$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e8d98555-8cba-45bc-a7cb-74d7b44bfbf5.roa File: e8d98555-8cba-45bc-a7cb-74d7b44bfbf5.roa (raw, json) Hash identifier: pmv3J3dWWO8rixbS+jIoSXgQLb8o7f3kiZv3Z8wf9Jg= Subject key identifier: 09:10:7A:A3:42:E2:50:40:32:FF:ED:12:A1:10:69:D4:96:E4:3D:ED Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 422872D968CB70B425B6CEA42DCFC3488DBFA52C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e8d98555-8cba-45bc-a7cb-74d7b44bfbf5.roa Signing time: Thu 30 Jul 2026 00:11:00 +0000 ROA not before: Thu 30 Jul 2026 00:11:00 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:28:72:d9:68:cb:70:b4:25:b6:ce:a4:2d:cf:c3:48:8d:bf:a5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:11:00 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=4cc76287f51ce9b1b32da6e8ebab45c32287d1e38df6006d7356c36e144cda1f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c3:ba:ab:f5:08:44:3c:29:e8:1b:b6:3e:3b: c4:95:97:e6:31:ba:59:1f:95:93:a6:6d:fc:a9:9a: 3b:48:42:92:bc:49:1e:1c:92:34:b9:ad:1f:a6:03: b7:d4:36:bf:58:b9:eb:5c:ed:6a:cc:73:62:48:b3: ef:8b:5c:78:94:18:51:d3:86:c7:49:8d:7f:fc:f8: e8:8b:5e:c6:92:42:ad:67:9e:e7:52:95:18:7f:f9: a0:32:41:fb:5c:28:c9:1f:06:24:78:70:0e:b7:f2: 44:bb:f5:22:30:fc:42:4a:c3:72:be:7d:26:7c:3f: 67:c0:4f:95:f2:13:67:69:16:90:cb:1c:c9:77:ea: f5:6c:1a:3e:d1:05:fe:8f:a5:b9:ca:64:c0:eb:0b: 68:e5:dd:17:0b:53:20:75:9c:15:11:72:5a:92:89: 90:37:a0:8c:e0:99:46:4e:a1:bb:c2:c5:72:ee:ee: c1:f0:0f:bf:fc:bd:40:ec:dc:2c:2d:3c:5f:a4:a1: 8a:8e:e3:5c:fc:27:65:7a:75:95:18:ba:d8:6f:fd: 7e:d7:8f:8a:92:69:05:ff:02:9e:ea:9e:60:a8:05: f9:46:af:19:c5:21:e9:94:9d:d4:ab:d7:d0:20:e2: 07:23:01:af:99:7e:56:c0:9a:09:0d:18:5b:e7:17: ae:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:10:7A:A3:42:E2:50:40:32:FF:ED:12:A1:10:69:D4:96:E4:3D:ED X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e8d98555-8cba-45bc-a7cb-74d7b44bfbf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:a080::/48 Signature Algorithm: sha256WithRSAEncryption 59:76:ad:4b:a2:c2:9f:27:ec:12:02:f1:56:6c:85:ed:6b:9b: 68:23:e8:65:1f:8b:ed:3f:13:54:be:0b:63:4b:e0:26:88:f2: 6d:92:dc:8c:25:28:72:a7:7c:e9:ff:3d:8e:04:32:d5:b3:21: cb:ab:9d:26:11:a8:c3:ee:1b:97:03:b7:64:8f:54:ef:6a:d5: 47:b3:23:21:21:fc:9f:f5:fb:4e:55:07:d3:47:e2:06:fa:8b: 93:81:7b:a2:9b:84:a7:62:9e:e7:53:77:6b:39:13:ae:22:4d: d0:91:ee:44:77:e2:b7:15:28:83:37:5d:a4:b5:34:54:aa:cb: 9e:9c:34:2d:68:39:2e:71:54:b7:b6:09:84:13:33:1a:f7:80: 3d:0b:44:fd:f3:f8:a6:19:d0:c2:45:da:23:7f:ce:75:34:eb: da:86:21:1a:11:de:9a:a6:ef:7a:f4:b4:ea:cf:1e:09:35:7d: 97:8a:b9:6c:ad:e5:9d:21:3f:e6:e1:78:fb:48:19:9c:9a:fb: 5c:64:32:e0:cf:65:1c:13:ae:7d:16:7b:5e:68:d9:20:50:d0: 81:27:6c:f6:02:82:ce:72:9e:3e:cb:47:24:9f:7c:a1:cb:2a: 54:1e:ab:c1:26:17:7d:36:4a:43:a6:3e:ee:f1:bb:92:97:1e: 58:77:ff:6b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQihy2WjLcLQlts6kLc/DSI2/pSwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTEwMFoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNANGNjNzYyODdmNTFjZTliMWIzMmRh NmU4ZWJhYjQ1YzMyMjg3ZDFlMzhkZjYwMDZkNzM1NmMzNmUxNDRjZGExZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8O6q/UIRDwp6Bu2PjvElZfmMbpZ H5WTpm38qZo7SEKSvEkeHJI0ua0fpgO31Da/WLnrXO1qzHNiSLPvi1x4lBhR04bH SY1//Pjoi17GkkKtZ57nUpUYf/mgMkH7XCjJHwYkeHAOt/JEu/UiMPxCSsNyvn0m fD9nwE+V8hNnaRaQyxzJd+r1bBo+0QX+j6W5ymTA6wto5d0XC1MgdZwVEXJakomQ N6CM4JlGTqG7wsVy7u7B8A+//L1A7NwsLTxfpKGKjuNc/CdlenWVGLrYb/1+14+K kmkF/wKe6p5gqAX5Rq8ZxSHplJ3Uq9fQIOIHIwGvmX5WwJoJDRhb5xeuPQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAkQeqNC4lBAMv/tEqEQadSW5D3tMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U4ZDk4NTU1LThjYmEtNDViYy1hN2NiLTc0ZDdiNDRiZmJmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/6CAMA0GCSqGSIb3DQEBCwUAA4IBAQBZdq1LosKfJ+wSAvFW bIXta5toI+hlH4vtPxNUvgtjS+AmiPJtktyMJShyp3zp/z2OBDLVsyHLq50mEajD 7huXA7dkj1TvatVHsyMhIfyf9ftOVQfTR+IG+ouTgXuim4SnYp7nU3drOROuIk3Q ke5Ed+K3FSiDN12ktTRUqsuenDQtaDkucVS3tgmEEzMa94A9C0T98/imGdDCRdoj f851NOvahiEaEd6apu969LTqzx4JNX2XirlsreWdIT/m4Xj7SBmcmvtcZDLgz2Uc E659FnteaNkgUNCBJ2z2AoLOcp4+y0ckn3yhyypUHqvBJhd9NkpDpj7u8buSlx5Y d/9r -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:33 2026 by rpki-client