$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a71f2535-4413-48f8-a671-86e26e5062e1.roa File: a71f2535-4413-48f8-a671-86e26e5062e1.roa (raw, json) Hash identifier: Vtt3HSzZn/2PS//xc680jW9awB3fc0qNtZAPtz1j1A0= Subject key identifier: 3F:39:8A:B6:A2:85:DC:E6:D1:F2:7C:25:2E:51:08:E4:E6:82:FB:31 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 15AF064B791DC3E7F7341A2BE3C8238F2B01CA78 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a71f2535-4413-48f8-a671-86e26e5062e1.roa Signing time: Sat 01 Aug 2026 00:00:09 +0000 ROA not before: Sat 01 Aug 2026 00:00:09 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:af:06:4b:79:1d:c3:e7:f7:34:1a:2b:e3:c8:23:8f:2b:01:ca:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:00:09 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=3447fa5140c33be514a5659703970b06aee8b342502055f2090bd1803105448d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:b5:6e:1f:a9:a2:76:57:70:e2:7c:ff:07: 84:03:4f:1d:89:32:42:8b:9f:8f:81:ee:08:08:bd: 11:58:41:a8:83:e7:2c:2a:a6:49:0b:74:4d:db:d9: 99:d8:50:38:08:4c:2e:2d:30:2b:7c:a5:6f:21:ce: 87:41:ca:2e:d5:4b:4a:11:6b:71:28:0e:71:25:a3: 05:82:9b:0f:97:54:65:ad:99:bf:17:b9:c4:f7:aa: 57:94:3d:c2:6f:33:b3:06:e1:db:b1:2d:32:a9:f4: 0b:e0:43:22:ca:2c:57:2c:de:86:fe:c9:3b:e6:47: 18:52:76:f3:e3:e4:92:9b:73:33:24:33:0f:41:ff: 8a:12:78:82:30:96:e8:90:dd:81:c9:c0:16:1f:e9: 33:05:fb:e2:9a:17:5a:d7:d5:d1:7d:52:2e:8d:c8: 5b:fa:b7:a6:e1:d8:db:e3:1c:15:36:49:a8:b0:3b: 9f:47:be:45:2a:16:f7:a1:95:8b:13:24:c2:06:ce: c7:96:67:05:17:24:c7:05:d1:87:cc:29:23:36:2b: b8:a1:de:28:6e:e2:00:db:44:ae:11:04:2f:87:de: 1d:7e:05:ac:cb:c4:b6:56:5d:27:40:7b:22:4f:13: 78:3e:71:70:38:ae:93:b4:2c:c9:58:55:93:01:46: f8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:39:8A:B6:A2:85:DC:E6:D1:F2:7C:25:2E:51:08:E4:E6:82:FB:31 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a71f2535-4413-48f8-a671-86e26e5062e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:8400::/38 Signature Algorithm: sha256WithRSAEncryption 6e:87:aa:6d:d7:43:70:3f:e6:fc:94:0e:6b:08:1a:8d:16:6c: 45:41:74:e1:1a:91:69:57:4b:4c:ab:e9:45:b0:9a:6a:74:08: 59:ce:29:e6:04:7e:30:45:a4:02:68:22:24:c5:85:ba:ec:bf: 3b:17:1f:35:30:98:c5:64:e4:be:4d:51:59:00:52:74:df:65: 35:81:95:cc:d8:67:5c:6e:a6:66:c7:4a:1a:f9:e4:20:51:cb: 16:af:96:75:48:74:7b:0f:d0:ba:01:7e:cd:b6:d3:14:7a:80: da:0e:90:3b:72:7a:6c:0c:01:87:0d:af:66:b7:9c:27:cd:7c: 8f:40:8d:f0:be:45:c7:b7:31:68:30:4e:3f:2b:14:bb:3f:66: 77:c4:b8:be:64:c3:8b:00:b3:89:5d:8f:61:6c:73:ee:4e:8d: 5b:e6:e0:cb:f5:3c:a7:7d:b9:62:13:1e:da:ac:f4:36:0e:79: 30:93:f2:76:d8:d8:60:67:ae:04:1a:9d:5d:ba:8a:8d:24:d1: d8:13:27:cb:c3:c1:36:0f:ee:d3:f6:c4:85:d3:83:40:5e:86: 34:65:b0:0d:2a:f0:7e:03:e5:39:b1:ef:9b:98:b3:08:4d:d3: 57:49:07:17:7b:76:85:5e:f6:eb:9f:5c:30:ce:9d:7d:1a:81: a2:74:07:d9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFa8GS3kdw+f3NBor48gjjysByngwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMDAwOVoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAMzQ0N2ZhNTE0MGMzM2JlNTE0YTU2 NTk3MDM5NzBiMDZhZWU4YjM0MjUwMjA1NWYyMDkwYmQxODAzMTA1NDQ4ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlge1bh+ponZXcOJ8/weEA08diTJC i5+Pge4ICL0RWEGog+csKqZJC3RN29mZ2FA4CEwuLTArfKVvIc6HQcou1UtKEWtx KA5xJaMFgpsPl1RlrZm/F7nE96pXlD3CbzOzBuHbsS0yqfQL4EMiyixXLN6G/sk7 5kcYUnbz4+SSm3MzJDMPQf+KEniCMJbokN2BycAWH+kzBfvimhda19XRfVIujchb +rem4djb4xwVNkmosDufR75FKhb3oZWLEyTCBs7HlmcFFyTHBdGHzCkjNiu4od4o buIA20SuEQQvh94dfgWsy8S2Vl0nQHsiTxN4PnFwOK6TtCzJWFWTAUb4VwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFD85iraihdzm0fJ8JS5RCOTmgvsxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3MWYyNTM1LTQ0MTMtNDhmOC1hNjcxLTg2ZTI2ZTUwNjJlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFIQwDQYJKoZIhvcNAQELBQADggEBAG6Hqm3XQ3A/5vyUDmsI Go0WbEVBdOEakWlXS0yr6UWwmmp0CFnOKeYEfjBFpAJoIiTFhbrsvzsXHzUwmMVk 5L5NUVkAUnTfZTWBlczYZ1xupmbHShr55CBRyxavlnVIdHsP0LoBfs220xR6gNoO kDtyemwMAYcNr2a3nCfNfI9AjfC+Rce3MWgwTj8rFLs/ZnfEuL5kw4sAs4ldj2Fs c+5OjVvm4Mv1PKd9uWITHtqs9DYOeTCT8nbY2GBnrgQanV26io0k0dgTJ8vDwTYP 7tP2xIXTg0BehjRlsA0q8H4D5Tmx75uYswhN01dJBxd7doVe9uufXDDOnX0agaJ0 B9k= -----END CERTIFICATE-----Generated at Wed Aug 26 00:38:52 2026 by rpki-client