$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c3fc267f-2e5e-4424-a92f-f9d2ef6bbb7d.roa File: c3fc267f-2e5e-4424-a92f-f9d2ef6bbb7d.roa (raw, json) Hash identifier: 0WL3hiYLDFKF5TfBi+GKIatGY7zydk00+SHR6qLqtqY= Subject key identifier: A7:3B:6F:F5:86:91:BB:0A:8C:15:21:B9:D4:C9:74:FF:17:2E:65:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 665C44A630D65A84153B711248BDD8BD0B094376 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c3fc267f-2e5e-4424-a92f-f9d2ef6bbb7d.roa Signing time: Wed 05 Aug 2026 00:00:18 +0000 ROA not before: Wed 05 Aug 2026 00:00:18 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5c:44:a6:30:d6:5a:84:15:3b:71:12:48:bd:d8:bd:0b:09:43:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 5 00:00:18 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=a79f2f52987595216c4edc5e396865624a3e1ff81a662dd112a8c68e3cf26aa3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:cf:9a:64:94:63:8c:5c:35:77:8c:f4:54: 22:66:9a:4a:0f:9f:b4:e4:b2:d0:b7:19:61:e3:80: b3:90:d2:96:60:d7:40:a7:d7:1f:06:7a:5b:46:b4: 9e:0d:27:90:88:0f:2f:dc:1a:62:a1:da:87:65:66: 12:fa:95:d8:c7:db:a2:92:45:2d:8d:2e:27:80:71: 09:99:ac:b6:90:3f:8c:59:99:e9:74:ff:4b:fd:e8: 6f:15:0b:8f:6e:82:61:fa:fb:74:2e:a0:ba:04:b5: 12:d0:a5:ff:a3:37:b4:26:62:45:dd:f5:b1:29:eb: 42:9e:cf:34:0e:5f:49:f3:3b:95:e5:89:01:e7:a6: dc:89:c0:66:17:27:0a:33:43:c8:3b:cf:7e:ea:c8: c4:47:53:7d:13:f6:ea:47:7f:20:c4:c8:f6:d3:fa: 85:21:aa:76:51:75:fc:9e:18:04:52:12:f1:47:d0: 36:35:26:3f:92:69:30:e2:4f:a9:a1:80:87:da:1b: 93:de:8f:31:1f:a3:a2:c1:40:b8:71:8a:fd:e1:b6: aa:70:2c:ac:d2:af:db:0d:b3:b7:bb:ac:fa:41:09: e3:ef:0b:9f:7b:66:e2:a6:60:7e:3c:80:e1:6c:e2: 78:0b:72:8d:cb:e3:a8:45:03:3a:30:90:56:90:9d: fc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3B:6F:F5:86:91:BB:0A:8C:15:21:B9:D4:C9:74:FF:17:2E:65:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c3fc267f-2e5e-4424-a92f-f9d2ef6bbb7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:4800::/40 Signature Algorithm: sha256WithRSAEncryption 27:68:fe:27:da:75:c2:fd:66:00:51:cb:2c:70:c9:b8:a2:37: 19:91:95:de:02:26:59:5c:59:37:4a:b6:df:ba:40:eb:f1:c3: 44:f3:5e:82:18:01:9d:c8:83:fa:19:9b:43:d0:24:61:e0:f6: 1f:34:5b:23:0f:e6:40:0d:2e:c2:6b:8e:5f:d3:c9:b1:42:ad: 6f:ec:e2:73:35:56:87:1f:dc:38:f1:e0:b8:3f:91:78:bc:78: 69:50:4d:74:98:cd:f6:28:a8:4b:76:b5:5f:b3:a2:3d:df:29: 2a:96:13:b7:20:c0:5e:10:6c:a2:ec:47:48:a5:dc:01:e4:4a: 7d:77:52:7e:7f:4b:93:eb:2d:be:d7:cb:e2:b1:16:7c:9b:23: c2:67:df:33:f4:f9:36:04:6e:30:db:dd:53:f2:d8:fb:31:20: fd:1d:7a:4a:c3:b3:90:85:12:cb:c6:8d:c2:43:0f:a8:02:18: a3:94:74:c7:df:ab:e8:f4:22:3d:dd:a7:bd:64:63:2c:21:17: ac:8c:f1:47:be:41:fb:e7:0c:74:4d:77:3a:54:0d:54:f8:8f: af:3d:b6:70:3c:da:fb:78:3d:c4:ed:e8:41:b0:25:04:3d:e8: 59:70:1b:a5:09:95:2e:a9:a4:ee:99:7d:09:4e:d0:3f:d7:61: f3:b5:8f:e9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZlxEpjDWWoQVO3ESSL3YvQsJQ3YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNTAwMDAxOFoX DTI2MTEwMzIzNTk1OVowejFJMEcGA1UEBRNAYTc5ZjJmNTI5ODc1OTUyMTZjNGVk YzVlMzk2ODY1NjI0YTNlMWZmODFhNjYyZGQxMTJhOGM2OGUzY2YyNmFhMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvajPmmSUY4xcNXeM9FQiZppKD5+0 5LLQtxlh44CzkNKWYNdAp9cfBnpbRrSeDSeQiA8v3BpiodqHZWYS+pXYx9uikkUt jS4ngHEJmay2kD+MWZnpdP9L/ehvFQuPboJh+vt0LqC6BLUS0KX/oze0JmJF3fWx KetCns80Dl9J8zuV5YkB56bcicBmFycKM0PIO89+6sjER1N9E/bqR38gxMj20/qF Iap2UXX8nhgEUhLxR9A2NSY/kmkw4k+poYCH2huT3o8xH6OiwUC4cYr94baqcCys 0q/bDbO3u6z6QQnj7wufe2bipmB+PIDhbOJ4C3KNy+OoRQM6MJBWkJ38LwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKc7b/WGkbsKjBUhudTJdP8XLmXgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MzZmMyNjdmLTJlNWUtNDQyNC1hOTJmLWY5ZDJlZjZiYmI3ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7UgwDQYJKoZIhvcNAQELBQADggEBACdo/ifadcL9ZgBRyyxw ybiiNxmRld4CJllcWTdKtt+6QOvxw0TzXoIYAZ3Ig/oZm0PQJGHg9h80WyMP5kAN LsJrjl/TybFCrW/s4nM1Vocf3Djx4Lg/kXi8eGlQTXSYzfYoqEt2tV+zoj3fKSqW E7cgwF4QbKLsR0il3AHkSn13Un5/S5PrLb7Xy+KxFnybI8Jn3zP0+TYEbjDb3VPy 2PsxIP0dekrDs5CFEsvGjcJDD6gCGKOUdMffq+j0Ij3dp71kYywhF6yM8Ue+Qfvn DHRNdzpUDVT4j689tnA82vt4PcTt6EGwJQQ96FlwG6UJlS6ppO6ZfQlO0D/XYfO1 j+k= -----END CERTIFICATE-----Generated at Wed Aug 26 16:08:33 2026 by rpki-client