$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d18e95f-6df4-4586-8657-7f68919762f8.roa File: 2d18e95f-6df4-4586-8657-7f68919762f8.roa (raw, json) Hash identifier: uSljL6cam/NBItqxkDR9qCHHSlDP0W5+QCELV+eQnx8= Subject key identifier: 07:00:C1:36:B4:6F:0A:11:C7:8C:1C:D5:F4:D1:00:3D:F5:3F:5E:57 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69B56141FE14C62C2090D43A7051749A2F5D075C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d18e95f-6df4-4586-8657-7f68919762f8.roa Signing time: Thu 10 Sep 2026 00:00:30 +0000 ROA not before: Thu 10 Sep 2026 00:00:30 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:2880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b5:61:41:fe:14:c6:2c:20:90:d4:3a:70:51:74:9a:2f:5d:07:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:30 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=acea38a7b800b31dde80b2de1100580592befdb005577dea41fe05c4dad23b6a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:e4:bb:4b:9a:57:5e:bc:31:0e:89:3f:38: cd:2c:2f:63:6d:6c:f3:b8:0a:8d:98:03:ab:22:ff: 42:37:62:14:87:c5:d0:35:31:e9:c9:be:7b:28:4c: d5:90:61:d4:70:e0:d6:7a:38:fb:7a:aa:86:ee:69: 35:b7:1b:ec:db:07:b5:6e:48:04:63:87:ad:c8:63: 97:16:b7:df:2e:6d:22:87:0c:69:cb:74:cd:6b:18: 75:b3:4b:7f:2e:1f:89:e3:6d:b8:60:4a:c2:a3:97: 6b:6f:4a:29:aa:6b:82:03:ad:47:12:92:7d:04:9f: 52:13:cc:ba:27:be:10:ed:52:f5:b3:d3:2b:f4:bf: df:2f:0c:3a:8a:11:cb:81:c4:8c:8b:f0:be:d0:f5: 8b:41:ef:f9:29:74:9c:6e:27:d6:47:c4:27:f7:1a: 5e:77:0a:91:8c:c0:21:d8:94:00:8f:b0:51:49:db: 45:94:bc:ea:cd:d1:67:72:5b:ed:dc:8c:fb:af:8a: 63:58:4a:af:8f:19:7c:2f:42:da:b8:82:55:d1:cb: fa:32:82:1a:1a:fd:8b:be:5e:d3:a3:39:9e:c3:6a: 6e:3a:fd:3a:54:81:90:f3:08:c2:04:b5:d3:ba:73: c3:8f:2e:3c:7f:6b:96:cd:1b:b3:57:93:0b:32:13: 7c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:00:C1:36:B4:6F:0A:11:C7:8C:1C:D5:F4:D1:00:3D:F5:3F:5E:57 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d18e95f-6df4-4586-8657-7f68919762f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:2880::/48 Signature Algorithm: sha256WithRSAEncryption 97:32:20:d2:b7:6a:52:a4:e1:48:2b:f5:e8:e8:c0:4d:fe:54: a2:96:35:bb:42:4e:2f:a5:a0:28:56:5c:4f:77:39:05:e9:b1: 82:de:79:be:cb:4a:9e:76:b7:f7:84:90:40:f5:f5:3e:83:4b: 88:4e:b3:9b:4d:c6:23:f5:f5:8d:03:99:99:ea:6f:4a:df:8f: 0d:1f:4f:5c:24:66:f5:95:f6:be:82:5b:f3:fb:c1:68:43:d1: 23:e8:e9:6a:80:74:6d:29:a6:9d:bb:4c:d5:32:5b:48:ac:16: 4b:18:f9:dc:b3:31:ee:66:1f:e0:dd:c7:3d:d9:78:c9:7f:2e: be:ed:07:fa:d7:94:cf:9e:c3:a1:c2:f0:d9:98:35:ec:3f:df: 2f:cc:f9:83:14:c5:11:c0:5b:b0:05:ed:35:c4:67:3f:a0:e7: b6:f2:54:99:83:4a:b5:0e:3d:8d:b8:6d:e3:b5:37:c4:02:ab: a1:73:08:c1:22:08:94:13:4c:8b:d7:eb:ab:35:5a:f6:97:25: e8:d1:cc:f3:c1:32:87:54:df:de:ed:41:fd:35:a3:e2:bf:30: 99:6a:7f:bd:51:a8:78:ca:6c:d7:e2:47:aa:1d:27:ed:80:d7: 4e:b8:08:68:8a:9b:d7:9e:b1:75:e7:00:aa:6c:10:56:74:73: 8e:77:ce:91 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUabVhQf4UxiwgkNQ6cFF0mi9dB1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDAzMFoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAYWNlYTM4YTdiODAwYjMxZGRlODBi MmRlMTEwMDU4MDU5MmJlZmRiMDA1NTc3ZGVhNDFmZTA1YzRkYWQyM2I2YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe3ku0uaV168MQ6JPzjNLC9jbWzz uAqNmAOrIv9CN2IUh8XQNTHpyb57KEzVkGHUcODWejj7eqqG7mk1txvs2we1bkgE Y4etyGOXFrffLm0ihwxpy3TNaxh1s0t/Lh+J4224YErCo5drb0opqmuCA61HEpJ9 BJ9SE8y6J74Q7VL1s9Mr9L/fLww6ihHLgcSMi/C+0PWLQe/5KXScbifWR8Qn9xpe dwqRjMAh2JQAj7BRSdtFlLzqzdFnclvt3Iz7r4pjWEqvjxl8L0LauIJV0cv6MoIa Gv2Lvl7Tozmew2puOv06VIGQ8wjCBLXTunPDjy48f2uWzRuzV5MLMhN8VwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAcAwTa0bwoRx4wc1fTRAD31P15XMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJkMThlOTVmLTZkZjQtNDU4Ni04NjU3LTdmNjg5MTk3NjJmOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6yiAMA0GCSqGSIb3DQEBCwUAA4IBAQCXMiDSt2pSpOFIK/Xo 6MBN/lSiljW7Qk4vpaAoVlxPdzkF6bGC3nm+y0qedrf3hJBA9fU+g0uITrObTcYj 9fWNA5mZ6m9K348NH09cJGb1lfa+glvz+8FoQ9Ej6OlqgHRtKaadu0zVMltIrBZL GPncszHuZh/g3cc92XjJfy6+7Qf615TPnsOhwvDZmDXsP98vzPmDFMURwFuwBe01 xGc/oOe28lSZg0q1Dj2NuG3jtTfEAquhcwjBIgiUE0yL1+urNVr2lyXo0czzwTKH VN/e7UH9NaPivzCZan+9Uah4ymzX4keqHSftgNdOuAhoipvXnrF15wCqbBBWdHOO d86R -----END CERTIFICATE-----Generated at Mon Sep 21 06:06:58 2026 by rpki-client