$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28624f2-29a1-4d66-bb6c-dd38f883f14b.roa File: f28624f2-29a1-4d66-bb6c-dd38f883f14b.roa (raw, json) Hash identifier: WGDsMhWk3yJfcrZ2/zInFuIkjPQHsaVjtbBEoNy49qQ= Subject key identifier: 67:B3:49:3D:16:8B:BE:05:6A:54:97:03:EB:1A:00:50:6C:CB:D7:81 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 76526850B8F3F5FA0493DDF8A0FA90E41E9B8E42 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28624f2-29a1-4d66-bb6c-dd38f883f14b.roa Signing time: Sat 01 Aug 2026 00:30:55 +0000 ROA not before: Sat 01 Aug 2026 00:30:55 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da19:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:52:68:50:b8:f3:f5:fa:04:93:dd:f8:a0:fa:90:e4:1e:9b:8e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:30:55 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=4239981dc70a2243b4a4cce8dbbfd9d3fa54ec0663fbf2c0d623c4bf4cfddfd7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:5a:5e:e5:a6:8d:26:84:c7:63:76:ac:e3: 1f:2f:50:e4:6d:e2:d4:ad:34:8a:f6:ab:bb:43:b4: 44:1a:c5:9c:b5:b7:04:d7:e7:fc:b9:04:5c:0b:7d: 2b:0e:0d:be:1d:b7:76:c6:4d:9b:fa:18:8a:42:c1: af:86:c6:04:ec:49:2d:97:1d:04:b1:78:0d:c6:cc: 9b:2d:6f:77:32:5d:41:0a:dd:a0:44:b9:c7:35:3b: 7f:6a:82:44:b1:3f:a5:92:0c:a6:55:79:f0:a8:be: 25:27:7c:2e:a3:c8:8d:2c:13:3c:ec:db:c2:cd:1d: c3:60:69:10:09:e3:b5:01:f4:b6:e9:7f:bc:b4:ea: b8:a4:34:f3:e1:35:12:c1:1c:a9:e9:de:ee:01:1c: c2:b9:c4:21:e1:bb:fe:a5:38:6a:1f:76:5d:04:6a: 37:69:90:af:37:01:5e:3f:ee:f4:6d:a6:19:68:df: 51:b9:23:ba:f0:49:67:40:5b:b1:0f:72:6a:e8:e0: fb:01:85:e5:c6:25:0f:89:8e:43:8f:c2:5e:69:67: d1:cd:ab:05:f3:82:d3:1a:3c:06:55:4a:35:b4:2b: 2e:49:92:dd:df:19:bf:ec:c5:47:80:66:8b:97:ea: 33:b5:60:89:f4:2f:52:2e:4b:72:f5:a0:47:d0:ea: fb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B3:49:3D:16:8B:BE:05:6A:54:97:03:EB:1A:00:50:6C:CB:D7:81 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28624f2-29a1-4d66-bb6c-dd38f883f14b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da19:c00::/38 Signature Algorithm: sha256WithRSAEncryption 45:12:98:d4:9b:4e:58:d7:50:b3:1d:77:57:48:c8:ed:38:6e: 3f:97:95:f0:fa:64:8c:82:d6:01:e2:d6:30:80:7d:29:c2:68: eb:98:f1:8e:f3:a2:64:3c:f7:3d:9c:88:47:21:f8:33:70:1c: 09:d9:83:34:57:b7:a3:0c:d0:fa:8f:4d:2a:c6:9d:3c:b6:9d: e8:35:df:ad:14:dc:ff:02:2c:dd:cf:01:5a:36:5e:b6:5c:39: f7:b6:d8:03:bc:2b:c6:55:4e:e4:94:62:6e:90:a3:2c:99:f2: ec:7e:f6:c2:b6:5e:4c:b7:52:8d:aa:c4:00:79:32:2b:1b:78: 3a:a5:27:55:4b:1d:ab:dc:ae:0a:76:58:d9:3e:6f:34:31:9a: e2:36:02:24:a1:cd:c3:54:c1:0a:e4:c6:f2:39:6a:e8:e1:30: 24:d9:1a:d1:50:a0:e2:e2:38:35:73:08:a1:10:16:8e:e9:be: c9:00:3b:be:a8:24:b9:d0:f2:6d:a8:4b:84:f0:89:95:3e:e1: 4d:74:23:da:a4:80:a6:05:d1:64:a7:8e:64:c6:d0:e6:4e:96: fa:2b:41:6a:f4:bc:e4:ce:40:06:d1:30:61:81:85:b1:77:e2: 68:da:c9:ef:05:c7:a9:b9:c7:c4:46:56:c9:b9:d8:40:c7:c0: 4a:c8:da:02 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdlJoULjz9foEk934oPqQ5B6bjkIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMzA1NVoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNANDIzOTk4MWRjNzBhMjI0M2I0YTRj Y2U4ZGJiZmQ5ZDNmYTU0ZWMwNjYzZmJmMmMwZDYyM2M0YmY0Y2ZkZGZkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ1aXuWmjSaEx2N2rOMfL1DkbeLU rTSK9qu7Q7REGsWctbcE1+f8uQRcC30rDg2+Hbd2xk2b+hiKQsGvhsYE7Ektlx0E sXgNxsybLW93Ml1BCt2gRLnHNTt/aoJEsT+lkgymVXnwqL4lJ3wuo8iNLBM87NvC zR3DYGkQCeO1AfS26X+8tOq4pDTz4TUSwRyp6d7uARzCucQh4bv+pThqH3ZdBGo3 aZCvNwFeP+70baYZaN9RuSO68ElnQFuxD3Jq6OD7AYXlxiUPiY5Dj8JeaWfRzasF 84LTGjwGVUo1tCsuSZLd3xm/7MVHgGaLl+oztWCJ9C9SLkty9aBH0Or7cQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGezST0Wi74FalSXA+saAFBsy9eBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YyODYyNGYyLTI5YTEtNGQ2Ni1iYjZjLWRkMzhmODgzZjE0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGQwwDQYJKoZIhvcNAQELBQADggEBAEUSmNSbTljXULMdd1dI yO04bj+XlfD6ZIyC1gHi1jCAfSnCaOuY8Y7zomQ89z2ciEch+DNwHAnZgzRXt6MM 0PqPTSrGnTy2neg1360U3P8CLN3PAVo2XrZcOfe22AO8K8ZVTuSUYm6QoyyZ8ux+ 9sK2Xky3Uo2qxAB5MisbeDqlJ1VLHavcrgp2WNk+bzQxmuI2AiShzcNUwQrkxvI5 aujhMCTZGtFQoOLiODVzCKEQFo7pvskAO76oJLnQ8m2oS4TwiZU+4U10I9qkgKYF 0WSnjmTG0OZOlvorQWr0vOTOQAbRMGGBhbF34mjaye8Fx6m5x8RGVsm52EDHwErI 2gI= -----END CERTIFICATE-----Generated at Wed Aug 26 03:06:24 2026 by rpki-client