$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa File: e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa (raw, json) Hash identifier: 8jj3VmMv8FnpfG8I9KwYKYPgtQ8arNPzhDVXFqM9sUw= Subject key identifier: 4A:41:2D:19:80:59:2F:B5:37:15:D5:1E:75:63:5F:C9:1A:86:F8:66 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6583C625C8A8E975137DBDBC1682DAC1C131CB3F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa Signing time: Tue 28 Jul 2026 00:00:09 +0000 ROA not before: Tue 28 Jul 2026 00:00:09 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:83:c6:25:c8:a8:e9:75:13:7d:bd:bc:16:82:da:c1:c1:31:cb:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 00:00:09 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=ae8665ed83ec3f3c51aa374140bf7128553fc862cabd8990f112b5b784d9f089, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:37:3c:22:a8:69:ca:af:85:ad:d7:19:5d: ae:2f:f3:7f:e9:7a:03:37:5a:57:b4:fc:44:65:4d: 4c:11:22:c8:0f:25:2c:f7:68:ff:a7:c1:36:b5:e3: 80:5a:67:a1:4d:33:07:c9:e8:f1:97:f1:71:0d:b0: a9:0a:61:e0:19:a4:ed:b3:61:52:4e:3c:67:7a:55: 3a:ca:ef:1e:19:be:93:3d:19:3c:0a:a3:d3:bf:22: 5e:04:df:45:48:9d:56:92:ac:5b:58:22:03:de:ab: c6:54:1b:1c:9a:af:22:89:7e:2c:64:c9:e6:c2:15: e4:d1:3a:2b:d5:8a:51:d6:22:03:1e:88:45:17:b5: 98:49:0d:ea:04:35:e5:f8:f8:fd:ce:3d:a5:aa:f3: a2:c4:df:6d:30:1e:88:d7:e9:a8:0f:55:d2:cd:53: b4:b4:15:cd:b3:a2:f5:8d:80:bf:91:95:7b:62:0d: 28:98:93:8d:20:c7:ea:f7:1c:aa:17:2d:2b:f5:21: d7:a9:71:04:96:6c:d0:10:3a:6c:39:91:4d:dd:6d: f1:da:b4:04:d2:ac:b8:bf:97:10:46:97:b7:9d:b9: 4f:6c:37:65:61:2f:64:cf:a0:0e:49:57:7d:ff:76: 39:56:af:3f:f5:91:64:d3:7b:7b:23:13:0d:57:83: 72:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:41:2D:19:80:59:2F:B5:37:15:D5:1E:75:63:5F:C9:1A:86:F8:66 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:b080::/48 Signature Algorithm: sha256WithRSAEncryption 2c:b8:3a:fd:4b:5c:d7:29:3d:8d:aa:18:8a:11:20:a0:40:7d: e1:55:5e:2b:29:4f:5f:6e:c7:56:90:9c:a3:5e:2d:2b:0b:81: 89:f8:84:43:69:b7:7f:f3:8e:a6:46:e8:ac:d6:3b:a7:30:8b: a8:01:b3:a0:bf:a2:c4:68:82:2b:75:92:d7:b6:cd:29:33:3c: 98:f8:a2:39:e1:1b:d6:f6:37:17:b9:e7:e6:36:28:bf:8d:06: 17:0e:83:64:ad:9b:15:de:38:9f:a8:17:8a:1b:da:81:20:8a: 9e:3e:ec:ed:06:f5:5c:8a:fd:25:25:a1:22:30:1b:93:a1:6f: de:fc:4e:6a:5a:fc:a9:74:21:31:4d:29:52:64:21:fb:55:12: 2a:45:f3:ca:f6:34:26:ec:c4:19:a2:77:52:e1:9d:85:dd:60: 17:bd:ca:bc:43:76:44:61:62:7e:78:d4:44:f2:55:40:11:26: 7b:44:bc:02:6c:6a:fd:5e:25:36:14:cf:a9:0a:35:80:23:75: 8e:11:6d:18:0b:e4:da:6d:4f:30:89:1d:b6:06:c2:3a:10:66: 94:4b:1f:43:25:62:de:8d:1d:f1:d0:1e:7d:53:2e:ad:a2:9b: 16:dd:0e:f5:3b:d0:cc:6a:f2:9b:42:5a:29:ed:cb:d4:fb:7b: 53:ed:a1:90 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZYPGJcio6XUTfb28FoLawcExyz8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyODAwMDAwOVoX DTI2MTAyNjIzNTk1OVowejFJMEcGA1UEBRNAYWU4NjY1ZWQ4M2VjM2YzYzUxYWEz NzQxNDBiZjcxMjg1NTNmYzg2MmNhYmQ4OTkwZjExMmI1Yjc4NGQ5ZjA4OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg03PCKoacqvha3XGV2uL/N/6XoD N1pXtPxEZU1MESLIDyUs92j/p8E2teOAWmehTTMHyejxl/FxDbCpCmHgGaTts2FS TjxnelU6yu8eGb6TPRk8CqPTvyJeBN9FSJ1WkqxbWCID3qvGVBscmq8iiX4sZMnm whXk0Tor1YpR1iIDHohFF7WYSQ3qBDXl+Pj9zj2lqvOixN9tMB6I1+moD1XSzVO0 tBXNs6L1jYC/kZV7Yg0omJONIMfq9xyqFy0r9SHXqXEElmzQEDpsOZFN3W3x2rQE 0qy4v5cQRpe3nblPbDdlYS9kz6AOSVd9/3Y5Vq8/9ZFk03t7IxMNV4NybwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEpBLRmAWS+1NxXVHnVjX8kahvhmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxYjBmNzM0LTRkZDUtNGQ2Yi1iNTYwLTIwNDAyNWExYjJlZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8rCAMA0GCSqGSIb3DQEBCwUAA4IBAQAsuDr9S1zXKT2NqhiK ESCgQH3hVV4rKU9fbsdWkJyjXi0rC4GJ+IRDabd/846mRuis1junMIuoAbOgv6LE aIIrdZLXts0pMzyY+KI54RvW9jcXuefmNii/jQYXDoNkrZsV3jifqBeKG9qBIIqe PuztBvVciv0lJaEiMBuToW/e/E5qWvypdCExTSlSZCH7VRIqRfPK9jQm7MQZondS 4Z2F3WAXvcq8Q3ZEYWJ+eNRE8lVAESZ7RLwCbGr9XiU2FM+pCjWAI3WOEW0YC+Ta bU8wiR22BsI6EGaUSx9DJWLejR3x0B59Uy6topsW3Q71O9DMavKbQlop7cvU+3tT 7aGQ -----END CERTIFICATE-----Generated at Wed Aug 26 13:04:04 2026 by rpki-client