$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ad80375d-e709-447c-8867-372df16e6e62.roa File: ad80375d-e709-447c-8867-372df16e6e62.roa (raw, json) Hash identifier: F0IRHlu0CzasZsfpvwldkOXew+swPh68Fd7nPPA+ST8= Subject key identifier: 3E:D9:3A:F0:66:6E:A6:F9:DA:71:BF:ED:31:B5:C5:C8:D7:25:2B:A5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C867C9CCAD8E11E1AAAE6F11B760BB32713E01B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ad80375d-e709-447c-8867-372df16e6e62.roa Signing time: Fri 31 Jul 2026 00:00:10 +0000 ROA not before: Fri 31 Jul 2026 00:00:10 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:86:7c:9c:ca:d8:e1:1e:1a:aa:e6:f1:1b:76:0b:b3:27:13:e0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:00:10 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=3aa84a8a244c4ad8e76d971bb048b5d9cbd5deb645185fe6ff815d00b7aa0a1d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:a4:0d:3d:25:b8:c1:de:3e:12:86:65:14: 29:87:01:af:72:4a:39:e5:e6:17:09:75:bc:fa:ad: 96:84:b2:18:91:d2:5c:96:54:9b:7e:be:5d:23:7d: 8e:d3:00:82:97:3e:8a:f8:9b:03:78:b4:92:81:18: c4:76:5c:cb:97:8a:b1:29:79:fa:dc:c0:58:65:4d: 5d:d0:41:2e:f6:06:f2:77:aa:8c:49:bf:18:f4:8e: 77:66:f5:23:1f:a9:2e:3d:a9:d6:e7:a5:dc:94:e1: d6:87:e9:41:e2:9f:b0:10:2a:01:11:ba:68:df:0f: c4:48:27:8d:8f:e9:b9:2e:ff:a6:5b:f4:a5:52:da: f6:06:82:ef:4e:00:36:32:59:41:e0:01:54:33:6f: e0:a8:17:3f:ae:2a:7b:19:d6:d0:13:da:17:29:fd: b6:e5:36:ce:58:0d:40:e7:5b:1a:51:3f:02:cd:39: 08:cb:62:c2:64:7d:e9:01:e2:e0:33:40:07:24:c8: 65:e6:32:fa:26:ee:15:49:b8:b3:aa:67:bd:47:64: 25:d2:7d:81:0e:51:2f:01:ac:e8:66:38:00:95:cd: 27:ad:80:99:cf:b5:69:72:48:a3:7e:c4:b4:3b:ff: 24:18:79:ce:69:3b:e3:d7:fa:27:14:ec:5d:10:eb: 86:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D9:3A:F0:66:6E:A6:F9:DA:71:BF:ED:31:B5:C5:C8:D7:25:2B:A5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ad80375d-e709-447c-8867-372df16e6e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:8000::/40 Signature Algorithm: sha256WithRSAEncryption 48:a9:0a:ee:ce:71:01:ff:48:03:47:77:75:4e:f2:a5:b0:e5: a6:54:27:79:c1:88:9a:cd:d0:c4:39:3a:10:e4:bf:fa:65:2f: 01:ca:22:e9:e7:5a:33:fd:c2:3e:46:b9:2b:2e:a5:38:c1:d3: 31:dd:ef:37:74:67:62:f7:2d:c1:18:c3:fc:b9:c2:fa:e4:6b: 83:f5:2f:b9:2c:e5:bf:0b:06:3b:58:f3:d9:39:33:38:8d:62: d1:83:7b:d9:2a:94:ea:c8:4a:e0:8d:b1:a2:f3:0c:64:b5:74: db:47:69:e9:bf:88:fa:3e:88:99:9a:28:8c:dd:60:7c:be:d9: 33:8f:78:92:89:eb:e7:03:0d:15:4b:dd:43:9c:3b:d7:05:dd: e2:a0:7c:e6:9a:65:9f:de:fb:ac:92:63:f7:3e:28:ec:8e:95: 89:ed:ca:63:54:47:d8:ce:cb:e0:b0:e0:b6:7f:a2:ed:d7:a3: f5:d4:2d:46:51:08:2c:ea:cd:f1:a4:8c:35:70:2b:60:bc:f6: 52:9d:69:e2:7c:f1:d6:55:65:93:3d:b5:e3:87:0a:a7:c0:bf: 3b:fa:80:c5:ec:e6:da:ab:03:8a:3c:9e:39:50:40:5d:93:ab: b5:55:56:12:bf:1e:5a:bc:e0:05:8b:b9:ca:50:6e:2c:c6:0b: 3f:c1:c9:6e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXIZ8nMrY4R4aqubxG3YLsycT4BswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMDAxMFoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAM2FhODRhOGEyNDRjNGFkOGU3NmQ5 NzFiYjA0OGI1ZDljYmQ1ZGViNjQ1MTg1ZmU2ZmY4MTVkMDBiN2FhMGExZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qCkDT0luMHePhKGZRQphwGvcko5 5eYXCXW8+q2WhLIYkdJcllSbfr5dI32O0wCClz6K+JsDeLSSgRjEdlzLl4qxKXn6 3MBYZU1d0EEu9gbyd6qMSb8Y9I53ZvUjH6kuPanW56XclOHWh+lB4p+wECoBEbpo 3w/ESCeNj+m5Lv+mW/SlUtr2BoLvTgA2MllB4AFUM2/gqBc/rip7GdbQE9oXKf22 5TbOWA1A51saUT8CzTkIy2LCZH3pAeLgM0AHJMhl5jL6Ju4VSbizqme9R2Ql0n2B DlEvAazoZjgAlc0nrYCZz7VpckijfsS0O/8kGHnOaTvj1/onFOxdEOuGjwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFD7ZOvBmbqb52nG/7TG1xcjXJSulMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FkODAzNzVkLWU3MDktNDQ3Yy04ODY3LTM3MmRmMTZlNmU2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAIAwDQYJKoZIhvcNAQELBQADggEBAEipCu7OcQH/SANHd3VO 8qWw5aZUJ3nBiJrN0MQ5OhDkv/plLwHKIunnWjP9wj5GuSsupTjB0zHd7zd0Z2L3 LcEYw/y5wvrka4P1L7ks5b8LBjtY89k5MziNYtGDe9kqlOrISuCNsaLzDGS1dNtH aem/iPo+iJmaKIzdYHy+2TOPeJKJ6+cDDRVL3UOcO9cF3eKgfOaaZZ/e+6ySY/c+ KOyOlYntymNUR9jOy+Cw4LZ/ou3Xo/XULUZRCCzqzfGkjDVwK2C89lKdaeJ88dZV ZZM9teOHCqfAvzv6gMXs5tqrA4o8njlQQF2Tq7VVVhK/Hlq84AWLucpQbizGCz/B yW4= -----END CERTIFICATE-----Generated at Wed Aug 26 16:08:08 2026 by rpki-client