$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f58f387-58a3-4959-8dec-7781a0fc0834.roa File: 7f58f387-58a3-4959-8dec-7781a0fc0834.roa (raw, json) Hash identifier: zhqegizds1peUHjycg3BEiWQJ5IzVLM/n1jxRZPWYF8= Subject key identifier: 77:AE:86:B2:71:ED:C4:15:B2:88:4D:5B:42:45:05:85:3A:86:5D:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58E53692E1890D0D918858841738FE9984F6AB7D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f58f387-58a3-4959-8dec-7781a0fc0834.roa Signing time: Sat 01 Aug 2026 00:21:05 +0000 ROA not before: Sat 01 Aug 2026 00:21:05 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da18:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e5:36:92:e1:89:0d:0d:91:88:58:84:17:38:fe:99:84:f6:ab:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:21:05 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=981eb6bbd8dcd3ff3d1db67284a9614946c15be6f76da743501d7d5d539f61dc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7a:1b:ec:f6:d1:c1:7e:4f:33:c3:41:f0:b9: 6a:51:39:4c:65:ed:e7:2c:a5:c3:79:67:ad:83:d7: 52:c0:6a:79:00:8c:01:bc:8b:34:bd:5a:21:23:76: 6d:17:a4:5c:27:76:3a:58:df:7b:e8:be:17:d4:82: ff:06:9b:7e:b4:49:30:d7:d0:f0:48:53:51:dc:82: 1a:c1:18:17:3e:45:28:2f:51:df:5f:a5:4d:d3:9b: 1b:62:36:f6:19:4b:0a:02:e8:a2:4b:b6:84:86:08: 13:e4:7f:4e:fb:d6:2d:0a:8e:67:01:4c:6e:8c:cc: 02:42:01:5f:ff:37:c5:91:bd:68:d4:a6:18:cc:2a: b2:68:44:b1:4c:67:39:04:68:86:6c:cc:45:31:83: 64:86:0a:77:3b:58:8e:ff:c1:4b:ce:e0:36:b6:8a: 50:5c:57:71:c9:13:7b:69:00:d1:c3:2e:1b:c5:74: f7:f8:24:74:80:6b:a6:d5:87:51:cc:c6:06:db:01: 94:5e:07:0d:d8:f4:b0:9a:45:5d:ad:a1:61:46:8f: ab:c3:54:a1:e0:1b:cb:10:60:03:71:2e:b6:9a:40: 9b:43:d0:6f:7b:ac:1c:48:ea:f1:de:66:48:0f:b3: c1:8d:4e:d5:86:fe:9e:e5:02:73:5e:95:15:39:27: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AE:86:B2:71:ED:C4:15:B2:88:4D:5B:42:45:05:85:3A:86:5D:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f58f387-58a3-4959-8dec-7781a0fc0834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da18:800::/38 Signature Algorithm: sha256WithRSAEncryption 19:17:96:ff:4d:a8:be:4e:ee:30:8f:83:26:b7:0c:ed:25:37: 11:21:03:93:2d:bc:ee:ba:47:ab:75:28:a6:3e:c1:bc:a4:7c: 70:c0:e2:6f:ed:a3:52:12:63:db:99:1b:4b:f9:7a:a2:b2:d5: ed:10:34:e4:3d:56:2d:90:d0:00:0a:ca:09:a9:a0:ed:5a:78: c5:5a:5d:96:8e:c4:b6:c0:3b:39:bc:8e:69:e7:e8:45:ff:59: 7e:e0:5d:f8:9f:f7:11:bd:19:68:a1:25:87:52:35:60:bf:11: 57:5f:1b:e4:22:36:0d:8d:96:5b:f5:35:6a:8f:98:d8:e2:88: 79:77:ad:c2:0b:1e:d9:f6:c7:97:71:7f:eb:2f:f3:43:ea:fc: 53:ff:3c:83:42:22:f7:48:0f:ca:e6:1f:5b:48:8f:2e:0c:9e: fb:a4:d2:4f:77:bc:3e:39:63:92:f4:33:de:ba:62:f2:dd:cd: 19:3f:3a:15:37:e6:ae:11:4b:e1:d5:60:47:0f:cb:ec:35:dd: dd:58:35:02:81:8c:43:b3:88:f1:65:d8:e4:6c:a7:36:4d:64: 53:96:c3:3c:51:3f:c7:28:a0:87:1c:04:6f:1b:ea:ad:a4:85: e8:ac:04:20:87:32:40:b9:d0:66:e0:9f:70:67:82:fb:83:cf: 90:62:30:5f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWOU2kuGJDQ2RiFiEFzj+mYT2q30wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMjEwNVoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAOTgxZWI2YmJkOGRjZDNmZjNkMWRi NjcyODRhOTYxNDk0NmMxNWJlNmY3NmRhNzQzNTAxZDdkNWQ1MzlmNjFkYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Hob7PbRwX5PM8NB8LlqUTlMZe3n LKXDeWetg9dSwGp5AIwBvIs0vVohI3ZtF6RcJ3Y6WN976L4X1IL/Bpt+tEkw19Dw SFNR3IIawRgXPkUoL1HfX6VN05sbYjb2GUsKAuiiS7aEhggT5H9O+9YtCo5nAUxu jMwCQgFf/zfFkb1o1KYYzCqyaESxTGc5BGiGbMxFMYNkhgp3O1iO/8FLzuA2topQ XFdxyRN7aQDRwy4bxXT3+CR0gGum1YdRzMYG2wGUXgcN2PSwmkVdraFhRo+rw1Sh 4BvLEGADcS62mkCbQ9Bve6wcSOrx3mZID7PBjU7Vhv6e5QJzXpUVOSfxSQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHeuhrJx7cQVsohNW0JFBYU6hl0gMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmNThmMzg3LTU4YTMtNDk1OS04ZGVjLTc3ODFhMGZjMDgzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGAgwDQYJKoZIhvcNAQELBQADggEBABkXlv9NqL5O7jCPgya3 DO0lNxEhA5MtvO66R6t1KKY+wbykfHDA4m/to1ISY9uZG0v5eqKy1e0QNOQ9Vi2Q 0AAKygmpoO1aeMVaXZaOxLbAOzm8jmnn6EX/WX7gXfif9xG9GWihJYdSNWC/EVdf G+QiNg2Nllv1NWqPmNjiiHl3rcILHtn2x5dxf+sv80Pq/FP/PINCIvdID8rmH1tI jy4Mnvuk0k93vD45Y5L0M966YvLdzRk/OhU35q4RS+HVYEcPy+w13d1YNQKBjEOz iPFl2ORspzZNZFOWwzxRP8cooIccBG8b6q2kheisBCCHMkC50Gbgn3BngvuDz5Bi MF8= -----END CERTIFICATE-----Generated at Wed Aug 26 00:39:14 2026 by rpki-client