$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2cf63335-a1e9-4d43-a5cb-4131bfdb6d39.roa File: 2cf63335-a1e9-4d43-a5cb-4131bfdb6d39.roa (raw, json) Hash identifier: AT9draZhI01ogHWBCNJenhrFEPKDa99krSBppv+ZzOs= Subject key identifier: 60:12:7F:9B:48:85:00:03:F7:FE:D4:53:FB:90:F9:22:D2:06:5D:3A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77F37C646363F913E859EE60D5178F55E9C40A98 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2cf63335-a1e9-4d43-a5cb-4131bfdb6d39.roa Signing time: Wed 09 Sep 2026 15:54:27 +0000 ROA not before: Wed 09 Sep 2026 15:54:27 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da62:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f3:7c:64:63:63:f9:13:e8:59:ee:60:d5:17:8f:55:e9:c4:0a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 9 15:54:27 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=accc8c7b696f9a800011d3841a530f82a74778c8fc412f4a3b93dc9b32e21069, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:64:46:c4:ea:1b:9c:14:20:dd:00:21:4c:81: ae:94:e0:46:f1:08:3a:2c:31:28:a8:61:e9:da:78: 4e:64:42:0f:cb:7f:d1:6f:c6:83:3f:a1:cd:cb:1d: b0:1c:b5:8b:74:68:9f:24:94:14:59:76:fe:c4:da: ba:38:a2:c5:c1:2f:a3:95:c0:6d:f6:c2:85:a5:e3: 88:fd:02:c1:61:24:0a:2e:aa:2e:c7:9c:51:e5:25: 8b:2a:da:e5:71:87:1e:6a:40:24:e8:31:7c:12:bf: d4:5f:54:82:57:a9:0d:d2:4e:30:13:7f:7b:50:91: 49:09:76:d5:cf:a2:0c:ec:6e:c2:40:4c:d8:50:13: da:93:d6:dd:5c:5f:36:7f:9f:c2:f2:c1:9a:0b:af: 75:96:7d:89:e4:fb:d9:c1:d9:2c:8f:73:4c:e9:07: cf:5f:15:b1:31:b1:4a:5e:27:7a:8f:3b:f0:b7:91: 79:53:a8:16:09:33:9e:54:51:8f:8f:35:74:2e:bd: 04:2a:a8:f8:ec:9d:4a:9b:94:e6:64:6f:d3:4d:78: 39:61:a4:ee:c4:b5:cc:c0:ef:6d:42:e4:88:32:7f: e5:ca:07:36:91:32:fd:34:f9:74:66:24:33:93:1f: d8:0b:44:a5:f4:7d:f5:75:a5:d2:06:21:ff:2f:65: b3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:12:7F:9B:48:85:00:03:F7:FE:D4:53:FB:90:F9:22:D2:06:5D:3A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2cf63335-a1e9-4d43-a5cb-4131bfdb6d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da62:2800::/40 Signature Algorithm: sha256WithRSAEncryption 1f:da:72:32:bb:00:42:14:c8:a1:59:90:dc:6e:35:d3:11:03: 65:36:9c:16:30:1e:3a:6e:d3:e3:33:7f:35:7a:0d:c2:cb:e2: e7:5f:81:0f:27:4d:ca:91:a5:f9:ce:74:19:35:a6:58:d9:f7: 15:05:b7:59:0d:f0:19:b4:23:bf:f8:df:7c:37:f1:d9:03:24: df:9e:9c:33:1f:87:52:77:b2:35:58:80:7f:67:8a:a6:ad:30: 67:67:b1:76:82:be:4b:c6:f1:97:85:c2:cf:15:58:93:5d:96: 67:fd:79:17:57:42:cf:eb:8b:6f:8d:94:0b:38:58:f3:64:60: 79:2b:0c:28:da:b8:5e:af:c2:5e:ec:8e:3c:d3:c2:bc:48:3a: c8:f0:eb:a9:4f:87:27:09:e0:49:c1:08:7f:93:b1:16:51:dc: 56:74:00:65:f5:c2:2a:e9:c1:37:19:86:38:00:86:f1:f6:c6: 32:db:81:05:fe:f3:f6:fe:d5:7d:6c:12:2c:11:2e:2a:a2:f5: 10:2e:24:df:90:d1:a6:9f:fc:8f:1f:e2:97:55:c6:9b:26:d8: a4:bf:97:5f:35:50:36:40:ca:d1:44:d3:6f:0d:d6:98:4e:0c: 60:2e:62:85:3f:c8:c5:f2:11:9f:a5:85:92:3c:1d:41:5f:f3: ff:66:cf:02 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUd/N8ZGNj+RPoWe5g1RePVenECpgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkwOTE1NTQyN1oX DTI2MTIwODIzNTk1OVowejFJMEcGA1UEBRNAYWNjYzhjN2I2OTZmOWE4MDAwMTFk Mzg0MWE1MzBmODJhNzQ3NzhjOGZjNDEyZjRhM2I5M2RjOWIzMmUyMTA2OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WRGxOobnBQg3QAhTIGulOBG8Qg6 LDEoqGHp2nhOZEIPy3/Rb8aDP6HNyx2wHLWLdGifJJQUWXb+xNq6OKLFwS+jlcBt 9sKFpeOI/QLBYSQKLqoux5xR5SWLKtrlcYceakAk6DF8Er/UX1SCV6kN0k4wE397 UJFJCXbVz6IM7G7CQEzYUBPak9bdXF82f5/C8sGaC691ln2J5PvZwdksj3NM6QfP XxWxMbFKXid6jzvwt5F5U6gWCTOeVFGPjzV0Lr0EKqj47J1Km5TmZG/TTXg5YaTu xLXMwO9tQuSIMn/lygc2kTL9NPl0ZiQzkx/YC0Sl9H31daXSBiH/L2WzkQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGASf5tIhQAD9/7UU/uQ+SLSBl06MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJjZjYzMzM1LWExZTktNGQ0My1hNWNiLTQxMzFiZmRiNmQzOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYigwDQYJKoZIhvcNAQELBQADggEBAB/acjK7AEIUyKFZkNxu NdMRA2U2nBYwHjpu0+MzfzV6DcLL4udfgQ8nTcqRpfnOdBk1pljZ9xUFt1kN8Bm0 I7/433w38dkDJN+enDMfh1J3sjVYgH9niqatMGdnsXaCvkvG8ZeFws8VWJNdlmf9 eRdXQs/ri2+NlAs4WPNkYHkrDCjauF6vwl7sjjzTwrxIOsjw66lPhycJ4EnBCH+T sRZR3FZ0AGX1wirpwTcZhjgAhvH2xjLbgQX+8/b+1X1sEiwRLiqi9RAuJN+Q0aaf /I8f4pdVxpsm2KS/l181UDZAytFE028N1phODGAuYoU/yMXyEZ+lhZI8HUFf8/9m zwI= -----END CERTIFICATE-----Generated at Sun Sep 20 19:30:59 2026 by rpki-client