$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75997448-5993-4bc5-85e4-cbc4b4860346.roa File: 75997448-5993-4bc5-85e4-cbc4b4860346.roa (raw, json) Hash identifier: nYv0YPALidiXd/RI6sNmLCE9U6fKyVpKQCmMShhDeXA= Subject key identifier: 86:60:34:64:C8:F7:A1:E6:AE:13:97:33:E7:CC:08:33:11:E0:92:D8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0DF1EC8642952B56867F8D2534E87D0A2C27B553 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75997448-5993-4bc5-85e4-cbc4b4860346.roa Signing time: Fri 24 Jul 2026 00:00:57 +0000 ROA not before: Fri 24 Jul 2026 00:00:57 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Aug 2026 00:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f1:ec:86:42:95:2b:56:86:7f:8d:25:34:e8:7d:0a:2c:27:b5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 24 00:00:57 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=b7578abc878400ef9ee0e06958d4e6b3095bf42816c582bbc7b45be963b223e0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:a5:a0:60:9b:b0:b6:0c:f1:93:20:62:f5: aa:88:04:0c:cd:d7:c0:91:6a:00:5b:8d:35:c4:e9: 70:78:3b:3e:7d:06:13:17:80:82:1c:d7:1e:8b:8b: c7:46:9c:56:9f:f7:67:69:fb:dc:2c:5d:04:4d:65: c9:e3:b7:ee:7e:7f:69:dc:0b:0b:88:df:1c:d7:58: f5:49:ab:2f:20:77:49:f0:8d:d4:cb:e2:02:36:aa: fa:f2:4f:b3:77:a1:f6:b0:df:2f:43:02:cb:f2:a8: a5:43:5d:41:a5:74:c8:ed:6c:9d:a3:20:97:a9:80: bf:27:5e:4d:df:2c:2b:e8:00:4d:30:b9:9d:27:19: 4e:dc:28:62:b3:b9:56:1d:aa:c5:ba:01:67:b5:c8: ff:8e:b1:0e:27:5b:ed:64:17:fb:c1:4b:42:e7:55: 95:51:f7:a9:0e:af:ee:82:14:7f:39:6f:a7:c8:d1: 39:c3:56:ea:38:b7:f4:cf:6e:7c:31:59:68:9f:fa: 02:db:d6:a6:ec:b7:07:54:79:9e:b2:35:ff:76:03: 33:8e:45:d0:38:ea:cf:59:ca:6c:e2:af:18:0f:e7: 5d:32:2d:ce:ef:69:c7:7d:af:41:9f:ba:f9:f3:7d: f6:4b:b9:5c:a5:50:af:e1:59:a9:91:99:22:dc:46: d7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:60:34:64:C8:F7:A1:E6:AE:13:97:33:E7:CC:08:33:11:E0:92:D8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75997448-5993-4bc5-85e4-cbc4b4860346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:f000::/40 Signature Algorithm: sha256WithRSAEncryption 11:40:c3:17:af:6f:f2:8e:88:1c:70:34:af:35:39:66:7a:34: 7e:f5:0a:3f:14:3e:cd:39:7a:04:8b:72:f3:58:8e:56:38:69: 5c:86:8f:06:9e:7f:a0:81:b1:84:7c:63:e9:89:07:5a:f6:f6: 81:0c:d1:21:af:ee:a1:02:ad:d5:0e:24:0f:fa:20:b6:bd:65: 5c:bc:7a:69:00:e0:03:24:37:eb:3b:d8:1a:11:89:16:a6:7c: 7c:47:53:bb:87:14:a7:3b:bf:cd:12:fd:41:4e:e7:07:25:a6: a4:b5:c1:fd:bb:1e:76:5b:20:6a:58:96:44:df:16:50:6c:41: bb:d4:30:c4:05:76:ae:b4:71:1c:3a:2c:94:0f:29:f3:0b:b7: 38:dd:b5:67:11:e1:d2:71:d7:6f:40:6f:cb:50:df:d5:9a:dc: dd:5c:50:94:94:19:d5:9a:7e:3b:26:ce:88:f9:49:69:87:6e: 81:3d:4d:21:7c:18:92:7a:00:44:c8:c0:b6:80:9b:f7:86:68: 54:da:75:53:39:d1:f9:03:a3:5e:df:f4:2d:02:e1:9e:b9:29: 87:d2:d7:a7:f2:c3:23:b0:5f:97:ab:da:c7:14:07:8f:81:f5: ba:26:e1:07:b9:f9:fc:04:b8:3b:f5:ca:83:0c:c9:90:d2:e4: b8:77:75:75 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDfHshkKVK1aGf40lNOh9CiwntVMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNDAwMDA1N1oX DTI2MTAyMjIzNTk1OVowejFJMEcGA1UEBRNAYjc1NzhhYmM4Nzg0MDBlZjllZTBl MDY5NThkNGU2YjMwOTViZjQyODE2YzU4MmJiYzdiNDViZTk2M2IyMjNlMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqguloGCbsLYM8ZMgYvWqiAQMzdfA kWoAW401xOlweDs+fQYTF4CCHNcei4vHRpxWn/dnafvcLF0ETWXJ47fufn9p3AsL iN8c11j1SasvIHdJ8I3Uy+ICNqr68k+zd6H2sN8vQwLL8qilQ11BpXTI7WydoyCX qYC/J15N3ywr6ABNMLmdJxlO3Chis7lWHarFugFntcj/jrEOJ1vtZBf7wUtC51WV UfepDq/ughR/OW+nyNE5w1bqOLf0z258MVlon/oC29am7LcHVHmesjX/dgMzjkXQ OOrPWcps4q8YD+ddMi3O72nHfa9Bn7r58332S7lcpVCv4VmpkZki3EbX8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIZgNGTI96HmrhOXM+fMCDMR4JLYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc1OTk3NDQ4LTU5OTMtNGJjNS04NWU0LWNiYzRiNDg2MDM0Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9PAwDQYJKoZIhvcNAQELBQADggEBABFAwxevb/KOiBxwNK81 OWZ6NH71Cj8UPs05egSLcvNYjlY4aVyGjwaef6CBsYR8Y+mJB1r29oEM0SGv7qEC rdUOJA/6ILa9ZVy8emkA4AMkN+s72BoRiRamfHxHU7uHFKc7v80S/UFO5wclpqS1 wf27HnZbIGpYlkTfFlBsQbvUMMQFdq60cRw6LJQPKfMLtzjdtWcR4dJx129Ab8tQ 39Wa3N1cUJSUGdWafjsmzoj5SWmHboE9TSF8GJJ6AETIwLaAm/eGaFTadVM50fkD o17f9C0C4Z65KYfS16fywyOwX5er2scUB4+B9bom4Qe5+fwEuDv1yoMMyZDS5Lh3 dXU= -----END CERTIFICATE-----Generated at Thu Aug 20 21:54:57 2026 by rpki-client