk bUtNOvQ7CEclHRL91+YaI7pyY6UJWNDtds+yRiCm/KB5bQmmGW5QKx6oVwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPSDdTz5U0H109dJUmNVcClMHCQoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxNjliYzcwLWI5ZGItNGU4My1iZWFjLTI0Y2MwYzVhMTUzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNoAwDQYJKoZIhvcNAQELBQADggEBAB3K5/6iflzn26xI3oBe 8AJn4IH2yf7XVgX2q8zflV2YN2puVXZznmT8auvb/VcwBuD0vNCtvBXLQKOnmg9g XF/oqB55hopIL9zwqKXyzaiccZh0f2EXXAjPeFdwOs7XWo8rSt+OR88DhJiDxMuh kkkcwBWBZLR4SHWOORJNff3d24pi7S5Oz/U+qtIciOfGzNDj+j8QiIz3fRa133H0 4F26G/lLhkdqUqYZfB8VSn+atCbDSymX5T/cnEbe8K33lfJTxe8/hxNqIar6OY+P rlOgM+HeldXppK/qV59xm1+QqmuKN1sVE4ERjvsUGNfr3Qz55iZmbbvKtnIz6RQU o58= -----END CERTIFICATE-----Generated at Wed Aug 26 01:20:00 2026 by rpki-client