$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07764e8-f635-4cf8-8330-8cffc6056fd8.roa File: e07764e8-f635-4cf8-8330-8cffc6056fd8.roa (raw, json) Hash identifier: n0I1FkG09MlI+RDFMMD3L7LH+n6KHTbSzc6m2/vlmpA= Subject key identifier: 1D:65:CC:11:0F:E4:D7:80:2C:0B:97:4F:68:4E:EA:E5:DC:07:95:E8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E002566D667D6A37930DAA0E368865A5FB01E2D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07764e8-f635-4cf8-8330-8cffc6056fd8.roa Signing time: Sat 01 Aug 2026 00:20:12 +0000 ROA not before: Sat 01 Aug 2026 00:20:12 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:00:25:66:d6:67:d6:a3:79:30:da:a0:e3:68:86:5a:5f:b0:1e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:20:12 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=8b6ec6636100dbc874d249e8d2a2d21e9c1a2da9796a6d57f9b01c302853eb31, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:8a:5e:b5:df:bb:e2:d0:49:66:9d:36:71: 3a:66:ae:75:a9:d3:cf:a0:09:e4:90:db:86:4e:8c: 82:8d:ce:6b:54:34:0f:92:13:9f:ed:0b:c5:22:21: 1a:65:21:79:78:f5:58:d8:d2:2e:5f:21:c2:03:83: ce:75:f4:af:ec:a6:e5:2e:25:eb:9c:a4:16:ba:b5: 86:bf:56:b1:bb:cd:42:b3:b0:9c:65:d0:a4:50:ef: 64:a7:d1:54:a1:1b:d1:0a:b6:03:db:d4:c4:b5:0b: 75:9a:aa:96:8f:94:a3:a4:b1:e3:98:4c:fb:96:6c: 01:95:ae:a4:f2:a2:e3:fc:91:36:f3:39:11:7f:72: ed:f9:71:e5:2e:d6:ad:7c:8a:a1:fa:ec:5f:a6:11: 62:56:bd:ec:80:b7:27:5d:51:72:7e:e0:ed:da:13: 44:4d:9b:9c:26:12:e9:88:a1:a6:52:c7:5d:06:6c: cb:d8:99:2d:ee:29:30:69:f4:c1:20:e2:f0:f2:c4: 6f:e7:76:35:12:4f:01:88:fb:9c:2d:90:12:25:55: 7f:81:ac:8d:07:26:ee:6c:78:d3:65:80:7f:53:2a: 02:67:9f:96:9f:c0:04:82:36:7a:65:48:77:6d:9d: ad:38:f6:b6:ff:26:4a:86:20:38:28:30:0a:d3:11: c4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:65:CC:11:0F:E4:D7:80:2C:0B:97:4F:68:4E:EA:E5:DC:07:95:E8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07764e8-f635-4cf8-8330-8cffc6056fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14::/35 Signature Algorithm: sha256WithRSAEncryption c5:75:c7:93:d1:fa:b5:e6:27:d6:34:fc:da:03:be:ad:fa:f8: 86:8e:95:bd:5e:3b:a8:05:a8:b3:52:8f:a5:9a:88:bc:87:ab: af:40:63:a9:df:d2:7c:b8:6e:70:c9:b3:0f:7d:bb:33:49:34: f8:b6:fe:aa:27:4e:83:83:49:c0:14:bd:51:03:cf:e0:2d:36: 70:7b:6b:54:0c:2f:6a:4f:51:97:9a:aa:36:7d:26:90:63:79: 32:74:e2:f5:e1:eb:68:3f:33:66:8f:c2:19:89:27:99:46:8f: a1:06:77:11:1a:21:cf:57:8a:5b:33:1f:3b:de:66:2c:3d:12: 03:0e:04:68:4a:0a:bc:51:5c:81:49:4d:75:65:bf:d4:e5:7a: 16:53:88:a4:43:d2:ec:f8:f0:c0:e3:fa:ab:66:81:f8:5e:f1: fd:31:cb:b1:50:07:a5:b4:88:d0:d7:a6:47:5f:30:8f:fd:71: 1e:2d:84:8d:1d:bb:5b:6f:9c:38:06:05:17:c0:84:a0:24:91: f4:92:47:ec:46:e0:e3:06:dd:27:29:6d:0d:3d:b9:55:01:3c: 2c:53:73:40:f2:ce:86:fa:d7:55:a1:92:c2:70:a9:53:e4:36: 78:83:ba:c6:a2:49:66:23:23:e3:5d:e7:68:ff:cc:2a:2b:75: ef:0e:f8:02 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbgAlZtZn1qN5MNqg42iGWl+wHi0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMjAxMloX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAOGI2ZWM2NjM2MTAwZGJjODc0ZDI0 OWU4ZDJhMmQyMWU5YzFhMmRhOTc5NmE2ZDU3ZjliMDFjMzAyODUzZWIzMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ2KXrXfu+LQSWadNnE6Zq51qdPP oAnkkNuGToyCjc5rVDQPkhOf7QvFIiEaZSF5ePVY2NIuXyHCA4POdfSv7KblLiXr nKQWurWGv1axu81Cs7CcZdCkUO9kp9FUoRvRCrYD29TEtQt1mqqWj5SjpLHjmEz7 lmwBla6k8qLj/JE28zkRf3Lt+XHlLtatfIqh+uxfphFiVr3sgLcnXVFyfuDt2hNE TZucJhLpiKGmUsddBmzL2Jkt7ikwafTBIOLw8sRv53Y1Ek8BiPucLZASJVV/gayN BybubHjTZYB/UyoCZ5+Wn8AEgjZ6ZUh3bZ2tOPa2/yZKhiA4KDAK0xHE4QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB1lzBEP5NeALAuXT2hO6uXcB5XoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwNzc2NGU4LWY2MzUtNGNmOC04MzMwLThjZmZjNjA1NmZkOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYFJAbaFAAwDQYJKoZIhvcNAQELBQADggEBAMV1x5PR+rXmJ9Y0/NoD vq36+IaOlb1eO6gFqLNSj6WaiLyHq69AY6nf0ny4bnDJsw99uzNJNPi2/qonToOD ScAUvVEDz+AtNnB7a1QML2pPUZeaqjZ9JpBjeTJ04vXh62g/M2aPwhmJJ5lGj6EG dxEaIc9XilszHzveZiw9EgMOBGhKCrxRXIFJTXVlv9TlehZTiKRD0uz48MDj+qtm gfhe8f0xy7FQB6W0iNDXpkdfMI/9cR4thI0du1tvnDgGBRfAhKAkkfSSR+xG4OMG 3ScpbQ09uVUBPCxTc0Dyzob611WhksJwqVPkNniDusaiSWYjI+Nd52j/zCorde8O +AI= -----END CERTIFICATE-----Generated at Wed Aug 26 00:38:45 2026 by rpki-client