$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b577ca53-5cf9-4c87-99d1-58a15f0a438c.roa File: b577ca53-5cf9-4c87-99d1-58a15f0a438c.roa (raw, json) Hash identifier: /lOMHrZ7z7LPTWN2JrJJO8PveOpGuZXt6nZSuOx/DgY= Subject key identifier: 71:B9:CC:45:F6:C0:26:22:76:28:5A:F7:E1:EF:35:A7:72:87:40:4D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 56F18F758972A4F13E5D8E75AA09E374F39EDCA6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b577ca53-5cf9-4c87-99d1-58a15f0a438c.roa Signing time: Sun 16 Aug 2026 00:00:05 +0000 ROA not before: Sun 16 Aug 2026 00:00:05 +0000 ROA not after: Sat 14 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f1:8f:75:89:72:a4:f1:3e:5d:8e:75:aa:09:e3:74:f3:9e:dc:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 16 00:00:05 2026 GMT Not After : Nov 14 23:59:59 2026 GMT Subject: serialNumber=a53b90a41331e24498234100ed28e84b2ee8057c042a3fe89b28872772cc080c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:7f:64:59:74:b8:90:c5:07:71:93:ef:89: 4d:24:40:5d:84:d4:6b:90:80:44:d9:88:6e:82:bf: 17:b2:9a:d9:e5:1e:01:59:af:66:38:68:5e:bc:96: cd:f7:00:a7:4c:74:f8:32:7b:64:28:a5:22:87:27: 59:dc:5c:13:f8:67:74:9e:d9:30:e1:26:0e:d3:89: 3e:9f:b1:20:dc:32:09:a7:8f:8e:51:a1:a5:e3:24: 48:d2:bf:39:82:88:64:7b:1b:98:7e:37:49:35:8b: c0:45:d0:b9:f3:d6:53:74:14:33:54:8e:17:5d:f0: 18:eb:5f:49:a3:3b:02:94:10:28:6a:46:3b:5b:8c: f2:ae:ad:11:e6:c2:9c:8f:11:1f:97:2a:c0:85:a4: d6:f9:53:da:53:da:28:4a:1d:61:a1:97:e1:82:0d: 9d:7e:b9:cd:ed:64:8a:ab:02:20:14:18:bd:04:77: 80:6f:9b:18:44:1e:62:a0:f7:72:2f:de:f8:ce:4f: 84:b9:e3:62:0d:de:b5:eb:fe:22:49:62:60:cc:00: 63:fc:d8:87:70:ad:39:37:87:54:64:be:ae:21:31: 8d:96:4c:50:8b:26:ef:8a:89:dd:1a:80:59:32:03: 44:02:0d:4d:b4:bb:80:f2:59:65:c7:6a:16:7b:e1: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B9:CC:45:F6:C0:26:22:76:28:5A:F7:E1:EF:35:A7:72:87:40:4D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b577ca53-5cf9-4c87-99d1-58a15f0a438c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe::/32 Signature Algorithm: sha256WithRSAEncryption ac:91:17:c8:29:59:71:a1:b9:07:bb:cb:18:2e:d3:fc:75:ea: ff:c8:2a:1c:da:93:70:9e:74:64:ba:b6:c7:f6:fd:fb:1f:dd: fd:8c:03:db:7f:72:8a:8a:24:25:e6:2d:64:62:bf:62:4a:31: 1d:ce:3a:97:23:61:cb:dc:f3:0a:e7:4c:9a:2b:92:4f:99:67: 17:47:4f:e6:b8:72:c4:3e:6d:5c:a3:86:bc:78:d1:8b:ae:2f: 57:d5:8b:d8:f3:71:88:ec:9a:1b:f5:a0:e0:5d:d9:7a:ef:a7: 0b:30:19:42:e6:b1:0f:ca:25:db:d3:2c:3c:04:9d:a4:b9:f3: a0:cf:b8:65:17:ce:a5:27:6e:3a:27:8b:ec:4f:21:c6:78:50: ef:43:2b:71:c8:92:d5:6a:23:44:3e:a2:ff:fe:38:cb:ee:50: 5f:03:c9:96:12:84:05:bf:e7:be:16:f1:41:49:07:61:36:e6: 02:67:8f:48:bb:74:16:fe:19:e1:a1:2e:db:da:ca:f0:e5:50: e0:85:df:c7:45:cb:d6:07:79:79:8e:41:e4:07:3c:0f:2a:98: af:8c:c7:ad:d5:cb:35:9e:53:e5:61:40:e1:3d:e2:f4:73:4d: bd:57:2b:5b:34:0f:66:41:75:c6:1f:28:c2:4f:90:42:b2:60: 84:8a:9c:fa -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUVvGPdYlypPE+XY51qgnjdPOe3KYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxNjAwMDAwNVoX DTI2MTExNDIzNTk1OVowejFJMEcGA1UEBRNAYTUzYjkwYTQxMzMxZTI0NDk4MjM0 MTAwZWQyOGU4NGIyZWU4MDU3YzA0MmEzZmU4OWIyODg3Mjc3MmNjMDgwYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJl/ZFl0uJDFB3GT74lNJEBdhNRr kIBE2Yhugr8XsprZ5R4BWa9mOGhevJbN9wCnTHT4MntkKKUihydZ3FwT+Gd0ntkw 4SYO04k+n7Eg3DIJp4+OUaGl4yRI0r85gohkexuYfjdJNYvARdC589ZTdBQzVI4X XfAY619JozsClBAoakY7W4zyrq0R5sKcjxEflyrAhaTW+VPaU9ooSh1hoZfhgg2d frnN7WSKqwIgFBi9BHeAb5sYRB5ioPdyL974zk+EueNiDd616/4iSWJgzABj/NiH cK05N4dUZL6uITGNlkxQiybviondGoBZMgNEAg1NtLuA8lllx2oWe+FH2QIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFHG5zEX2wCYidiha9+HvNadyh0BNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I1NzdjYTUzLTVjZjktNGM4Ny05OWQxLTU4YTE1ZjBhNDM4Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba/jANBgkqhkiG9w0BAQsFAAOCAQEArJEXyClZcaG5B7vLGC7T /HXq/8gqHNqTcJ50ZLq2x/b9+x/d/YwD239yiookJeYtZGK/YkoxHc46lyNhy9zz CudMmiuST5lnF0dP5rhyxD5tXKOGvHjRi64vV9WL2PNxiOyaG/Wg4F3Zeu+nCzAZ QuaxD8ol29MsPASdpLnzoM+4ZRfOpSduOieL7E8hxnhQ70MrcciS1WojRD6i//44 y+5QXwPJlhKEBb/nvhbxQUkHYTbmAmePSLt0Fv4Z4aEu29rK8OVQ4IXfx0XL1gd5 eY5B5Ac8DyqYr4zHrdXLNZ5T5WFA4T3i9HNNvVcrWzQPZkF1xh8owk+QQrJghIqc +g== -----END CERTIFICATE-----Generated at Wed Aug 26 10:34:00 2026 by rpki-client