$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d37ea8b-5c6a-4937-9375-496d799c8f30.roa File: 9d37ea8b-5c6a-4937-9375-496d799c8f30.roa (raw, json) Hash identifier: nkOv6bii476pwgW+93sTml5w9aqOdefIVEvnmekYQUs= Subject key identifier: 45:DF:B2:2A:D9:D8:3B:BD:0A:D3:6B:FE:2A:84:E4:DF:23:2F:62:59 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1456C395C0B2F23F05617D3B2F77CA7D6BD3B991 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d37ea8b-5c6a-4937-9375-496d799c8f30.roa Signing time: Wed 19 Aug 2026 00:01:00 +0000 ROA not before: Wed 19 Aug 2026 00:01:00 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:56:c3:95:c0:b2:f2:3f:05:61:7d:3b:2f:77:ca:7d:6b:d3:b9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:01:00 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=f8b67c6f5eaed53286583b4026413f65fdb0fa452400034200f5a371bae7415b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:14:db:88:3d:52:2e:ca:59:37:a1:76:2f:e9: e4:ea:2a:27:0f:36:4a:fe:dc:19:59:dd:c8:21:e0: 2f:3a:37:1f:cc:b7:49:80:f3:e7:52:56:f9:6d:4c: 36:07:98:b7:ba:fb:39:38:8d:86:a8:93:5f:20:d5: 63:ce:03:3f:2d:e8:07:66:c4:ba:ba:38:f3:fe:c3: 24:8a:54:39:9a:95:62:4a:f3:0e:e9:6b:9e:d0:f1: 54:09:60:51:16:5f:22:3a:50:8d:6d:aa:af:b7:ed: 84:e9:37:dd:39:40:9d:40:e2:ea:14:77:52:4e:fb: 18:b6:5b:1d:39:dd:65:02:9d:18:be:98:fe:25:51: 6a:0a:1f:04:7b:e9:4d:34:6e:12:da:a6:dc:76:9c: 33:46:80:7c:42:d5:11:46:4c:23:1d:86:0e:29:c9: 72:35:59:22:e1:1e:12:b1:ad:5a:91:7f:84:f6:1e: 47:37:e7:04:52:3d:33:c5:99:a5:18:1d:cf:68:b6: 1c:32:24:34:a6:cb:84:11:ae:43:61:87:5c:ff:48: 32:f5:6a:91:a7:d5:85:57:1f:01:3f:18:93:57:01: 50:8f:31:cd:91:9c:b2:9a:c2:e4:7a:80:89:96:e3: fc:f7:d8:90:4a:b0:e3:b3:39:d5:a1:0c:93:a4:30: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DF:B2:2A:D9:D8:3B:BD:0A:D3:6B:FE:2A:84:E4:DF:23:2F:62:59 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d37ea8b-5c6a-4937-9375-496d799c8f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:7080::/48 Signature Algorithm: sha256WithRSAEncryption 15:ee:0b:ac:7e:5d:48:2c:05:ff:97:de:69:5a:df:43:12:2d: c3:1c:d2:37:8e:a3:59:02:f6:69:63:3e:3e:de:a1:e9:38:3c: 20:a2:25:5d:44:01:e5:14:ac:f6:e1:32:27:dd:f2:2c:23:0b: fa:46:57:7b:02:af:ee:a5:cc:00:3c:89:96:16:16:3c:02:93: 8e:7f:cd:c8:76:d3:4f:4f:d3:ea:e8:4b:7d:d5:e2:ce:7a:07: ae:e2:19:09:c1:7b:eb:b1:98:71:09:78:12:6b:07:25:a7:3a: 0d:88:31:90:39:b4:90:3a:e5:0b:80:25:a0:46:36:88:4a:71: b9:86:a2:a5:7d:3a:03:7d:e2:81:83:4d:dc:35:19:a8:a6:16: 66:a2:93:ae:10:24:65:21:17:b5:90:c2:ce:18:6f:f8:74:a0: 52:ad:f7:68:5e:11:60:e1:87:41:b1:47:6e:1f:69:f5:f0:9a: ab:62:58:da:a2:c9:36:57:8a:fc:4a:67:7d:04:df:0a:ba:d0: f2:42:65:1f:a2:c4:54:f6:e5:d8:f0:d5:4b:27:28:ef:52:b6: 30:82:48:26:8d:30:2d:f4:80:b8:62:4f:02:6f:74:f6:51:d4: b0:4d:3b:dc:46:bd:ff:c8:c3:42:22:ba:16:3e:d2:58:b1:68: 2f:e9:e3:c7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFFbDlcCy8j8FYX07L3fKfWvTuZEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDEwMFoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAZjhiNjdjNmY1ZWFlZDUzMjg2NTgz YjQwMjY0MTNmNjVmZGIwZmE0NTI0MDAwMzQyMDBmNWEzNzFiYWU3NDE1YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xTbiD1SLspZN6F2L+nk6ionDzZK /twZWd3IIeAvOjcfzLdJgPPnUlb5bUw2B5i3uvs5OI2GqJNfINVjzgM/LegHZsS6 ujjz/sMkilQ5mpViSvMO6Wue0PFUCWBRFl8iOlCNbaqvt+2E6TfdOUCdQOLqFHdS TvsYtlsdOd1lAp0Yvpj+JVFqCh8Ee+lNNG4S2qbcdpwzRoB8QtURRkwjHYYOKcly NVki4R4Ssa1akX+E9h5HN+cEUj0zxZmlGB3PaLYcMiQ0psuEEa5DYYdc/0gy9WqR p9WFVx8BPxiTVwFQjzHNkZyymsLkeoCJluP899iQSrDjsznVoQyTpDBHsQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEXfsirZ2Du9CtNr/iqE5N8jL2JZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkMzdlYThiLTVjNmEtNDkzNy05Mzc1LTQ5NmQ3OTljOGYzMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6XCAMA0GCSqGSIb3DQEBCwUAA4IBAQAV7gusfl1ILAX/l95p Wt9DEi3DHNI3jqNZAvZpYz4+3qHpODwgoiVdRAHlFKz24TIn3fIsIwv6Rld7Aq/u pcwAPImWFhY8ApOOf83IdtNPT9Pq6Et91eLOegeu4hkJwXvrsZhxCXgSawclpzoN iDGQObSQOuULgCWgRjaISnG5hqKlfToDfeKBg03cNRmophZmopOuECRlIRe1kMLO GG/4dKBSrfdoXhFg4YdBsUduH2n18JqrYljaosk2V4r8Smd9BN8KutDyQmUfosRU 9uXY8NVLJyjvUrYwgkgmjTAt9IC4Yk8Cb3T2UdSwTTvcRr3/yMNCIroWPtJYsWgv 6ePH -----END CERTIFICATE-----Generated at Wed Aug 26 13:04:24 2026 by rpki-client