$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c39d9547-dd5a-4a73-afb1-3bdaec66866b.roa File: c39d9547-dd5a-4a73-afb1-3bdaec66866b.roa (raw, json) Hash identifier: f3TQzWSARC2XdV/+UPJ4ArGblfFeC2GPLRjYe/5LJEg= Subject key identifier: AC:84:A2:91:85:CC:0C:99:40:FD:43:63:50:3B:BF:C4:B3:EE:3B:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E65FFBDC8DA755CE9172F2CEF4DAE4BDEE031A9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c39d9547-dd5a-4a73-afb1-3bdaec66866b.roa Signing time: Wed 19 Aug 2026 00:10:12 +0000 ROA not before: Wed 19 Aug 2026 00:10:12 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:7040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:65:ff:bd:c8:da:75:5c:e9:17:2f:2c:ef:4d:ae:4b:de:e0:31:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:12 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=657598d7174f9bd7a9fee5a37f5316788728e7fcc55a710a47af1b7a57788007, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6d:51:f0:91:a6:99:20:b7:b5:3e:2d:d4:17: 70:0b:ce:19:b6:3f:79:43:ac:31:80:d9:65:96:5e: f3:43:96:32:ca:93:84:8c:6a:ca:6f:7d:7e:99:bf: e9:3a:30:42:49:59:85:26:de:75:a0:58:19:72:3b: 54:a9:66:68:ac:54:6f:6c:52:ad:11:da:dd:37:ba: 1c:62:df:65:2e:7f:a0:4d:f4:3f:53:33:7d:7b:c3: 28:c4:c9:39:8a:40:10:57:3e:e7:1c:5b:8d:27:ff: fe:1a:03:b5:5d:7c:26:b5:9a:d9:76:f7:33:48:a2: 33:b9:4e:9c:58:f3:ee:c2:55:3c:b7:82:63:df:f7: 20:11:53:21:0f:d4:6f:39:d0:4f:d4:79:ef:74:f2: 21:07:a1:84:1a:b2:f5:a6:fc:4b:0f:bb:8f:ea:7b: a8:f0:a4:76:49:88:ea:63:03:15:15:e6:fc:27:a1: 8f:60:51:9a:83:33:2a:58:90:18:3b:50:34:33:48: aa:bd:5a:00:1b:92:50:dd:88:ab:32:11:38:d0:b2: e6:30:32:32:3c:42:f8:e1:97:47:a8:61:b3:0b:5a: df:15:88:7d:07:93:b7:77:c6:ae:14:d8:c7:df:de: fe:d8:85:5a:7f:34:90:41:5d:f2:b4:ea:be:34:2c: e7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:84:A2:91:85:CC:0C:99:40:FD:43:63:50:3B:BF:C4:B3:EE:3B:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c39d9547-dd5a-4a73-afb1-3bdaec66866b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:7040::/48 Signature Algorithm: sha256WithRSAEncryption 4b:80:5e:96:ec:78:f8:87:8f:22:6e:26:69:c7:f9:59:7c:10: a9:4a:f3:56:23:1c:f0:85:65:a5:12:4a:94:31:d6:61:bc:74: 79:e1:c6:a2:a2:09:6b:d4:44:0c:1f:13:16:de:16:a9:a1:57: 0b:a5:b5:df:71:34:77:01:09:1b:03:10:ef:cc:66:f1:b1:14: 81:7a:07:2a:af:38:61:69:7d:e2:46:58:30:10:08:33:51:82: 0a:4c:5f:56:b1:df:84:ab:19:26:cf:84:7c:f9:92:cd:64:ee: a7:47:4f:5a:9e:c4:f7:e2:9e:8f:6a:29:9b:c7:01:56:05:c6: 48:af:bb:25:64:6f:62:3a:c0:23:80:27:a5:e5:f3:68:1a:47: 90:37:21:70:aa:55:15:5e:21:79:eb:a7:6a:c2:1b:c4:5c:d9: f8:c6:8c:cd:f6:6b:cc:20:ba:04:7d:52:2b:e1:48:69:06:a7: 78:84:3c:c9:37:a1:84:96:9e:52:ff:16:10:33:51:80:ee:b4: 61:83:00:9b:26:42:11:7a:38:2e:1f:f1:bb:9f:c6:23:38:4e: 7a:30:de:42:95:59:0e:6c:0a:80:f6:a4:de:27:51:91:ac:e7: f6:ff:ea:46:7d:8a:da:89:16:13:97:4e:c2:b2:8c:3f:2c:bb: 84:10:b5:86 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULmX/vcjadVzpFy8s702uS97gMakwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTAxMloX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNANjU3NTk4ZDcxNzRmOWJkN2E5ZmVl NWEzN2Y1MzE2Nzg4NzI4ZTdmY2M1NWE3MTBhNDdhZjFiN2E1Nzc4ODAwNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA221R8JGmmSC3tT4t1BdwC84Ztj95 Q6wxgNllll7zQ5YyypOEjGrKb31+mb/pOjBCSVmFJt51oFgZcjtUqWZorFRvbFKt EdrdN7ocYt9lLn+gTfQ/UzN9e8MoxMk5ikAQVz7nHFuNJ//+GgO1XXwmtZrZdvcz SKIzuU6cWPPuwlU8t4Jj3/cgEVMhD9RvOdBP1HnvdPIhB6GEGrL1pvxLD7uP6nuo 8KR2SYjqYwMVFeb8J6GPYFGagzMqWJAYO1A0M0iqvVoAG5JQ3YirMhE40LLmMDIy PEL44ZdHqGGzC1rfFYh9B5O3d8auFNjH397+2IVafzSQQV3ytOq+NCznCwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKyEopGFzAyZQP1DY1A7v8Sz7jtRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MzOWQ5NTQ3LWRkNWEtNGE3My1hZmIxLTNiZGFlYzY2ODY2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6XBAMA0GCSqGSIb3DQEBCwUAA4IBAQBLgF6W7Hj4h48ibiZp x/lZfBCpSvNWIxzwhWWlEkqUMdZhvHR54caioglr1EQMHxMW3hapoVcLpbXfcTR3 AQkbAxDvzGbxsRSBegcqrzhhaX3iRlgwEAgzUYIKTF9Wsd+Eqxkmz4R8+ZLNZO6n R09ansT34p6PaimbxwFWBcZIr7slZG9iOsAjgCel5fNoGkeQNyFwqlUVXiF566dq whvEXNn4xozN9mvMILoEfVIr4UhpBqd4hDzJN6GElp5S/xYQM1GA7rRhgwCbJkIR ejguH/G7n8YjOE56MN5ClVkObAqA9qTeJ1GRrOf2/+pGfYraiRYTl07Csow/LLuE ELWG -----END CERTIFICATE-----Generated at Wed Aug 26 16:09:11 2026 by rpki-client