$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e25ffa8a-f448-47f7-8a87-90f5bc68e7d1.roa File: e25ffa8a-f448-47f7-8a87-90f5bc68e7d1.roa (raw, json) Hash identifier: pn0MI55EgbL0dleZslTppNA60n6SQQPZ2ZZ4LiYk1Uw= Subject key identifier: 2C:5A:2A:FB:40:60:70:9B:9B:3A:22:80:BA:DE:D8:3F:B6:7B:75:76 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 728718A44B43B94896A1F32AF25121D37AF5C028 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e25ffa8a-f448-47f7-8a87-90f5bc68e7d1.roa Signing time: Mon 10 Aug 2026 00:10:29 +0000 ROA not before: Mon 10 Aug 2026 00:10:29 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:87:18:a4:4b:43:b9:48:96:a1:f3:2a:f2:51:21:d3:7a:f5:c0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:10:29 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=f9de2f0839d8d9f5d75ed2e13f1208d9db137bee6cc7b6792bd38263d4a9a3c0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:c7:e1:29:e7:36:08:fc:74:d6:86:a9:22: 14:bf:d9:b6:8f:19:1d:41:e2:34:61:98:d3:eb:f0: b2:8f:8a:1f:e9:5f:97:7f:7c:a6:54:f3:1f:a2:ca: a8:8d:5e:23:4a:af:db:07:56:58:d9:c1:b4:c6:30: 16:93:15:23:3a:25:22:ae:7c:2b:26:ad:35:4b:a4: ba:26:cd:82:fa:3b:42:21:8f:b6:d8:90:ee:e0:21: 75:3d:a3:88:06:72:82:0e:57:98:6c:65:29:c3:04: ad:bc:32:8e:20:a6:b9:ed:26:72:60:1c:db:46:0e: f7:82:40:50:9e:81:3c:c4:c1:17:25:01:8c:01:ff: 3e:51:51:53:d9:13:7b:9a:8a:9e:00:0d:fd:6a:78: ff:ad:1a:4d:79:83:be:50:75:0c:a0:e4:d5:96:09: 1c:42:b7:90:fa:7d:da:e3:2a:89:62:73:41:ef:e1: 38:ed:9f:65:df:a2:d8:5a:a0:2b:8d:04:c8:fa:cb: fa:ef:f8:26:78:00:a2:9c:93:be:13:12:4c:89:ec: 0e:be:54:b9:4a:c9:23:cc:87:87:d5:97:77:30:5f: ea:a3:59:c8:3c:6c:91:a3:81:10:6e:7a:8b:25:31: 4c:a9:e4:3d:49:35:45:fc:5d:6e:ab:75:68:0e:ac: ba:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5A:2A:FB:40:60:70:9B:9B:3A:22:80:BA:DE:D8:3F:B6:7B:75:76 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e25ffa8a-f448-47f7-8a87-90f5bc68e7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:f000::/40 Signature Algorithm: sha256WithRSAEncryption a5:95:0c:9e:1c:fb:3c:75:e5:2a:de:3a:93:57:84:01:85:4f: f6:bb:e6:a3:f9:26:f4:9d:7c:1e:b1:20:21:b1:3c:dd:99:ed: 95:f4:c2:1a:57:16:02:c7:fd:05:f8:3e:75:a8:39:b2:01:6a: 74:0b:2f:88:31:f1:7f:7d:16:a9:03:b1:8e:15:61:7b:21:c4: 96:c2:3b:91:88:c2:50:dd:77:ed:c8:17:9d:64:04:85:4e:66: bd:16:b3:f1:51:b2:1a:72:c6:24:45:ed:28:db:4c:c2:ec:85: 3f:44:b3:39:be:3d:87:4f:ff:a6:b9:99:7c:60:fe:31:97:86: 80:e0:7f:cb:b2:43:82:3e:5c:35:51:fe:a2:8f:7b:e9:81:1c: f3:d8:8a:10:3f:48:90:7a:af:1a:76:68:a4:d0:94:86:5c:56: b3:32:aa:c4:51:fa:44:80:cb:85:30:0c:c2:d4:3f:9b:ca:26: 22:78:45:a9:bf:f6:2f:63:7c:44:7c:ed:9b:73:3d:4c:f2:da: 37:b0:fd:03:fe:f6:4c:5b:d2:30:f5:f8:59:87:32:ac:02:79: 89:eb:8d:45:4b:a8:ee:86:b3:47:7d:88:4c:e3:57:13:66:45: d0:c4:e9:bb:d3:2c:6f:6c:2d:75:d8:01:87:54:ea:bf:b2:0e: 72:61:93:8c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcocYpEtDuUiWofMq8lEh03r1wCgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMTAyOVoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAZjlkZTJmMDgzOWQ4ZDlmNWQ3NWVk MmUxM2YxMjA4ZDlkYjEzN2JlZTZjYzdiNjc5MmJkMzgyNjNkNGE5YTNjMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9zH4SnnNgj8dNaGqSIUv9m2jxkd QeI0YZjT6/Cyj4of6V+Xf3ymVPMfosqojV4jSq/bB1ZY2cG0xjAWkxUjOiUirnwr Jq01S6S6Js2C+jtCIY+22JDu4CF1PaOIBnKCDleYbGUpwwStvDKOIKa57SZyYBzb Rg73gkBQnoE8xMEXJQGMAf8+UVFT2RN7moqeAA39anj/rRpNeYO+UHUMoOTVlgkc QreQ+n3a4yqJYnNB7+E47Z9l36LYWqArjQTI+sv67/gmeACinJO+ExJMiewOvlS5 SskjzIeH1Zd3MF/qo1nIPGyRo4EQbnqLJTFMqeQ9STVF/F1uq3VoDqy64wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCxaKvtAYHCbmzoigLre2D+2e3V2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UyNWZmYThhLWY0NDgtNDdmNy04YTg3LTkwZjViYzY4ZTdkMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6PAwDQYJKoZIhvcNAQELBQADggEBAKWVDJ4c+zx15SreOpNX hAGFT/a75qP5JvSdfB6xICGxPN2Z7ZX0whpXFgLH/QX4PnWoObIBanQLL4gx8X99 FqkDsY4VYXshxJbCO5GIwlDdd+3IF51kBIVOZr0Ws/FRshpyxiRF7SjbTMLshT9E szm+PYdP/6a5mXxg/jGXhoDgf8uyQ4I+XDVR/qKPe+mBHPPYihA/SJB6rxp2aKTQ lIZcVrMyqsRR+kSAy4UwDMLUP5vKJiJ4Ram/9i9jfER87ZtzPUzy2jew/QP+9kxb 0jD1+FmHMqwCeYnrjUVLqO6Gs0d9iEzjVxNmRdDE6bvTLG9sLXXYAYdU6r+yDnJh k4w= -----END CERTIFICATE-----Generated at Wed Aug 26 16:08:40 2026 by rpki-client