$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86af3d6b-7547-4abd-8e4b-90abce9de966.roa File: 86af3d6b-7547-4abd-8e4b-90abce9de966.roa (raw, json) Hash identifier: 1j3mW2LrwhAWdQULISNiuArYrIjEsMVUer+2IvNHyGo= Subject key identifier: 74:B6:0F:D6:10:A0:80:A9:DE:2E:6B:1C:1B:2B:77:F8:21:A7:27:BC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6BC6B65CD1DFEC891203C98E1B622E9FC85A8302 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86af3d6b-7547-4abd-8e4b-90abce9de966.roa Signing time: Sun 02 Aug 2026 00:00:14 +0000 ROA not before: Sun 02 Aug 2026 00:00:14 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1e:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c6:b6:5c:d1:df:ec:89:12:03:c9:8e:1b:62:2e:9f:c8:5a:83:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 2 00:00:14 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=9acd6e1fb4262fa37f2a61c21f3e184671e2c4a58e93135d1062d426b7e67f92, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:56:af:fb:0c:ea:11:ef:bb:49:f5:98:02: 0c:e7:4f:1b:3c:d2:4d:02:14:eb:93:cf:f6:10:b3: ca:70:f8:ae:b9:fa:5c:68:7c:c1:c5:d8:47:31:24: 4e:51:33:eb:ec:62:2b:c7:15:b5:2e:a4:2b:1b:60: 56:1b:0a:f9:e2:e4:67:36:f4:e0:af:8b:50:39:5c: 44:de:5b:29:af:e1:52:cd:33:7a:dc:be:a9:17:52: fd:0a:0c:5a:9b:86:75:75:f2:61:15:5a:9c:68:fe: 56:60:9b:a2:9a:7b:58:52:a7:79:66:3b:bc:80:5e: 06:75:8f:7b:05:a7:23:d7:aa:19:42:4b:e1:d3:91: 5c:00:a9:8d:ad:21:9c:56:75:e4:8b:23:4b:f2:3e: 40:37:77:99:30:5b:0b:7f:50:27:af:ac:b4:be:9d: d8:c5:ba:d8:64:08:27:f6:56:8e:74:60:6b:5c:d7: 67:be:36:90:0a:ae:da:aa:af:4e:e6:27:f4:ab:33: 5d:c1:85:83:4b:d5:81:66:22:d2:9a:fc:73:29:2b: 69:bf:71:62:fe:c0:89:14:69:47:34:55:1e:c7:41: 4e:6e:82:dc:01:7a:06:a6:4b:ff:41:7a:40:2a:55: 3b:86:97:9a:0f:2f:c4:b3:67:6b:d7:45:6a:3d:fb: 98:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B6:0F:D6:10:A0:80:A9:DE:2E:6B:1C:1B:2B:77:F8:21:A7:27:BC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86af3d6b-7547-4abd-8e4b-90abce9de966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1e:400::/38 Signature Algorithm: sha256WithRSAEncryption c5:80:a6:37:55:cc:ba:ad:be:e1:d3:9c:e5:ed:47:dd:6a:11: 53:10:f4:0b:d1:97:fe:a9:ab:c9:65:a1:d9:d3:ef:43:3a:75: 8c:df:34:07:c3:d6:90:7e:1e:3a:4a:99:c1:d3:95:15:e6:3f: ae:a4:1f:3f:7d:07:37:a4:83:14:bb:b7:9b:14:06:51:6a:87: 0b:8d:f2:75:77:4c:09:4f:39:49:44:f8:5d:5b:68:df:f2:7a: 07:67:da:ad:b5:23:0b:ed:23:a6:cb:ed:3e:82:01:d0:d2:57: 99:2c:39:2d:c4:dd:e6:22:af:25:e5:31:ad:c7:36:e4:53:fc: de:7f:e7:6b:e2:ee:1d:9a:7d:11:60:46:73:06:3c:8b:2e:e6: 01:9b:36:86:10:05:28:e3:4d:b3:65:db:d5:ae:81:27:65:8a: f8:42:03:d1:07:c2:ce:3b:ec:b9:9e:46:40:f4:f9:17:6d:71: 45:cf:e9:43:24:6a:3d:03:73:8f:a9:d1:6f:6a:13:6c:ba:59: e3:c2:31:13:ec:4c:b9:bb:e3:43:2d:74:85:dc:d8:d2:c5:7e: 8a:94:a6:a9:2e:fd:d0:52:ea:45:6a:d2:85:2d:97:69:ad:6a: 8e:cd:7c:25:c4:20:cd:0d:74:3c:13:69:51:b4:67:cd:3b:14: 75:f1:9d:8b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUa8a2XNHf7IkSA8mOG2Iun8hagwIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMjAwMDAxNFoX DTI2MTAzMTIzNTk1OVowejFJMEcGA1UEBRNAOWFjZDZlMWZiNDI2MmZhMzdmMmE2 MWMyMWYzZTE4NDY3MWUyYzRhNThlOTMxMzVkMTA2MmQ0MjZiN2U2N2Y5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0axWr/sM6hHvu0n1mAIM508bPNJN AhTrk8/2ELPKcPiuufpcaHzBxdhHMSROUTPr7GIrxxW1LqQrG2BWGwr54uRnNvTg r4tQOVxE3lspr+FSzTN63L6pF1L9Cgxam4Z1dfJhFVqcaP5WYJuimntYUqd5Zju8 gF4GdY97Bacj16oZQkvh05FcAKmNrSGcVnXkiyNL8j5AN3eZMFsLf1Anr6y0vp3Y xbrYZAgn9laOdGBrXNdnvjaQCq7aqq9O5if0qzNdwYWDS9WBZiLSmvxzKStpv3Fi /sCJFGlHNFUex0FOboLcAXoGpkv/QXpAKlU7hpeaDy/Es2dr10VqPfuYMwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHS2D9YQoICp3i5rHBsrd/ghpye8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2YWYzZDZiLTc1NDctNGFiZC04ZTRiLTkwYWJjZTlkZTk2Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHgQwDQYJKoZIhvcNAQELBQADggEBAMWApjdVzLqtvuHTnOXt R91qEVMQ9AvRl/6pq8llodnT70M6dYzfNAfD1pB+HjpKmcHTlRXmP66kHz99Bzek gxS7t5sUBlFqhwuN8nV3TAlPOUlE+F1baN/yegdn2q21IwvtI6bL7T6CAdDSV5ks OS3E3eYiryXlMa3HNuRT/N5/52vi7h2afRFgRnMGPIsu5gGbNoYQBSjjTbNl29Wu gSdlivhCA9EHws477LmeRkD0+RdtcUXP6UMkaj0Dc4+p0W9qE2y6WePCMRPsTLm7 40MtdIXc2NLFfoqUpqku/dBS6kVq0oUtl2mtao7NfCXEIM0NdDwTaVG0Z807FHXx nYs= -----END CERTIFICATE-----Generated at Wed Aug 26 13:04:09 2026 by rpki-client