$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8aaf1e0-d7db-4b43-90a1-67c7e3b5a145.roa File: c8aaf1e0-d7db-4b43-90a1-67c7e3b5a145.roa (raw, json) Hash identifier: tYkk6OWSn6Q2JHk4NJjAqYw9BHX0j9GLS8euMBhFqEE= Subject key identifier: 9A:54:81:D9:22:62:58:75:38:F3:AF:24:0A:AE:59:EB:BA:BA:AB:83 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 713914B884A4F55A81A42A449260C7426C4EE2FF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8aaf1e0-d7db-4b43-90a1-67c7e3b5a145.roa Signing time: Mon 10 Aug 2026 00:01:08 +0000 ROA not before: Mon 10 Aug 2026 00:01:08 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:39:14:b8:84:a4:f5:5a:81:a4:2a:44:92:60:c7:42:6c:4e:e2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:01:08 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=97803c72abd2f9a54fcb6d7dc9357fb7e9dcc238f689dd007087771cedc2be00, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f2:25:ab:ce:fd:c0:2f:ac:21:23:47:bd:81: 4e:80:84:56:b0:91:55:c2:5c:90:28:9b:40:6d:33: 6e:b5:65:76:44:dc:59:19:e7:62:e5:c6:31:bd:fb: 2b:3a:c8:ca:73:1d:fe:f3:d6:a5:50:aa:91:3b:f7: ca:aa:43:b8:8b:aa:c0:2c:94:bc:cd:93:9a:bc:90: dc:1b:87:e2:6d:73:2b:1f:04:f9:1f:c7:ef:df:00: af:7f:de:fb:2e:4b:05:83:c2:62:85:2c:f4:6f:e6: 5c:ef:68:3d:07:b8:1e:9a:3f:81:5f:17:3e:1b:9e: 28:66:8e:f0:43:64:97:d0:94:7c:51:43:2d:0a:5a: 1b:e7:7a:10:24:da:31:8a:5b:28:b7:39:c2:6a:58: 9f:a9:6f:cd:89:af:39:e2:f8:40:9c:79:69:cd:19: 77:c6:99:9e:74:43:98:ee:91:11:a6:08:f9:11:f5: 5c:d7:bd:55:a6:e0:74:6c:40:03:aa:6d:23:37:16: cc:d1:49:bb:61:85:29:3c:51:47:f7:b5:6c:c4:d0: da:02:98:e7:11:b2:ff:4e:31:6d:57:85:72:8a:01: 12:b0:0e:68:84:ef:3e:51:f0:b4:2f:3b:35:5c:32: 5b:00:87:48:53:3d:2c:df:91:9f:2e:b2:0f:3c:ae: f0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:54:81:D9:22:62:58:75:38:F3:AF:24:0A:AE:59:EB:BA:BA:AB:83 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8aaf1e0-d7db-4b43-90a1-67c7e3b5a145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:2000::/40 Signature Algorithm: sha256WithRSAEncryption 44:a5:d3:33:bd:4b:b3:33:b6:62:4d:09:0b:dd:c4:27:43:96: 8f:4a:57:b8:16:fe:df:a9:34:a3:cf:99:e1:0c:84:45:3d:f2: 42:db:44:4e:43:ba:a2:df:bc:d1:bd:05:e6:cf:0a:60:c0:35: c1:78:e0:ce:53:5e:ac:87:b6:57:14:5b:79:62:62:54:e1:b1: 67:bb:b1:e6:48:84:e0:3b:16:32:6d:76:62:9e:d4:be:ee:54: a4:2c:29:9b:ea:4e:bc:8b:3d:73:74:e1:0a:df:b6:fd:93:0a: ec:12:f9:7d:ac:d7:0c:de:60:ca:a3:7f:a9:53:a7:71:86:93: f2:b1:26:d4:23:bc:e1:ce:f4:ab:20:2d:0c:6e:11:31:84:87: 18:08:e8:b9:10:ed:59:95:14:78:a4:b2:f4:3d:3a:3f:66:ac: bc:51:eb:ca:be:a2:ad:58:ba:17:f3:9a:5f:24:cd:03:e4:01: f0:5b:b4:64:30:d3:e8:1c:86:27:15:45:3f:b4:dd:3b:f7:8f: 54:a7:ca:e6:32:a2:3c:96:3e:a5:cb:16:dd:81:47:6b:94:b0: e1:2f:ad:3d:33:a6:a1:df:78:28:60:d6:57:04:19:52:c3:b8: 9b:d7:a9:e7:43:58:7d:69:26:61:6a:d1:94:4a:e0:7d:3b:94: 2c:5c:c5:cc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcTkUuISk9VqBpCpEkmDHQmxO4v8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDEwOFoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAOTc4MDNjNzJhYmQyZjlhNTRmY2I2 ZDdkYzkzNTdmYjdlOWRjYzIzOGY2ODlkZDAwNzA4Nzc3MWNlZGMyYmUwMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vIlq879wC+sISNHvYFOgIRWsJFV wlyQKJtAbTNutWV2RNxZGedi5cYxvfsrOsjKcx3+89alUKqRO/fKqkO4i6rALJS8 zZOavJDcG4fibXMrHwT5H8fv3wCvf977LksFg8JihSz0b+Zc72g9B7gemj+BXxc+ G54oZo7wQ2SX0JR8UUMtClob53oQJNoxilsotznCalifqW/Nia854vhAnHlpzRl3 xpmedEOY7pERpgj5EfVc171VpuB0bEADqm0jNxbM0Um7YYUpPFFH97VsxNDaApjn EbL/TjFtV4VyigESsA5ohO8+UfC0Lzs1XDJbAIdIUz0s35GfLrIPPK7wAwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJpUgdkiYlh1OPOvJAquWeu6uquDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M4YWFmMWUwLWQ3ZGItNGI0My05MGExLTY3YzdlM2I1YTE0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYSAwDQYJKoZIhvcNAQELBQADggEBAESl0zO9S7MztmJNCQvd xCdDlo9KV7gW/t+pNKPPmeEMhEU98kLbRE5DuqLfvNG9BebPCmDANcF44M5TXqyH tlcUW3liYlThsWe7seZIhOA7FjJtdmKe1L7uVKQsKZvqTryLPXN04Qrftv2TCuwS +X2s1wzeYMqjf6lTp3GGk/KxJtQjvOHO9KsgLQxuETGEhxgI6LkQ7VmVFHiksvQ9 Oj9mrLxR68q+oq1Yuhfzml8kzQPkAfBbtGQw0+gchicVRT+03Tv3j1SnyuYyojyW PqXLFt2BR2uUsOEvrT0zpqHfeChg1lcEGVLDuJvXqedDWH1pJmFq0ZRK4H07lCxc xcw= -----END CERTIFICATE-----Generated at Wed Aug 26 18:16:57 2026 by rpki-client