$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f252721f-f8c7-42e3-b157-96d2ff33ed5c.roa File: f252721f-f8c7-42e3-b157-96d2ff33ed5c.roa (raw, json) Hash identifier: QwVDawLE8w2bKFlwl6PGZCXIisLqvX188HWnXajUA5w= Subject key identifier: 65:32:8A:19:5C:D7:D9:8C:9D:0F:F7:95:2D:43:18:1B:FA:8D:65:73 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 79F0615F839F2C2315B2BA913C6BB417D6CBCD00 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f252721f-f8c7-42e3-b157-96d2ff33ed5c.roa Signing time: Mon 10 Aug 2026 00:10:25 +0000 ROA not before: Mon 10 Aug 2026 00:10:25 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae0:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f0:61:5f:83:9f:2c:23:15:b2:ba:91:3c:6b:b4:17:d6:cb:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:10:25 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=0295edd4f45aebdd9fb64cfa5ff6769084b9afd65ad2ded5298e5517d231b712, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:47:41:f8:36:52:60:55:0d:c7:e7:35:e3:84: 2c:f9:3a:3a:a4:2e:f2:a1:68:b3:98:e4:db:2c:70: 7c:17:a5:43:f7:a8:96:ed:ab:10:d3:42:51:6e:d6: 20:dd:ca:57:d9:23:6a:a0:45:e0:ad:cd:b8:4a:25: c9:43:ce:b7:1e:98:c5:78:ec:9a:2f:c9:0f:16:c6: a4:1b:60:61:72:ec:0a:40:c7:11:bb:46:c5:b3:5d: 46:29:1a:87:7b:4d:9e:f5:c9:01:2e:2d:c4:3b:ba: 85:8a:4a:0d:25:29:9c:06:71:1a:08:4d:6a:9f:e5: 62:6b:c5:5d:f2:81:39:57:de:1f:de:ea:da:81:05: c9:77:8e:38:bb:eb:81:ca:01:67:5f:b4:9d:90:0e: 61:7b:ff:0a:12:c1:ef:de:f9:61:83:ec:ec:44:b2: a1:63:f2:b4:77:c2:11:fb:c7:b7:0b:5a:5c:c1:dd: 14:2b:8c:f1:e4:63:30:68:fe:bc:46:d2:15:d5:4f: 62:5b:5d:9a:a9:87:e0:1e:9d:e8:c2:a3:5f:38:05: 4e:86:ce:49:c0:ca:2f:06:12:d4:6f:59:97:4d:9d: bf:08:69:98:8a:b4:90:9d:73:93:a1:05:1b:61:0b: 63:5d:9a:25:8f:c9:41:26:db:ba:3f:1b:8e:f7:a7: 87:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:32:8A:19:5C:D7:D9:8C:9D:0F:F7:95:2D:43:18:1B:FA:8D:65:73 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f252721f-f8c7-42e3-b157-96d2ff33ed5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae0:b000::/40 Signature Algorithm: sha256WithRSAEncryption 0a:25:ad:59:46:0f:a6:e7:c9:19:77:2f:49:64:70:17:27:31: 43:2f:6f:30:d7:6d:c7:48:1b:31:49:8e:20:1e:20:d8:7d:ba: 65:f5:f0:e7:2a:3c:ef:46:74:00:51:ee:23:92:2a:96:15:3f: 71:d0:3c:e9:2c:96:80:14:8d:a3:f3:3e:09:36:b2:79:2e:2d: ca:40:c2:5e:32:96:82:c4:a0:f7:89:2d:73:93:c3:b1:06:94: 38:13:57:a1:77:d7:ff:68:32:d8:be:17:11:8b:bf:21:41:af: fc:12:18:ec:b7:04:23:14:a8:86:fa:5f:8f:3e:7a:ea:53:e3: aa:7c:42:06:19:4f:67:fc:5f:1c:11:62:d2:7f:7c:08:42:ad: 54:47:41:0f:cf:e6:f4:cb:2d:8c:bf:27:77:16:fe:8c:65:e5: b0:4a:1e:cb:68:d8:43:aa:44:8f:90:b4:41:aa:63:99:53:2c: 98:bd:19:12:ba:c0:65:81:1a:04:29:48:f7:e0:41:44:ad:17: 85:db:7a:78:b9:3e:1d:9a:3f:8e:b7:83:f0:4e:87:33:eb:25: 08:dd:32:75:74:bb:85:b5:26:80:1a:14:ce:e8:be:97:64:fe: ca:b0:aa:a5:4c:7e:46:3b:89:70:10:d2:b4:31:4a:85:ae:d7: e7:86:15:1c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUefBhX4OfLCMVsrqRPGu0F9bLzQAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMTAyNVoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAMDI5NWVkZDRmNDVhZWJkZDlmYjY0 Y2ZhNWZmNjc2OTA4NGI5YWZkNjVhZDJkZWQ1Mjk4ZTU1MTdkMjMxYjcxMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kdB+DZSYFUNx+c144Qs+To6pC7y oWizmOTbLHB8F6VD96iW7asQ00JRbtYg3cpX2SNqoEXgrc24SiXJQ863HpjFeOya L8kPFsakG2BhcuwKQMcRu0bFs11GKRqHe02e9ckBLi3EO7qFikoNJSmcBnEaCE1q n+Via8Vd8oE5V94f3uragQXJd444u+uBygFnX7SdkA5he/8KEsHv3vlhg+zsRLKh Y/K0d8IR+8e3C1pcwd0UK4zx5GMwaP68RtIV1U9iW12aqYfgHp3owqNfOAVOhs5J wMovBhLUb1mXTZ2/CGmYirSQnXOToQUbYQtjXZolj8lBJtu6PxuO96eHJwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGUyihlc19mMnQ/3lS1DGBv6jWVzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YyNTI3MjFmLWY4YzctNDJlMy1iMTU3LTk2ZDJmZjMzZWQ1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4LAwDQYJKoZIhvcNAQELBQADggEBAAolrVlGD6bnyRl3L0lk cBcnMUMvbzDXbcdIGzFJjiAeINh9umX18OcqPO9GdABR7iOSKpYVP3HQPOksloAU jaPzPgk2snkuLcpAwl4yloLEoPeJLXOTw7EGlDgTV6F31/9oMti+FxGLvyFBr/wS GOy3BCMUqIb6X48+eupT46p8QgYZT2f8XxwRYtJ/fAhCrVRHQQ/P5vTLLYy/J3cW /oxl5bBKHsto2EOqRI+QtEGqY5lTLJi9GRK6wGWBGgQpSPfgQUStF4Xbeni5Ph2a P463g/BOhzPrJQjdMnV0u4W1JoAaFM7ovpdk/sqwqqVMfkY7iXAQ0rQxSoWu1+eG FRw= -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:02 2026 by rpki-client