$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8995ae2b-1c96-4f98-8d9e-fd07cab15525.roa File: 8995ae2b-1c96-4f98-8d9e-fd07cab15525.roa (raw, json) Hash identifier: HiXjkOj3ozQrW4bd3Yh4Ttk+eQLhPkCLdl3+7C8s1z0= Subject key identifier: AB:F5:CE:46:77:C4:3C:BF:A1:9B:BD:5C:39:88:F9:44:81:7A:BC:5E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4E6924BEDC8DEEBAB73E077E8F03039C5A8ADEAA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8995ae2b-1c96-4f98-8d9e-fd07cab15525.roa Signing time: Mon 10 Aug 2026 00:00:31 +0000 ROA not before: Mon 10 Aug 2026 00:00:31 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:69:24:be:dc:8d:ee:ba:b7:3e:07:7e:8f:03:03:9c:5a:8a:de:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:00:31 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=c68c2c9d9311378e8355db7f0ccdc64b8f20a2ad7206071f046935a879fd0179, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:5a:0a:f5:3b:16:90:99:46:18:d3:da:62: 96:b6:00:e8:25:23:bb:93:93:98:e6:a3:b0:cd:fd: 5e:d5:d4:8e:ca:25:33:62:cd:78:a7:62:7f:b9:88: 67:2a:a9:1f:1c:40:c1:33:63:85:90:d9:af:43:81: 7b:d0:5b:37:fb:60:be:92:b6:2d:e4:0e:bd:d4:09: da:ed:81:f3:a4:4c:34:f2:3b:fc:c1:2f:6f:1d:22: 36:2c:ef:de:11:2e:05:b3:b3:f4:04:95:30:92:50: 56:cf:6a:49:73:a2:53:89:5a:7e:cc:c6:66:af:f2: 56:02:35:61:c0:cc:c1:66:16:8e:e5:ad:9f:71:a0: 68:81:d1:a9:4c:88:4b:9d:c5:96:f5:b9:12:6e:2c: cc:5f:3f:6d:0c:8c:29:39:23:9b:9c:3d:0e:55:d4: 41:51:52:bd:e3:67:7b:ed:6c:74:3d:42:6e:e5:74: 62:2d:fa:ba:c4:44:b9:d4:a4:ee:e9:8f:38:1e:7d: 21:b5:3c:37:37:02:84:d0:43:df:28:3e:d2:ff:2e: ca:96:88:f0:4f:6a:89:d6:d3:27:fa:e2:f9:08:cb: 2e:f4:83:ab:44:bc:cc:ef:b3:4d:58:c3:d1:74:e4: 63:db:ce:8e:0d:84:ec:f3:8b:70:12:4e:e0:14:cc: 8e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F5:CE:46:77:C4:3C:BF:A1:9B:BD:5C:39:88:F9:44:81:7A:BC:5E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8995ae2b-1c96-4f98-8d9e-fd07cab15525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c000::/40 Signature Algorithm: sha256WithRSAEncryption 34:0f:7c:e9:81:22:1e:bc:63:4d:b4:6a:d5:d9:57:82:5d:6b: b0:65:9c:10:cc:fe:eb:db:d7:84:4a:a4:70:c7:34:07:26:aa: cf:c3:5d:30:90:36:23:9c:e7:20:b9:f1:5f:f7:fa:82:5b:8b: af:2f:ea:cc:00:c3:49:4f:28:57:fd:ad:2d:58:6b:f0:fe:d6: 8f:9d:c1:76:ff:79:25:82:e7:01:40:85:20:99:59:77:74:ee: 8e:48:a1:08:bd:5a:34:56:fa:7d:92:f7:2e:38:a5:24:d9:07: c9:e8:7a:e2:a2:7b:ac:b6:27:7e:e9:e5:1d:9e:ac:56:b0:48: 9a:dc:d5:41:1e:d8:13:10:ea:b9:58:2e:24:36:e0:ff:03:a0: 23:cc:03:f5:3d:90:6f:cc:0f:f1:1b:56:c3:3b:a2:1e:07:24: 7e:8a:a0:ff:79:fc:22:d5:56:b5:41:4b:20:a7:1a:6d:72:0d: 4c:91:10:27:a8:2e:04:b1:e6:3d:94:f3:21:79:6a:ee:bd:d6: c1:1f:84:57:d7:f8:83:73:68:18:40:9e:c7:1b:00:79:2b:c6: 95:58:01:26:e2:69:1e:d5:4c:6e:4a:19:0a:aa:f8:cf:21:d9: 56:68:0c:2a:6b:d5:00:8b:29:c1:77:94:2b:7f:14:e7:1f:42: 50:95:55:f1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTmkkvtyN7rq3Pgd+jwMDnFqK3qowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDAzMVoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAYzY4YzJjOWQ5MzExMzc4ZTgzNTVk YjdmMGNjZGM2NGI4ZjIwYTJhZDcyMDYwNzFmMDQ2OTM1YTg3OWZkMDE3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHxaCvU7FpCZRhjT2mKWtgDoJSO7 k5OY5qOwzf1e1dSOyiUzYs14p2J/uYhnKqkfHEDBM2OFkNmvQ4F70Fs3+2C+krYt 5A691Ana7YHzpEw08jv8wS9vHSI2LO/eES4Fs7P0BJUwklBWz2pJc6JTiVp+zMZm r/JWAjVhwMzBZhaO5a2fcaBogdGpTIhLncWW9bkSbizMXz9tDIwpOSObnD0OVdRB UVK942d77Wx0PUJu5XRiLfq6xES51KTu6Y84Hn0htTw3NwKE0EPfKD7S/y7Klojw T2qJ1tMn+uL5CMsu9IOrRLzM77NNWMPRdORj286ODYTs84twEk7gFMyO+QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKv1zkZ3xDy/oZu9XDmI+USBerxeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg5OTVhZTJiLTFjOTYtNGY5OC04ZDllLWZkMDdjYWIxNTUyNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYcAwDQYJKoZIhvcNAQELBQADggEBADQPfOmBIh68Y020atXZ V4Jda7BlnBDM/uvb14RKpHDHNAcmqs/DXTCQNiOc5yC58V/3+oJbi68v6swAw0lP KFf9rS1Ya/D+1o+dwXb/eSWC5wFAhSCZWXd07o5IoQi9WjRW+n2S9y44pSTZB8no euKie6y2J37p5R2erFawSJrc1UEe2BMQ6rlYLiQ24P8DoCPMA/U9kG/MD/EbVsM7 oh4HJH6KoP95/CLVVrVBSyCnGm1yDUyRECeoLgSx5j2U8yF5au691sEfhFfX+INz aBhAnscbAHkrxpVYASbiaR7VTG5KGQqq+M8h2VZoDCpr1QCLKcF3lCt/FOcfQlCV VfE= -----END CERTIFICATE-----Generated at Wed Aug 26 13:04:24 2026 by rpki-client