$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326e013f-96ee-4134-81b8-4f17df46033a.roa File: 326e013f-96ee-4134-81b8-4f17df46033a.roa (raw, json) Hash identifier: GyMKzf1/cTcbRCTTDMMZr2mSOV3ZgBadKBF9hCmRsME= Subject key identifier: D9:6D:83:2C:E7:01:9E:5A:94:50:E8:4A:01:F9:1B:3D:E5:91:60:37 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 073FF1532B3C9C7D1EAD39F7D91873DB07B4CBBA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326e013f-96ee-4134-81b8-4f17df46033a.roa Signing time: Thu 10 Sep 2026 00:00:25 +0000 ROA not before: Thu 10 Sep 2026 00:00:25 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:3f:f1:53:2b:3c:9c:7d:1e:ad:39:f7:d9:18:73:db:07:b4:cb:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:25 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=321077d9432d447e2e4a947f0b0b4cf096c904dc9fd622692b259ee121efed81, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:71:b2:21:7c:a9:26:41:2a:16:84:ba:6c: 85:23:ce:e3:5d:70:e4:6f:8d:2b:95:19:78:c2:a9: 90:ba:6f:1a:e5:60:f8:61:57:e6:f6:2e:57:56:4e: d0:17:11:28:14:44:60:3f:58:01:24:0c:59:74:ec: 80:e2:73:cb:76:ff:99:08:09:af:45:59:a0:aa:b5: e9:a2:89:9c:20:2a:27:10:33:d7:40:4f:38:b9:9e: 31:e3:b9:34:ce:97:50:fd:ff:d8:db:e2:1d:84:e4: a5:3d:f1:59:65:a1:2f:04:ca:f3:c9:70:a1:8a:c5: 17:f3:27:86:97:21:f0:27:7c:a2:fe:97:86:20:b1: 05:7a:85:a2:b8:f9:03:0c:bb:a7:00:dd:2e:e6:e0: 83:8e:fe:02:1f:b0:de:e9:da:67:f4:14:89:05:d2: ea:89:fb:b6:db:3e:13:1a:2e:77:3b:0f:28:c1:3b: 6b:87:ff:49:8b:e5:09:52:96:9c:bd:f4:ef:68:91: 42:4c:40:85:d9:25:ce:fd:49:b3:8e:63:a1:79:e2: 24:50:c5:1a:3d:c7:50:ab:8a:10:7b:77:79:c6:2c: 2b:2f:88:5d:06:d0:de:58:10:a3:b5:9e:ae:d6:8f: 61:a2:37:8d:c9:95:69:c3:37:ab:91:d4:aa:d5:7c: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6D:83:2C:E7:01:9E:5A:94:50:E8:4A:01:F9:1B:3D:E5:91:60:37 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326e013f-96ee-4134-81b8-4f17df46033a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:8040::/48 Signature Algorithm: sha256WithRSAEncryption 8c:f6:c1:d3:57:a7:a5:dd:09:1b:c3:f6:eb:ed:31:d3:c0:fe: e0:ae:13:02:5a:d3:2d:e1:62:2d:dc:c0:f4:a6:bb:4a:7b:ed: 57:94:ee:77:db:d7:6f:a1:42:f2:68:ed:4d:29:43:6a:0b:ca: 5e:9c:27:a0:43:7f:19:85:87:90:3a:7a:75:9d:e3:47:1a:52: e5:04:ae:72:e8:f7:83:be:8f:cc:ad:21:a1:0b:ed:45:b7:bb: 54:fc:7c:3c:a9:e3:1a:f9:a2:f7:91:84:41:0c:cf:15:37:70: 0e:3a:47:db:0a:4d:ec:58:8f:66:4a:6e:62:83:18:f0:8a:56: e3:8c:16:61:d2:88:2f:0c:55:b4:d6:9a:20:3b:f9:f7:a4:d9: a4:43:16:46:94:23:90:ab:ae:72:0c:3b:6b:a5:09:66:a0:44: 62:8e:ee:1f:61:00:48:5c:5c:bb:1e:8a:f1:ee:2a:65:82:c5: 5f:0f:18:5c:5e:16:b0:c5:77:82:a9:76:2e:e6:6e:9f:49:70: 1a:37:61:41:23:58:a4:41:97:2d:8b:9e:a5:e6:7f:8d:da:cd: 25:c0:fa:df:b2:04:5c:34:88:f5:81:d0:57:1f:bd:3f:ce:46: 53:12:c7:19:93:0b:74:6e:65:17:bb:43:4d:7c:c0:26:b4:28: 60:e3:9b:0b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBz/xUys8nH0erTn32Rhz2we0y7owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDAyNVoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAMzIxMDc3ZDk0MzJkNDQ3ZTJlNGE5 NDdmMGIwYjRjZjA5NmM5MDRkYzlmZDYyMjY5MmIyNTllZTEyMWVmZWQ4MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsJxsiF8qSZBKhaEumyFI87jXXDk b40rlRl4wqmQum8a5WD4YVfm9i5XVk7QFxEoFERgP1gBJAxZdOyA4nPLdv+ZCAmv RVmgqrXpoomcIConEDPXQE84uZ4x47k0zpdQ/f/Y2+IdhOSlPfFZZaEvBMrzyXCh isUX8yeGlyHwJ3yi/peGILEFeoWiuPkDDLunAN0u5uCDjv4CH7De6dpn9BSJBdLq ifu22z4TGi53Ow8owTtrh/9Ji+UJUpacvfTvaJFCTECF2SXO/UmzjmOheeIkUMUa PcdQq4oQe3d5xiwrL4hdBtDeWBCjtZ6u1o9hojeNyZVpwzerkdSq1XxXswIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNltgyznAZ5alFDoSgH5Gz3lkWA3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyNmUwMTNmLTk2ZWUtNDEzNC04MWI4LTRmMTdkZjQ2MDMzYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba64BAMA0GCSqGSIb3DQEBCwUAA4IBAQCM9sHTV6el3Qkbw/br 7THTwP7grhMCWtMt4WIt3MD0prtKe+1XlO5329dvoULyaO1NKUNqC8penCegQ38Z hYeQOnp1neNHGlLlBK5y6PeDvo/MrSGhC+1Ft7tU/Hw8qeMa+aL3kYRBDM8VN3AO OkfbCk3sWI9mSm5igxjwilbjjBZh0ogvDFW01pogO/n3pNmkQxZGlCOQq65yDDtr pQlmoERiju4fYQBIXFy7Horx7iplgsVfDxhcXhawxXeCqXYu5m6fSXAaN2FBI1ik QZcti56l5n+N2s0lwPrfsgRcNIj1gdBXH70/zkZTEscZkwt0bmUXu0NNfMAmtChg 45sL -----END CERTIFICATE-----Generated at Mon Sep 21 16:36:55 2026 by rpki-client