$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/857d996d-a66c-48d8-8669-f36141564a43.roa File: 857d996d-a66c-48d8-8669-f36141564a43.roa (raw, json) Hash identifier: dP33OIgA3vV8Ue2NJNqS0UDXY4ynp9MjmjqH1EKKF34= Subject key identifier: 14:AF:23:F9:E2:61:00:47:CA:9E:4A:8E:E9:0E:EC:19:19:8B:AA:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14EC770743FA395D91C0849AD8DF85F3E0BB35E4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/857d996d-a66c-48d8-8669-f36141564a43.roa Signing time: Thu 30 Jul 2026 00:20:44 +0000 ROA not before: Thu 30 Jul 2026 00:20:44 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ec:77:07:43:fa:39:5d:91:c0:84:9a:d8:df:85:f3:e0:bb:35:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:20:44 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=2eb41b96ca28fceec76d8481ce041eecaf9915bbd8c7adfe109383a6e0e88b22, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:97:94:67:72:58:87:2c:00:b4:b6:12:fc:e8: 60:7c:e5:97:d2:2e:02:11:0f:27:de:6a:43:1f:93: 7e:e6:0c:a2:d0:c9:f3:ce:10:06:88:e9:53:3f:f3: a8:16:84:01:23:fa:a0:f1:34:7d:85:8b:c3:b9:85: 5f:6c:13:6e:42:72:57:7d:75:d3:0d:d2:50:73:8f: 30:ae:c8:c8:5a:09:d3:17:d5:e0:1e:ca:53:9a:cd: 92:4b:9f:ae:73:c0:ae:96:78:1a:98:3f:f6:c8:90: 01:5c:60:24:2c:69:c5:99:c0:7b:7e:d8:9a:39:c6: bf:6c:df:2a:ce:e8:f8:4e:47:11:a9:ce:77:59:1d: 78:e6:e0:e2:3b:88:f2:5b:50:75:fa:6a:74:5f:55: fd:4c:7e:3d:46:d7:4a:4b:02:f9:64:9c:a0:5d:0a: 8e:53:78:70:6c:ea:63:f0:21:8d:da:f4:89:15:50: 66:6d:6a:66:ec:63:03:db:21:62:22:4c:b9:e3:65: c7:a1:6e:ca:89:0d:0c:35:b3:35:65:a2:c7:5a:e5: 93:cb:fa:74:62:37:04:b0:55:26:ec:9e:c7:18:34: 10:21:e0:bc:fc:e1:10:0a:8a:91:4f:f7:78:f0:ae: a3:17:dc:3d:27:99:2b:ab:54:e6:7c:1a:f2:48:64: 6e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AF:23:F9:E2:61:00:47:CA:9E:4A:8E:E9:0E:EC:19:19:8B:AA:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/857d996d-a66c-48d8-8669-f36141564a43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4800::/40 Signature Algorithm: sha256WithRSAEncryption 72:fc:7d:64:19:0f:4e:e4:94:d7:63:bb:32:0e:00:a4:b8:61: 3a:38:90:68:82:b3:50:ed:7d:ff:6a:6b:9f:09:ea:80:71:4c: 5e:cc:9f:fa:8e:3b:83:89:c7:e2:88:5c:fa:34:76:2a:1a:eb: ac:1a:92:8e:88:3c:26:e0:99:89:a8:48:01:d3:18:ec:58:ba: 3c:89:2f:1d:6e:91:c5:11:8e:27:26:75:9a:02:2e:6e:80:30: 8c:a2:5b:f3:48:b1:cb:ee:6e:18:27:6f:12:b5:62:f9:ac:3b: d0:39:52:95:b5:01:9d:b3:bf:b0:3d:8d:f3:73:18:29:22:3c: c5:fc:ac:e1:a7:da:56:b5:07:7d:ec:51:98:2f:bd:80:02:c6: ef:41:b6:f9:88:f5:22:03:61:0e:61:29:dd:eb:93:8a:a8:a0: 24:60:5d:99:66:0d:e6:ed:0b:ac:8e:61:19:ad:76:9c:00:2d: a7:04:c1:bd:88:36:3a:fb:75:67:03:59:10:90:d3:d2:c9:90: 73:79:77:ca:45:6a:a8:fe:3b:e9:df:84:3a:41:f6:4e:03:b2: 51:67:92:18:ec:3b:b6:70:ec:c0:ba:94:17:e4:3d:75:f5:6c: 2e:d7:8d:c8:c6:a5:3e:b7:9e:39:3a:5b:76:11:6c:92:6e:02: 3b:77:8c:d6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFOx3B0P6OV2RwISa2N+F8+C7NeQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMjA0NFoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAMmViNDFiOTZjYTI4ZmNlZWM3NmQ4 NDgxY2UwNDFlZWNhZjk5MTViYmQ4YzdhZGZlMTA5MzgzYTZlMGU4OGIyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJeUZ3JYhywAtLYS/OhgfOWX0i4C EQ8n3mpDH5N+5gyi0MnzzhAGiOlTP/OoFoQBI/qg8TR9hYvDuYVfbBNuQnJXfXXT DdJQc48wrsjIWgnTF9XgHspTms2SS5+uc8CulngamD/2yJABXGAkLGnFmcB7ftia Oca/bN8qzuj4TkcRqc53WR145uDiO4jyW1B1+mp0X1X9TH49RtdKSwL5ZJygXQqO U3hwbOpj8CGN2vSJFVBmbWpm7GMD2yFiIky542XHoW7KiQ0MNbM1ZaLHWuWTy/p0 YjcEsFUm7J7HGDQQIeC8/OEQCoqRT/d48K6jF9w9J5krq1TmfBrySGRuAQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBSvI/niYQBHyp5KjukO7BkZi6p0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg1N2Q5OTZkLWE2NmMtNDhkOC04NjY5LWYzNjE0MTU2NGE0My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/0gwDQYJKoZIhvcNAQELBQADggEBAHL8fWQZD07klNdjuzIO AKS4YTo4kGiCs1Dtff9qa58J6oBxTF7Mn/qOO4OJx+KIXPo0dioa66wako6IPCbg mYmoSAHTGOxYujyJLx1ukcURjicmdZoCLm6AMIyiW/NIscvubhgnbxK1YvmsO9A5 UpW1AZ2zv7A9jfNzGCkiPMX8rOGn2la1B33sUZgvvYACxu9BtvmI9SIDYQ5hKd3r k4qooCRgXZlmDebtC6yOYRmtdpwALacEwb2INjr7dWcDWRCQ09LJkHN5d8pFaqj+ O+nfhDpB9k4DslFnkhjsO7Zw7MC6lBfkPXX1bC7XjcjGpT63njk6W3YRbJJuAjt3 jNY= -----END CERTIFICATE-----Generated at Wed Aug 26 02:16:39 2026 by rpki-client