$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b6b76504-f94b-4393-9057-e46e536baae4.roa File: b6b76504-f94b-4393-9057-e46e536baae4.roa (raw, json) Hash identifier: tW95NQh4zTp5tT07RUkv7c0L0NUfUwRA0M2bv7D66jQ= Subject key identifier: F2:D2:47:75:18:75:E4:BB:69:AC:8E:32:49:1D:2D:3B:BD:A6:F5:E6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B1CA317F51BB7FEDD9F896678F90F6FDAFA37F3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b6b76504-f94b-4393-9057-e46e536baae4.roa Signing time: Wed 19 Aug 2026 00:10:25 +0000 ROA not before: Wed 19 Aug 2026 00:10:25 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1c:a3:17:f5:1b:b7:fe:dd:9f:89:66:78:f9:0f:6f:da:fa:37:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:25 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=04a9efd0530f1a8e7cee845c4f66edcabfb60f1689cf7ab9b36222f8c8132347, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:fc:3e:9b:56:73:cd:58:c3:2c:dc:54:f7: eb:b0:e7:73:2d:11:7a:8d:89:f2:54:7f:0d:c5:26: 46:0d:28:36:92:3a:b0:2d:35:7c:fa:72:c0:5d:79: 88:8b:df:a7:21:5d:ef:c8:aa:97:f5:fd:50:64:26: 4d:b6:15:2e:c1:72:e2:47:84:85:1b:5f:4c:b2:f8: cf:54:5c:5f:a5:0c:3b:d3:73:dd:2b:c1:e4:af:09: c0:2c:45:38:bb:38:d2:66:43:64:14:72:73:76:e1: 89:11:dc:55:d7:8c:86:b2:eb:5e:a5:79:06:46:fd: c7:06:bf:d6:a2:59:b3:a1:ad:66:6a:68:b3:06:7a: 98:60:8f:0e:b0:21:d0:26:5c:08:a3:8e:c1:71:02: ea:ff:65:fe:01:d5:2a:9e:ff:2e:85:e9:36:29:c6: 7a:59:40:c2:36:ff:77:50:77:fc:86:f8:fa:33:7c: 64:e3:1a:83:d7:f2:eb:85:0f:66:f2:18:38:1d:79: 19:e5:a9:b1:6f:d2:18:74:0f:6a:b3:90:6f:2f:34: d6:ed:a4:58:74:9c:d7:5f:d5:bc:98:1a:fc:d7:26: e6:1e:38:81:ba:9d:34:73:b1:a8:92:e5:69:b0:9f: 14:7c:37:9a:d5:b9:18:8b:d8:a0:24:5b:7c:0a:4f: 96:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D2:47:75:18:75:E4:BB:69:AC:8E:32:49:1D:2D:3B:BD:A6:F5:E6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b6b76504-f94b-4393-9057-e46e536baae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:c880::/48 Signature Algorithm: sha256WithRSAEncryption 69:bc:a3:d1:4d:e1:4e:bc:16:1e:2d:7b:9d:36:8e:ad:ab:14: 21:45:64:6d:cd:ae:c1:6a:5c:81:9a:ae:e6:e5:dd:95:9b:9a: 79:95:79:89:42:6e:c4:f2:62:33:22:73:c5:36:61:7f:c6:e9: ce:e8:b1:90:e4:96:74:cf:02:d1:f9:f9:61:84:3c:21:77:3e: ad:a1:c8:62:93:81:0b:a4:6a:e4:2b:d3:80:80:f4:44:70:03: b7:36:63:8c:54:ce:a7:79:11:82:c5:ec:fa:62:43:1e:70:75: 13:b0:c6:73:ef:4c:cf:89:4f:62:5b:e7:0b:08:3a:6a:ae:1c: 59:bc:17:82:8b:db:62:d0:7c:8e:01:1c:4f:9a:24:b6:23:cc: 66:c3:f3:42:1e:28:10:fa:6d:34:08:b6:90:22:92:47:b1:da: b2:f6:59:46:2b:75:07:5f:c9:f1:ac:cd:3e:da:08:4b:6b:fb: c9:71:86:f7:f8:56:6e:ed:f7:dc:70:10:7e:7b:d5:5e:8d:da: 74:b0:3d:74:ed:bf:fb:46:96:fd:c4:ff:d2:c0:31:30:12:97: ce:8d:b3:10:4f:2c:86:9b:03:9a:66:89:e0:d8:df:ae:19:19: 26:04:8e:3e:18:19:47:60:1c:bb:d2:e0:ba:d7:2e:34:09:01: 24:9f:7c:89 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaxyjF/Ubt/7dn4lmePkPb9r6N/MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTAyNVoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAMDRhOWVmZDA1MzBmMWE4ZTdjZWU4 NDVjNGY2NmVkY2FiZmI2MGYxNjg5Y2Y3YWI5YjM2MjIyZjhjODEzMjM0NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfH8PptWc81YwyzcVPfrsOdzLRF6 jYnyVH8NxSZGDSg2kjqwLTV8+nLAXXmIi9+nIV3vyKqX9f1QZCZNthUuwXLiR4SF G19MsvjPVFxfpQw703PdK8HkrwnALEU4uzjSZkNkFHJzduGJEdxV14yGsutepXkG Rv3HBr/Wolmzoa1mamizBnqYYI8OsCHQJlwIo47BcQLq/2X+AdUqnv8uhek2KcZ6 WUDCNv93UHf8hvj6M3xk4xqD1/LrhQ9m8hg4HXkZ5amxb9IYdA9qs5BvLzTW7aRY dJzXX9W8mBr81ybmHjiBup00c7GokuVpsJ8UfDea1bkYi9igJFt8Ck+WvwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPLSR3UYdeS7aayOMkkdLTu9pvXmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I2Yjc2NTA0LWY5NGItNDM5My05MDU3LWU0NmU1MzZiYWFlNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ciAMA0GCSqGSIb3DQEBCwUAA4IBAQBpvKPRTeFOvBYeLXud No6tqxQhRWRtza7BalyBmq7m5d2Vm5p5lXmJQm7E8mIzInPFNmF/xunO6LGQ5JZ0 zwLR+flhhDwhdz6tochik4ELpGrkK9OAgPREcAO3NmOMVM6neRGCxez6YkMecHUT sMZz70zPiU9iW+cLCDpqrhxZvBeCi9ti0HyOARxPmiS2I8xmw/NCHigQ+m00CLaQ IpJHsdqy9llGK3UHX8nxrM0+2ghLa/vJcYb3+FZu7ffccBB+e9Vejdp0sD107b/7 Rpb9xP/SwDEwEpfOjbMQTyyGmwOaZong2N+uGRkmBI4+GBlHYBy70uC61y40CQEk n3yJ -----END CERTIFICATE-----Generated at Wed Aug 26 08:02:49 2026 by rpki-client