$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8678cdcc-a890-4705-af5d-2af05c3509c7.roa File: 8678cdcc-a890-4705-af5d-2af05c3509c7.roa (raw, json) Hash identifier: 73vHQXEZdowRfJkjHkS7l1p/NNvbvTvXxht0uRpMrmo= Subject key identifier: 91:34:4F:E6:B1:7F:44:4F:4E:49:DA:11:EA:1E:61:B7:84:B4:69:DD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3DC63D0A2C5B10A32A475866B7B14A80118BDF5D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8678cdcc-a890-4705-af5d-2af05c3509c7.roa Signing time: Wed 19 Aug 2026 00:11:09 +0000 ROA not before: Wed 19 Aug 2026 00:11:09 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c6:3d:0a:2c:5b:10:a3:2a:47:58:66:b7:b1:4a:80:11:8b:df:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:11:09 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=af90fb9c48bf9d209158d9aca9ea2a2571daeba7d5d195da2fb64a2922724596, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4a:32:db:79:6b:34:de:f3:8c:b5:22:84:e5: 19:ee:46:d5:de:c4:e7:fe:f9:dc:b5:ff:0b:dd:3c: 09:63:da:25:fa:91:69:fa:9d:cc:12:e0:fb:c8:6c: 88:3b:dc:63:3e:4f:69:fe:e1:03:db:e2:81:01:91: c3:5b:fa:99:e6:97:2e:bf:14:7c:82:d0:49:0c:99: 39:ac:94:b5:29:a1:e4:18:8a:5b:1f:b6:2e:b6:cd: 76:6a:ef:57:59:5f:6d:2a:aa:38:1f:9c:40:9b:a1: 82:2c:2f:db:2c:8b:4a:02:3b:37:54:21:a9:aa:51: 77:f3:70:12:e6:be:82:2a:53:b7:16:0d:b3:c3:21: ee:5c:eb:80:f1:3b:a3:79:da:9d:f3:42:22:47:06: b6:f8:ee:c7:fc:2b:68:1e:06:03:c0:f7:92:94:b7: 8a:11:50:c0:83:4e:1f:b0:da:84:69:b3:92:2e:0e: b6:71:a3:ec:69:6b:43:f1:4f:0b:1e:dd:e9:80:55: c0:9a:b2:46:e1:e8:bf:3d:e5:57:17:3b:0b:f3:9f: bf:0f:a6:0e:9c:6f:a1:bf:2f:50:f9:0d:47:15:b6: a9:f3:a6:31:58:ba:a4:f3:c6:6e:a2:9e:7b:9e:19: 3a:09:c4:96:f7:5b:22:39:1a:18:15:48:34:c8:4d: 57:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:34:4F:E6:B1:7F:44:4F:4E:49:DA:11:EA:1E:61:B7:84:B4:69:DD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8678cdcc-a890-4705-af5d-2af05c3509c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:4000::/40 Signature Algorithm: sha256WithRSAEncryption 72:5d:c6:e2:0a:f6:4a:ee:63:d2:f7:30:7f:36:c0:28:59:a3: a4:9e:ab:c4:4c:63:b4:9d:67:3a:19:60:c7:0e:17:e9:9b:7d: 99:e9:75:5f:fb:d3:55:c3:57:58:fe:bc:6b:23:6e:00:01:27: 01:d8:0f:29:1f:f8:7e:80:df:ae:00:e0:80:cf:13:aa:79:c4: c5:b7:6a:26:eb:9c:15:d9:38:1c:b0:2e:a2:25:dd:c4:aa:a9: 83:65:1e:6d:f0:b8:89:58:eb:e1:eb:fa:5a:e4:b5:1a:a7:2c: 67:8f:74:b1:9e:19:09:9b:ab:08:e6:e1:73:b0:c1:65:d2:20: 67:3e:2e:3b:2d:ae:91:86:5d:0c:a2:f1:87:b6:b5:c9:db:9a: 13:43:56:a9:5f:74:3b:33:1d:95:0f:f6:36:26:33:e6:df:51: 62:2d:68:ca:ba:94:0d:c9:b8:af:1e:5e:7d:96:25:8d:f8:b7: f9:91:9e:1c:b7:6a:49:ec:47:2f:40:f2:7c:27:14:f6:3d:5e: a1:e7:d3:25:28:fc:cb:c3:99:39:aa:54:86:52:c8:10:a4:3c: dd:3a:58:a2:7d:a2:2c:55:a7:59:99:29:1e:46:3c:a6:09:ce: c6:85:69:11:77:6a:81:c3:c3:71:06:47:71:c1:ea:2d:c7:ce: 6d:fb:bb:43 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPcY9CixbEKMqR1hmt7FKgBGL310wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTEwOVoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAYWY5MGZiOWM0OGJmOWQyMDkxNThk OWFjYTllYTJhMjU3MWRhZWJhN2Q1ZDE5NWRhMmZiNjRhMjkyMjcyNDU5NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykoy23lrNN7zjLUihOUZ7kbV3sTn /vnctf8L3TwJY9ol+pFp+p3MEuD7yGyIO9xjPk9p/uED2+KBAZHDW/qZ5pcuvxR8 gtBJDJk5rJS1KaHkGIpbH7Yuts12au9XWV9tKqo4H5xAm6GCLC/bLItKAjs3VCGp qlF383AS5r6CKlO3Fg2zwyHuXOuA8Tujedqd80IiRwa2+O7H/CtoHgYDwPeSlLeK EVDAg04fsNqEabOSLg62caPsaWtD8U8LHt3pgFXAmrJG4ei/PeVXFzsL85+/D6YO nG+hvy9Q+Q1HFbap86YxWLqk88Zuop57nhk6CcSW91siORoYFUg0yE1XFQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJE0T+axf0RPTknaEeoeYbeEtGndMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2NzhjZGNjLWE4OTAtNDcwNS1hZjVkLTJhZjA1YzM1MDljNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaukAwDQYJKoZIhvcNAQELBQADggEBAHJdxuIK9kruY9L3MH82 wChZo6Seq8RMY7SdZzoZYMcOF+mbfZnpdV/701XDV1j+vGsjbgABJwHYDykf+H6A 364A4IDPE6p5xMW3aibrnBXZOBywLqIl3cSqqYNlHm3wuIlY6+Hr+lrktRqnLGeP dLGeGQmbqwjm4XOwwWXSIGc+LjstrpGGXQyi8Ye2tcnbmhNDVqlfdDszHZUP9jYm M+bfUWItaMq6lA3JuK8eXn2WJY34t/mRnhy3aknsRy9A8nwnFPY9XqHn0yUo/MvD mTmqVIZSyBCkPN06WKJ9oixVp1mZKR5GPKYJzsaFaRF3aoHDw3EGR3HB6i3Hzm37 u0M= -----END CERTIFICATE-----Generated at Wed Aug 26 18:17:37 2026 by rpki-client