$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df44c7e7-c5c4-457a-88c9-cb413942cb7f.roa File: df44c7e7-c5c4-457a-88c9-cb413942cb7f.roa (raw, json) Hash identifier: 7bLR9+RypSJnmRFdaarLwdFNfy8py0W+sU+aE0dKniU= Subject key identifier: 4D:0E:B7:44:8C:24:47:C5:6B:12:EC:4E:24:10:AC:82:32:BD:BB:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A51FC1570B5AB0A6ECF9044FA871311D888FB8B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df44c7e7-c5c4-457a-88c9-cb413942cb7f.roa Signing time: Fri 07 Aug 2026 00:00:13 +0000 ROA not before: Fri 07 Aug 2026 00:00:13 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:51:fc:15:70:b5:ab:0a:6e:cf:90:44:fa:87:13:11:d8:88:fb:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 7 00:00:13 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=e984c081378587b021fa09d7821b12fb75241eb81e5284b70a1e4f88417ca2ac, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:ba:06:da:af:4c:f0:ec:fc:d3:71:5d:aa: 7f:20:58:aa:8a:46:b5:54:52:a4:11:29:3a:89:32: dc:17:99:72:99:4e:36:6c:c9:43:d8:54:c0:fc:ed: 81:3a:55:0e:35:d4:a1:f1:8d:6d:3f:83:8d:68:3a: ab:08:c5:fb:22:63:21:97:a4:c9:4d:0d:97:1b:f1: 75:9c:58:39:28:c8:ca:3f:e0:34:62:21:90:11:5b: 7b:e1:07:18:00:3d:65:9a:68:39:08:c1:ee:cb:d6: 6a:a1:85:fc:3d:84:a3:b1:af:46:a8:7a:5d:19:75: 19:54:e5:3c:8a:89:1c:84:56:cf:9b:4b:9b:24:97: 61:23:8b:fe:52:87:87:84:53:27:a7:59:5a:ca:e8: 59:be:dc:77:e1:e2:ac:82:ac:70:25:00:1e:c2:3e: 4c:92:7d:96:d0:0e:70:18:5e:06:cf:48:1f:e4:ed: 7e:cb:6d:19:59:98:50:56:31:8f:55:a8:52:c3:6b: f4:0a:09:10:5f:00:80:75:7b:9e:af:75:df:ae:6d: 98:63:6d:7a:3c:81:8e:b1:7c:8e:6a:19:a9:79:fa: f0:47:8e:5f:ca:f0:02:27:04:05:3d:af:67:b0:c1: de:1c:80:00:e2:36:d3:b2:4b:b6:65:bc:73:13:cf: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0E:B7:44:8C:24:47:C5:6B:12:EC:4E:24:10:AC:82:32:BD:BB:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df44c7e7-c5c4-457a-88c9-cb413942cb7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:4800::/40 Signature Algorithm: sha256WithRSAEncryption 1c:90:96:ec:bf:f7:24:bb:b2:db:bd:a5:ab:91:d3:fa:9d:8b: 0a:81:78:a5:c3:98:f3:47:04:43:90:58:66:4e:44:09:17:f8: 2a:74:6a:2a:df:b6:76:bb:1c:f9:b9:83:32:47:b2:af:03:32: 4d:d8:91:8a:d3:41:5a:5f:a0:35:1e:1f:0d:ce:7a:73:0e:17: 09:fb:7e:71:24:64:50:63:d3:b5:43:8d:ce:24:7a:72:87:f7: 23:0c:01:5d:99:29:42:66:52:c6:36:d2:aa:66:22:71:cc:19: 2c:23:01:43:11:56:ed:3e:27:ef:77:53:6e:ab:ce:7a:c7:a7: cd:75:af:d8:a8:bd:be:b5:46:e3:e3:89:fa:94:7c:ae:08:6a: a5:94:a3:d7:08:13:82:07:55:82:6c:a9:f2:cc:11:2c:d4:91: c0:6b:a8:98:7b:2d:63:79:68:ad:7a:e7:37:81:96:5f:f0:14: 84:31:62:e0:58:97:d9:ab:2d:06:f8:0c:3e:e3:c5:b8:cb:d0: 3a:34:ec:de:08:51:84:7c:16:9c:ff:14:21:74:3c:38:17:cf: c1:92:03:42:3d:32:4a:b1:39:f6:5c:e6:ba:f3:21:1b:9e:6f: 9d:bd:93:cb:84:b0:0a:b1:fe:85:01:20:e7:00:39:d3:14:36: e6:44:e9:f6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUelH8FXC1qwpuz5BE+ocTEdiI+4swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNzAwMDAxM1oX DTI2MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAZTk4NGMwODEzNzg1ODdiMDIxZmEw OWQ3ODIxYjEyZmI3NTI0MWViODFlNTI4NGI3MGExZTRmODg0MTdjYTJhYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxi6BtqvTPDs/NNxXap/IFiqika1 VFKkESk6iTLcF5lymU42bMlD2FTA/O2BOlUONdSh8Y1tP4ONaDqrCMX7ImMhl6TJ TQ2XG/F1nFg5KMjKP+A0YiGQEVt74QcYAD1lmmg5CMHuy9ZqoYX8PYSjsa9GqHpd GXUZVOU8iokchFbPm0ubJJdhI4v+UoeHhFMnp1layuhZvtx34eKsgqxwJQAewj5M kn2W0A5wGF4Gz0gf5O1+y20ZWZhQVjGPVahSw2v0CgkQXwCAdXuer3Xfrm2YY216 PIGOsXyOahmpefrwR45fyvACJwQFPa9nsMHeHIAA4jbTsku2ZbxzE8+28QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE0Ot0SMJEfFaxLsTiQQrIIyvbtYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmNDRjN2U3LWM1YzQtNDU3YS04OGM5LWNiNDEzOTQyY2I3Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba70gwDQYJKoZIhvcNAQELBQADggEBAByQluy/9yS7stu9pauR 0/qdiwqBeKXDmPNHBEOQWGZORAkX+Cp0airftna7HPm5gzJHsq8DMk3YkYrTQVpf oDUeHw3OenMOFwn7fnEkZFBj07VDjc4kenKH9yMMAV2ZKUJmUsY20qpmInHMGSwj AUMRVu0+J+93U26rznrHp811r9iovb61RuPjifqUfK4IaqWUo9cIE4IHVYJsqfLM ESzUkcBrqJh7LWN5aK165zeBll/wFIQxYuBYl9mrLQb4DD7jxbjL0Do07N4IUYR8 Fpz/FCF0PDgXz8GSA0I9MkqxOfZc5rrzIRueb529k8uEsAqx/oUBIOcAOdMUNuZE 6fY= -----END CERTIFICATE-----Generated at Wed Aug 26 08:04:42 2026 by rpki-client