$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d4119e3-c0cc-4acb-9dbf-e8db1c2f9395.roa File: 9d4119e3-c0cc-4acb-9dbf-e8db1c2f9395.roa (raw, json) Hash identifier: BW8FPwvsutFjb1w9h7uOvY/2NRG6N/dYIESGzvqYasI= Subject key identifier: F0:B3:46:0A:3D:4E:24:6B:74:59:88:89:93:05:EE:81:B6:E2:F2:EC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2B3C5657CFF43D6AE00E5B352A051A080F6FBFB0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d4119e3-c0cc-4acb-9dbf-e8db1c2f9395.roa Signing time: Sat 01 Aug 2026 00:20:40 +0000 ROA not before: Sat 01 Aug 2026 00:20:40 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3c:56:57:cf:f4:3d:6a:e0:0e:5b:35:2a:05:1a:08:0f:6f:bf:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:20:40 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=5410b06d0779877dc9e1d79f0562508bce8d548301403fb75f9326d03f59a68d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:22:e8:28:7c:f8:ee:71:ad:47:1c:47:ca:8b: f1:d8:c9:8e:65:6b:81:34:65:52:86:fc:3b:32:02: 94:b6:79:04:f8:23:ba:2e:31:16:e7:9c:db:fa:25: 12:0a:b2:43:87:7a:63:af:7a:b5:f8:bb:75:30:85: c5:86:bc:6a:35:e4:ed:e3:91:2a:37:a2:36:71:83: bb:9a:7a:89:26:72:49:63:0d:98:f6:74:10:61:33: 2e:2b:5e:82:c3:6f:ce:ab:45:4b:f4:3d:aa:56:6f: 62:32:e6:72:b2:68:61:a4:3b:30:36:fe:3f:83:f3: ca:b2:f3:f5:cf:e2:22:c6:21:96:fa:e8:a5:82:56: 76:5f:03:46:1e:c7:4f:d4:80:d0:52:e1:ea:73:b6: 45:3e:d6:59:ce:cc:2d:3c:28:6f:fe:df:d9:8f:b8: c8:ff:76:ca:aa:02:47:df:6a:29:5c:15:f7:56:83: f6:1c:d3:96:66:18:b5:40:84:cb:da:bc:b1:19:f9: f0:a9:57:76:af:09:f1:ab:77:e8:d8:d6:f7:1b:3d: 2b:4b:1c:49:92:b6:41:06:89:e5:3a:5c:e3:40:11: cd:df:1f:20:d0:46:bc:34:83:31:58:25:15:93:76: 24:8a:40:68:5a:98:4d:7f:ff:9c:f5:87:6a:7a:cf: d0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B3:46:0A:3D:4E:24:6B:74:59:88:89:93:05:EE:81:B6:E2:F2:EC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d4119e3-c0cc-4acb-9dbf-e8db1c2f9395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:f000::/40 Signature Algorithm: sha256WithRSAEncryption 53:8a:b4:7a:4d:03:46:2a:6a:df:73:04:d5:48:5b:56:4b:ee: 54:c6:b6:8e:df:b3:3e:17:8f:1d:18:a7:fe:a5:63:41:f4:23: 0e:8f:71:1b:57:3c:72:43:bc:eb:d0:b2:71:db:6b:a6:c0:6d: d6:dc:c0:6e:7b:70:db:40:92:7c:6e:4e:43:ad:d3:27:4b:24: a1:2a:4e:51:c2:cb:2a:e7:ff:71:7f:0f:6e:5c:55:b0:9c:7b: 0e:64:ea:49:a2:b2:08:a7:53:e4:ea:a0:b0:6f:03:27:c8:d5: 8e:ad:68:54:b2:37:32:49:65:f6:04:42:e6:17:eb:1a:0e:b3: c3:f6:79:be:be:9f:fc:d5:f0:5b:53:cc:d4:70:f8:ef:2a:46: 74:5d:65:9f:e6:56:3a:e2:fc:51:3d:47:d8:a3:19:5d:0a:2e: b2:a1:8b:b0:49:1d:6e:4a:ff:56:c0:7b:4a:c3:95:a8:08:0c: 56:e8:66:36:41:ae:bf:5b:45:83:18:c5:ec:3b:79:11:87:2d: 75:39:b8:2b:3d:8d:a9:e0:bd:98:13:8e:44:36:66:0c:7f:1e: 84:88:77:0c:bf:da:56:cc:28:7e:8a:0d:c4:27:87:fa:fa:3c: a0:a0:5d:4d:aa:5a:f4:96:fa:fe:94:f8:7b:5b:ff:1c:42:89: 2f:07:08:ef -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKzxWV8/0PWrgDls1KgUaCA9vv7AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMjA0MFoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNANTQxMGIwNmQwNzc5ODc3ZGM5ZTFk NzlmMDU2MjUwOGJjZThkNTQ4MzAxNDAzZmI3NWY5MzI2ZDAzZjU5YTY4ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniLoKHz47nGtRxxHyovx2MmOZWuB NGVShvw7MgKUtnkE+CO6LjEW55zb+iUSCrJDh3pjr3q1+Lt1MIXFhrxqNeTt45Eq N6I2cYO7mnqJJnJJYw2Y9nQQYTMuK16Cw2/Oq0VL9D2qVm9iMuZysmhhpDswNv4/ g/PKsvP1z+IixiGW+uilglZ2XwNGHsdP1IDQUuHqc7ZFPtZZzswtPChv/t/Zj7jI /3bKqgJH32opXBX3VoP2HNOWZhi1QITL2ryxGfnwqVd2rwnxq3fo2Nb3Gz0rSxxJ krZBBonlOlzjQBHN3x8g0Ea8NIMxWCUVk3YkikBoWphNf/+c9Ydqes/QUwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPCzRgo9TiRrdFmIiZMF7oG24vLsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkNDExOWUzLWMwY2MtNGFjYi05ZGJmLWU4ZGIxYzJmOTM5NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacPAwDQYJKoZIhvcNAQELBQADggEBAFOKtHpNA0Yqat9zBNVI W1ZL7lTGto7fsz4Xjx0Yp/6lY0H0Iw6PcRtXPHJDvOvQsnHba6bAbdbcwG57cNtA knxuTkOt0ydLJKEqTlHCyyrn/3F/D25cVbCcew5k6kmisginU+TqoLBvAyfI1Y6t aFSyNzJJZfYEQuYX6xoOs8P2eb6+n/zV8FtTzNRw+O8qRnRdZZ/mVjri/FE9R9ij GV0KLrKhi7BJHW5K/1bAe0rDlagIDFboZjZBrr9bRYMYxew7eRGHLXU5uCs9jang vZgTjkQ2Zgx/HoSIdwy/2lbMKH6KDcQnh/r6PKCgXU2qWvSW+v6U+Htb/xxCiS8H CO8= -----END CERTIFICATE-----Generated at Wed Aug 26 19:18:49 2026 by rpki-client