$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8dba85b7-4730-4c28-98df-3c8484e0f1cc.roa File: 8dba85b7-4730-4c28-98df-3c8484e0f1cc.roa (raw, json) Hash identifier: dGwkSuufkOSzk6e0A36HEcHtXosL3NkSvdCB0U36eLk= Subject key identifier: 33:E7:BC:BC:E1:75:07:21:49:51:DC:0F:5D:EB:B2:E5:FA:C4:A7:9C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 26D0DAF923A031E82E7002652C014B11974F9F76 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8dba85b7-4730-4c28-98df-3c8484e0f1cc.roa Signing time: Thu 30 Jul 2026 00:10:04 +0000 ROA not before: Thu 30 Jul 2026 00:10:04 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d0:da:f9:23:a0:31:e8:2e:70:02:65:2c:01:4b:11:97:4f:9f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:10:04 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=d9fb53911b88fdd77018961d6895ce3e398c4985898e78514d201dde9f34082d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:2e:a8:21:2d:f7:8a:d5:c9:36:43:58:b3: b5:a5:f1:b6:2c:ad:87:f3:2b:97:1c:43:01:93:cd: a7:45:f5:b7:84:66:7b:e0:25:56:df:e7:ae:95:8c: de:bd:ae:50:5f:2e:b1:e4:ec:62:06:e1:24:11:ba: 32:9e:f0:bd:13:69:83:22:da:76:b0:0b:88:35:b4: 05:11:09:1b:a3:4a:6a:75:ff:08:5e:78:6f:41:73: b0:76:6a:16:c4:19:4a:20:2e:06:84:41:a6:b6:0c: 33:d2:4c:57:07:4b:f8:01:c5:4c:08:22:cb:9a:9c: 95:c8:52:d7:eb:11:a3:f9:90:b0:9e:2b:cf:a7:27: 42:08:2c:ef:9b:fc:d3:24:4c:56:b1:33:0c:39:9f: 2e:69:bd:89:1d:91:a6:48:f6:0f:12:37:15:40:0e: 97:13:48:3d:4b:d1:ef:04:af:3e:11:c1:26:bc:13: 25:6a:4d:dc:0f:ad:0d:06:a1:79:b3:0a:33:69:f2: 61:1b:ab:cc:fa:86:9b:9e:de:26:fb:e0:32:f2:57: 6b:30:65:73:41:89:56:3f:38:38:54:f7:5f:60:37: 46:a6:61:5a:fc:1d:0e:ff:5c:13:2b:66:ac:b3:cd: b7:17:2f:ff:bc:62:a6:d1:19:c4:51:c0:d6:49:ca: 80:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E7:BC:BC:E1:75:07:21:49:51:DC:0F:5D:EB:B2:E5:FA:C4:A7:9C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8dba85b7-4730-4c28-98df-3c8484e0f1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c840::/48 Signature Algorithm: sha256WithRSAEncryption 13:41:15:92:e6:49:3c:20:dc:ee:e8:d6:b0:cb:6d:85:60:76: d9:8a:10:67:52:8d:37:85:05:d8:39:3a:7d:15:ed:87:f0:02: 65:67:ab:09:19:0d:51:11:17:6f:b1:e1:e1:4d:4c:10:07:c8: 61:88:20:b2:ce:54:83:e6:30:53:ab:4b:a6:99:92:48:a9:31: a7:18:bc:01:5f:5c:82:d4:05:8b:fc:3f:4d:94:77:e8:87:0f: e0:a9:15:2c:b4:c6:07:8c:ad:36:63:75:0b:d4:a9:85:e7:c6: 56:49:04:60:b5:ba:56:9d:b1:b7:ed:b8:d5:66:83:d8:97:2b: 53:d8:50:41:bf:db:bd:44:3c:3e:f9:25:d7:21:ea:ba:4d:7c: 71:26:8e:a6:03:24:92:79:96:21:8f:e8:d5:e0:c4:24:9d:0e: 1b:fa:d6:25:e7:aa:eb:a4:f6:32:41:6a:0b:bf:62:17:19:61: d2:51:85:7c:03:33:b1:cb:09:f9:e7:cf:eb:e3:b0:ba:fb:6f: f4:aa:2e:52:76:10:d2:47:87:82:98:8a:c0:e9:85:44:5a:eb: a7:3c:32:88:a0:cb:34:2a:57:31:ac:73:71:0c:b0:46:87:1d: f1:2d:d7:bc:9f:87:7a:68:88:51:79:ca:d2:a6:c5:41:51:7d: 8d:66:a4:26 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJtDa+SOgMegucAJlLAFLEZdPn3YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTAwNFoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAZDlmYjUzOTExYjg4ZmRkNzcwMTg5 NjFkNjg5NWNlM2UzOThjNDk4NTg5OGU3ODUxNGQyMDFkZGU5ZjM0MDgyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJouqCEt94rVyTZDWLO1pfG2LK2H 8yuXHEMBk82nRfW3hGZ74CVW3+eulYzeva5QXy6x5OxiBuEkEboynvC9E2mDItp2 sAuINbQFEQkbo0pqdf8IXnhvQXOwdmoWxBlKIC4GhEGmtgwz0kxXB0v4AcVMCCLL mpyVyFLX6xGj+ZCwnivPpydCCCzvm/zTJExWsTMMOZ8uab2JHZGmSPYPEjcVQA6X E0g9S9HvBK8+EcEmvBMlak3cD60NBqF5swozafJhG6vM+oabnt4m++Ay8ldrMGVz QYlWPzg4VPdfYDdGpmFa/B0O/1wTK2ass823Fy//vGKm0RnEUcDWScqAMQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDPnvLzhdQchSVHcD13rsuX6xKecMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhkYmE4NWI3LTQ3MzAtNGMyOC05OGRmLTNjODQ4NGUwZjFjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8shAMA0GCSqGSIb3DQEBCwUAA4IBAQATQRWS5kk8INzu6Naw y22FYHbZihBnUo03hQXYOTp9Fe2H8AJlZ6sJGQ1RERdvseHhTUwQB8hhiCCyzlSD 5jBTq0ummZJIqTGnGLwBX1yC1AWL/D9NlHfohw/gqRUstMYHjK02Y3UL1KmF58ZW SQRgtbpWnbG37bjVZoPYlytT2FBBv9u9RDw++SXXIeq6TXxxJo6mAySSeZYhj+jV 4MQknQ4b+tYl56rrpPYyQWoLv2IXGWHSUYV8AzOxywn558/r47C6+2/0qi5SdhDS R4eCmIrA6YVEWuunPDKIoMs0KlcxrHNxDLBGhx3xLde8n4d6aIhRecrSpsVBUX2N ZqQm -----END CERTIFICATE-----Generated at Wed Aug 26 16:08:06 2026 by rpki-client