$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d8b0c2-7488-4556-99bd-3b2269b7c75f.roa File: f9d8b0c2-7488-4556-99bd-3b2269b7c75f.roa (raw, json) Hash identifier: 3xIYVX9GI9YYlYINjfEI7VYlNDEdJFLlTg6cdaMxOiA= Subject key identifier: BC:B8:C4:35:F7:D4:6A:D0:15:9E:58:C9:9C:89:0D:B3:41:B2:0D:8C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 335FD96F441CBE50A60077DD1AC3AAE12599CE90 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d8b0c2-7488-4556-99bd-3b2269b7c75f.roa Signing time: Wed 19 Aug 2026 00:10:40 +0000 ROA not before: Wed 19 Aug 2026 00:10:40 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5f:d9:6f:44:1c:be:50:a6:00:77:dd:1a:c3:aa:e1:25:99:ce:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:40 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=270526261e3d21dadc3000fd6a6f6eb175c1029e0d19dad6d2aaa7efe2f6ac41, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:d1:5e:b4:84:65:c1:3a:99:cf:83:95:19: b6:57:db:6c:26:ef:00:39:ed:10:af:e2:71:17:2e: 58:30:54:5f:a0:97:95:80:08:a7:1f:83:84:00:76: 86:e5:ec:de:71:3a:f0:5e:d8:d1:80:96:9f:a6:37: c1:9f:79:2c:78:d3:f0:1d:4d:9f:6c:72:b8:0d:41: c4:1c:21:0b:9c:32:82:cf:d2:5d:e0:85:65:7c:ac: 5a:48:c6:25:73:92:ad:70:40:4a:c9:69:56:2e:ed: a5:18:c3:a5:64:6c:91:b1:7c:87:b9:89:15:26:aa: 9c:11:99:41:6c:10:8b:3a:41:89:a7:d9:1b:fb:93: ed:12:8d:2c:fa:0b:e1:b5:82:cb:0e:74:f0:11:21: 48:9b:8d:6e:57:ee:55:0d:a2:d1:5a:f2:29:65:47: 17:af:5f:8f:12:4b:70:07:d5:66:49:81:78:6f:51: a9:d5:3a:b7:6a:d0:a7:64:74:7b:ff:13:44:9b:98: 1f:69:94:3a:3e:be:6c:9c:bf:ad:e5:46:6c:e1:d8: f6:2e:cc:2a:7c:2b:b1:47:c5:8f:db:24:ef:f4:0f: b5:8a:3a:f1:05:cc:47:d3:b0:86:96:33:c6:cf:6c: 9f:97:49:e0:8a:c8:d3:df:4b:f0:54:ce:a5:7b:f9: a6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B8:C4:35:F7:D4:6A:D0:15:9E:58:C9:9C:89:0D:B3:41:B2:0D:8C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d8b0c2-7488-4556-99bd-3b2269b7c75f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:880::/48 Signature Algorithm: sha256WithRSAEncryption 05:a3:f7:b4:c3:2b:30:a1:69:b0:a5:65:13:6a:d0:b9:b9:a9: ba:a2:8a:87:07:69:56:4b:21:2a:b5:02:c3:78:1e:9f:80:b9: a0:e0:38:fe:f4:b3:30:74:ba:bf:9d:90:9b:f8:c1:0d:38:74: 4a:f3:5b:ad:b9:4b:0f:ee:53:1b:c3:59:f5:81:f4:03:d1:9d: 44:4b:49:f1:a4:16:fb:67:16:11:66:c2:ff:fa:f8:d2:92:77: 59:13:b9:5c:6e:4a:d1:b6:76:83:7b:fc:ec:89:2c:71:a2:e1: 96:1f:78:ef:6a:20:4f:5b:b4:87:21:9d:62:4c:bf:41:bb:7e: c6:0e:45:ae:58:09:d0:64:10:9f:86:97:ee:de:78:22:82:4e: e6:40:8c:c2:a9:d7:25:17:98:a8:10:b3:dd:3f:be:8e:a6:f8: e2:86:7f:49:ff:65:cb:96:76:fa:c6:cc:28:a0:3d:cb:b1:b5: c2:1b:2f:60:57:60:c2:ab:88:91:16:0f:66:d6:0d:f7:2f:d6: 9b:cb:3b:ac:a5:dc:a5:bf:39:01:76:6a:dc:e8:ed:03:42:1f: 0b:9d:d1:95:3b:59:36:20:3b:3a:7f:dc:f8:af:59:24:21:05: 3a:51:6e:b6:e8:e2:f5:86:a9:43:e4:28:7b:ad:6c:3a:79:85: 07:fa:15:7a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUM1/Zb0QcvlCmAHfdGsOq4SWZzpAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTA0MFoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAMjcwNTI2MjYxZTNkMjFkYWRjMzAw MGZkNmE2ZjZlYjE3NWMxMDI5ZTBkMTlkYWQ2ZDJhYWE3ZWZlMmY2YWM0MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxafRXrSEZcE6mc+DlRm2V9tsJu8A Oe0Qr+JxFy5YMFRfoJeVgAinH4OEAHaG5ezecTrwXtjRgJafpjfBn3kseNPwHU2f bHK4DUHEHCELnDKCz9Jd4IVlfKxaSMYlc5KtcEBKyWlWLu2lGMOlZGyRsXyHuYkV JqqcEZlBbBCLOkGJp9kb+5PtEo0s+gvhtYLLDnTwESFIm41uV+5VDaLRWvIpZUcX r1+PEktwB9VmSYF4b1Gp1Tq3atCnZHR7/xNEm5gfaZQ6Pr5snL+t5UZs4dj2Lswq fCuxR8WP2yTv9A+1ijrxBcxH07CGljPGz2yfl0ngisjT30vwVM6le/mmZQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLy4xDX31GrQFZ5YyZyJDbNBsg2MMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y5ZDhiMGMyLTc0ODgtNDU1Ni05OWJkLTNiMjI2OWI3Yzc1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6QiAMA0GCSqGSIb3DQEBCwUAA4IBAQAFo/e0wyswoWmwpWUT atC5uam6ooqHB2lWSyEqtQLDeB6fgLmg4Dj+9LMwdLq/nZCb+MENOHRK81utuUsP 7lMbw1n1gfQD0Z1ES0nxpBb7ZxYRZsL/+vjSkndZE7lcbkrRtnaDe/zsiSxxouGW H3jvaiBPW7SHIZ1iTL9Bu37GDkWuWAnQZBCfhpfu3ngigk7mQIzCqdclF5ioELPd P76Opvjihn9J/2XLlnb6xswooD3LsbXCGy9gV2DCq4iRFg9m1g33L9abyzuspdyl vzkBdmrc6O0DQh8LndGVO1k2IDs6f9z4r1kkIQU6UW626OL1hqlD5Ch7rWw6eYUH +hV6 -----END CERTIFICATE-----Generated at Wed Aug 26 13:04:08 2026 by rpki-client