$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6c0acde-6391-436e-b3cd-0e9dc63a1f6b.roa File: f6c0acde-6391-436e-b3cd-0e9dc63a1f6b.roa (raw, json) Hash identifier: 4jVtXw9xTBB6rmX0y1qHmwI+qmLNYdcMsK58Lb2pBes= Subject key identifier: 25:32:C0:CC:E7:35:94:2E:E8:35:02:6B:91:97:4B:6A:71:DB:FD:45 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 13E782D6DA89D7F5360C3A5F594D72ECA53A8724 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6c0acde-6391-436e-b3cd-0e9dc63a1f6b.roa Signing time: Wed 19 Aug 2026 00:10:38 +0000 ROA not before: Wed 19 Aug 2026 00:10:38 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e7:82:d6:da:89:d7:f5:36:0c:3a:5f:59:4d:72:ec:a5:3a:87:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:38 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=a2e2aa7663b1be15b4cff8b860f2c5cd2af0b62fc5ac1350ebdc65d6126bc43e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:b0:66:ef:1c:36:a4:42:36:ae:9e:78:d0: 48:80:0d:63:56:75:c7:19:d6:21:59:3f:2c:95:29: 08:02:80:14:c2:06:14:b4:f1:60:96:41:b5:e0:e7: 38:bc:73:ef:00:10:bc:23:22:4a:85:56:36:9c:9b: 3e:07:fe:e4:19:10:07:4a:ef:de:3c:c4:c6:b0:2c: 89:5a:8a:96:f2:70:0c:a1:7a:02:c4:3a:5f:5b:ef: 9e:64:af:cb:6d:c8:a8:3c:b8:96:62:d6:89:87:18: 27:46:95:19:e0:f9:9b:02:bf:86:60:13:a2:d3:f9: f3:4f:37:5e:b2:da:1c:e6:3e:7a:1e:a7:6f:05:8f: 56:fd:62:fc:55:57:33:64:be:a7:bb:e9:90:a0:64: 61:10:06:d5:27:a8:82:b7:ba:c8:9f:21:de:ea:18: 94:eb:ad:8f:49:2d:29:11:21:63:43:68:de:6a:ba: 8f:06:19:53:94:d7:29:d4:21:d4:3f:93:e2:dd:3e: 04:de:db:e0:ad:e9:c5:23:45:16:7c:ed:92:b6:b0: 5e:18:67:3b:a2:09:c6:37:5d:b2:01:6a:28:65:ee: 73:22:13:3d:74:85:0e:b3:56:aa:6a:ba:b4:63:12: fc:31:8e:df:d3:c7:07:01:3a:f3:7d:49:49:3d:03: 33:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:32:C0:CC:E7:35:94:2E:E8:35:02:6B:91:97:4B:6A:71:DB:FD:45 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6c0acde-6391-436e-b3cd-0e9dc63a1f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:e000::/40 Signature Algorithm: sha256WithRSAEncryption 6e:83:67:e8:a3:68:c8:72:86:8a:4e:a4:bb:a2:bf:53:03:80: 0b:c1:46:39:bd:a1:83:9d:73:08:1f:1e:1f:b8:ef:1f:c7:01: e0:5a:e9:e2:3e:11:0a:8a:21:2d:0d:4a:11:60:00:ca:85:5c: f7:8a:c5:89:f2:3f:a6:2b:d7:35:6c:74:32:13:da:25:a3:f5: 5c:e7:10:1b:4e:3c:5b:c8:01:50:65:f2:aa:eb:3a:7c:02:ab: 37:57:7a:ac:a2:75:3d:bd:26:39:8b:79:55:db:4e:a0:7b:ed: 6b:42:1e:c7:22:38:52:1a:9a:69:9c:3a:fe:63:58:96:fc:68: b4:f1:d9:be:87:7e:0c:b4:b7:bf:bf:21:b6:d9:2e:42:cd:b5: a8:7f:46:cf:b6:a2:49:65:90:18:d6:b9:08:9d:4b:44:c3:54: d7:28:1c:54:3e:1e:21:f3:3a:2c:f5:c9:2d:ff:57:06:9a:18: 3a:68:e2:41:c0:30:96:de:dc:8f:05:a0:d1:0e:fe:e6:ef:5c: 5c:95:7b:a5:c1:c9:fc:d3:fd:22:03:a1:7e:d5:0c:e3:ca:f4: e3:41:0a:ef:6a:f1:1a:9a:bc:dc:a6:67:b3:0f:4f:b3:01:18: ab:85:0f:de:b3:40:74:28:85:da:80:bb:df:43:21:48:8e:e0: 47:d9:7c:e5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUE+eC1tqJ1/U2DDpfWU1y7KU6hyQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTAzOFoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAYTJlMmFhNzY2M2IxYmUxNWI0Y2Zm OGI4NjBmMmM1Y2QyYWYwYjYyZmM1YWMxMzUwZWJkYzY1ZDYxMjZiYzQzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/CwZu8cNqRCNq6eeNBIgA1jVnXH GdYhWT8slSkIAoAUwgYUtPFglkG14Oc4vHPvABC8IyJKhVY2nJs+B/7kGRAHSu/e PMTGsCyJWoqW8nAMoXoCxDpfW++eZK/LbcioPLiWYtaJhxgnRpUZ4PmbAr+GYBOi 0/nzTzdestoc5j56HqdvBY9W/WL8VVczZL6nu+mQoGRhEAbVJ6iCt7rInyHe6hiU 662PSS0pESFjQ2jearqPBhlTlNcp1CHUP5Pi3T4E3tvgrenFI0UWfO2StrBeGGc7 ognGN12yAWooZe5zIhM9dIUOs1aqarq0YxL8MY7f08cHATrzfUlJPQMzwQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCUywMznNZQu6DUCa5GXS2px2/1FMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2YzBhY2RlLTYzOTEtNDM2ZS1iM2NkLTBlOWRjNjNhMWY2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6eAwDQYJKoZIhvcNAQELBQADggEBAG6DZ+ijaMhyhopOpLui v1MDgAvBRjm9oYOdcwgfHh+47x/HAeBa6eI+EQqKIS0NShFgAMqFXPeKxYnyP6Yr 1zVsdDIT2iWj9VznEBtOPFvIAVBl8qrrOnwCqzdXeqyidT29JjmLeVXbTqB77WtC HsciOFIammmcOv5jWJb8aLTx2b6Hfgy0t7+/IbbZLkLNtah/Rs+2okllkBjWuQid S0TDVNcoHFQ+HiHzOiz1yS3/VwaaGDpo4kHAMJbe3I8FoNEO/ubvXFyVe6XByfzT /SIDoX7VDOPK9ONBCu9q8RqavNymZ7MPT7MBGKuFD96zQHQohdqAu99DIUiO4EfZ fOU= -----END CERTIFICATE-----Generated at Wed Aug 26 02:10:37 2026 by rpki-client