$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93f3d30c-8a89-447b-b341-5c1150a6a651.roa File: 93f3d30c-8a89-447b-b341-5c1150a6a651.roa (raw, json) Hash identifier: mo5mIIhoe08H2vPLXIIDd6pOMSQymp5XqgtMS2rSKvg= Subject key identifier: 52:5B:15:24:3C:08:40:DB:21:0B:FD:48:1D:16:30:7D:C8:0D:61:08 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DC13198680990395F020DA7A942DA33FE8F0F8D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93f3d30c-8a89-447b-b341-5c1150a6a651.roa Signing time: Wed 19 Aug 2026 00:00:44 +0000 ROA not before: Wed 19 Aug 2026 00:00:44 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c1:31:98:68:09:90:39:5f:02:0d:a7:a9:42:da:33:fe:8f:0f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:00:44 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=44b9f418faacc20d7c8efe4fa0d881d2891ee1cfbc6249fe9465e2d40da3b96f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:28:0c:52:24:fc:8c:31:73:61:11:19:33:42: 19:5c:7d:e6:ba:e3:e9:b2:6d:5d:cb:5f:4b:06:b7: ce:d0:75:37:89:8f:74:36:cd:46:16:b0:cb:0a:53: 81:f0:8a:f7:ea:0b:00:5c:a0:e0:15:0d:b1:62:77: 6b:cf:f1:54:12:95:39:e7:53:7a:3c:d0:88:48:22: e7:f0:79:67:79:92:fe:3b:0d:58:65:cb:63:33:d6: dd:a0:af:d4:4a:2f:da:60:08:8d:a1:00:73:8d:0c: 7a:45:16:3f:53:24:31:8e:d3:c8:a5:f4:e3:2b:1e: 4b:c5:77:34:40:5b:89:99:30:f2:42:a0:ea:68:b9: f0:c0:32:2d:66:01:c7:33:a6:92:2d:73:cc:e7:3d: fb:77:5c:f4:2d:20:42:7d:40:fa:ac:c3:cc:d7:08: b8:e7:fb:7a:6e:50:9e:bc:09:73:3b:10:07:76:b3: 16:aa:b8:c1:7a:54:4f:d7:58:8a:54:8b:fd:8f:3c: 15:24:63:6f:59:71:f7:41:15:c5:a0:49:0c:cd:f0: a6:df:f5:20:73:5b:df:ec:a6:3d:9c:1e:3a:da:7f: 92:90:a3:99:a7:8e:8f:1e:83:75:72:b3:d0:5c:10: de:36:29:50:92:08:ea:c1:3e:e2:91:2a:90:a1:74: f2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5B:15:24:3C:08:40:DB:21:0B:FD:48:1D:16:30:7D:C8:0D:61:08 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93f3d30c-8a89-447b-b341-5c1150a6a651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:9040::/48 Signature Algorithm: sha256WithRSAEncryption 3e:6e:1e:22:d7:e7:fb:c1:d4:08:32:ff:16:58:fd:3b:88:0c: dd:15:77:3a:ac:86:32:95:99:95:69:e3:c4:33:fd:de:fc:97: 6b:27:7d:cf:5a:aa:8e:a0:0f:6f:a0:ce:c3:d2:38:36:8f:ba: bb:fd:26:7d:58:14:e7:c2:01:df:24:ee:25:e1:ba:17:1b:fe: 87:a4:92:c2:e6:b8:1d:82:d0:19:c4:69:fe:0b:27:b1:3f:59: 08:e3:9f:55:da:97:b2:7b:f4:ad:85:6b:c0:ef:e3:31:23:0f: 7f:fa:fb:92:ac:87:10:45:3c:cc:34:dc:a2:63:91:3e:f4:fc: b6:09:61:07:44:e6:30:b4:d4:e9:1f:75:ac:cb:61:c6:17:d0: 15:b0:3f:55:a0:a3:96:15:1c:54:25:33:fe:49:80:09:bd:42: 90:f1:a6:7c:74:ae:54:6c:31:8d:d5:7d:b6:54:c5:c8:99:46: bf:c7:01:18:59:af:2d:87:7e:7a:5d:b5:31:33:39:46:db:65: 54:4e:8f:43:f0:e8:7f:e5:60:aa:6a:4b:92:51:61:39:10:e7: 78:83:18:36:67:7b:5d:93:73:1e:c6:b9:b1:cc:e4:9b:ec:43: 78:5c:27:d8:f0:90:70:31:be:99:b3:71:b1:b8:d5:cf:de:e7: 5f:e4:d8:72 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHcExmGgJkDlfAg2nqULaM/6PD40wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDA0NFoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNANDRiOWY0MThmYWFjYzIwZDdjOGVm ZTRmYTBkODgxZDI4OTFlZTFjZmJjNjI0OWZlOTQ2NWUyZDQwZGEzYjk2ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CgMUiT8jDFzYREZM0IZXH3muuPp sm1dy19LBrfO0HU3iY90Ns1GFrDLClOB8Ir36gsAXKDgFQ2xYndrz/FUEpU551N6 PNCISCLn8HlneZL+Ow1YZctjM9bdoK/USi/aYAiNoQBzjQx6RRY/UyQxjtPIpfTj Kx5LxXc0QFuJmTDyQqDqaLnwwDItZgHHM6aSLXPM5z37d1z0LSBCfUD6rMPM1wi4 5/t6blCevAlzOxAHdrMWqrjBelRP11iKVIv9jzwVJGNvWXH3QRXFoEkMzfCm3/Ug c1vf7KY9nB462n+SkKOZp46PHoN1crPQXBDeNilQkgjqwT7ikSqQoXTyVQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFJbFSQ8CEDbIQv9SB0WMH3IDWEIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkzZjNkMzBjLThhODktNDQ3Yi1iMzQxLTVjMTE1MGE2YTY1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ZBAMA0GCSqGSIb3DQEBCwUAA4IBAQA+bh4i1+f7wdQIMv8W WP07iAzdFXc6rIYylZmVaePEM/3e/JdrJ33PWqqOoA9voM7D0jg2j7q7/SZ9WBTn wgHfJO4l4boXG/6HpJLC5rgdgtAZxGn+CyexP1kI459V2peye/SthWvA7+MxIw9/ +vuSrIcQRTzMNNyiY5E+9Py2CWEHROYwtNTpH3Wsy2HGF9AVsD9VoKOWFRxUJTP+ SYAJvUKQ8aZ8dK5UbDGN1X22VMXImUa/xwEYWa8th356XbUxMzlG22VUTo9D8Oh/ 5WCqakuSUWE5EOd4gxg2Z3tdk3MexrmxzOSb7EN4XCfY8JBwMb6Zs3GxuNXP3udf 5Nhy -----END CERTIFICATE-----Generated at Wed Aug 26 18:17:11 2026 by rpki-client