$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02c8365b-491a-4d86-982a-061536efed53.roa File: 02c8365b-491a-4d86-982a-061536efed53.roa (raw, json) Hash identifier: qtwIGZQtnbTunMwMtNP5jA5wO2s5E0I7y9huGzP7/QE= Subject key identifier: E5:3E:99:B8:A2:9E:3D:F2:13:EE:C9:75:96:4C:37:00:20:F8:0E:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DDA835E440270118709E641BEDA3BBF6D65F36C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02c8365b-491a-4d86-982a-061536efed53.roa Signing time: Thu 10 Sep 2026 00:01:03 +0000 ROA not before: Thu 10 Sep 2026 00:01:03 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:da:83:5e:44:02:70:11:87:09:e6:41:be:da:3b:bf:6d:65:f3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:01:03 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=2b0ad62f4e52b60dae3050873a0693fba5adbd410a0e507ddf6a20d8e31d7312, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:56:9c:54:74:4c:da:39:7f:5b:e6:11:37: 02:bd:40:ab:da:4d:b8:46:a0:52:53:57:1e:65:af: 90:99:b8:ba:18:4b:98:a5:02:96:17:c7:a1:cc:ae: a9:50:23:b7:56:66:cb:17:05:f3:bb:46:cd:bd:ee: 6d:2d:b4:95:30:3b:d2:f3:7b:a3:c8:7e:72:4f:a5: 30:c8:9c:cb:40:62:cc:73:10:a6:8d:68:d7:7b:44: b5:52:95:4f:06:e0:5b:b6:05:97:0a:b2:d8:a6:b8: e3:02:a1:a5:b4:5a:f5:08:df:82:c1:7d:55:bf:27: b7:a3:5a:41:4a:f2:7d:a8:82:7b:81:68:b9:f4:a0: f1:b6:5c:b1:7d:e7:d4:6e:31:33:e8:5a:c6:c0:32: e4:49:10:93:28:8e:d2:26:af:01:d3:41:fb:56:99: 5b:b9:57:6e:32:58:cf:99:36:c6:32:7b:be:5d:97: f9:18:ec:ba:f5:56:f7:2a:ef:79:40:76:67:5f:9a: 3d:2d:1e:f1:63:27:18:ce:40:3b:ec:df:77:b8:e9: 6f:72:c4:d9:70:f6:b1:2a:ef:db:4f:a1:fa:f5:eb: 95:1f:e9:bf:61:0a:77:28:a7:5d:c6:1c:04:5f:38: 20:4c:0d:01:7a:bd:b3:d1:0a:c5:d7:58:f7:91:65: 52:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3E:99:B8:A2:9E:3D:F2:13:EE:C9:75:96:4C:37:00:20:F8:0E:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02c8365b-491a-4d86-982a-061536efed53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:8880::/48 Signature Algorithm: sha256WithRSAEncryption 1c:92:d0:b1:b0:c1:f1:12:44:25:88:91:86:74:e9:5a:b8:53: 49:9e:8c:e6:9a:79:32:0d:8e:dd:ce:04:ad:61:68:bc:b9:4c: ee:f7:8c:65:81:23:81:c9:8a:66:f7:c7:66:a8:7d:2e:fb:a2: a4:c2:a3:6d:69:d3:fc:12:b8:fb:e0:6a:26:4c:4a:ee:89:43: d6:c8:3b:09:09:04:cf:b6:2d:be:2f:80:a6:a3:22:9b:f9:e3: af:22:a0:21:35:90:51:10:cc:d9:55:b0:19:ff:f6:0c:9a:d8: 4f:e6:6c:c8:6b:93:ca:20:6b:b8:00:73:31:cd:ca:0d:41:7d: 4a:18:a3:8f:db:3a:e6:b8:53:ee:d2:df:1f:a0:5c:51:4a:33: 2b:06:18:ea:b5:07:07:36:8a:d9:f2:84:bf:6a:5f:af:31:97: 94:44:af:6e:08:56:d1:3c:86:66:50:12:bc:92:35:89:64:be: 89:79:f5:d4:a9:ce:bc:79:d5:f6:32:14:c9:65:90:73:35:c5: 2c:93:c6:14:1b:07:6f:d0:be:98:25:ac:b3:9a:59:a4:a0:62: 03:e3:c6:23:86:38:7b:3c:0d:7d:38:b2:94:f5:e2:cc:b3:e0: a1:a0:3b:40:e4:dc:ff:82:86:da:f5:94:86:4e:18:5c:2c:ba: 49:f5:81:c8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHdqDXkQCcBGHCeZBvto7v21l82wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDEwM1oX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAMmIwYWQ2MmY0ZTUyYjYwZGFlMzA1 MDg3M2EwNjkzZmJhNWFkYmQ0MTBhMGU1MDdkZGY2YTIwZDhlMzFkNzMxMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox1WnFR0TNo5f1vmETcCvUCr2k24 RqBSU1ceZa+Qmbi6GEuYpQKWF8ehzK6pUCO3VmbLFwXzu0bNve5tLbSVMDvS83uj yH5yT6UwyJzLQGLMcxCmjWjXe0S1UpVPBuBbtgWXCrLYprjjAqGltFr1CN+CwX1V vye3o1pBSvJ9qIJ7gWi59KDxtlyxfefUbjEz6FrGwDLkSRCTKI7SJq8B00H7Vplb uVduMljPmTbGMnu+XZf5GOy69Vb3Ku95QHZnX5o9LR7xYycYzkA77N93uOlvcsTZ cPaxKu/bT6H69euVH+m/YQp3KKddxhwEXzggTA0Ber2z0QrF11j3kWVS7wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOU+mbiinj3yE+7JdZZMNwAg+A7/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAyYzgzNjViLTQ5MWEtNGQ4Ni05ODJhLTA2MTUzNmVmZWQ1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba64iAMA0GCSqGSIb3DQEBCwUAA4IBAQAcktCxsMHxEkQliJGG dOlauFNJnozmmnkyDY7dzgStYWi8uUzu94xlgSOByYpm98dmqH0u+6KkwqNtadP8 Erj74GomTEruiUPWyDsJCQTPti2+L4CmoyKb+eOvIqAhNZBREMzZVbAZ//YMmthP 5mzIa5PKIGu4AHMxzcoNQX1KGKOP2zrmuFPu0t8foFxRSjMrBhjqtQcHNorZ8oS/ al+vMZeURK9uCFbRPIZmUBK8kjWJZL6JefXUqc68edX2MhTJZZBzNcUsk8YUGwdv 0L6YJayzmlmkoGID48Yjhjh7PA19OLKU9eLMs+ChoDtA5Nz/goba9ZSGThhcLLpJ 9YHI -----END CERTIFICATE-----Generated at Mon Sep 21 16:27:59 2026 by rpki-client