$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac8aea04-9afb-482f-82f7-e5e61b79d804.roa File: ac8aea04-9afb-482f-82f7-e5e61b79d804.roa (raw, json) Hash identifier: o36LXgfZHmdZ/mBj15nfCGPAjWMup9+/MrjGJgpy3NE= Subject key identifier: 72:05:D9:30:C7:A6:14:FB:B1:BB:41:D0:C4:F1:3B:48:D3:3A:84:9D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4B19E4A4483CDC5A74364E3F7230EAE8C36B7CFE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac8aea04-9afb-482f-82f7-e5e61b79d804.roa Signing time: Fri 31 Jul 2026 00:01:07 +0000 ROA not before: Fri 31 Jul 2026 00:01:07 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:a800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:19:e4:a4:48:3c:dc:5a:74:36:4e:3f:72:30:ea:e8:c3:6b:7c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:01:07 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=a7cc948e7a2f291c9594a242115e41c63f8477c49375476936353085d1ee3287, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2a:26:d0:2d:96:b0:0b:b7:6e:52:4e:d1:0a: 95:bb:d7:18:99:a4:03:5d:99:a7:15:f8:2f:35:c3: 17:29:51:61:f4:da:6e:8f:95:75:c5:5c:ba:a8:02: ee:a3:bd:78:e9:f7:9c:91:15:c3:2f:57:36:a9:91: e2:1e:9f:3a:b0:ec:0d:0c:d3:3d:25:be:25:08:2b: e1:fb:44:84:c5:7b:76:45:6e:35:58:c5:1b:aa:40: d7:b0:23:e5:36:47:9c:22:2e:ef:bd:03:23:5b:58: e7:bf:d3:be:67:0b:51:b9:67:a2:69:4e:68:74:32: 51:69:db:1f:1c:87:6b:58:71:66:30:14:62:fd:57: 2d:39:82:02:a6:6b:cb:70:a1:60:e6:6a:74:b6:ab: cd:aa:d7:b9:4e:7e:58:f5:b9:49:e8:67:2b:71:76: 37:9a:eb:08:8e:54:07:3e:36:60:d7:83:b0:37:eb: e0:db:91:50:38:df:b1:6a:93:ca:93:8b:58:91:0b: df:2e:86:74:4f:30:ed:e9:b3:20:17:98:f2:34:b6: 75:3e:ef:08:2a:62:00:aa:59:44:0d:d1:05:ce:2a: f6:0d:1d:64:30:bc:07:af:9a:00:5b:2d:4d:8a:8d: cc:70:6e:a5:c1:ab:c9:19:1c:20:e7:e1:34:d8:c7: 04:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:05:D9:30:C7:A6:14:FB:B1:BB:41:D0:C4:F1:3B:48:D3:3A:84:9D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac8aea04-9afb-482f-82f7-e5e61b79d804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:a800::/40 Signature Algorithm: sha256WithRSAEncryption 57:71:4e:56:9f:c8:dc:a2:ce:30:ca:59:59:c4:b5:cd:6c:d5: 84:44:bb:8a:a6:4e:5e:92:1a:7f:86:28:9f:50:e2:1f:0b:55: 2a:9b:e1:de:b2:c6:f7:5c:ba:a9:dc:0c:1c:13:65:cf:15:a6: fb:cb:9e:bd:62:96:77:20:04:83:a9:66:35:0b:ed:d8:4b:db: b9:bf:23:33:4b:f9:56:ac:0e:22:31:f3:84:14:ea:3d:d6:95: 2e:44:a0:89:66:46:6c:7c:7b:bd:f4:0f:ae:77:ab:ff:a5:f1: 1f:c7:47:6c:1c:97:3e:7c:2d:ba:11:8c:26:60:4a:84:d2:b3: 15:d0:d9:83:c6:11:5b:78:44:b0:ae:ce:c4:25:75:c0:02:77: d3:74:97:05:5f:39:26:a5:31:f1:d9:9e:38:87:9c:92:f6:8f: ac:f2:28:9b:d5:6c:9d:91:cc:fa:07:57:13:6a:14:30:78:27: 6a:19:1d:b7:dd:70:74:5d:a8:71:45:d9:aa:62:b4:c4:8d:66: a1:a7:d9:8e:18:ea:24:f0:80:d3:ba:d3:2e:4d:09:65:f8:df: 7a:8c:b5:d5:79:9a:44:a9:7e:22:66:69:fc:a2:78:07:b5:67: 33:2e:6b:00:f1:0d:6f:db:7b:ec:ac:b9:16:94:21:07:21:35: 36:34:a9:ad -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSxnkpEg83Fp0Nk4/cjDq6MNrfP4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMDEwN1oX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAYTdjYzk0OGU3YTJmMjkxYzk1OTRh MjQyMTE1ZTQxYzYzZjg0NzdjNDkzNzU0NzY5MzYzNTMwODVkMWVlMzI4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iom0C2WsAu3blJO0QqVu9cYmaQD XZmnFfgvNcMXKVFh9Npuj5V1xVy6qALuo7146feckRXDL1c2qZHiHp86sOwNDNM9 Jb4lCCvh+0SExXt2RW41WMUbqkDXsCPlNkecIi7vvQMjW1jnv9O+ZwtRuWeiaU5o dDJRadsfHIdrWHFmMBRi/VctOYICpmvLcKFg5mp0tqvNqte5Tn5Y9blJ6GcrcXY3 musIjlQHPjZg14OwN+vg25FQON+xapPKk4tYkQvfLoZ0TzDt6bMgF5jyNLZ1Pu8I KmIAqllEDdEFzir2DR1kMLwHr5oAWy1Nio3McG6lwavJGRwg5+E02McENQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHIF2TDHphT7sbtB0MTxO0jTOoSdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FjOGFlYTA0LTlhZmItNDgyZi04MmY3LWU1ZTYxYjc5ZDgwNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoKgwDQYJKoZIhvcNAQELBQADggEBAFdxTlafyNyizjDKWVnE tc1s1YREu4qmTl6SGn+GKJ9Q4h8LVSqb4d6yxvdcuqncDBwTZc8VpvvLnr1ilncg BIOpZjUL7dhL27m/IzNL+VasDiIx84QU6j3WlS5EoIlmRmx8e730D653q/+l8R/H R2wclz58LboRjCZgSoTSsxXQ2YPGEVt4RLCuzsQldcACd9N0lwVfOSalMfHZnjiH nJL2j6zyKJvVbJ2RzPoHVxNqFDB4J2oZHbfdcHRdqHFF2apitMSNZqGn2Y4Y6iTw gNO60y5NCWX433qMtdV5mkSpfiJmafyieAe1ZzMuawDxDW/be+ysuRaUIQchNTY0 qa0= -----END CERTIFICATE-----Generated at Wed Aug 26 16:08:15 2026 by rpki-client