$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fe4cc7-5218-4c2c-b824-1864fa6d3bd4.roa File: 89fe4cc7-5218-4c2c-b824-1864fa6d3bd4.roa (raw, json) Hash identifier: lfdk4d52R/9Bu555UBeqb0Ock7V7SBsmHQ1PZshoKbM= Subject key identifier: EB:0C:17:DA:64:D7:10:1C:2D:FB:F4:16:80:A6:B9:D1:3B:86:8D:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6AFFCE54F6D8DCBACB35C9962C6AB782B1DE25B8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fe4cc7-5218-4c2c-b824-1864fa6d3bd4.roa Signing time: Wed 09 Sep 2026 15:54:35 +0000 ROA not before: Wed 09 Sep 2026 15:54:35 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae7:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ff:ce:54:f6:d8:dc:ba:cb:35:c9:96:2c:6a:b7:82:b1:de:25:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 9 15:54:35 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=a81af1ac7e4538f43251c2c7eea121f8e84d17c344357322ca825fbd1530dcc9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:72:90:da:1a:88:1d:4b:6f:5a:7a:46:88: d9:f2:e0:76:c3:48:37:d3:3e:b4:63:60:a8:ea:75: 2d:f7:94:53:f8:ec:aa:e3:1b:51:4f:8f:57:ed:ef: 82:18:96:36:d8:e6:26:d0:d3:c1:1b:ad:0c:ef:11: 21:c4:83:56:d1:27:6b:6f:65:9a:4e:2a:05:9c:96: 2e:c8:8f:38:bc:d6:b9:ec:7e:c5:a1:26:da:5b:a1: 58:87:31:4b:22:a5:54:0b:94:fe:8a:27:b6:e3:b4: ef:89:0c:c8:e1:20:18:d9:9c:ac:82:bd:b3:2b:b8: 8c:62:02:c7:57:b1:04:92:d6:3b:40:b7:eb:0c:7d: 21:a2:81:be:71:93:94:52:c5:54:a5:4d:57:d0:f9: 2e:d5:3b:ab:46:08:3e:8a:1d:5c:4c:08:14:9d:b7: 9b:95:df:b3:6e:d7:cd:da:32:3a:ce:d0:0e:f1:b1: af:da:b0:3b:2b:48:c9:70:19:18:3c:d3:ff:3e:26: ac:48:a9:3e:cd:ea:82:d2:2f:b3:f0:97:97:da:dd: c5:06:8f:ee:e8:dc:d7:a1:53:03:c6:c0:1d:78:5c: 23:e4:54:58:99:3f:3e:91:f4:61:d9:28:89:3f:92: 5b:3d:67:2d:6a:47:26:1b:b3:0b:91:82:fa:77:60: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0C:17:DA:64:D7:10:1C:2D:FB:F4:16:80:A6:B9:D1:3B:86:8D:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fe4cc7-5218-4c2c-b824-1864fa6d3bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae7:4000::/40 Signature Algorithm: sha256WithRSAEncryption b8:a8:f1:9f:df:33:aa:c8:ea:64:27:f4:59:3d:1d:98:64:a7: c6:19:4c:04:3e:29:12:54:6b:dd:5f:42:e4:79:e2:88:2e:a2: 55:a8:ac:a9:76:5c:38:77:06:8d:f5:f6:97:65:c9:06:1a:63: 4d:c7:0e:7f:c3:c6:26:c9:b1:6e:8b:47:af:e0:36:e7:83:30: b1:a4:49:bd:5a:34:34:80:9f:1f:39:f5:9f:15:8b:66:4e:97: bf:0a:d0:80:c8:41:c1:ad:13:dd:18:25:0c:cd:d6:d1:d0:05: 83:73:6f:01:12:f6:a3:48:86:f3:cb:ab:f7:0d:db:dc:29:d2: 46:3e:10:fc:e6:f8:67:95:e1:91:0d:aa:c1:40:2f:b5:c1:20: c8:cb:35:a5:75:93:27:3c:17:48:f4:eb:6d:b9:37:52:ac:94: dd:c9:13:4b:da:3d:f5:d5:17:8f:64:15:21:80:d1:3f:49:9e: 94:4e:0c:3f:3a:66:16:2e:64:85:51:8e:50:1e:44:6e:9b:af: 38:3c:da:c9:7f:4e:f9:62:59:8a:9d:60:a0:ff:e8:72:b1:d6: f0:64:91:bd:d2:e2:54:95:c4:eb:23:71:56:ef:2e:5c:63:0c: 24:0c:93:3a:2f:d0:61:37:7a:e9:5b:71:8e:0e:59:2f:ec:b0: a3:1e:d2:30 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUav/OVPbY3LrLNcmWLGq3grHeJbgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkwOTE1NTQzNVoX DTI2MTIwODIzNTk1OVowejFJMEcGA1UEBRNAYTgxYWYxYWM3ZTQ1MzhmNDMyNTFj MmM3ZWVhMTIxZjhlODRkMTdjMzQ0MzU3MzIyY2E4MjVmYmQxNTMwZGNjOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ1ykNoaiB1Lb1p6RojZ8uB2w0g3 0z60Y2Co6nUt95RT+Oyq4xtRT49X7e+CGJY22OYm0NPBG60M7xEhxINW0Sdrb2Wa TioFnJYuyI84vNa57H7FoSbaW6FYhzFLIqVUC5T+iie247TviQzI4SAY2Zysgr2z K7iMYgLHV7EEktY7QLfrDH0hooG+cZOUUsVUpU1X0Pku1TurRgg+ih1cTAgUnbeb ld+zbtfN2jI6ztAO8bGv2rA7K0jJcBkYPNP/PiasSKk+zeqC0i+z8JeX2t3FBo/u 6NzXoVMDxsAdeFwj5FRYmT8+kfRh2SiJP5JbPWctakcmG7MLkYL6d2B6yQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOsMF9pk1xAcLfv0FoCmudE7ho2OMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg5ZmU0Y2M3LTUyMTgtNGMyYy1iODI0LTE4NjRmYTZkM2JkNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba50AwDQYJKoZIhvcNAQELBQADggEBALio8Z/fM6rI6mQn9Fk9 HZhkp8YZTAQ+KRJUa91fQuR54oguolWorKl2XDh3Bo319pdlyQYaY03HDn/DxibJ sW6LR6/gNueDMLGkSb1aNDSAnx859Z8Vi2ZOl78K0IDIQcGtE90YJQzN1tHQBYNz bwES9qNIhvPLq/cN29wp0kY+EPzm+GeV4ZENqsFAL7XBIMjLNaV1kyc8F0j06225 N1KslN3JE0vaPfXVF49kFSGA0T9JnpRODD86ZhYuZIVRjlAeRG6brzg82sl/Tvli WYqdYKD/6HKx1vBkkb3S4lSVxOsjcVbvLlxjDCQMkzov0GE3eulbcY4OWS/ssKMe 0jA= -----END CERTIFICATE-----Generated at Mon Sep 21 04:04:58 2026 by rpki-client