$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c091bd9a-f210-4784-93c3-b4f238c33e1e.roa File: c091bd9a-f210-4784-93c3-b4f238c33e1e.roa (raw, json) Hash identifier: hHWGVvJMR5P+ZO6SjX+Wc19XZni01kri+CSqusskyW4= Subject key identifier: 9B:FB:CA:B4:17:73:34:30:EB:59:49:65:F8:67:F4:EC:7F:7A:FB:18 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 691E6C5C197F27E35C7F90ED22F895EB59FB26D8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c091bd9a-f210-4784-93c3-b4f238c33e1e.roa Signing time: Wed 19 Aug 2026 00:10:43 +0000 ROA not before: Wed 19 Aug 2026 00:10:43 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1e:6c:5c:19:7f:27:e3:5c:7f:90:ed:22:f8:95:eb:59:fb:26:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:43 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=5f2636c0ab562ae4135e904838e3973f54dd1f14824f5ba94bcd9baa3cdbe39a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:a8:d3:27:ce:95:aa:8a:17:0f:05:cc:17: dd:27:74:dd:92:7f:97:bd:d8:80:c4:9c:04:28:ea: 45:56:f8:43:7d:b0:49:ef:4f:34:88:db:ac:3d:26: 8c:f4:9b:75:b2:37:eb:e4:f9:3d:71:2b:88:79:11: b9:79:98:ee:54:ff:69:05:91:e5:90:cb:c7:8c:46: 5e:e4:35:a9:78:dc:ce:13:91:7e:38:34:43:aa:35: d5:bb:35:db:d3:84:66:46:fe:53:ca:11:8e:54:49: 4d:7c:1a:04:05:64:0e:9d:2c:82:cb:31:28:61:8e: c7:a0:3a:d0:bc:a5:a6:0a:08:f5:65:6c:30:ef:cd: 8a:84:e2:b9:fc:1e:32:07:c6:78:c8:ea:7f:af:ab: 03:6c:3c:77:ce:3b:37:2b:b4:14:ab:e6:14:b5:de: e9:e5:31:3c:34:63:73:d5:e6:51:15:e5:57:de:a8: 59:ab:0e:df:17:3c:62:f4:44:07:4d:6e:37:4f:3d: 35:de:95:93:52:a9:a4:e7:31:e8:4d:18:4f:39:98: 7c:d2:d9:8e:47:ff:8e:79:e3:7a:7a:f7:3c:be:cc: 46:37:d5:de:82:6e:0c:83:7b:7f:d5:a0:37:05:9e: 3b:7e:21:ab:d1:61:c4:6c:57:08:54:fb:9d:d7:f0: c4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FB:CA:B4:17:73:34:30:EB:59:49:65:F8:67:F4:EC:7F:7A:FB:18 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c091bd9a-f210-4784-93c3-b4f238c33e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:9080::/48 Signature Algorithm: sha256WithRSAEncryption 5a:44:b2:e6:9d:c2:2f:09:9f:0a:8c:f2:4c:60:e2:cb:80:a3: 8a:83:b3:75:7c:47:5d:6e:ff:f4:8c:b6:77:e7:29:cf:b5:a7: 13:09:93:88:fd:8b:e2:62:2f:63:a6:c3:de:a9:1c:b4:dd:e3: f1:5b:00:e3:90:ec:9b:14:1a:3e:6d:87:53:a3:32:ad:98:eb: 9e:35:c5:cc:07:bb:1f:02:1b:3a:81:9d:04:5b:fa:de:f9:b5: ec:fe:67:e8:4d:60:16:48:8e:66:91:80:2f:5d:51:81:a1:e0: a8:dc:f4:6b:40:43:f9:04:8f:a6:a1:ea:3f:22:d0:e6:ff:75: bb:f8:bf:42:77:ee:65:f3:61:43:aa:83:e3:0b:fb:e8:1b:2e: 9a:c9:cf:13:90:50:b9:f0:95:ca:b0:3d:3b:e5:27:9c:af:b6: b7:00:b6:5c:4f:e1:4a:58:c6:47:5a:a7:07:8d:58:b0:f4:d8: 4c:fd:0c:4f:14:4a:36:c5:bd:3d:80:a0:3d:73:88:06:cb:7b: 22:42:a1:22:99:64:2a:20:e6:80:66:f5:e9:8c:78:02:d6:b7: ec:94:0e:3c:63:36:3c:ef:e7:eb:f8:07:3a:5e:8e:f8:d1:73: bb:60:38:bb:81:81:18:7d:98:74:bc:35:43:f2:71:d2:11:60: 19:d4:d9:dd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaR5sXBl/J+Ncf5DtIviV61n7JtgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTA0M1oX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNANWYyNjM2YzBhYjU2MmFlNDEzNWU5 MDQ4MzhlMzk3M2Y1NGRkMWYxNDgyNGY1YmE5NGJjZDliYWEzY2RiZTM5YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxeo0yfOlaqKFw8FzBfdJ3Tdkn+X vdiAxJwEKOpFVvhDfbBJ7080iNusPSaM9Jt1sjfr5Pk9cSuIeRG5eZjuVP9pBZHl kMvHjEZe5DWpeNzOE5F+ODRDqjXVuzXb04RmRv5TyhGOVElNfBoEBWQOnSyCyzEo YY7HoDrQvKWmCgj1ZWww782KhOK5/B4yB8Z4yOp/r6sDbDx3zjs3K7QUq+YUtd7p 5TE8NGNz1eZRFeVX3qhZqw7fFzxi9EQHTW43Tz013pWTUqmk5zHoTRhPOZh80tmO R/+OeeN6evc8vsxGN9Xegm4Mg3t/1aA3BZ47fiGr0WHEbFcIVPud1/DEiQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJv7yrQXczQw61lJZfhn9Ox/evsYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MwOTFiZDlhLWYyMTAtNDc4NC05M2MzLWI0ZjIzOGMzM2UxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ZCAMA0GCSqGSIb3DQEBCwUAA4IBAQBaRLLmncIvCZ8KjPJM YOLLgKOKg7N1fEddbv/0jLZ35ynPtacTCZOI/YviYi9jpsPeqRy03ePxWwDjkOyb FBo+bYdTozKtmOueNcXMB7sfAhs6gZ0EW/re+bXs/mfoTWAWSI5mkYAvXVGBoeCo 3PRrQEP5BI+moeo/ItDm/3W7+L9Cd+5l82FDqoPjC/voGy6ayc8TkFC58JXKsD07 5Secr7a3ALZcT+FKWMZHWqcHjViw9NhM/QxPFEo2xb09gKA9c4gGy3siQqEimWQq IOaAZvXpjHgC1rfslA48YzY87+fr+Ac6Xo740XO7YDi7gYEYfZh0vDVD8nHSEWAZ 1Nnd -----END CERTIFICATE-----Generated at Wed Aug 26 00:38:31 2026 by rpki-client