$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e65301a9-efad-4338-a6cf-5b0a25ba4e55.roa File: e65301a9-efad-4338-a6cf-5b0a25ba4e55.roa (raw, json) Hash identifier: 9HPQ6afjp76BXtrfN2Wg6IGP7Kbm7hRnX0ex0sfUdJI= Subject key identifier: 32:3E:91:64:78:7B:E9:0D:B6:DA:36:D8:19:60:17:A6:DA:68:1D:3B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0192DCECF45EC5172A1BF812A2EE3BA0D647A7AA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e65301a9-efad-4338-a6cf-5b0a25ba4e55.roa Signing time: Tue 18 Aug 2026 18:03:43 +0000 ROA not before: Tue 18 Aug 2026 18:03:43 +0000 ROA not after: Mon 16 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da33:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:92:dc:ec:f4:5e:c5:17:2a:1b:f8:12:a2:ee:3b:a0:d6:47:a7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 18:03:43 2026 GMT Not After : Nov 16 23:59:59 2026 GMT Subject: serialNumber=ef66774a3271897d35dc9525d2c7b61d63111ccd24b5c530634cdd6319747e81, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6e:d6:e2:85:96:51:56:65:3a:f1:f7:4d:2e: e2:24:26:b1:cf:b8:ec:46:91:58:20:1c:65:0c:04: 26:dd:ec:7b:a5:56:4c:8d:f5:84:81:07:2e:97:9f: 06:c9:ed:7b:7a:eb:d7:09:16:2c:45:4d:f1:2d:81: ee:a4:f3:40:20:a9:c3:b6:32:4b:81:34:5f:b1:5b: 08:23:0c:fa:22:35:8d:00:b0:6f:81:47:11:a8:fa: dd:7d:5f:64:4f:ba:2f:ec:22:ef:3d:06:1d:c4:70: 5b:f3:8a:54:4a:bf:f3:04:81:9d:64:f9:3b:04:38: e1:93:22:a5:9e:1f:3e:3a:6f:10:f3:06:0d:af:9e: 67:ce:20:33:87:32:37:b9:31:a0:45:74:09:b4:b1: 7e:11:02:33:63:16:16:c5:ce:17:f9:68:f5:6b:c9: d3:29:73:f7:e0:ad:87:84:ca:e0:26:f0:8b:e7:52: c3:91:c5:46:57:e5:d2:b3:5c:48:c2:6a:7e:1a:0c: 24:8d:0d:4b:10:d6:b7:c7:85:a8:4d:99:9a:49:c3: b6:62:31:d7:4a:7b:4f:4e:7c:5a:78:69:a4:80:8a: a1:cc:98:bc:50:73:b8:ce:a1:dc:85:49:f2:bd:2c: a1:b1:64:c0:6f:52:32:cd:74:30:d1:64:42:76:5f: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3E:91:64:78:7B:E9:0D:B6:DA:36:D8:19:60:17:A6:DA:68:1D:3B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e65301a9-efad-4338-a6cf-5b0a25ba4e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:800::/40 Signature Algorithm: sha256WithRSAEncryption 4c:25:a2:a1:95:81:e9:97:b9:fa:97:62:c0:99:60:72:70:12: 28:0e:49:e5:63:25:dc:26:7f:9a:83:54:8e:68:90:63:06:79: 62:81:e9:58:94:85:07:df:49:f1:f0:c3:6a:bc:ab:41:12:27: 38:61:96:fc:bf:98:9f:10:38:33:2d:d8:20:95:4d:df:55:a9: fc:c1:fd:91:5a:c0:b5:27:f7:ae:de:57:db:99:fd:8c:7f:04: ff:67:03:ee:5f:3d:99:5b:d5:97:66:3f:f5:43:01:b7:4e:e3: bd:86:ad:ab:bc:c3:4c:fc:d8:bb:a8:5f:cd:9f:7e:4b:23:71: 8d:44:61:32:fd:42:ef:73:c6:c7:18:8c:8a:fb:86:e7:a7:b7: 9b:2d:5b:d2:d1:37:ec:fb:83:d8:d4:2d:14:50:c1:ef:9f:ce: ec:e4:fd:64:44:4b:83:eb:b9:79:d0:9d:ee:bc:e2:05:f8:ae: 4d:7b:8e:a0:39:27:86:cd:d9:a6:3b:23:39:90:0f:77:b7:59: d0:79:cf:9a:f3:fc:84:35:60:d1:18:74:5b:09:cd:e3:2e:29: 36:ee:90:c0:c2:46:16:ab:0b:a0:0d:f5:65:11:24:0a:d6:74: c6:86:37:8f:2f:bd:ea:e6:6e:e6:74:1a:8e:b4:10:7d:dc:7d: a4:2d:28:17 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAZLc7PRexRcqG/gSou47oNZHp6owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxODE4MDM0M1oX DTI2MTExNjIzNTk1OVowejFJMEcGA1UEBRNAZWY2Njc3NGEzMjcxODk3ZDM1ZGM5 NTI1ZDJjN2I2MWQ2MzExMWNjZDI0YjVjNTMwNjM0Y2RkNjMxOTc0N2U4MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW7W4oWWUVZlOvH3TS7iJCaxz7js RpFYIBxlDAQm3ex7pVZMjfWEgQcul58Gye17euvXCRYsRU3xLYHupPNAIKnDtjJL gTRfsVsIIwz6IjWNALBvgUcRqPrdfV9kT7ov7CLvPQYdxHBb84pUSr/zBIGdZPk7 BDjhkyKlnh8+Om8Q8wYNr55nziAzhzI3uTGgRXQJtLF+EQIzYxYWxc4X+Wj1a8nT KXP34K2HhMrgJvCL51LDkcVGV+XSs1xIwmp+GgwkjQ1LENa3x4WoTZmaScO2YjHX SntPTnxaeGmkgIqhzJi8UHO4zqHchUnyvSyhsWTAb1IyzXQw0WRCdl8TuwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDI+kWR4e+kNtto22BlgF6baaB07MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U2NTMwMWE5LWVmYWQtNDMzOC1hNmNmLTViMGEyNWJhNGU1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMwgwDQYJKoZIhvcNAQELBQADggEBAEwloqGVgemXufqXYsCZ YHJwEigOSeVjJdwmf5qDVI5okGMGeWKB6ViUhQffSfHww2q8q0ESJzhhlvy/mJ8Q ODMt2CCVTd9VqfzB/ZFawLUn967eV9uZ/Yx/BP9nA+5fPZlb1ZdmP/VDAbdO472G rau8w0z82LuoX82ffksjcY1EYTL9Qu9zxscYjIr7huent5stW9LRN+z7g9jULRRQ we+fzuzk/WRES4PruXnQne684gX4rk17jqA5J4bN2aY7IzmQD3e3WdB5z5rz/IQ1 YNEYdFsJzeMuKTbukMDCRharC6AN9WURJArWdMaGN48vvermbuZ0Go60EH3cfaQt KBc= -----END CERTIFICATE-----Generated at Thu Aug 27 00:35:36 2026 by rpki-client