$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/895b2a47-a7bc-4846-b76a-991d71e1a6b7.roa File: 895b2a47-a7bc-4846-b76a-991d71e1a6b7.roa (raw, json) Hash identifier: DMPlyGoiZEdsBCrZFpm8x/D/qYncvMYogOE/Hy8zpEE= Subject key identifier: E4:D1:B4:17:CB:54:C2:5E:0D:92:26:43:D9:28:F4:FA:71:33:DD:5D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3860587F0FF089BF6B270254C7CDBE02C8A1E45C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/895b2a47-a7bc-4846-b76a-991d71e1a6b7.roa Signing time: Tue 28 Jul 2026 00:01:12 +0000 ROA not before: Tue 28 Jul 2026 00:01:12 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:60:58:7f:0f:f0:89:bf:6b:27:02:54:c7:cd:be:02:c8:a1:e4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 00:01:12 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=dc8a9091253c6b2816e6be0ba7e75483b91e3b749fa30f2fdd7f066e0c00565d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e3:de:ed:ba:88:a1:1e:d2:39:75:be:ec:bd: 7a:a6:de:be:d6:d5:df:4a:e7:5e:3b:4e:4a:a1:ab: 10:9f:4a:12:c4:f3:ad:b9:7c:f2:f2:68:eb:fe:21: 20:30:0b:70:14:73:ec:66:76:69:de:04:76:af:f9: 71:cc:e1:bf:4a:8d:b1:10:6e:e3:27:a7:29:84:be: fc:40:b8:ce:35:62:2c:f8:95:db:b1:52:90:94:3c: 75:15:7c:f7:32:64:44:3d:c7:d2:88:16:5c:d0:87: d1:69:4a:bf:ec:2c:25:5e:86:b2:fe:82:44:85:8a: 2d:a3:11:2c:d6:59:43:03:e1:6c:d0:de:9a:f3:18: 3f:5b:e0:ea:66:a2:29:b6:61:fd:82:a2:91:7b:76: 8c:36:88:8e:13:95:28:85:6e:0d:e5:46:f1:01:a9: 78:ac:45:d8:bd:50:91:91:28:12:ea:d2:8a:5d:ef: 65:0e:40:c5:85:b7:b6:9f:4b:f0:fe:00:dd:4f:3e: 01:7b:95:cb:e9:6d:7a:5d:f9:53:fe:26:67:b3:df: 9e:2d:a2:a7:b9:79:38:f8:7d:9a:0b:c6:45:1e:cd: f4:78:64:8e:14:92:d3:32:15:08:77:21:40:73:ea: 27:71:6e:d8:1c:cd:7b:38:02:35:1e:75:73:bb:e9: 59:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D1:B4:17:CB:54:C2:5E:0D:92:26:43:D9:28:F4:FA:71:33:DD:5D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/895b2a47-a7bc-4846-b76a-991d71e1a6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:f080::/48 Signature Algorithm: sha256WithRSAEncryption b7:3b:7c:45:3b:81:85:2b:09:9f:55:c8:0f:c1:8e:c6:24:61: 21:20:3f:91:f4:68:23:60:51:85:64:ca:82:ee:b9:ef:57:2a: 85:22:0b:e3:43:05:0b:60:60:82:51:68:f3:70:ea:2b:83:82: b4:e5:4d:7c:ea:7a:5f:2a:c2:61:92:95:7d:57:80:ed:17:86: 1a:df:d8:2c:43:37:2e:d0:8d:9e:91:21:33:ec:2f:2b:5f:a7: d5:7f:4c:d8:0c:be:7d:03:45:18:e1:7c:15:4d:d6:2d:5c:85: 57:f0:0f:19:83:5d:61:e2:bc:31:5e:fb:74:c5:34:3c:e1:98: b4:a3:13:c4:96:57:88:83:e6:e7:eb:40:0e:95:8e:b9:e1:3f: eb:21:dd:7a:9a:3c:f9:e4:7c:ba:38:b6:12:7d:b0:f9:eb:82: 90:3e:17:e5:6f:1c:e2:70:ef:20:ab:61:6e:87:80:dc:7c:07: 90:21:ff:62:8b:d4:b3:02:f9:91:d7:11:e4:8c:ab:83:e2:61: d8:4f:b8:7d:50:cc:06:78:71:ec:de:6e:bf:d1:4c:24:b3:d6: 65:1c:e9:70:84:23:07:42:7a:6a:f0:55:ec:23:b9:77:eb:39: 61:1d:40:f2:a1:ec:36:24:fd:06:a6:61:0d:99:b8:6b:64:5c: cc:c3:f7:bd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOGBYfw/wib9rJwJUx82+Asih5FwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyODAwMDExMloX DTI2MTAyNjIzNTk1OVowejFJMEcGA1UEBRNAZGM4YTkwOTEyNTNjNmIyODE2ZTZi ZTBiYTdlNzU0ODNiOTFlM2I3NDlmYTMwZjJmZGQ3ZjA2NmUwYzAwNTY1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+Pe7bqIoR7SOXW+7L16pt6+1tXf SudeO05KoasQn0oSxPOtuXzy8mjr/iEgMAtwFHPsZnZp3gR2r/lxzOG/So2xEG7j J6cphL78QLjONWIs+JXbsVKQlDx1FXz3MmREPcfSiBZc0IfRaUq/7CwlXoay/oJE hYotoxEs1llDA+Fs0N6a8xg/W+DqZqIptmH9gqKRe3aMNoiOE5UohW4N5UbxAal4 rEXYvVCRkSgS6tKKXe9lDkDFhbe2n0vw/gDdTz4Be5XL6W16XflT/iZns9+eLaKn uXk4+H2aC8ZFHs30eGSOFJLTMhUIdyFAc+oncW7YHM17OAI1HnVzu+lZDQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOTRtBfLVMJeDZImQ9ko9PpxM91dMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg5NWIyYTQ3LWE3YmMtNDg0Ni1iNzZhLTk5MWQ3MWUxYTZiNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8vCAMA0GCSqGSIb3DQEBCwUAA4IBAQC3O3xFO4GFKwmfVcgP wY7GJGEhID+R9GgjYFGFZMqC7rnvVyqFIgvjQwULYGCCUWjzcOorg4K05U186npf KsJhkpV9V4DtF4Ya39gsQzcu0I2ekSEz7C8rX6fVf0zYDL59A0UY4XwVTdYtXIVX 8A8Zg11h4rwxXvt0xTQ84Zi0oxPElleIg+bn60AOlY654T/rId16mjz55Hy6OLYS fbD564KQPhflbxzicO8gq2Fuh4DcfAeQIf9ii9SzAvmR1xHkjKuD4mHYT7h9UMwG eHHs3m6/0Uwks9ZlHOlwhCMHQnpq8FXsI7l36zlhHUDyoew2JP0GpmENmbhrZFzM w/e9 -----END CERTIFICATE-----Generated at Wed Aug 26 16:09:10 2026 by rpki-client