$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82480651-66ce-4ff9-972e-d2069a5e0821.roa File: 82480651-66ce-4ff9-972e-d2069a5e0821.roa (raw, json) Hash identifier: zp6083xa/bOYg3tD7Etk/VjlY4VsLPrXrEsYZSVchb0= Subject key identifier: 76:CD:A5:F9:61:20:4F:93:9B:4A:74:DE:F1:5A:A8:5B:B0:C1:FF:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 300C6509CCF94EAC308A39E7B93A5C4B1F79BDEE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82480651-66ce-4ff9-972e-d2069a5e0821.roa Signing time: Thu 10 Sep 2026 00:10:08 +0000 ROA not before: Thu 10 Sep 2026 00:10:08 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:0c:65:09:cc:f9:4e:ac:30:8a:39:e7:b9:3a:5c:4b:1f:79:bd:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:10:08 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=d12af1c50393e1d66dfc1df03c84edf17eb7ab5c29913dd7d6fbb9571561ec09, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:62:23:5a:8a:50:7b:7c:75:a2:3e:ab:26: 8c:c8:0c:15:85:de:3c:0e:36:c5:8c:98:38:31:24: 9c:24:c8:74:52:a5:e3:b6:eb:ef:6d:08:88:4b:d6: b6:96:00:b4:cd:fc:9e:47:fe:19:f1:d8:12:69:0c: 23:97:85:d7:5a:0b:43:56:85:df:19:cd:c2:bc:1e: 61:52:c1:11:4e:3e:04:d8:96:b9:fe:38:49:55:60: 79:ca:a9:af:15:b3:81:cc:56:bc:7d:04:2d:8c:ae: 8a:b3:bb:d7:94:d7:4c:a4:3d:8d:22:16:9d:6b:69: d8:77:d7:72:77:90:a1:d0:14:6f:6c:e6:1f:33:46: 1a:04:dc:c5:4d:ae:38:28:b6:d4:8e:fa:ef:04:8f: fe:e4:0e:ae:92:0a:0f:28:9f:d2:a7:bb:d6:15:b6: 13:c6:4b:c5:9d:99:2d:af:86:bc:19:1b:b2:fa:c6: 75:73:93:e1:6a:d5:01:b7:38:e4:d4:0c:3b:c6:91: 1b:d3:b3:b6:c0:3d:e8:79:19:cd:92:61:be:53:35: 3b:85:85:e7:14:c9:4f:73:95:f4:64:74:2c:2f:cc: 3a:f4:a2:74:a4:ad:e5:cf:47:fa:4a:01:62:3a:cd: 2e:f1:cb:2b:0f:65:01:14:52:24:46:27:13:53:21: a1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CD:A5:F9:61:20:4F:93:9B:4A:74:DE:F1:5A:A8:5B:B0:C1:FF:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82480651-66ce-4ff9-972e-d2069a5e0821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:c080::/48 Signature Algorithm: sha256WithRSAEncryption 3f:63:5c:7a:c9:8f:21:e3:d3:67:94:d1:dd:e8:19:98:cd:e0: 55:99:db:5c:49:28:d3:29:4e:a7:76:63:8c:9b:80:e4:25:98: d1:66:2f:d5:04:93:de:78:39:93:34:f2:a8:03:90:48:e0:c9: d5:03:a6:69:16:bb:fb:0b:aa:3e:89:cf:2b:b8:96:87:a4:f3: 4a:01:33:fb:aa:05:5f:86:9a:32:37:0d:5d:e8:12:c3:59:d1: 6f:19:37:a6:fc:5e:21:47:08:79:6d:7d:dd:80:62:c7:b0:ce: 06:10:f8:3c:a5:31:32:94:5e:c5:24:30:8e:58:d3:8c:e8:9a: 18:0e:35:f7:e2:70:28:9d:66:97:f3:c7:11:5f:f0:d1:dc:62: ab:06:82:20:19:ab:02:bb:58:a2:4f:85:58:59:8b:69:1a:74: 79:82:d0:cc:7a:a8:3d:7d:00:d6:b9:00:b5:3b:89:8c:82:3f: e5:73:55:bf:f3:7c:be:f6:33:7f:db:be:d4:8c:fa:33:49:3b: d7:a6:15:c7:d6:75:da:00:0e:35:f5:21:68:55:f9:ee:c8:b4: 09:e4:78:7b:fa:58:2f:fb:02:c1:cc:c1:47:d3:51:65:75:dd: cf:4a:9b:c9:c2:dd:fb:d0:22:65:77:86:cb:50:85:b7:48:e5: f1:a0:48:21 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMAxlCcz5TqwwijnnuTpcSx95ve4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMTAwOFoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAZDEyYWYxYzUwMzkzZTFkNjZkZmMx ZGYwM2M4NGVkZjE3ZWI3YWI1YzI5OTEzZGQ3ZDZmYmI5NTcxNTYxZWMwOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ1iI1qKUHt8daI+qyaMyAwVhd48 DjbFjJg4MSScJMh0UqXjtuvvbQiIS9a2lgC0zfyeR/4Z8dgSaQwjl4XXWgtDVoXf Gc3CvB5hUsERTj4E2Ja5/jhJVWB5yqmvFbOBzFa8fQQtjK6Ks7vXlNdMpD2NIhad a2nYd9dyd5Ch0BRvbOYfM0YaBNzFTa44KLbUjvrvBI/+5A6ukgoPKJ/Sp7vWFbYT xkvFnZktr4a8GRuy+sZ1c5PhatUBtzjk1Aw7xpEb07O2wD3oeRnNkmG+UzU7hYXn FMlPc5X0ZHQsL8w69KJ0pK3lz0f6SgFiOs0u8csrD2UBFFIkRicTUyGh+QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHbNpflhIE+Tm0p03vFaqFuwwf+RMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyNDgwNjUxLTY2Y2UtNGZmOS05NzJlLWQyMDY5YTVlMDgyMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba68CAMA0GCSqGSIb3DQEBCwUAA4IBAQA/Y1x6yY8h49NnlNHd 6BmYzeBVmdtcSSjTKU6ndmOMm4DkJZjRZi/VBJPeeDmTNPKoA5BI4MnVA6ZpFrv7 C6o+ic8ruJaHpPNKATP7qgVfhpoyNw1d6BLDWdFvGTem/F4hRwh5bX3dgGLHsM4G EPg8pTEylF7FJDCOWNOM6JoYDjX34nAonWaX88cRX/DR3GKrBoIgGasCu1iiT4VY WYtpGnR5gtDMeqg9fQDWuQC1O4mMgj/lc1W/83y+9jN/277UjPozSTvXphXH1nXa AA419SFoVfnuyLQJ5Hh7+lgv+wLBzMFH01Fldd3PSpvJwt370CJld4bLUIW3SOXx oEgh -----END CERTIFICATE-----Generated at Mon Sep 21 17:25:59 2026 by rpki-client