$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e03a5801-427d-4783-a71e-c8578a0ffe7b.roa File: e03a5801-427d-4783-a71e-c8578a0ffe7b.roa (raw, json) Hash identifier: /ZmE/5iMYMXQt4ToXU1mAUlhJ1RMh4ruK8cUaQki5aU= Subject key identifier: 0D:83:AA:EE:46:26:E6:C7:3F:0D:7B:25:88:22:D4:EB:4E:A8:4D:26 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6F80EE59DAD7F2BD92B08C291ED3D3437BEB4810 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e03a5801-427d-4783-a71e-c8578a0ffe7b.roa Signing time: Sat 01 Aug 2026 00:30:38 +0000 ROA not before: Sat 01 Aug 2026 00:30:38 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:80:ee:59:da:d7:f2:bd:92:b0:8c:29:1e:d3:d3:43:7b:eb:48:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:30:38 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=aa42c166178ecbd3bcfbb0f973834f40ff7c423898625e7662e08efa1979ca93, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:64:44:84:89:8f:a0:d4:89:98:b4:e2:08:64: 6b:55:cf:46:1b:b6:90:13:15:9f:3a:b4:dc:17:4f: c3:4e:0f:59:ab:08:fe:ad:27:a6:c3:a2:ea:68:75: 98:1d:3f:81:fb:1d:0f:fe:44:3e:34:1f:5a:f1:87: 08:eb:4e:90:33:22:03:63:2e:80:0e:ca:03:94:55: 3b:72:4b:56:43:3f:2a:53:3b:ed:24:05:75:40:c6: 51:3c:e7:bc:8f:5d:6b:4d:0c:dd:5b:81:c1:52:ae: 51:0a:dd:c5:d8:c0:51:55:dd:a5:c1:8b:d1:04:54: 21:36:ac:f9:89:db:bd:68:dc:b5:ce:e0:e4:88:1b: b5:e6:56:05:f1:5a:85:21:53:e0:7f:a2:32:4d:e0: a6:71:17:9b:dc:79:a1:b1:82:93:9d:7c:1e:6b:b2: 4e:1d:8b:b0:e8:b9:76:15:a5:fe:b2:f2:b0:ca:81: c4:d1:b0:ca:53:e5:30:23:57:14:0e:b5:fa:72:19: 8e:35:68:d0:95:25:e9:13:dc:c5:80:04:4e:1a:f7: cd:c5:56:30:8f:97:5b:d0:6d:cc:e1:e9:ce:00:10: e7:31:d4:d1:46:56:29:0e:5b:8c:81:e3:a0:3b:2e: 22:2a:56:27:6a:13:e5:d1:d1:d4:54:dc:67:38:79: bd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:83:AA:EE:46:26:E6:C7:3F:0D:7B:25:88:22:D4:EB:4E:A8:4D:26 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e03a5801-427d-4783-a71e-c8578a0ffe7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:4800::/40 Signature Algorithm: sha256WithRSAEncryption c5:75:0e:bc:4d:d8:4e:ce:4c:6c:a1:dd:c1:47:9f:7c:da:fb: ff:45:c5:cc:02:9c:24:f4:0c:11:7a:9e:12:9b:f7:1c:ff:63: 2f:75:0b:d8:05:01:cc:2f:45:3d:a3:27:86:e4:a9:10:fe:c0: 79:7a:11:bd:ac:f2:75:8c:0d:4e:f9:92:dc:17:ab:17:61:cc: 65:82:e6:57:68:e1:79:cf:34:3c:33:dd:97:24:4f:bb:0d:f6: 53:d0:27:fc:e0:7b:e1:ac:78:83:aa:28:5b:c0:1b:83:2e:4b: ab:4c:04:2c:05:c2:ec:c5:39:ab:53:c8:50:9b:a0:fc:61:df: ba:f2:2f:ef:5f:42:12:23:f1:ce:0b:62:77:dd:03:4d:af:cd: 53:e7:e0:da:9d:07:9f:67:c8:fd:53:5f:ce:1c:8b:28:14:ef: 74:9d:6b:1e:97:d5:cc:eb:15:04:89:6f:70:44:68:12:71:20: ca:bd:c5:bb:cd:de:55:ca:74:fd:49:2e:34:88:ba:a5:9b:d0: fd:f8:c6:83:0b:9d:3f:8f:78:aa:ab:de:65:c6:1a:41:af:8c: a4:a4:d2:b7:32:86:d4:93:2b:bb:6c:b5:b1:53:6b:19:46:4e: d3:3c:3f:e9:25:1b:f2:fb:64:76:cf:60:60:8b:7a:3d:7a:6c: d4:52:00:38 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUb4DuWdrX8r2SsIwpHtPTQ3vrSBAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMzAzOFoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAYWE0MmMxNjYxNzhlY2JkM2JjZmJi MGY5NzM4MzRmNDBmZjdjNDIzODk4NjI1ZTc2NjJlMDhlZmExOTc5Y2E5MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WREhImPoNSJmLTiCGRrVc9GG7aQ ExWfOrTcF0/DTg9Zqwj+rSemw6LqaHWYHT+B+x0P/kQ+NB9a8YcI606QMyIDYy6A DsoDlFU7cktWQz8qUzvtJAV1QMZRPOe8j11rTQzdW4HBUq5RCt3F2MBRVd2lwYvR BFQhNqz5idu9aNy1zuDkiBu15lYF8VqFIVPgf6IyTeCmcReb3HmhsYKTnXwea7JO HYuw6Ll2FaX+svKwyoHE0bDKU+UwI1cUDrX6chmONWjQlSXpE9zFgAROGvfNxVYw j5db0G3M4enOABDnMdTRRlYpDluMgeOgOy4iKlYnahPl0dHUVNxnOHm9FwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA2Dqu5GJubHPw17JYgi1OtOqE0mMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwM2E1ODAxLTQyN2QtNDc4My1hNzFlLWM4NTc4YTBmZmU3Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9UgwDQYJKoZIhvcNAQELBQADggEBAMV1DrxN2E7OTGyh3cFH n3za+/9FxcwCnCT0DBF6nhKb9xz/Yy91C9gFAcwvRT2jJ4bkqRD+wHl6Eb2s8nWM DU75ktwXqxdhzGWC5ldo4XnPNDwz3ZckT7sN9lPQJ/zge+GseIOqKFvAG4MuS6tM BCwFwuzFOatTyFCboPxh37ryL+9fQhIj8c4LYnfdA02vzVPn4NqdB59nyP1TX84c iygU73Sdax6X1czrFQSJb3BEaBJxIMq9xbvN3lXKdP1JLjSIuqWb0P34xoMLnT+P eKqr3mXGGkGvjKSk0rcyhtSTK7tstbFTaxlGTtM8P+klG/L7ZHbPYGCLej16bNRS ADg= -----END CERTIFICATE-----Generated at Wed Aug 26 09:43:54 2026 by rpki-client