$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32da8c16-2b7a-48e4-8260-08677c46863d.roa File: 32da8c16-2b7a-48e4-8260-08677c46863d.roa (raw, json) Hash identifier: VBuYHAOQWCdS+YbMLuojluihL7VcwX/mhpxvjZiSOjY= Subject key identifier: 95:60:CC:EE:02:AD:49:43:1E:36:5D:64:19:7B:59:D3:C2:58:A7:11 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3FF85AE5AAB9C1FD2104AC4508DC743C3464E801 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32da8c16-2b7a-48e4-8260-08677c46863d.roa Signing time: Thu 10 Sep 2026 00:00:11 +0000 ROA not before: Thu 10 Sep 2026 00:00:11 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f8:5a:e5:aa:b9:c1:fd:21:04:ac:45:08:dc:74:3c:34:64:e8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:11 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=733d0a7287df0fd57541ed6fe4b9b486aecb7147d20909622c0707f3c1f482aa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:b0:d4:8b:b0:ea:37:40:6e:e6:f4:72:29: c9:44:71:24:db:e5:85:55:8b:b0:cd:13:1a:16:b9: 1f:bd:f3:0d:1c:8e:fa:29:ee:02:6a:83:88:9a:e0: c8:45:7b:57:b5:3c:2c:33:b0:c2:94:33:c4:e6:64: cf:eb:3e:4e:63:ee:28:04:41:19:83:5f:60:e1:83: 25:c9:71:9a:31:0c:19:58:94:d5:5b:99:f1:5f:e1: a2:ad:70:38:02:8d:57:90:41:a2:81:dc:fa:30:9e: 7a:de:75:38:bb:ee:aa:da:bc:5c:5b:d9:3d:79:4f: a7:e0:f4:0c:83:28:1c:98:c9:c7:cc:f9:75:53:1c: d6:74:38:84:2d:56:60:96:72:f6:85:fe:cb:ba:14: e1:04:5e:4e:70:7d:ff:f4:51:3b:3c:81:78:20:16: e4:cc:48:da:24:e9:6d:8e:ee:8a:99:68:a9:b6:f4: a0:6d:8e:8b:5a:28:c4:dc:fa:13:3e:d6:db:97:20: 9c:6f:e0:0b:62:63:4b:46:aa:7e:d8:46:0c:7f:d1: 15:39:b2:97:de:1a:99:ad:12:49:8b:a3:a2:b6:b2: 0c:fa:25:3d:75:80:b1:57:14:6f:91:a5:8c:2f:88: d1:cf:42:67:2e:bd:45:23:38:25:49:2d:9c:0d:be: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:60:CC:EE:02:AD:49:43:1E:36:5D:64:19:7B:59:D3:C2:58:A7:11 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32da8c16-2b7a-48e4-8260-08677c46863d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:4800::/40 Signature Algorithm: sha256WithRSAEncryption 62:4e:b3:07:1e:84:65:a3:06:4d:1e:ef:ab:30:37:0d:c9:ef: 94:46:65:e6:a7:80:90:b9:88:6f:06:7e:b5:8d:c4:e9:70:57: ec:53:bb:cc:ee:24:7b:af:cc:30:14:b3:78:c9:3a:00:f2:33: 1d:27:aa:bc:de:3d:e8:ef:f0:9f:e0:2e:64:24:24:6d:4a:b5: 08:40:77:4b:05:62:7a:87:fa:be:43:fb:ca:c4:34:fb:23:62: 09:39:de:17:74:c3:bf:02:0c:24:c9:4c:69:54:71:c7:98:6c: 99:89:67:e4:2b:5f:1c:d7:96:9e:d5:be:32:ce:39:e4:97:75: 10:d0:74:90:b1:3c:43:dc:5f:2e:32:4c:fa:74:af:01:b9:df: e0:a4:ab:44:f5:93:50:de:8a:fb:ac:0d:36:b3:63:de:49:c8: 40:cb:3e:ba:66:fb:20:62:92:e3:7f:01:f2:61:17:4d:6a:7e: 1b:23:e5:5d:9e:62:9f:66:b0:a7:4f:eb:c3:61:01:c4:29:d1: 8c:51:09:14:3a:ea:5f:a3:24:18:6a:d4:4f:dd:e2:25:19:12: 85:3b:24:06:a1:b4:f8:a4:2b:84:35:7c:e6:6f:2a:c8:47:10: e0:9a:a1:d9:62:23:14:31:bc:ee:66:bb:d7:a1:a6:a7:37:e9: f2:da:ca:ee -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUP/ha5aq5wf0hBKxFCNx0PDRk6AEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDAxMVoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNANzMzZDBhNzI4N2RmMGZkNTc1NDFl ZDZmZTRiOWI0ODZhZWNiNzE0N2QyMDkwOTYyMmMwNzA3ZjNjMWY0ODJhYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBmw1Iuw6jdAbub0cinJRHEk2+WF VYuwzRMaFrkfvfMNHI76Ke4CaoOImuDIRXtXtTwsM7DClDPE5mTP6z5OY+4oBEEZ g19g4YMlyXGaMQwZWJTVW5nxX+GirXA4Ao1XkEGigdz6MJ563nU4u+6q2rxcW9k9 eU+n4PQMgygcmMnHzPl1UxzWdDiELVZglnL2hf7LuhThBF5OcH3/9FE7PIF4IBbk zEjaJOltju6KmWiptvSgbY6LWijE3PoTPtbblyCcb+ALYmNLRqp+2EYMf9EVObKX 3hqZrRJJi6OitrIM+iU9dYCxVxRvkaWML4jRz0JnLr1FIzglSS2cDb7g7QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJVgzO4CrUlDHjZdZBl7WdPCWKcRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyZGE4YzE2LTJiN2EtNDhlNC04MjYwLTA4Njc3YzQ2ODYzZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba60gwDQYJKoZIhvcNAQELBQADggEBAGJOswcehGWjBk0e76sw Nw3J75RGZeangJC5iG8GfrWNxOlwV+xTu8zuJHuvzDAUs3jJOgDyMx0nqrzePejv 8J/gLmQkJG1KtQhAd0sFYnqH+r5D+8rENPsjYgk53hd0w78CDCTJTGlUcceYbJmJ Z+QrXxzXlp7VvjLOOeSXdRDQdJCxPEPcXy4yTPp0rwG53+Ckq0T1k1DeivusDTaz Y95JyEDLPrpm+yBikuN/AfJhF01qfhsj5V2eYp9msKdP68NhAcQp0YxRCRQ66l+j JBhq1E/d4iUZEoU7JAahtPikK4Q1fOZvKshHEOCaodliIxQxvO5mu9ehpqc36fLa yu4= -----END CERTIFICATE-----Generated at Mon Sep 21 09:48:52 2026 by rpki-client