$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a5b4e58-0735-47a2-8be7-42843e091813.roa File: 9a5b4e58-0735-47a2-8be7-42843e091813.roa (raw, json) Hash identifier: MRA6IoxaDLd1fQzhcrrVHTWvlJ1R0q3xhtS8VRDlD4A= Subject key identifier: DA:91:82:15:54:3D:35:59:13:20:E8:24:7D:C5:93:13:8E:F8:EF:4F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7DB0FBD7E4E8F5481331C8C75545F26A19B48CC9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a5b4e58-0735-47a2-8be7-42843e091813.roa Signing time: Wed 19 Aug 2026 00:10:25 +0000 ROA not before: Wed 19 Aug 2026 00:10:25 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:2880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b0:fb:d7:e4:e8:f5:48:13:31:c8:c7:55:45:f2:6a:19:b4:8c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:25 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=adbe1a57d97cc9463670b28d860750c9146319507d7475ca8094b59e5e7845cc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:d6:9c:52:1c:7e:2c:c4:0f:12:d1:28:f8: 2e:e0:94:84:bb:13:7f:7d:75:a6:b7:f5:1c:3d:ae: ef:36:4b:05:56:ff:2e:f9:49:2c:94:fd:a0:70:46: 16:31:b7:d1:50:4e:94:f6:29:42:66:3e:39:b8:8c: 37:02:40:7f:bb:58:50:29:ae:82:f9:11:6c:82:83: ba:23:c1:01:fe:5a:ce:6a:77:a9:55:fa:b7:48:db: 25:f0:8d:9c:29:d3:1d:1c:5d:c3:61:13:d5:0c:aa: 0e:03:5d:e1:27:8f:27:61:a9:bb:1f:af:c1:b3:ac: 99:2d:6c:6c:6f:ee:1c:ef:d7:e4:ea:0c:d9:ab:60: 2c:ec:f2:c2:e0:df:09:39:eb:81:4e:20:9a:c0:5e: 4b:94:2b:b1:f4:26:34:6c:ea:51:9e:3f:df:ab:cf: a9:8d:77:b6:82:52:09:7a:9d:92:ec:04:9d:24:b2: 69:f0:28:40:4f:09:32:71:fc:f4:cb:6d:1c:d2:3e: 12:99:af:a0:6f:49:36:04:30:a5:e3:72:5a:ac:73: 3a:3c:1e:25:6e:0a:96:d9:10:5c:a5:08:80:73:9b: 15:55:b5:49:cf:a7:eb:82:89:d0:7a:0e:44:fe:82: c4:0f:02:b6:17:7a:ee:e5:a6:a9:2d:c3:1f:5f:ce: 0d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:91:82:15:54:3D:35:59:13:20:E8:24:7D:C5:93:13:8E:F8:EF:4F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a5b4e58-0735-47a2-8be7-42843e091813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:2880::/48 Signature Algorithm: sha256WithRSAEncryption 92:08:51:9c:74:57:74:2e:5e:79:2e:b6:e1:a7:46:5d:b1:89: b5:f7:9b:82:c4:d6:38:12:19:c1:60:34:c5:92:a9:f1:74:ae: 27:0a:3e:5c:2e:ee:44:1b:0d:cd:93:24:28:91:08:79:78:d2: 66:15:a1:2e:af:c4:3d:56:3f:6b:14:dd:d8:a9:b2:b5:f9:c6: c0:6b:40:0f:6f:e5:08:91:96:88:e0:7b:8f:59:89:36:f9:7e: d6:dc:1d:bb:1c:fc:18:84:3e:b8:13:38:c3:41:3a:9b:2d:d7: ee:da:e4:e6:95:0e:3c:5a:2b:c8:e7:5a:c3:20:89:71:b3:d1: 5b:3b:03:b9:77:1a:ab:85:fe:64:f2:ac:93:ef:61:51:0d:59: 1d:bb:a9:5e:8b:b8:e3:a4:53:90:da:38:10:e5:7c:07:54:69: a2:57:a6:96:39:1c:f7:8a:03:c6:4e:96:de:76:42:4d:6a:67: 77:a3:94:32:26:c6:4d:c6:0d:53:c3:b7:22:fa:9d:e9:05:03: 5b:93:9e:65:ac:a0:f2:5e:17:c8:17:b3:e3:32:0b:c2:8c:10: b0:bb:93:65:50:01:c2:7f:b1:2c:7b:fc:6e:79:5b:7e:d4:50: d9:06:f0:64:85:0e:fa:b7:1e:0d:f3:61:5d:c6:3b:59:db:d8: e7:56:74:22 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfbD71+To9UgTMcjHVUXyahm0jMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTAyNVoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAYWRiZTFhNTdkOTdjYzk0NjM2NzBi MjhkODYwNzUwYzkxNDYzMTk1MDdkNzQ3NWNhODA5NGI1OWU1ZTc4NDVjYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBzWnFIcfizEDxLRKPgu4JSEuxN/ fXWmt/UcPa7vNksFVv8u+UkslP2gcEYWMbfRUE6U9ilCZj45uIw3AkB/u1hQKa6C +RFsgoO6I8EB/lrOanepVfq3SNsl8I2cKdMdHF3DYRPVDKoOA13hJ48nYam7H6/B s6yZLWxsb+4c79fk6gzZq2As7PLC4N8JOeuBTiCawF5LlCux9CY0bOpRnj/fq8+p jXe2glIJep2S7ASdJLJp8ChATwkycfz0y20c0j4Sma+gb0k2BDCl43JarHM6PB4l bgqW2RBcpQiAc5sVVbVJz6frgonQeg5E/oLEDwK2F3ru5aapLcMfX84N2wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNqRghVUPTVZEyDoJH3FkxOO+O9PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlhNWI0ZTU4LTA3MzUtNDdhMi04YmU3LTQyODQzZTA5MTgxMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6SiAMA0GCSqGSIb3DQEBCwUAA4IBAQCSCFGcdFd0Ll55Lrbh p0ZdsYm195uCxNY4EhnBYDTFkqnxdK4nCj5cLu5EGw3NkyQokQh5eNJmFaEur8Q9 Vj9rFN3YqbK1+cbAa0APb+UIkZaI4HuPWYk2+X7W3B27HPwYhD64EzjDQTqbLdfu 2uTmlQ48WivI51rDIIlxs9FbOwO5dxqrhf5k8qyT72FRDVkdu6lei7jjpFOQ2jgQ 5XwHVGmiV6aWORz3igPGTpbedkJNamd3o5QyJsZNxg1Tw7ci+p3pBQNbk55lrKDy XhfIF7PjMgvCjBCwu5NlUAHCf7Ese/xueVt+1FDZBvBkhQ76tx4N82FdxjtZ29jn VnQi -----END CERTIFICATE-----Generated at Wed Aug 26 03:05:49 2026 by rpki-client