$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84da4c2e-af90-4c5a-94c8-eeceeda9e1dc.roa File: 84da4c2e-af90-4c5a-94c8-eeceeda9e1dc.roa (raw, json) Hash identifier: +tz8Di5ywODUVkxttE3NcUZiAWi/RFeJ42jJvoDXB+I= Subject key identifier: D8:18:91:D9:D9:C5:4C:8A:0A:BB:6F:86:89:24:3C:CA:47:C7:2C:EA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0D9EBF6503263456FE1686536837DD686C31066D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84da4c2e-af90-4c5a-94c8-eeceeda9e1dc.roa Signing time: Mon 10 Aug 2026 00:00:11 +0000 ROA not before: Mon 10 Aug 2026 00:00:11 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9e:bf:65:03:26:34:56:fe:16:86:53:68:37:dd:68:6c:31:06:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:00:11 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=95f4634e479660544476040c1284d2697850ccb0650fe9c336907a03332c26da, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:c4:5b:4f:9a:64:e1:d6:b9:60:d5:21:60: 38:df:19:5e:84:8c:dd:1f:e5:13:5d:ed:48:d7:af: b4:79:14:12:56:5f:b5:d7:6e:52:d3:10:df:44:cf: db:97:49:8c:c0:6d:b9:5e:dc:4f:bc:2e:81:72:aa: 61:9a:22:4a:5c:af:06:e6:10:c9:09:d1:8c:6c:a1: 3b:d6:4e:e6:66:79:cc:4e:36:0c:09:5f:a1:98:a8: 71:49:67:7b:3e:ac:ef:cb:ed:ed:a0:32:07:97:3c: c2:73:46:61:ed:4c:4b:c9:c8:78:0a:99:23:c5:ab: dc:b9:55:03:2d:92:46:0e:46:0d:df:dc:c9:9b:24: 57:ef:1d:22:71:b9:e7:0f:6c:49:fd:83:16:b4:e7: 85:bd:61:a9:ac:43:85:96:6b:5c:03:c0:fd:da:d9: ba:41:2e:21:5e:1d:da:46:2b:15:0d:b7:9b:81:60: e0:7f:71:25:58:22:93:8a:37:fa:27:56:b2:c2:83: c3:5f:49:dc:d5:96:90:86:76:1c:e5:e5:96:bd:f0: be:4a:cf:04:9a:29:7b:26:f0:d5:44:d3:36:0e:a7: 5d:03:61:6a:a8:3c:4a:e6:33:bb:50:a1:05:d7:6b: 9c:01:d5:20:0c:00:d7:7b:e1:61:fd:c7:2e:42:76: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:18:91:D9:D9:C5:4C:8A:0A:BB:6F:86:89:24:3C:CA:47:C7:2C:EA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84da4c2e-af90-4c5a-94c8-eeceeda9e1dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 18:76:1a:4f:b8:0b:84:67:15:ba:8e:d1:68:45:da:68:9c:3a: 11:16:de:12:83:ab:c2:e0:c9:63:c2:0c:a1:b4:63:fa:c6:0d: 8b:29:99:b2:52:af:0a:6d:c1:3b:71:18:20:52:20:46:a2:54: 75:2a:58:16:29:ab:33:8a:07:d3:53:7f:7f:01:46:8b:9a:62: dc:a9:b4:65:d2:e0:95:a0:07:a5:93:2e:bf:c9:43:23:e3:a5: 90:fa:bc:32:df:3c:fe:f3:cc:28:52:34:a1:32:57:06:81:36: 58:86:04:e9:b6:50:29:d9:38:e2:de:3a:f6:c9:65:8d:0e:c0: 09:55:98:5d:21:e5:21:05:fd:9f:c0:2b:e8:53:f1:0f:bb:8b: 92:4e:45:18:71:fe:a4:32:9e:64:7a:de:f5:9a:f8:94:ec:70: 8d:19:0a:1a:b6:1a:51:b1:2e:76:c6:bb:8f:80:2b:0d:70:3c: 64:08:6d:f3:e6:84:69:b6:1a:a9:43:ca:b5:d0:44:89:c6:90: c4:d6:98:d3:22:2c:86:21:d6:4d:0c:99:91:77:3e:93:e6:dd: 51:37:b9:6a:cd:a1:21:ad:ef:1f:d0:76:e8:f5:97:dc:17:e8: 52:4c:88:81:f6:fe:11:5b:f6:6b:c9:1b:25:84:76:3d:13:50: f8:72:31:bf -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDZ6/ZQMmNFb+FoZTaDfdaGwxBm0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDAxMVoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAOTVmNDYzNGU0Nzk2NjA1NDQ0NzYw NDBjMTI4NGQyNjk3ODUwY2NiMDY1MGZlOWMzMzY5MDdhMDMzMzJjMjZkYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDrEW0+aZOHWuWDVIWA43xlehIzd H+UTXe1I16+0eRQSVl+1125S0xDfRM/bl0mMwG25XtxPvC6BcqphmiJKXK8G5hDJ CdGMbKE71k7mZnnMTjYMCV+hmKhxSWd7Pqzvy+3toDIHlzzCc0Zh7UxLych4Cpkj xavcuVUDLZJGDkYN39zJmyRX7x0icbnnD2xJ/YMWtOeFvWGprEOFlmtcA8D92tm6 QS4hXh3aRisVDbebgWDgf3ElWCKTijf6J1aywoPDX0nc1ZaQhnYc5eWWvfC+Ss8E mil7JvDVRNM2DqddA2FqqDxK5jO7UKEF12ucAdUgDADXe+Fh/ccuQnb5xwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNgYkdnZxUyKCrtvhokkPMpHxyzqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0ZGE0YzJlLWFmOTAtNGM1YS05NGM4LWVlY2VlZGE5ZTFkYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6BDAMA0GCSqGSIb3DQEBCwUAA4IBAQAYdhpPuAuEZxW6jtFo RdponDoRFt4Sg6vC4MljwgyhtGP6xg2LKZmyUq8KbcE7cRggUiBGolR1KlgWKasz igfTU39/AUaLmmLcqbRl0uCVoAelky6/yUMj46WQ+rwy3zz+88woUjShMlcGgTZY hgTptlAp2Tji3jr2yWWNDsAJVZhdIeUhBf2fwCvoU/EPu4uSTkUYcf6kMp5ket71 mviU7HCNGQoathpRsS52xruPgCsNcDxkCG3z5oRpthqpQ8q10ESJxpDE1pjTIiyG IdZNDJmRdz6T5t1RN7lqzaEhre8f0Hbo9ZfcF+hSTIiB9v4RW/ZryRslhHY9E1D4 cjG/ -----END CERTIFICATE-----Generated at Wed Aug 26 05:19:20 2026 by rpki-client