$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a67d3b98-9b87-4ca4-826f-6ed020efa88e.roa File: a67d3b98-9b87-4ca4-826f-6ed020efa88e.roa (raw, json) Hash identifier: pe7eeCg+Kq/30I7bk882SwEg4G01jGWVRrMsQW4lk+4= Subject key identifier: 76:59:0F:37:5B:58:F5:72:00:3C:E9:F2:36:74:94:96:6A:F8:4B:43 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3E481BC760D0BA6011A92A58876BA389BE3EE63D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a67d3b98-9b87-4ca4-826f-6ed020efa88e.roa Signing time: Tue 18 Aug 2026 18:03:44 +0000 ROA not before: Tue 18 Aug 2026 18:03:44 +0000 ROA not after: Mon 16 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da33:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:48:1b:c7:60:d0:ba:60:11:a9:2a:58:87:6b:a3:89:be:3e:e6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 18:03:44 2026 GMT Not After : Nov 16 23:59:59 2026 GMT Subject: serialNumber=358ff8b64bd0229430218d9765ef0644c4ffacdedac7c4519cfd876de4dec157, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:08:68:b3:f6:ca:25:59:b7:91:e4:b7:ff: 5f:2a:5f:79:fe:7f:a9:27:03:7f:22:ea:20:0e:78: 3a:6e:b4:c7:b9:9d:8b:fd:f1:ce:65:dd:f2:4d:55: b3:67:d6:88:e2:2c:73:68:4b:78:59:58:d0:91:7d: 44:3f:c1:ed:44:cb:99:c0:2c:20:6f:a5:23:5e:65: ed:43:38:7a:88:76:ab:c0:ab:3c:9c:58:2e:3c:55: 97:26:58:fa:16:02:4b:8e:52:29:57:3d:43:be:b8: 8b:dc:a2:31:0a:83:42:fb:be:96:82:8b:cd:b4:fc: be:dc:d7:d2:dd:6c:19:96:52:c9:ea:39:43:6a:08: 09:79:ae:d4:cf:da:38:5d:d2:c5:6e:8e:92:b3:0a: 7c:f9:bb:37:a1:d6:04:50:51:18:52:a6:59:3f:e9: af:61:67:f1:c0:bd:e9:af:a1:70:d0:0f:05:ff:4a: b8:44:87:19:24:67:b4:94:d7:87:7f:b8:22:5d:1a: 7f:f8:f4:15:a9:a5:e9:bc:dd:3a:c8:43:08:52:c7: 79:df:54:db:a4:99:48:c1:1c:fd:5f:5c:6e:8f:7b: b6:71:b6:94:97:67:2a:1d:98:62:5d:a0:41:3d:65: 48:2f:b5:7b:0f:e7:ba:24:3c:d6:d1:a4:35:2c:31: 4f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:59:0F:37:5B:58:F5:72:00:3C:E9:F2:36:74:94:96:6A:F8:4B:43 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a67d3b98-9b87-4ca4-826f-6ed020efa88e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:8800::/40 Signature Algorithm: sha256WithRSAEncryption 2b:27:96:a1:a1:76:84:00:07:3e:c1:71:68:7c:79:5c:d7:6d: 5c:a7:59:5d:1a:c9:f6:e0:ed:cd:24:75:92:6b:b2:27:a8:9c: 3f:6d:93:35:26:5a:7e:e0:48:fa:85:5e:87:fe:35:9f:32:02: b3:a3:9f:ed:42:a4:1a:df:c9:33:d9:26:51:b8:6e:05:8b:f0: 70:d5:1f:e6:c5:28:90:a4:46:df:d4:88:74:f3:a7:99:8f:72: 0c:cf:60:45:f8:af:be:15:32:41:46:3f:e6:1e:26:06:d6:36: ad:f6:38:50:e2:d5:3b:10:5f:c5:72:ed:2c:2a:3c:75:61:0e: 2d:5f:5c:e2:80:d7:73:8f:fa:ee:a6:75:1b:e9:97:54:3a:f1: 9c:c6:2e:cd:17:e7:c9:b5:57:ff:56:2d:a9:6a:d7:8e:f5:b3: 78:da:89:69:d5:f3:79:80:be:4e:eb:07:eb:5e:c2:f2:65:1d: 77:4f:95:fb:56:3e:27:13:66:54:6b:ff:8c:b9:b4:9e:88:5c: 2c:6c:6c:6a:45:54:6b:b9:19:f0:71:6f:03:76:01:66:95:90: ee:a0:37:cf:29:af:f3:05:b4:24:22:1e:07:e6:92:77:a1:f4: f6:1e:10:90:ba:ac:bb:d3:ee:ba:80:c0:e5:7e:de:3b:2d:c2: 7e:60:58:62 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPkgbx2DQumARqSpYh2ujib4+5j0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxODE4MDM0NFoX DTI2MTExNjIzNTk1OVowejFJMEcGA1UEBRNAMzU4ZmY4YjY0YmQwMjI5NDMwMjE4 ZDk3NjVlZjA2NDRjNGZmYWNkZWRhYzdjNDUxOWNmZDg3NmRlNGRlYzE1NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT4IaLP2yiVZt5Hkt/9fKl95/n+p JwN/IuogDng6brTHuZ2L/fHOZd3yTVWzZ9aI4ixzaEt4WVjQkX1EP8HtRMuZwCwg b6UjXmXtQzh6iHarwKs8nFguPFWXJlj6FgJLjlIpVz1DvriL3KIxCoNC+76WgovN tPy+3NfS3WwZllLJ6jlDaggJea7Uz9o4XdLFbo6Sswp8+bs3odYEUFEYUqZZP+mv YWfxwL3pr6Fw0A8F/0q4RIcZJGe0lNeHf7giXRp/+PQVqaXpvN06yEMIUsd531Tb pJlIwRz9X1xuj3u2cbaUl2cqHZhiXaBBPWVIL7V7D+e6JDzW0aQ1LDFPbQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHZZDzdbWPVyADzp8jZ0lJZq+EtDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E2N2QzYjk4LTliODctNGNhNC04MjZmLTZlZDAyMGVmYTg4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaM4gwDQYJKoZIhvcNAQELBQADggEBACsnlqGhdoQABz7BcWh8 eVzXbVynWV0ayfbg7c0kdZJrsieonD9tkzUmWn7gSPqFXof+NZ8yArOjn+1CpBrf yTPZJlG4bgWL8HDVH+bFKJCkRt/UiHTzp5mPcgzPYEX4r74VMkFGP+YeJgbWNq32 OFDi1TsQX8Vy7SwqPHVhDi1fXOKA13OP+u6mdRvpl1Q68ZzGLs0X58m1V/9WLalq 1471s3jaiWnV83mAvk7rB+tewvJlHXdPlftWPicTZlRr/4y5tJ6IXCxsbGpFVGu5 GfBxbwN2AWaVkO6gN88pr/MFtCQiHgfmkneh9PYeEJC6rLvT7rqAwOV+3jstwn5g WGI= -----END CERTIFICATE-----Generated at Wed Aug 26 22:24:38 2026 by rpki-client