$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d89da8f5-4793-4756-9fbb-ea436d60233a.roa File: d89da8f5-4793-4756-9fbb-ea436d60233a.roa (raw, json) Hash identifier: sqJx4SdNubXg/SPfktiZHUbKly2w7XpMtprfBfouuNM= Subject key identifier: 8B:DA:B2:96:90:17:24:DE:E7:7E:7A:3B:A9:23:C7:E3:A8:1F:65:80 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5563D9E8D5438598896C230ED66EB7183B37B3B3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d89da8f5-4793-4756-9fbb-ea436d60233a.roa Signing time: Wed 19 Aug 2026 00:10:29 +0000 ROA not before: Wed 19 Aug 2026 00:10:29 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:63:d9:e8:d5:43:85:98:89:6c:23:0e:d6:6e:b7:18:3b:37:b3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:29 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=bb7f1de3d1825bddc71af7c73f1d0fed9f802d80475d6f03bfcc7c4a60eff22a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:3a:a0:cc:95:48:92:6e:30:fd:af:c2:37: 0d:90:88:c2:59:b7:7f:66:17:a6:d3:45:42:78:7c: e7:15:64:fb:ed:f9:b5:b5:7f:e1:32:af:69:8e:11: 53:65:0a:a3:b7:6e:88:9d:7e:36:60:fc:53:06:58: 05:e9:54:fa:59:28:68:76:8d:3d:77:f3:5d:e5:5c: 7f:1c:1b:a8:d2:14:aa:9c:7e:f4:5f:bb:f9:db:78: 4d:0b:fe:41:e3:d4:9a:27:59:5e:df:95:7f:68:9c: 9a:73:6b:a4:43:42:26:28:49:a2:75:72:6b:92:d7: 57:d1:27:d2:dc:2b:09:d9:30:85:25:96:e4:03:e5: c3:1e:25:85:16:c8:70:52:98:16:27:13:dd:e1:44: 70:ab:cf:a3:c4:ba:86:80:ee:be:c0:9b:99:63:fd: 09:ea:1c:44:ee:12:48:ee:8c:ab:31:00:32:0b:f6: 8f:27:d5:b5:98:ca:2e:e9:e0:a0:da:74:ac:d2:f1: 7f:be:09:5a:9f:3f:42:95:1f:6f:0a:c5:93:aa:db: c3:3b:6d:dc:51:07:5b:73:fd:be:73:57:0c:99:c8: 64:90:bb:dd:03:65:0a:91:bf:7f:c2:8b:1d:7f:17: 0a:af:23:3c:20:a4:d3:80:b6:82:dc:d3:b5:d3:22: 28:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DA:B2:96:90:17:24:DE:E7:7E:7A:3B:A9:23:C7:E3:A8:1F:65:80 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d89da8f5-4793-4756-9fbb-ea436d60233a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:90c0::/48 Signature Algorithm: sha256WithRSAEncryption a4:d8:91:26:c8:c8:ad:90:66:7c:07:0b:95:2e:7e:cf:d7:a9: 41:48:89:d4:4f:4f:5d:f9:2f:6f:5a:f0:a0:7e:d0:65:f8:28: 15:54:b9:3a:18:f8:24:c9:9a:c1:8d:07:37:ed:33:3c:9c:ad: af:fe:3a:31:35:81:a8:92:85:85:8d:86:eb:22:b7:4c:14:71: e8:3d:24:bb:1e:ef:86:07:60:90:42:ac:44:c0:b1:b7:02:23: fb:78:55:8c:29:15:2b:11:23:b6:c3:67:e4:9b:3a:c0:6f:1d: 83:65:27:82:78:2f:b9:a2:53:27:1a:b0:7e:81:97:a0:e0:c3: 5f:f9:f7:e0:4a:4e:4b:1e:dc:12:24:71:c4:66:be:36:77:98: 7f:20:8f:a0:b3:8c:ea:dd:53:f4:f8:f4:8e:de:2a:44:47:e6: 8e:83:21:aa:92:b7:8e:48:4c:33:41:fb:ca:e6:aa:67:f6:fc: d1:0c:c9:1e:77:a9:55:85:71:77:1f:d4:ba:2b:ad:b1:8a:f9: bd:2d:d6:2e:d1:5f:0c:ef:f2:2b:bb:c6:51:4c:65:6a:df:3d: d9:1c:5d:68:7d:d0:93:5a:9b:c7:af:74:7b:97:09:ad:3f:33: 5f:e2:4d:10:7d:63:80:22:07:25:90:4f:71:61:d9:4c:0f:10: 9d:a5:4a:d8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVWPZ6NVDhZiJbCMO1m63GDs3s7MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTAyOVoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAYmI3ZjFkZTNkMTgyNWJkZGM3MWFm N2M3M2YxZDBmZWQ5ZjgwMmQ4MDQ3NWQ2ZjAzYmZjYzdjNGE2MGVmZjIyYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yw6oMyVSJJuMP2vwjcNkIjCWbd/ Zhem00VCeHznFWT77fm1tX/hMq9pjhFTZQqjt26InX42YPxTBlgF6VT6WShodo09 d/Nd5Vx/HBuo0hSqnH70X7v523hNC/5B49SaJ1le35V/aJyac2ukQ0ImKEmidXJr ktdX0SfS3CsJ2TCFJZbkA+XDHiWFFshwUpgWJxPd4URwq8+jxLqGgO6+wJuZY/0J 6hxE7hJI7oyrMQAyC/aPJ9W1mMou6eCg2nSs0vF/vglanz9ClR9vCsWTqtvDO23c UQdbc/2+c1cMmchkkLvdA2UKkb9/wosdfxcKryM8IKTTgLaC3NO10yIoUQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIvaspaQFyTe5356O6kjx+OoH2WAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4OWRhOGY1LTQ3OTMtNDc1Ni05ZmJiLWVhNDM2ZDYwMjMzYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ZDAMA0GCSqGSIb3DQEBCwUAA4IBAQCk2JEmyMitkGZ8BwuV Ln7P16lBSInUT09d+S9vWvCgftBl+CgVVLk6GPgkyZrBjQc37TM8nK2v/joxNYGo koWFjYbrIrdMFHHoPSS7Hu+GB2CQQqxEwLG3AiP7eFWMKRUrESO2w2fkmzrAbx2D ZSeCeC+5olMnGrB+gZeg4MNf+ffgSk5LHtwSJHHEZr42d5h/II+gs4zq3VP0+PSO 3ipER+aOgyGqkreOSEwzQfvK5qpn9vzRDMked6lVhXF3H9S6K62xivm9LdYu0V8M 7/Iru8ZRTGVq3z3ZHF1ofdCTWpvHr3R7lwmtPzNf4k0QfWOAIgclkE9xYdlMDxCd pUrY -----END CERTIFICATE-----Generated at Wed Aug 26 16:07:23 2026 by rpki-client