$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85858219-71cc-46f9-9c59-e75c9c1f8098.roa File: 85858219-71cc-46f9-9c59-e75c9c1f8098.roa (raw, json) Hash identifier: 1grKDu61ykK2Kav5tZSHkBIj9gEXb9BbGP+1yJCO1ng= Subject key identifier: C8:A0:C8:C9:91:4B:1D:04:73:8F:B4:F7:EC:0C:6D:E7:9C:20:B6:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24AE0E12EBA5759A16277B24CF8F277D805FBF2F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85858219-71cc-46f9-9c59-e75c9c1f8098.roa Signing time: Thu 30 Jul 2026 00:20:31 +0000 ROA not before: Thu 30 Jul 2026 00:20:31 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ae:0e:12:eb:a5:75:9a:16:27:7b:24:cf:8f:27:7d:80:5f:bf:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:20:31 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=834ff04f86648abfb617be9f5654d895e79aec2bd80ccc67d2737fe362ae3152, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:45:ea:0b:76:78:87:6a:4a:94:48:c2:1d: 73:9a:03:d1:52:07:ba:c9:93:b2:35:66:71:a2:cb: 5a:06:c5:6d:17:40:d2:ec:67:c9:0f:71:ff:e4:09: 25:64:bb:b7:c6:70:64:1e:d2:40:10:9f:7b:3d:67: 1d:39:e2:cc:e8:68:61:79:af:dc:03:5a:9c:6d:50: 60:61:68:4b:c7:49:41:bd:9f:71:39:79:81:30:ea: 4c:97:f2:88:37:3f:6b:2e:ef:50:c3:da:82:62:dd: 09:a0:0f:26:39:d5:45:4c:ac:50:42:b7:e7:11:b5: 9b:78:89:ad:99:8d:e5:b9:fb:69:dc:af:68:e0:27: f3:f3:38:8c:d8:71:c8:00:d2:9c:06:58:49:03:d7: 15:4f:67:41:56:40:7f:62:45:40:b8:fe:99:77:72: 6a:cd:f7:08:34:59:74:71:48:57:08:34:68:15:8f: a9:ac:5b:f3:4f:93:88:57:bd:af:5b:ab:8e:5e:cc: 32:e3:c3:08:32:79:84:fa:80:84:84:6f:5a:d7:4a: a9:02:ae:55:a9:96:32:2d:86:fa:17:6a:68:3e:7e: 54:d4:09:b2:55:df:20:07:d5:86:b7:9c:e2:7c:fb: 3a:e7:ec:63:0b:c7:18:e0:34:e3:f5:bb:e2:1b:5c: 69:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:C8:C9:91:4B:1D:04:73:8F:B4:F7:EC:0C:6D:E7:9C:20:B6:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85858219-71cc-46f9-9c59-e75c9c1f8098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c800::/40 Signature Algorithm: sha256WithRSAEncryption 2f:ac:7c:e1:f5:9e:cf:d0:2c:aa:64:9b:51:0e:84:4f:a8:c7: 90:69:8d:a8:25:a8:9f:e6:8c:8e:28:54:65:0d:f4:91:81:3a: 59:c6:ab:20:f9:42:2d:83:dc:a5:43:50:c9:c6:0c:5b:19:32: cb:07:bb:40:b3:c6:0d:08:f8:39:ae:06:be:80:b8:1a:5c:ff: 8d:7f:68:8a:f2:42:44:f5:5b:6d:f5:09:f7:b8:1e:99:0c:f3: 4e:ba:82:80:ed:34:bd:90:49:f8:f3:d5:6e:21:0e:8c:69:66: 59:35:54:cb:9d:68:d8:a8:34:e8:ec:c2:47:18:84:df:f1:d1: a1:12:96:4a:36:48:0b:3c:59:44:fe:2c:57:19:02:15:1a:b4: f0:b2:a3:26:80:67:b6:2a:7c:77:89:bc:a4:2e:21:65:85:fa: 16:ea:42:32:0a:f0:e8:ff:2f:fe:ae:87:96:27:2c:ff:ce:f2: 63:05:b7:e7:cd:25:64:c0:12:f1:67:98:f6:91:02:30:c0:11: 15:2b:02:1b:71:dd:a7:49:cd:4d:a2:47:38:23:16:3d:3e:e0: c2:a7:12:c8:67:c3:a3:54:70:69:0f:96:8c:06:d2:90:0b:80: 83:1f:eb:6f:87:f5:db:1a:81:cf:86:3a:35:6a:6c:65:2f:03: 66:6d:8a:f5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJK4OEuuldZoWJ3skz48nfYBfvy8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMjAzMVoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAODM0ZmYwNGY4NjY0OGFiZmI2MTdi ZTlmNTY1NGQ4OTVlNzlhZWMyYmQ4MGNjYzY3ZDI3MzdmZTM2MmFlMzE1MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDlF6gt2eIdqSpRIwh1zmgPRUge6 yZOyNWZxostaBsVtF0DS7GfJD3H/5AklZLu3xnBkHtJAEJ97PWcdOeLM6Ghhea/c A1qcbVBgYWhLx0lBvZ9xOXmBMOpMl/KINz9rLu9Qw9qCYt0JoA8mOdVFTKxQQrfn EbWbeImtmY3luftp3K9o4Cfz8ziM2HHIANKcBlhJA9cVT2dBVkB/YkVAuP6Zd3Jq zfcINFl0cUhXCDRoFY+prFvzT5OIV72vW6uOXswy48MIMnmE+oCEhG9a10qpAq5V qZYyLYb6F2poPn5U1AmyVd8gB9WGt5zifPs65+xjC8cY4DTj9bviG1xpQQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMigyMmRSx0Ec4+09+wMbeecILbKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg1ODU4MjE5LTcxY2MtNDZmOS05YzU5LWU3NWM5YzFmODA5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAMgwDQYJKoZIhvcNAQELBQADggEBAC+sfOH1ns/QLKpkm1EO hE+ox5BpjaglqJ/mjI4oVGUN9JGBOlnGqyD5Qi2D3KVDUMnGDFsZMssHu0Czxg0I +DmuBr6AuBpc/41/aIryQkT1W231Cfe4HpkM8066goDtNL2QSfjz1W4hDoxpZlk1 VMudaNioNOjswkcYhN/x0aESlko2SAs8WUT+LFcZAhUatPCyoyaAZ7YqfHeJvKQu IWWF+hbqQjIK8Oj/L/6uh5YnLP/O8mMFt+fNJWTAEvFnmPaRAjDAERUrAhtx3adJ zU2iRzgjFj0+4MKnEshnw6NUcGkPlowG0pALgIMf62+H9dsagc+GOjVqbGUvA2Zt ivU= -----END CERTIFICATE-----Generated at Wed Aug 26 00:37:43 2026 by rpki-client