$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38aee75-1c20-4c34-b0d4-c226c1afc502.roa File: f38aee75-1c20-4c34-b0d4-c226c1afc502.roa (raw, json) Hash identifier: kWDQXVvJvBgQroYapN9k0XKH2EjxSxaNOVQQMYCujCA= Subject key identifier: AE:75:2C:6A:4D:41:A8:31:80:A3:3E:30:17:2A:F2:DE:3F:11:19:96 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4FB9A7B8633C16AE7F8F69EF7736E207D28CE001 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38aee75-1c20-4c34-b0d4-c226c1afc502.roa Signing time: Thu 30 Jul 2026 00:00:47 +0000 ROA not before: Thu 30 Jul 2026 00:00:47 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b9:a7:b8:63:3c:16:ae:7f:8f:69:ef:77:36:e2:07:d2:8c:e0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:00:47 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=d53417fe866c198f6cf3ad8f259fd7773dfd9d7fe2b4a9838dc297ecc297e945, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:81:80:19:7a:f9:09:67:88:06:d4:24:2b:fb: 1e:7c:f2:4c:42:cb:b5:08:8d:29:f8:34:56:58:d4: 9e:26:d8:bb:6c:df:64:96:a0:6b:5f:1e:20:0c:2a: 80:b4:f0:3b:5f:40:f9:5f:40:83:91:26:77:32:b2: f4:13:b6:46:c3:8e:09:b3:c4:e6:f0:50:31:48:fa: db:84:93:1a:8d:15:ee:1c:94:41:ab:b7:fb:d2:42: af:88:a6:d0:ee:37:82:a6:82:dc:c0:34:29:d3:31: 36:9e:6b:f6:9a:50:51:78:aa:6f:bf:68:cc:0a:b5: 15:b3:df:41:46:3b:70:44:0e:b9:64:5d:6f:90:74: a4:f5:bc:bb:dd:ac:ac:4a:ef:a1:8c:12:d5:2d:43: 2c:e5:bb:ca:53:df:d0:3e:c5:ff:e0:41:de:e2:19: d8:18:f4:09:d6:bb:6f:b2:33:62:0a:0e:20:f3:2c: c5:de:df:93:15:e4:63:43:a3:ae:4b:61:92:58:96: e5:fb:7e:ca:59:3b:dd:43:80:11:a0:c3:66:62:5b: 23:14:23:1d:ad:b0:9f:76:af:d2:46:29:91:70:f8: 5a:8d:db:51:5f:84:21:69:a7:fe:79:6e:d7:46:61: bc:bb:f3:5a:92:a1:e9:35:74:db:f7:d3:47:b5:b9: 9d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:75:2C:6A:4D:41:A8:31:80:A3:3E:30:17:2A:F2:DE:3F:11:19:96 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38aee75-1c20-4c34-b0d4-c226c1afc502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9040::/48 Signature Algorithm: sha256WithRSAEncryption 08:2f:3c:4d:37:22:b7:4c:77:84:cc:e0:ab:54:0e:b0:c8:2f: 49:fb:1f:45:42:90:f1:81:37:d7:4e:1d:d2:ab:e0:57:dd:04: c9:60:83:2c:a1:61:a7:9d:42:8f:09:78:f6:2f:1d:cd:82:31: 51:4b:d8:8b:eb:4e:8d:d3:91:9c:11:cf:2d:da:22:4f:13:57: a1:69:0b:de:ed:25:e5:ad:10:73:c1:d6:b9:c6:18:ce:33:c4: 60:33:54:ab:fd:b4:2c:66:55:d2:1b:9d:18:47:88:f7:f1:67: 69:be:fa:27:fd:96:30:f2:c2:1c:af:96:4c:fa:e1:79:18:38: ad:3c:9b:3a:d4:67:fb:df:bc:dc:e6:e3:45:e4:a5:49:68:9d: b5:c6:cf:3c:1d:51:f4:b1:6a:b8:0a:7f:1c:58:06:ef:33:cb: 2c:47:0b:c8:13:35:f4:d6:0d:4a:ad:af:62:33:8c:ea:ad:d5: e2:bb:19:de:8c:2e:41:a1:2b:28:51:b9:97:01:85:92:8d:99: 22:ed:ae:9c:17:fc:2d:28:2c:3b:17:e8:00:c6:21:a4:1f:59: 17:82:26:f1:8f:14:96:75:b0:bc:0d:48:81:bb:c9:88:32:f7: f0:0b:90:cd:55:cf:0c:59:03:db:07:6a:c5:df:63:38:14:ac: a8:78:f1:69 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUT7mnuGM8Fq5/j2nvdzbiB9KM4AEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMDA0N1oX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAZDUzNDE3ZmU4NjZjMTk4ZjZjZjNh ZDhmMjU5ZmQ3NzczZGZkOWQ3ZmUyYjRhOTgzOGRjMjk3ZWNjMjk3ZTk0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIGAGXr5CWeIBtQkK/sefPJMQsu1 CI0p+DRWWNSeJti7bN9klqBrXx4gDCqAtPA7X0D5X0CDkSZ3MrL0E7ZGw44Js8Tm 8FAxSPrbhJMajRXuHJRBq7f70kKviKbQ7jeCpoLcwDQp0zE2nmv2mlBReKpvv2jM CrUVs99BRjtwRA65ZF1vkHSk9by73aysSu+hjBLVLUMs5bvKU9/QPsX/4EHe4hnY GPQJ1rtvsjNiCg4g8yzF3t+TFeRjQ6OuS2GSWJbl+37KWTvdQ4ARoMNmYlsjFCMd rbCfdq/SRimRcPhajdtRX4Qhaaf+eW7XRmG8u/NakqHpNXTb99NHtbmd9QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFK51LGpNQagxgKM+MBcq8t4/ERmWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YzOGFlZTc1LTFjMjAtNGMzNC1iMGQ0LWMyMjZjMWFmYzUwMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/5BAMA0GCSqGSIb3DQEBCwUAA4IBAQAILzxNNyK3THeEzOCr VA6wyC9J+x9FQpDxgTfXTh3Sq+BX3QTJYIMsoWGnnUKPCXj2Lx3NgjFRS9iL606N 05GcEc8t2iJPE1ehaQve7SXlrRBzwda5xhjOM8RgM1Sr/bQsZlXSG50YR4j38Wdp vvon/ZYw8sIcr5ZM+uF5GDitPJs61Gf737zc5uNF5KVJaJ21xs88HVH0sWq4Cn8c WAbvM8ssRwvIEzX01g1Kra9iM4zqrdXiuxnejC5BoSsoUbmXAYWSjZki7a6cF/wt KCw7F+gAxiGkH1kXgibxjxSWdbC8DUiBu8mIMvfwC5DNVc8MWQPbB2rF32M4FKyo ePFp -----END CERTIFICATE-----Generated at Wed Aug 26 00:39:11 2026 by rpki-client