$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1ee0ca6-4099-4f84-8e05-ff02d67a580a.roa File: e1ee0ca6-4099-4f84-8e05-ff02d67a580a.roa (raw, json) Hash identifier: czHY2YkauEcK8/ccmaz/2ZFTHMGjJutKTdWd3Nk5V7E= Subject key identifier: BE:8F:AD:BC:C7:B5:9F:57:01:53:47:CE:CA:76:75:04:97:0B:3A:46 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A22D1B034FBFE79094E993147B06AA67D542D91 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1ee0ca6-4099-4f84-8e05-ff02d67a580a.roa Signing time: Thu 30 Jul 2026 00:10:28 +0000 ROA not before: Thu 30 Jul 2026 00:10:28 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:22:d1:b0:34:fb:fe:79:09:4e:99:31:47:b0:6a:a6:7d:54:2d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:10:28 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=d0bbf2a861baa06bfe62bc3ecd0e283d5bf24fd035fe024075bdded53b5b0629, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:82:a4:3b:86:96:0b:34:90:91:ed:37:7b: 88:6e:52:89:0a:13:02:34:8a:fe:1e:3a:35:84:45: fe:46:8d:d9:e4:bc:0f:1a:1f:ca:1d:3e:64:86:9b: 95:a0:39:12:bd:dd:f3:e9:ac:55:f2:72:77:d5:29: 82:e1:35:f1:1a:22:74:67:84:a7:1d:15:e1:ae:14: 5d:f0:0e:74:56:0e:b0:99:eb:12:28:d9:d9:d7:26: ff:3f:4f:e6:b7:e5:ee:a5:96:90:ea:80:68:dd:a1: a9:bf:e0:26:7d:73:b1:d7:3f:7b:50:86:b4:60:88: 8b:7d:f7:41:05:79:94:de:7d:d5:0f:9c:c0:63:88: b7:33:24:50:41:8f:44:c0:96:42:76:e3:ed:2b:85: df:b9:90:19:8e:86:64:15:9f:d5:ed:c5:b1:c0:3f: 5f:35:a1:ad:f3:28:61:5d:fb:eb:29:f6:77:e0:23: f2:97:9f:75:dc:7c:df:11:56:fb:34:08:d2:b3:01: 38:8b:55:94:8b:7d:ac:59:2c:de:41:a1:de:8f:b4: 4c:8f:e5:3c:24:7c:58:8f:71:62:40:97:ed:70:21: 4a:a2:ca:37:4f:95:24:fe:38:ae:fe:90:8c:83:d4: 12:30:25:a7:7f:75:08:72:e9:8e:16:b4:3a:62:74: 37:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8F:AD:BC:C7:B5:9F:57:01:53:47:CE:CA:76:75:04:97:0B:3A:46 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1ee0ca6-4099-4f84-8e05-ff02d67a580a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:2800::/40 Signature Algorithm: sha256WithRSAEncryption a0:0f:ff:d0:63:e2:cb:46:e0:25:af:a5:92:8c:8a:2c:09:f3: e2:49:fb:53:5a:b6:aa:8b:94:eb:2d:c6:89:7a:0a:e3:66:f4: 98:02:6f:bb:3b:91:a5:d0:6f:82:0d:03:19:f1:60:fb:0e:22: 05:80:c8:d0:2a:df:6a:04:37:c9:05:7b:e2:a9:c9:a0:f4:03: 8d:ae:81:a5:49:95:75:96:57:2e:e6:21:f4:a5:42:8b:9c:eb: 0b:85:8b:3d:7c:e1:1f:ec:70:8c:b4:0b:fb:d5:18:2c:2e:64: 39:ea:a4:6b:12:d6:19:0d:49:b0:1c:b2:d2:19:a6:5a:94:9f: 28:23:b4:07:ac:41:89:3c:1b:d1:29:03:a9:f4:59:f9:f4:58: 0d:e0:80:a5:87:9f:dc:b7:9f:d1:22:14:70:f0:dc:e3:0f:4f: 79:e3:1f:9b:84:24:5f:f3:f2:9c:fa:42:be:e5:c0:55:c2:f2: 44:b1:33:f1:41:cf:03:3c:ed:a3:b6:9b:6c:69:ca:fb:ee:03: e9:d3:15:07:94:7c:ce:fc:5e:36:cb:ce:c4:e7:ef:ae:c6:0c: 36:7f:01:62:93:60:6e:9e:c6:8b:7d:f4:46:1c:76:c8:c8:21: d4:11:d9:f0:3e:72:4c:cb:4d:66:60:1e:83:db:a1:f1:a0:4e: 25:a4:7b:e8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeiLRsDT7/nkJTpkxR7Bqpn1ULZEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTAyOFoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAZDBiYmYyYTg2MWJhYTA2YmZlNjJi YzNlY2QwZTI4M2Q1YmYyNGZkMDM1ZmUwMjQwNzViZGRlZDUzYjViMDYyOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk2CpDuGlgs0kJHtN3uIblKJChMC NIr+Hjo1hEX+Ro3Z5LwPGh/KHT5khpuVoDkSvd3z6axV8nJ31SmC4TXxGiJ0Z4Sn HRXhrhRd8A50Vg6wmesSKNnZ1yb/P0/mt+XupZaQ6oBo3aGpv+AmfXOx1z97UIa0 YIiLffdBBXmU3n3VD5zAY4i3MyRQQY9EwJZCduPtK4XfuZAZjoZkFZ/V7cWxwD9f NaGt8yhhXfvrKfZ34CPyl5913HzfEVb7NAjSswE4i1WUi32sWSzeQaHej7RMj+U8 JHxYj3FiQJftcCFKoso3T5Uk/jiu/pCMg9QSMCWnf3UIcumOFrQ6YnQ3yQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL6PrbzHtZ9XAVNHzsp2dQSXCzpGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxZWUwY2E2LTQwOTktNGY4NC04ZTA1LWZmMDJkNjdhNTgwYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8igwDQYJKoZIhvcNAQELBQADggEBAKAP/9Bj4stG4CWvpZKM iiwJ8+JJ+1NatqqLlOstxol6CuNm9JgCb7s7kaXQb4INAxnxYPsOIgWAyNAq32oE N8kFe+KpyaD0A42ugaVJlXWWVy7mIfSlQouc6wuFiz184R/scIy0C/vVGCwuZDnq pGsS1hkNSbAcstIZplqUnygjtAesQYk8G9EpA6n0Wfn0WA3ggKWHn9y3n9EiFHDw 3OMPT3njH5uEJF/z8pz6Qr7lwFXC8kSxM/FBzwM87aO2m2xpyvvuA+nTFQeUfM78 XjbLzsTn767GDDZ/AWKTYG6exot99EYcdsjIIdQR2fA+ckzLTWZgHoPbofGgTiWk e+g= -----END CERTIFICATE-----Generated at Wed Aug 26 08:04:16 2026 by rpki-client