$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7fc8d8c9-6f99-4300-8ab0-640e0e29582c.roa File: 7fc8d8c9-6f99-4300-8ab0-640e0e29582c.roa (raw, json) Hash identifier: 4ItVSD6KPcHydAjpKuW0+6OLeLWwJf6CH9izPNYCnH0= Subject key identifier: 93:3E:57:6D:48:47:59:CE:63:BD:CB:8A:69:72:C8:C3:35:CA:D0:05 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 29D187669054B9FB192F9EFCF8A511AAC22EE2D8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7fc8d8c9-6f99-4300-8ab0-640e0e29582c.roa Signing time: Tue 18 Aug 2026 18:03:43 +0000 ROA not before: Tue 18 Aug 2026 18:03:43 +0000 ROA not after: Mon 16 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da33:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d1:87:66:90:54:b9:fb:19:2f:9e:fc:f8:a5:11:aa:c2:2e:e2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 18:03:43 2026 GMT Not After : Nov 16 23:59:59 2026 GMT Subject: serialNumber=e1bf24005a971e88f6c09ce8a133397dea0ad41ed2f6935ca6a35bf52901a7e2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:1d:7c:8a:e6:46:92:9b:73:cf:b1:8f:9e: 2e:4b:60:d5:94:33:65:a3:ea:b7:3f:31:a5:bf:8f: f1:66:35:37:d3:ea:da:39:55:95:03:78:87:3c:e7: 79:2b:72:04:39:b1:af:3e:a0:d7:84:6e:51:b7:de: 58:8c:03:29:3b:c2:ac:46:88:f2:f6:3d:8e:2d:18: 2b:d4:f7:91:9e:44:bf:53:60:55:8e:4f:65:b5:a8: 21:35:81:1e:99:16:23:f2:5d:4c:23:f9:98:d8:62: d6:7a:c9:68:0f:48:ad:92:16:d5:3d:0d:7e:df:13: a9:42:1f:6e:30:86:27:a5:a2:c5:08:2f:f1:71:45: d3:0d:3f:1d:c3:35:f0:ec:5f:17:7e:83:11:82:ee: b6:3a:d2:84:85:03:58:0b:67:3b:e4:6b:0b:44:9c: a9:04:63:72:d7:13:e9:ef:5e:a7:ed:65:96:1e:ae: 19:f8:e7:37:3f:0f:2a:57:c6:ab:ee:a9:60:db:55: dc:30:30:68:2e:c3:dd:4a:31:f0:f9:ac:3a:c4:61: 45:bc:9a:ee:b2:cc:6f:33:f6:16:29:18:57:29:0a: 9c:d8:61:16:bc:f9:f3:56:c5:87:72:7b:99:06:36: ed:11:6c:7e:db:c4:02:75:9d:77:b9:56:d0:60:93: 11:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3E:57:6D:48:47:59:CE:63:BD:CB:8A:69:72:C8:C3:35:CA:D0:05 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7fc8d8c9-6f99-4300-8ab0-640e0e29582c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:8000::/40 Signature Algorithm: sha256WithRSAEncryption 31:f0:f8:b5:c5:3b:e2:86:b4:3a:17:9f:3a:77:1e:77:30:31: 76:ae:5d:fe:ad:53:9f:2e:35:da:fa:09:fc:f6:5d:16:ae:e5: 82:dc:2c:41:d3:f7:16:41:49:f6:48:85:4c:42:cc:b8:f5:45: 2a:cb:98:70:14:90:38:37:7e:06:8c:9e:24:c8:8f:6e:b9:f5: 49:4b:4b:be:65:a2:65:3b:14:bc:c6:e0:6e:d1:4a:63:d6:91: cc:7f:b5:df:06:46:6f:27:00:50:bc:3c:02:f6:44:e4:74:1a: 73:25:78:d5:e2:21:8a:94:d7:ba:2c:69:b5:f4:68:3f:bc:5f: 82:51:56:ea:f3:d7:d1:a7:bc:a4:f6:60:b2:9a:5d:c8:e4:5d: e0:27:5d:c0:6c:c3:c8:e0:2f:9b:ff:35:3f:66:62:24:ce:9c: 41:08:cc:ec:ee:1d:fa:71:13:50:4c:83:99:a7:e6:69:5e:b1: 32:6d:65:ff:0a:d6:b4:09:75:56:f3:38:a8:8c:53:3c:a8:8c: f1:b4:5b:bb:f3:c8:ce:60:8f:44:2e:19:40:ed:6d:aa:89:d3: 9b:2f:7f:34:67:9c:e2:18:56:6a:ca:58:44:34:0f:fe:79:fd: 38:5e:77:98:e4:d3:f1:0c:04:4c:d0:5d:03:e0:40:83:a4:f7: 6c:3e:34:ed -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKdGHZpBUufsZL578+KURqsIu4tgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxODE4MDM0M1oX DTI2MTExNjIzNTk1OVowejFJMEcGA1UEBRNAZTFiZjI0MDA1YTk3MWU4OGY2YzA5 Y2U4YTEzMzM5N2RlYTBhZDQxZWQyZjY5MzVjYTZhMzViZjUyOTAxYTdlMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi0dfIrmRpKbc8+xj54uS2DVlDNl o+q3PzGlv4/xZjU30+raOVWVA3iHPOd5K3IEObGvPqDXhG5Rt95YjAMpO8KsRojy 9j2OLRgr1PeRnkS/U2BVjk9ltaghNYEemRYj8l1MI/mY2GLWesloD0itkhbVPQ1+ 3xOpQh9uMIYnpaLFCC/xcUXTDT8dwzXw7F8XfoMRgu62OtKEhQNYC2c75GsLRJyp BGNy1xPp716n7WWWHq4Z+Oc3Pw8qV8ar7qlg21XcMDBoLsPdSjHw+aw6xGFFvJru ssxvM/YWKRhXKQqc2GEWvPnzVsWHcnuZBjbtEWx+28QCdZ13uVbQYJMRnwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJM+V21IR1nOY73LimlyyMM1ytAFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmYzhkOGM5LTZmOTktNDMwMC04YWIwLTY0MGUwZTI5NTgyYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaM4AwDQYJKoZIhvcNAQELBQADggEBADHw+LXFO+KGtDoXnzp3 HncwMXauXf6tU58uNdr6Cfz2XRau5YLcLEHT9xZBSfZIhUxCzLj1RSrLmHAUkDg3 fgaMniTIj2659UlLS75lomU7FLzG4G7RSmPWkcx/td8GRm8nAFC8PAL2ROR0GnMl eNXiIYqU17osabX0aD+8X4JRVurz19GnvKT2YLKaXcjkXeAnXcBsw8jgL5v/NT9m YiTOnEEIzOzuHfpxE1BMg5mn5mlesTJtZf8K1rQJdVbzOKiMUzyojPG0W7vzyM5g j0QuGUDtbaqJ05svfzRnnOIYVmrKWEQ0D/55/Thed5jk0/EMBEzQXQPgQIOk92w+ NO0= -----END CERTIFICATE-----Generated at Wed Aug 26 17:23:37 2026 by rpki-client