$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa8d9745-7b7e-4997-bb36-246e06d0e61e.roa File: fa8d9745-7b7e-4997-bb36-246e06d0e61e.roa (raw, json) Hash identifier: 2iVoZHe5Vkh01wpl+meEwy2LJxobyz6WaEbIbFyehc0= Subject key identifier: 0E:4A:81:A4:CD:71:BF:73:7C:B7:F8:08:8D:7A:FA:2F:EA:77:0F:B5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 34696EFB3D6388D5E6312357CE7E28A6B2AF178A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa8d9745-7b7e-4997-bb36-246e06d0e61e.roa Signing time: Wed 19 Aug 2026 00:20:22 +0000 ROA not before: Wed 19 Aug 2026 00:20:22 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:69:6e:fb:3d:63:88:d5:e6:31:23:57:ce:7e:28:a6:b2:af:17:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:20:22 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=23ab0214a57722c74fc923fa9642f27026de58ef13739fafed3d4db76057d96e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:28:79:16:99:ad:14:7f:a4:73:77:2b:ab: 21:24:33:a1:af:a8:de:cc:88:49:33:b9:db:72:c7: 4c:0c:35:78:b9:fb:28:e2:c6:e4:42:07:76:ff:de: de:51:ab:2a:50:57:dd:7e:19:3f:0d:cd:cb:61:7a: 13:55:14:d8:a2:01:7b:7c:f4:c7:89:16:f0:08:0f: 94:bd:74:33:55:9c:12:c1:75:b6:0a:a6:6b:83:d2: c8:ff:a8:e9:6e:47:d6:df:65:35:50:57:96:f6:86: 05:b7:02:4f:61:1f:94:f6:b1:42:62:09:6e:b7:30: d2:ad:10:17:37:ae:24:c3:10:aa:4c:23:bf:de:5c: 3f:8c:24:71:24:f6:60:a8:41:1e:76:c9:28:5c:f2: 1a:3d:40:b5:32:52:0e:fa:cc:bd:c0:b4:83:d4:72: d4:79:99:e5:2d:07:1e:7e:0d:e2:4a:fe:92:52:f7: 3d:61:ba:e4:c9:d3:bf:f3:10:6d:41:b7:35:f6:0a: 1e:87:3d:b5:47:aa:6f:98:49:77:8d:0e:90:fb:ec: a2:44:0b:fd:97:30:ae:45:4d:5c:5f:ad:39:f6:59: 78:87:62:e6:58:37:d9:b1:c9:ce:34:02:d5:55:b5: 5f:fa:e7:83:ee:56:0e:fe:de:af:60:77:60:3b:68: fa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4A:81:A4:CD:71:BF:73:7C:B7:F8:08:8D:7A:FA:2F:EA:77:0F:B5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa8d9745-7b7e-4997-bb36-246e06d0e61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:2040::/48 Signature Algorithm: sha256WithRSAEncryption 5a:ef:f6:f8:70:17:fa:1c:8f:13:e2:ed:06:6b:cc:8e:2f:c0: 5f:47:0a:c8:6c:7e:2a:53:fc:eb:e6:86:42:a6:1d:84:bb:b2: 60:04:35:e7:3d:8e:01:30:6a:89:2a:f6:f6:30:fc:ab:98:95: e7:76:f9:a1:77:9f:f9:08:23:79:bb:0d:89:93:63:c7:e5:03: ef:b8:03:f1:b2:32:56:49:95:d0:58:c1:3d:a8:a6:9a:59:f1: b7:c0:a2:48:db:04:88:cb:1d:ba:91:94:50:9a:1e:cc:50:1f: 54:92:79:7c:ae:da:5c:ae:81:2b:89:3a:d9:32:b9:cf:f7:a9: fe:ef:77:02:66:5b:e7:2d:4a:53:66:b5:ab:a6:0c:d6:15:df: fe:21:83:b1:36:95:7c:b0:52:13:7b:b8:e4:d5:40:23:2d:e2: 26:19:26:75:91:6d:ca:99:63:40:2f:4d:a7:80:7c:f9:81:48: 81:69:4d:99:10:86:88:cd:d7:5e:b7:0a:b2:9c:45:b1:e6:97: 8d:95:e8:79:32:6b:1e:eb:82:3b:91:c0:0d:40:0b:bf:3e:42: 0b:a1:54:40:5a:4d:d9:9e:df:1c:93:b6:c5:5c:7d:6f:cc:69: a7:82:95:45:cb:be:a8:97:ab:ed:bc:5e:b5:30:19:b0:24:9d: 0b:c7:f3:94 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNGlu+z1jiNXmMSNXzn4oprKvF4owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMjAyMloX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAMjNhYjAyMTRhNTc3MjJjNzRmYzky M2ZhOTY0MmYyNzAyNmRlNThlZjEzNzM5ZmFmZWQzZDRkYjc2MDU3ZDk2ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6IoeRaZrRR/pHN3K6shJDOhr6je zIhJM7nbcsdMDDV4ufso4sbkQgd2/97eUasqUFfdfhk/Dc3LYXoTVRTYogF7fPTH iRbwCA+UvXQzVZwSwXW2CqZrg9LI/6jpbkfW32U1UFeW9oYFtwJPYR+U9rFCYglu tzDSrRAXN64kwxCqTCO/3lw/jCRxJPZgqEEedskoXPIaPUC1MlIO+sy9wLSD1HLU eZnlLQcefg3iSv6SUvc9YbrkydO/8xBtQbc19goehz21R6pvmEl3jQ6Q++yiRAv9 lzCuRU1cX6059ll4h2LmWDfZscnONALVVbVf+ueD7lYO/t6vYHdgO2j6GwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFA5KgaTNcb9zfLf4CI16+i/qdw+1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZhOGQ5NzQ1LTdiN2UtNDk5Ny1iYjM2LTI0NmUwNmQwZTYxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauiBAMA0GCSqGSIb3DQEBCwUAA4IBAQBa7/b4cBf6HI8T4u0G a8yOL8BfRwrIbH4qU/zr5oZCph2Eu7JgBDXnPY4BMGqJKvb2MPyrmJXndvmhd5/5 CCN5uw2Jk2PH5QPvuAPxsjJWSZXQWME9qKaaWfG3wKJI2wSIyx26kZRQmh7MUB9U knl8rtpcroEriTrZMrnP96n+73cCZlvnLUpTZrWrpgzWFd/+IYOxNpV8sFITe7jk 1UAjLeImGSZ1kW3KmWNAL02ngHz5gUiBaU2ZEIaIzddetwqynEWx5peNleh5Mmse 64I7kcANQAu/PkILoVRAWk3Znt8ck7bFXH1vzGmngpVFy76ol6vtvF61MBmwJJ0L x/OU -----END CERTIFICATE-----Generated at Wed Aug 26 17:34:27 2026 by rpki-client