$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9c9173c-1072-4c36-b1ec-3594d61e13f7.roa File: e9c9173c-1072-4c36-b1ec-3594d61e13f7.roa (raw, json) Hash identifier: ugzKFjeWo5v116t+7+DNwMk+kFQ8F5rarAPz0UotLAo= Subject key identifier: 08:43:A9:D0:E6:E8:60:E7:47:71:29:3D:15:22:8E:4C:FA:5E:1F:E9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5452620B352B2CAA1E07692D2674AE5A5249AA83 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9c9173c-1072-4c36-b1ec-3594d61e13f7.roa Signing time: Mon 10 Aug 2026 00:00:53 +0000 ROA not before: Mon 10 Aug 2026 00:00:53 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:52:62:0b:35:2b:2c:aa:1e:07:69:2d:26:74:ae:5a:52:49:aa:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:00:53 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=3e595bb1ef5ee61bacb8d45880ccea67f21dda82c84553369c4e6f79be4d6d27, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:d7:af:e1:0a:c2:73:4e:2b:50:84:4e:74: 72:1f:e4:ea:7a:28:6e:ae:25:59:d2:23:7c:6c:2c: f4:e0:74:20:41:29:62:26:e3:30:ce:ea:47:62:de: 03:c1:52:73:1f:fa:a6:02:f4:e3:9a:a8:e2:f9:47: a9:6f:12:ff:75:6d:c2:9f:9e:54:0e:a1:b4:4c:3b: 7f:0b:0c:c4:9c:05:5d:de:f9:1d:32:07:63:d4:b0: f1:d9:73:de:22:4e:c1:2b:58:3c:2c:6f:16:b9:dd: 8c:9c:b3:3c:e8:7b:20:a5:16:c7:2e:b9:10:86:20: 3a:de:b7:a7:03:4f:a9:35:9a:63:b9:c5:68:4f:62: ff:c4:30:b6:f0:0e:c8:a8:53:5e:76:25:6a:86:f7: 59:5a:82:a7:0e:91:90:c9:d8:40:a2:05:4e:8c:f4: c8:9d:8c:b8:de:c6:eb:92:9b:20:dc:a3:f7:66:16: a6:24:5d:4d:65:5d:cd:59:1c:3d:bc:2f:7f:e5:1a: dd:6b:34:0b:00:f2:8f:32:b4:26:cc:17:31:0d:b5: 96:1f:74:af:b6:41:ed:6b:3a:41:db:60:a4:02:41: 27:87:ac:35:3f:56:80:e2:bd:45:95:18:86:73:70: d6:25:6a:6c:dd:db:f1:0d:fb:a9:9d:d4:48:5f:68: 71:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:43:A9:D0:E6:E8:60:E7:47:71:29:3D:15:22:8E:4C:FA:5E:1F:E9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9c9173c-1072-4c36-b1ec-3594d61e13f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:e000::/40 Signature Algorithm: sha256WithRSAEncryption a1:ce:0d:ea:1f:d6:5f:e7:1d:39:5a:86:b4:41:83:76:48:b0: cb:bb:c4:46:f1:12:2a:b8:85:f2:2c:ec:ff:42:98:7d:12:02: 83:09:a9:36:5c:9f:ac:d9:1d:83:6e:81:26:d0:ca:1d:91:0f: 7d:b0:24:86:0a:a0:3f:9a:6f:99:59:a6:33:d7:bc:0d:88:83: 41:51:4b:ec:99:66:37:b1:c5:e7:f4:94:1b:a9:73:c5:9f:7c: 21:0b:99:cf:2d:ca:f9:83:cb:13:ad:34:c6:dc:f6:66:90:df: 71:0a:f3:13:10:15:a2:b3:8c:e2:ef:d0:51:bd:f4:f3:55:06: f8:b9:91:a6:7e:af:ce:c6:25:fc:af:0c:9e:ff:f7:6c:88:e2: 4a:ff:e0:f6:32:63:fa:3e:d0:19:22:95:76:ad:05:4e:79:46: 3f:b9:11:fe:37:2e:18:81:f7:51:49:55:5c:20:0d:c8:81:d9: b4:b5:ab:39:92:f0:bb:a4:ca:ab:40:a8:e0:12:e6:6c:88:b8: d4:4b:2d:d5:8f:4d:a2:2b:22:5b:09:de:38:a7:b2:3b:72:47: 96:53:ec:73:db:4c:d0:6f:20:14:8d:fc:e3:c2:34:24:02:6d: db:84:10:18:32:4e:9a:ad:67:41:f6:64:6d:01:ee:50:46:bc: 8c:eb:f5:bb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVFJiCzUrLKoeB2ktJnSuWlJJqoMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDA1M1oX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAM2U1OTViYjFlZjVlZTYxYmFjYjhk NDU4ODBjY2VhNjdmMjFkZGE4MmM4NDU1MzM2OWM0ZTZmNzliZTRkNmQyNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtjXr+EKwnNOK1CETnRyH+Tqeihu riVZ0iN8bCz04HQgQSliJuMwzupHYt4DwVJzH/qmAvTjmqji+UepbxL/dW3Cn55U DqG0TDt/CwzEnAVd3vkdMgdj1LDx2XPeIk7BK1g8LG8Wud2MnLM86HsgpRbHLrkQ hiA63renA0+pNZpjucVoT2L/xDC28A7IqFNediVqhvdZWoKnDpGQydhAogVOjPTI nYy43sbrkpsg3KP3ZhamJF1NZV3NWRw9vC9/5RrdazQLAPKPMrQmzBcxDbWWH3Sv tkHtazpB22CkAkEnh6w1P1aA4r1FlRiGc3DWJWps3dvxDfupndRIX2hx9wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAhDqdDm6GDnR3EpPRUijkz6Xh/pMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U5YzkxNzNjLTEwNzItNGMzNi1iMWVjLTM1OTRkNjFlMTNmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6OAwDQYJKoZIhvcNAQELBQADggEBAKHODeof1l/nHTlahrRB g3ZIsMu7xEbxEiq4hfIs7P9CmH0SAoMJqTZcn6zZHYNugSbQyh2RD32wJIYKoD+a b5lZpjPXvA2Ig0FRS+yZZjexxef0lBupc8WffCELmc8tyvmDyxOtNMbc9maQ33EK 8xMQFaKzjOLv0FG99PNVBvi5kaZ+r87GJfyvDJ7/92yI4kr/4PYyY/o+0BkilXat BU55Rj+5Ef43LhiB91FJVVwgDciB2bS1qzmS8LukyqtAqOAS5myIuNRLLdWPTaIr IlsJ3jinsjtyR5ZT7HPbTNBvIBSN/OPCNCQCbduEEBgyTpqtZ0H2ZG0B7lBGvIzr 9bs= -----END CERTIFICATE-----Generated at Wed Aug 26 16:09:32 2026 by rpki-client