$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa File: c2c34d45-d139-4122-8407-d2263ceee098.roa (raw, json) Hash identifier: x1OHTSwET4Y0e73czol8jlW/g/TdLNcYJ9gRHXLj/KI= Subject key identifier: 36:45:C5:9C:27:3C:DA:24:47:58:CF:C8:1C:A6:A2:FD:5E:45:A9:86 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2FC84B1A8C03A863943AD31A75C1F8C1EFF91800 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa Signing time: Sat 01 Aug 2026 00:21:11 +0000 ROA not before: Sat 01 Aug 2026 00:21:11 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c8:4b:1a:8c:03:a8:63:94:3a:d3:1a:75:c1:f8:c1:ef:f9:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:21:11 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=8fb6263082624cf387f86cea5f16bb352b5a9194a096bc898cd3c1b85645d928, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:cd:0e:15:bf:39:a6:42:53:06:ff:e0:61: 58:6f:ab:40:b8:73:82:2b:55:fe:e1:ee:4f:9d:50: 6f:61:33:e8:d1:8a:fa:27:0e:45:e2:2c:bf:a9:91: 9d:a1:c0:79:b8:62:f9:25:1f:d4:0c:71:49:f9:da: 36:22:3f:d0:1b:43:9d:3a:a4:66:c2:8a:5d:b7:3b: c2:a2:34:f6:7d:7e:02:e9:cb:00:d8:70:01:18:cf: 14:20:03:a2:26:33:1f:9c:a7:20:b1:08:25:c1:1a: 11:b7:cb:af:e0:de:5a:0a:e9:04:b5:92:af:aa:f4: a7:af:cb:cc:1f:64:ae:39:fc:0e:a7:d7:17:a6:85: d3:1f:8f:af:1a:ec:c6:5c:45:72:0d:84:d3:6e:76: 5e:d5:eb:7b:3e:1f:a7:f7:58:46:0a:15:cb:2c:5d: de:ee:4d:31:ee:49:c6:2e:eb:f3:ea:bc:3f:ba:7c: 87:e9:25:74:1c:16:96:28:2c:48:90:c1:e9:43:d6: 45:d6:47:27:60:06:d9:8f:d7:62:98:6d:67:5f:af: 2f:cc:9b:70:29:23:f2:ba:6f:56:fc:a5:30:21:58: d7:13:cf:f7:0b:b9:52:06:ea:14:c3:81:86:c7:4e: cd:36:85:74:76:36:ae:ea:5e:8f:50:43:d8:4f:3e: 88:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:45:C5:9C:27:3C:DA:24:47:58:CF:C8:1C:A6:A2:FD:5E:45:A9:86 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:e000::/40 Signature Algorithm: sha256WithRSAEncryption 6d:cd:76:6d:58:07:0b:2d:04:67:db:9e:0f:b7:05:ee:30:7d: 02:c6:9c:79:c8:14:a7:58:fd:83:54:8d:2e:14:14:91:f0:3e: a3:cb:02:ce:d7:46:9c:8a:6d:65:10:4f:d6:9d:f6:4f:08:bd: 5b:c1:b2:4d:b5:5f:d8:8f:10:c3:7e:7f:22:77:54:f0:bc:3a: a0:0b:ac:7e:22:df:5e:8a:d5:8a:57:b6:04:42:2b:d4:70:44: 5d:92:e6:bd:63:c7:af:b3:00:47:f8:dd:22:6a:2b:cf:12:ba: d0:38:5b:fd:c2:d6:81:2f:1a:bc:df:23:2b:32:5f:a4:e5:af: af:84:d0:b8:5e:3e:05:6c:50:2e:0e:3e:90:fd:c0:0d:ab:62: 5b:6e:92:90:6b:c1:48:55:07:5d:67:5b:4b:87:85:de:1a:b3: 96:2b:85:bf:21:49:f2:82:b4:93:db:88:e6:83:14:19:19:56: 34:0c:7f:cb:6c:5a:b4:c5:f0:16:f7:dc:2d:87:23:e9:cc:9e: a0:da:35:f8:81:9b:56:d0:ff:e9:66:ff:cc:64:4e:bd:87:df: 22:67:cc:cd:07:3d:a2:a7:fb:3b:0a:13:b8:34:18:89:86:ee: 6a:bc:69:17:f6:49:c3:08:3b:46:9d:94:b0:ea:8f:17:a2:c9: ef:70:ef:73 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUL8hLGowDqGOUOtMadcH4we/5GAAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMjExMVoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAOGZiNjI2MzA4MjYyNGNmMzg3Zjg2 Y2VhNWYxNmJiMzUyYjVhOTE5NGEwOTZiYzg5OGNkM2MxYjg1NjQ1ZDkyODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7bNDhW/OaZCUwb/4GFYb6tAuHOC K1X+4e5PnVBvYTPo0Yr6Jw5F4iy/qZGdocB5uGL5JR/UDHFJ+do2Ij/QG0OdOqRm wopdtzvCojT2fX4C6csA2HABGM8UIAOiJjMfnKcgsQglwRoRt8uv4N5aCukEtZKv qvSnr8vMH2SuOfwOp9cXpoXTH4+vGuzGXEVyDYTTbnZe1et7Ph+n91hGChXLLF3e 7k0x7knGLuvz6rw/unyH6SV0HBaWKCxIkMHpQ9ZF1kcnYAbZj9dimG1nX68vzJtw KSPyum9W/KUwIVjXE8/3C7lSBuoUw4GGx07NNoV0djau6l6PUEPYTz6IYQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDZFxZwnPNokR1jPyBymov1eRamGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyYzM0ZDQ1LWQxMzktNDEyMi04NDA3LWQyMjYzY2VlZTA5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMuAwDQYJKoZIhvcNAQELBQADggEBAG3Ndm1YBwstBGfbng+3 Be4wfQLGnHnIFKdY/YNUjS4UFJHwPqPLAs7XRpyKbWUQT9ad9k8IvVvBsk21X9iP EMN+fyJ3VPC8OqALrH4i316K1YpXtgRCK9RwRF2S5r1jx6+zAEf43SJqK88SutA4 W/3C1oEvGrzfIysyX6Tlr6+E0LhePgVsUC4OPpD9wA2rYltukpBrwUhVB11nW0uH hd4as5Yrhb8hSfKCtJPbiOaDFBkZVjQMf8tsWrTF8Bb33C2HI+nMnqDaNfiBm1bQ /+lm/8xkTr2H3yJnzM0HPaKn+zsKE7g0GImG7mq8aRf2ScMIO0adlLDqjxeiye9w 73M= -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:04 2026 by rpki-client