$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89bf2d94-eb2c-40d8-ae7b-42a1eaf73c52.roa File: 89bf2d94-eb2c-40d8-ae7b-42a1eaf73c52.roa (raw, json) Hash identifier: sAGkIzKSHMYBWy9AgyMuxaQ2wSe7rnG8zKSMl5Kn1Qk= Subject key identifier: C7:56:D1:78:CB:53:51:6D:59:DC:E6:07:9A:EB:AC:A7:0B:4F:29:21 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3D27A3B033A223611D576BD8D042E680A4E6FD6C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89bf2d94-eb2c-40d8-ae7b-42a1eaf73c52.roa Signing time: Wed 19 Aug 2026 00:01:23 +0000 ROA not before: Wed 19 Aug 2026 00:01:23 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:27:a3:b0:33:a2:23:61:1d:57:6b:d8:d0:42:e6:80:a4:e6:fd:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:01:23 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=1d13497edf5a1abd0b609451f5b0ce4ec4eb673371945fedfa673b5af35718ee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:f7:55:e9:09:fc:3d:c2:e4:dc:45:5b:48: 6c:0d:98:de:d2:38:d0:d5:44:d0:b6:73:99:49:77: 2c:26:be:dd:b6:67:81:13:91:24:96:dc:54:58:55: 3d:73:fc:f0:eb:ec:50:aa:94:32:6c:b3:93:1f:46: d9:7d:2b:e8:3c:f6:e3:1e:3d:3f:7f:e0:52:e7:93: 32:77:20:9a:30:3d:f4:ce:17:84:74:92:95:a1:48: 55:11:b9:1d:e4:82:52:cd:59:90:79:f0:1f:ef:58: 53:92:fb:1b:16:89:cd:bf:69:36:3e:26:25:26:5f: 67:0e:1b:db:f1:ee:91:0e:4f:fd:b9:81:c2:eb:51: f4:3c:ce:c1:9e:70:06:50:42:67:3e:6c:a1:b2:9e: 78:82:3f:b8:28:7f:32:00:e4:4b:76:e2:a0:1a:69: 75:7b:eb:84:4b:0d:34:47:58:3a:c3:8b:95:10:8a: 3b:df:91:76:d0:9b:73:4c:f1:b5:59:98:22:ee:03: 4f:e9:39:31:87:c3:8f:76:24:b9:cf:c3:cf:25:1c: 74:9f:fb:2c:d9:1f:8b:e6:d4:45:0a:61:65:95:f7: 83:50:8e:ac:13:b7:15:39:8a:be:c9:36:2c:87:39: ea:39:10:b5:07:dc:c0:1e:f8:9d:7e:ff:ad:fb:c0: 9c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:56:D1:78:CB:53:51:6D:59:DC:E6:07:9A:EB:AC:A7:0B:4F:29:21 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89bf2d94-eb2c-40d8-ae7b-42a1eaf73c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 8f:ed:ff:bf:a6:85:cf:1e:17:7c:c9:46:e4:d3:c3:30:1b:43: d6:a3:18:d0:d8:b5:aa:f7:11:1d:f9:85:f7:54:ae:3d:74:c2: 2e:fc:d0:d8:a2:6f:cd:f7:ea:14:87:3d:14:7d:21:da:54:d4: 97:9a:05:17:e4:09:22:ac:09:b8:1d:26:81:a2:d8:2c:86:cc: 79:3e:dd:2a:e2:d2:eb:5f:bf:3e:d6:22:ea:61:be:fd:5b:a2: 44:29:79:a0:25:98:36:b7:ed:a0:8c:2c:3e:c5:66:54:5b:91: 04:db:43:a7:25:b0:ff:b8:9b:60:a5:63:32:a1:0a:11:f9:fd: 8f:3e:b2:de:1d:b3:0a:de:a3:0b:6b:bb:a4:35:0a:3e:b2:65: 7c:03:e1:df:03:f7:5c:49:d4:b3:44:f9:8c:1b:39:72:0e:00: 57:e6:0f:65:58:e7:20:73:7f:d2:13:ef:97:d7:bc:35:a2:b2: b1:22:33:07:14:88:50:95:9f:1c:a3:d3:58:d7:e5:82:b3:0a: 4e:95:8d:62:ba:23:0f:7f:d8:23:9d:fb:72:77:7d:84:c1:bc: 11:31:5e:cc:05:81:35:24:c2:23:30:d1:91:e8:b7:71:2a:8b: 53:4f:67:8f:c2:9e:35:83:e2:d8:80:6b:99:b7:d0:fd:a6:f0: 3f:c6:e9:ab -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPSejsDOiI2EdV2vY0ELmgKTm/WwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDEyM1oX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAMWQxMzQ5N2VkZjVhMWFiZDBiNjA5 NDUxZjViMGNlNGVjNGViNjczMzcxOTQ1ZmVkZmE2NzNiNWFmMzU3MThlZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXP3VekJ/D3C5NxFW0hsDZje0jjQ 1UTQtnOZSXcsJr7dtmeBE5EkltxUWFU9c/zw6+xQqpQybLOTH0bZfSvoPPbjHj0/ f+BS55MydyCaMD30zheEdJKVoUhVEbkd5IJSzVmQefAf71hTkvsbFonNv2k2PiYl Jl9nDhvb8e6RDk/9uYHC61H0PM7BnnAGUEJnPmyhsp54gj+4KH8yAORLduKgGml1 e+uESw00R1g6w4uVEIo735F20JtzTPG1WZgi7gNP6Tkxh8OPdiS5z8PPJRx0n/ss 2R+L5tRFCmFllfeDUI6sE7cVOYq+yTYshznqORC1B9zAHvidfv+t+8Cc8QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMdW0XjLU1FtWdzmB5rrrKcLTykhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg5YmYyZDk0LWViMmMtNDBkOC1hZTdiLTQyYTFlYWY3M2M1Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6QjAMA0GCSqGSIb3DQEBCwUAA4IBAQCP7f+/poXPHhd8yUbk 08MwG0PWoxjQ2LWq9xEd+YX3VK49dMIu/NDYom/N9+oUhz0UfSHaVNSXmgUX5Aki rAm4HSaBotgshsx5Pt0q4tLrX78+1iLqYb79W6JEKXmgJZg2t+2gjCw+xWZUW5EE 20OnJbD/uJtgpWMyoQoR+f2PPrLeHbMK3qMLa7ukNQo+smV8A+HfA/dcSdSzRPmM GzlyDgBX5g9lWOcgc3/SE++X17w1orKxIjMHFIhQlZ8co9NY1+WCswpOlY1iuiMP f9gjnftyd32EwbwRMV7MBYE1JMIjMNGR6LdxKotTT2ePwp41g+LYgGuZt9D9pvA/ xumr -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:23 2026 by rpki-client