$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b009396d-ffc1-484b-86ae-74e8c9a106d1.roa File: b009396d-ffc1-484b-86ae-74e8c9a106d1.roa (raw, json) Hash identifier: i4YXgRfi7xabP9yRFXvvidXY3Y8ngDYxmaauipqn8KQ= Subject key identifier: ED:C5:66:4B:A2:F4:6B:35:AF:43:3D:61:22:BA:89:B7:62:94:C0:8D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4BE67166FB32F1CD31A4812E9AF0130F3D72DAF1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b009396d-ffc1-484b-86ae-74e8c9a106d1.roa Signing time: Wed 19 Aug 2026 00:20:20 +0000 ROA not before: Wed 19 Aug 2026 00:20:20 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:2880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e6:71:66:fb:32:f1:cd:31:a4:81:2e:9a:f0:13:0f:3d:72:da:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:20:20 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=334fd2f50af834c59d749d8197620d86fade805ecb81594b1688ae66569fde98, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:40:c6:6e:1e:a5:01:d6:63:fa:b3:17:d4: c9:4d:98:ba:9e:b0:f0:23:4d:8d:9a:b5:4a:ac:ef: fd:39:5e:80:de:3f:38:4a:13:05:5f:29:bf:85:81: 27:38:7e:af:59:79:1c:f2:18:9f:7f:d3:83:86:eb: 45:22:89:9b:bf:31:0c:6c:60:95:6b:5c:86:54:b8: 31:4f:76:96:9f:82:6b:23:42:9e:7e:08:a1:79:34: 30:7d:2e:9e:59:8e:1b:f3:6f:f1:1b:27:d3:95:74: 9b:03:db:8c:1e:d6:24:be:95:cd:b3:00:15:82:c0: 15:04:71:d9:6e:e2:20:63:92:4c:04:e4:65:e6:4e: aa:c0:4b:86:76:18:9e:65:58:fe:b7:23:f5:ac:24: bb:cd:60:74:54:9d:da:7f:31:15:60:06:bd:88:d4: 89:c1:cb:79:9a:8d:0f:3c:90:77:9f:08:80:3e:5a: ee:a8:0c:ca:81:e8:4c:00:3e:3a:10:a1:4f:e8:98: 1a:c1:9a:2a:f3:5f:cf:9e:11:8c:54:84:3b:bb:3c: 2a:39:db:36:61:16:94:75:a3:25:84:0b:e5:0a:e9: e3:69:a5:92:f3:3c:1b:35:a4:8d:58:fe:8b:73:aa: fd:e9:f8:ef:c2:ae:e7:66:1b:84:51:6b:f9:82:e6: db:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C5:66:4B:A2:F4:6B:35:AF:43:3D:61:22:BA:89:B7:62:94:C0:8D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b009396d-ffc1-484b-86ae-74e8c9a106d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:2880::/48 Signature Algorithm: sha256WithRSAEncryption 86:9c:0c:25:98:c6:bd:31:e6:0a:f8:39:eb:33:98:6c:cb:8c: 97:9b:da:fe:63:0e:ae:0d:89:d7:2a:f5:98:2d:40:d3:ee:62: cf:6c:73:49:89:19:c0:e4:7f:13:c6:b1:44:70:8d:c4:b1:57: 58:f7:72:d1:07:c5:3b:c3:b1:81:42:93:0b:8a:62:53:47:b0: c7:d5:92:ad:f1:f3:f2:22:c2:2d:12:7a:da:42:76:de:1f:17: eb:e9:1d:eb:fe:a0:73:06:3d:c9:a3:e1:3e:53:18:ee:8e:89: 50:4a:92:19:1f:e6:83:0f:6a:b4:5b:f2:79:68:c5:4f:ea:f0: bd:5e:24:1a:df:0e:46:d0:85:8c:fa:8f:4b:af:bf:58:0f:e6: c8:b9:2a:ed:33:7c:20:69:15:15:c6:60:a2:f0:53:61:60:da: 73:7a:73:0e:bf:40:f2:6c:49:d0:d0:6c:8d:48:29:3d:4b:5d: d8:62:94:cb:d8:c4:da:63:5a:95:59:98:bc:84:7d:0a:1f:e7: f3:29:ed:75:2c:ff:fd:22:15:69:dc:39:50:e0:fe:4f:d4:85: 08:db:11:f9:e9:8d:4b:97:13:95:7c:45:db:cb:e0:d7:79:73: a1:b3:e5:29:92:1b:b2:98:41:71:0e:b1:41:7d:ee:7e:39:21: 6a:54:3c:34 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUS+ZxZvsy8c0xpIEumvATDz1y2vEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMjAyMFoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAMzM0ZmQyZjUwYWY4MzRjNTlkNzQ5 ZDgxOTc2MjBkODZmYWRlODA1ZWNiODE1OTRiMTY4OGFlNjY1NjlmZGU5ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXVAxm4epQHWY/qzF9TJTZi6nrDw I02NmrVKrO/9OV6A3j84ShMFXym/hYEnOH6vWXkc8hiff9ODhutFIombvzEMbGCV a1yGVLgxT3aWn4JrI0KefgiheTQwfS6eWY4b82/xGyfTlXSbA9uMHtYkvpXNswAV gsAVBHHZbuIgY5JMBORl5k6qwEuGdhieZVj+tyP1rCS7zWB0VJ3afzEVYAa9iNSJ wct5mo0PPJB3nwiAPlruqAzKgehMAD46EKFP6JgawZoq81/PnhGMVIQ7uzwqOds2 YRaUdaMlhAvlCunjaaWS8zwbNaSNWP6Lc6r96fjvwq7nZhuEUWv5gubbbQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFO3FZkui9Gs1r0M9YSK6ibdilMCNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IwMDkzOTZkLWZmYzEtNDg0Yi04NmFlLTc0ZThjOWExMDZkMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauiiAMA0GCSqGSIb3DQEBCwUAA4IBAQCGnAwlmMa9MeYK+Dnr M5hsy4yXm9r+Yw6uDYnXKvWYLUDT7mLPbHNJiRnA5H8TxrFEcI3EsVdY93LRB8U7 w7GBQpMLimJTR7DH1ZKt8fPyIsItEnraQnbeHxfr6R3r/qBzBj3Jo+E+UxjujolQ SpIZH+aDD2q0W/J5aMVP6vC9XiQa3w5G0IWM+o9Lr79YD+bIuSrtM3wgaRUVxmCi 8FNhYNpzenMOv0DybEnQ0GyNSCk9S13YYpTL2MTaY1qVWZi8hH0KH+fzKe11LP/9 IhVp3DlQ4P5P1IUI2xH56Y1LlxOVfEXby+DXeXOhs+UpkhuymEFxDrFBfe5+OSFq VDw0 -----END CERTIFICATE-----Generated at Wed Aug 26 16:00:12 2026 by rpki-client