$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d18bad7-c208-4d5e-bb74-4babc2efa60b.roa File: 9d18bad7-c208-4d5e-bb74-4babc2efa60b.roa (raw, json) Hash identifier: jNEVMaNTjveN9KCyOc2ZCx0YuOg2CIeMJ8KDgHhFUuY= Subject key identifier: 64:28:50:04:68:8A:80:9A:DA:C3:F6:A2:0E:34:69:AD:BE:47:45:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 36AEA657D7D6B215DC401BBF938EAA8CBE648DF6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d18bad7-c208-4d5e-bb74-4babc2efa60b.roa Signing time: Fri 31 Jul 2026 00:01:21 +0000 ROA not before: Fri 31 Jul 2026 00:01:21 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ae:a6:57:d7:d6:b2:15:dc:40:1b:bf:93:8e:aa:8c:be:64:8d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:01:21 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=75261055616280454e94239641cf874022687ffcb78755fa57f690e131df3e79, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:23:47:94:d0:15:75:52:f2:56:1a:f2:34:83: c0:82:26:b0:dc:7f:6f:80:bd:91:60:49:cf:93:18: 97:e3:2a:11:81:f3:d5:87:59:56:b0:47:81:fb:38: ad:51:83:c4:3e:51:28:cc:63:c2:80:ca:b7:7a:f7: 66:fe:fb:01:6e:c1:d5:21:d8:f4:db:5e:bc:d2:1a: 79:d4:72:9d:65:11:a2:fd:a5:7b:f7:74:45:01:e3: 03:f5:53:d5:ef:a5:42:d2:ac:39:db:fc:a4:54:17: e1:57:e1:a8:92:5c:b4:4b:7a:6c:f9:15:7c:4a:54: 87:1a:b0:4d:bf:7c:8f:e0:98:10:2c:9a:d5:d7:7a: 51:61:d6:84:c6:70:81:0f:40:82:81:93:f8:c7:23: 24:15:b0:4c:05:4a:1c:28:4c:87:e5:52:75:16:f0: eb:90:24:ff:80:a1:16:ea:4f:a2:8a:22:d5:0c:d7: a9:95:b7:4b:89:49:89:16:92:4c:9c:22:a0:de:da: fe:85:07:bd:72:4a:30:1c:74:07:f3:b0:1a:0a:b0: 2a:5e:1d:f6:9a:fc:30:d1:a8:91:a5:c8:88:d2:80: c6:12:4a:e2:e4:8c:33:b5:8c:93:0d:da:ca:a2:3c: 24:9e:43:3c:23:1b:34:76:a0:52:a9:53:09:40:09: d2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:28:50:04:68:8A:80:9A:DA:C3:F6:A2:0E:34:69:AD:BE:47:45:E7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d18bad7-c208-4d5e-bb74-4babc2efa60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:a000::/40 Signature Algorithm: sha256WithRSAEncryption 27:f6:0d:9a:77:d9:d6:5a:94:b2:ae:9c:11:48:f3:7a:28:ce: 8f:ca:62:a3:dc:9a:af:82:e8:93:89:a8:50:70:bb:51:4e:1d: 96:d0:b5:da:55:c7:f8:77:93:3d:a1:c6:c7:9c:d6:28:42:40: 8f:8d:a0:46:33:02:e3:3e:69:f0:c9:2e:95:67:01:83:f5:dd: a2:66:9d:05:cc:31:6d:c2:10:00:40:ae:d2:c8:1e:b9:c7:86: d5:b7:cb:03:3f:d6:0b:9d:bc:57:d8:f0:75:b2:5d:d1:d4:22: ce:dd:c8:ae:58:00:cb:cf:1e:a4:bb:df:c4:e3:55:49:92:b6: 0e:da:cd:98:93:30:e9:4b:99:3d:37:7b:17:55:84:63:b3:fc: b6:1c:6d:5a:72:1d:5e:c2:c5:b2:81:67:02:1f:0b:4e:dc:95: 08:e7:af:d7:aa:c1:60:f6:2c:77:b2:5a:68:aa:dc:16:36:86: 58:43:cb:08:d4:f4:3b:d9:18:de:39:e7:c7:54:51:2c:8f:ad: 07:fa:ca:99:07:9c:29:c9:3a:86:a4:d7:9c:60:67:5c:12:83: 5a:aa:09:bd:9a:dd:04:d4:c4:ad:55:98:6c:f1:0f:a9:44:ef: 93:d1:25:32:04:0c:ba:0e:7e:c0:33:8d:1d:55:9e:8b:64:9a: 61:61:56:2b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNq6mV9fWshXcQBu/k46qjL5kjfYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMDEyMVoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNANzUyNjEwNTU2MTYyODA0NTRlOTQy Mzk2NDFjZjg3NDAyMjY4N2ZmY2I3ODc1NWZhNTdmNjkwZTEzMWRmM2U3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CNHlNAVdVLyVhryNIPAgiaw3H9v gL2RYEnPkxiX4yoRgfPVh1lWsEeB+zitUYPEPlEozGPCgMq3evdm/vsBbsHVIdj0 21680hp51HKdZRGi/aV793RFAeMD9VPV76VC0qw52/ykVBfhV+Gokly0S3ps+RV8 SlSHGrBNv3yP4JgQLJrV13pRYdaExnCBD0CCgZP4xyMkFbBMBUocKEyH5VJ1FvDr kCT/gKEW6k+iiiLVDNeplbdLiUmJFpJMnCKg3tr+hQe9ckowHHQH87AaCrAqXh32 mvww0aiRpciI0oDGEkri5IwztYyTDdrKojwknkM8Ixs0dqBSqVMJQAnSNQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGQoUARoioCa2sP2og40aa2+R0XnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkMThiYWQ3LWMyMDgtNGQ1ZS1iYjc0LTRiYWJjMmVmYTYwYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+6AwDQYJKoZIhvcNAQELBQADggEBACf2DZp32dZalLKunBFI 83oozo/KYqPcmq+C6JOJqFBwu1FOHZbQtdpVx/h3kz2hxsec1ihCQI+NoEYzAuM+ afDJLpVnAYP13aJmnQXMMW3CEABArtLIHrnHhtW3ywM/1gudvFfY8HWyXdHUIs7d yK5YAMvPHqS738TjVUmStg7azZiTMOlLmT03exdVhGOz/LYcbVpyHV7CxbKBZwIf C07clQjnr9eqwWD2LHeyWmiq3BY2hlhDywjU9DvZGN4558dUUSyPrQf6ypkHnCnJ Ooak15xgZ1wSg1qqCb2a3QTUxK1VmGzxD6lE75PRJTIEDLoOfsAzjR1VnotkmmFh Vis= -----END CERTIFICATE-----Generated at Wed Aug 26 17:34:26 2026 by rpki-client