$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/733e9b9c-611b-4eb9-bda3-66984e1f8dd6.roa File: 733e9b9c-611b-4eb9-bda3-66984e1f8dd6.roa (raw, json) Hash identifier: jHfvJXb28sugyA2HZbvfA30FyonPyH36X2GC/QqbM/E= Subject key identifier: 55:C1:E0:D7:43:6F:15:EB:47:26:E5:82:66:37:3F:B8:A3:36:99:FB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 60A2D471A6B8FBA65D61B93932335F57B8E63C96 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/733e9b9c-611b-4eb9-bda3-66984e1f8dd6.roa Signing time: Tue 18 Aug 2026 18:03:40 +0000 ROA not before: Tue 18 Aug 2026 18:03:40 +0000 ROA not after: Mon 16 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da33:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a2:d4:71:a6:b8:fb:a6:5d:61:b9:39:32:33:5f:57:b8:e6:3c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 18:03:40 2026 GMT Not After : Nov 16 23:59:59 2026 GMT Subject: serialNumber=57ef491e69e11d7d6e37c3731ac9e734c03d67a7e19e405f8655e94851da65a7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:f3:86:82:58:47:51:48:cf:4a:fe:7f:8a: 9b:67:ed:5d:6b:28:c8:96:1f:60:c0:b3:1a:6c:1a: 75:6b:47:6f:ea:ef:8f:01:11:8d:53:7f:78:7c:66: e1:ab:1e:53:99:ac:89:1c:75:4e:45:b2:88:7b:7b: ed:eb:c8:66:ae:78:14:0c:40:cd:a3:bf:db:18:8c: 39:e8:99:6b:f5:31:60:60:00:c9:a0:c0:45:2c:16: 04:bc:50:c8:3f:b3:69:c9:2b:98:cb:93:60:79:eb: fe:37:52:2e:43:b7:27:7a:13:b9:1f:e6:d5:4d:3c: 88:d9:ed:8a:f4:6e:af:6b:fb:ae:28:1d:51:20:94: d7:a7:96:de:90:51:10:5a:08:64:a3:f6:0a:c9:2f: f4:5f:32:28:d7:7f:98:68:b9:f2:d2:9b:16:ae:17: d7:f3:15:a5:16:34:c3:97:bc:c1:ae:6c:77:cd:fb: eb:9c:2b:a4:de:9c:66:14:8b:69:cd:60:45:64:7f: d4:47:ea:ff:47:10:ba:5b:fc:c3:d2:43:ae:81:3e: f2:6f:d6:77:b3:a3:d5:0b:2e:83:c9:aa:54:35:dd: e9:db:48:41:08:7d:80:16:fc:8b:8e:7a:42:d8:0d: 8e:21:79:bb:c3:46:77:d9:48:fe:dc:c5:b9:6c:24: 1f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C1:E0:D7:43:6F:15:EB:47:26:E5:82:66:37:3F:B8:A3:36:99:FB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/733e9b9c-611b-4eb9-bda3-66984e1f8dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:4800::/40 Signature Algorithm: sha256WithRSAEncryption c8:b2:7b:86:14:b4:8a:fc:51:44:92:24:0d:cc:12:6b:1a:35: 21:f4:9c:97:ee:99:bb:98:cc:ba:4a:40:ba:9d:26:b8:25:b9: db:9d:74:2e:1e:3a:41:d9:a4:03:c6:0d:38:23:dc:12:9e:2e: b5:8f:00:f7:c1:6c:6c:1c:04:c8:ec:27:70:f0:0b:ff:3f:83: bb:c4:4c:e1:6c:6c:34:14:46:54:2a:59:25:07:f3:5d:e3:09: c3:c8:24:3b:c3:7f:fb:56:0d:4e:4f:17:e1:34:41:0b:2c:bc: 9f:84:8d:f3:1b:e1:12:9d:3d:1f:23:8c:77:59:d8:1f:d8:6c: e2:08:18:ce:bc:cd:c1:15:60:67:b5:22:0d:82:5c:49:3d:22: 57:d8:27:49:5d:7d:db:b7:95:83:58:b1:70:b1:64:8d:a6:0f: fa:74:6b:a2:b4:e4:83:d4:93:5e:16:7f:8b:04:85:17:02:bf: ac:de:36:50:4c:d9:14:c5:49:70:6d:c7:06:31:58:8e:d2:7c: e0:50:13:06:7b:48:07:f4:b7:38:41:be:24:08:2f:75:9a:61: 83:e9:0a:89:e0:7f:45:0f:69:81:b5:ca:22:71:b9:00:ee:d3: 81:81:94:74:d8:07:ab:aa:f8:9f:6e:b0:fe:c2:8e:80:df:e0: 91:5e:69:8c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYKLUcaa4+6ZdYbk5MjNfV7jmPJYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxODE4MDM0MFoX DTI2MTExNjIzNTk1OVowejFJMEcGA1UEBRNANTdlZjQ5MWU2OWUxMWQ3ZDZlMzdj MzczMWFjOWU3MzRjMDNkNjdhN2UxOWU0MDVmODY1NWU5NDg1MWRhNjVhNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP3zhoJYR1FIz0r+f4qbZ+1dayjI lh9gwLMabBp1a0dv6u+PARGNU394fGbhqx5TmayJHHVORbKIe3vt68hmrngUDEDN o7/bGIw56Jlr9TFgYADJoMBFLBYEvFDIP7NpySuYy5Ngeev+N1IuQ7cnehO5H+bV TTyI2e2K9G6va/uuKB1RIJTXp5bekFEQWghko/YKyS/0XzIo13+YaLny0psWrhfX 8xWlFjTDl7zBrmx3zfvrnCuk3pxmFItpzWBFZH/UR+r/RxC6W/zD0kOugT7yb9Z3 s6PVCy6DyapUNd3p20hBCH2AFvyLjnpC2A2OIXm7w0Z32Uj+3MW5bCQfqQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFXB4NdDbxXrRyblgmY3P7ijNpn7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzczM2U5YjljLTYxMWItNGViOS1iZGEzLTY2OTg0ZTFmOGRkNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaM0gwDQYJKoZIhvcNAQELBQADggEBAMiye4YUtIr8UUSSJA3M EmsaNSH0nJfumbuYzLpKQLqdJrglududdC4eOkHZpAPGDTgj3BKeLrWPAPfBbGwc BMjsJ3DwC/8/g7vETOFsbDQURlQqWSUH813jCcPIJDvDf/tWDU5PF+E0QQssvJ+E jfMb4RKdPR8jjHdZ2B/YbOIIGM68zcEVYGe1Ig2CXEk9IlfYJ0ldfdu3lYNYsXCx ZI2mD/p0a6K05IPUk14Wf4sEhRcCv6zeNlBM2RTFSXBtxwYxWI7SfOBQEwZ7SAf0 tzhBviQIL3WaYYPpCongf0UPaYG1yiJxuQDu04GBlHTYB6uq+J9usP7CjoDf4JFe aYw= -----END CERTIFICATE-----Generated at Wed Aug 26 13:51:48 2026 by rpki-client