$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e8bd73a5-421b-4f80-8244-b5656eb9c595.roa File: e8bd73a5-421b-4f80-8244-b5656eb9c595.roa (raw, json) Hash identifier: QcxJ7jtX2LyKcK89dOs4gN6MUbtSA1ArJ+SGIh1h6Y8= Subject key identifier: 25:D1:E5:1E:19:AB:B0:1F:B6:15:C8:79:87:4D:3D:E2:65:77:6F:1E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 314D5144A6C2A777D475946F4C10780D5DCF9A1F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e8bd73a5-421b-4f80-8244-b5656eb9c595.roa Signing time: Thu 10 Sep 2026 00:00:39 +0000 ROA not before: Thu 10 Sep 2026 00:00:39 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:4d:51:44:a6:c2:a7:77:d4:75:94:6f:4c:10:78:0d:5d:cf:9a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:39 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=50a5c23c72b19290eccd861022cd4ed359c90bc7f4c6fb3ad23b07a803e021b2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:f6:f6:7c:50:de:c2:47:0e:61:01:eb:10: d9:07:36:e8:f9:6b:fe:2b:ce:41:f9:b1:46:bc:34: ad:10:0a:7d:4c:d3:5e:3d:71:71:a0:06:b0:be:c6: 30:95:48:fd:44:33:25:a2:de:0c:64:32:4f:c3:ae: 6d:44:a4:4a:6c:e2:4c:b7:90:61:6b:97:35:d2:75: e7:90:08:09:a6:b3:98:82:1e:76:a5:6e:49:d7:ac: aa:18:64:df:6d:cb:b2:5b:db:5d:c5:1e:a3:b2:30: 47:bc:8e:7c:5d:63:c3:7d:24:d4:c9:52:4f:47:fd: 5b:63:ce:03:5e:60:db:62:d3:6f:96:70:11:4f:67: 33:31:bc:f3:52:da:a6:9c:77:17:af:7a:64:76:89: 4b:ab:48:dc:76:ce:a7:6e:9d:00:90:a3:18:63:ec: 48:1d:c6:39:43:94:92:e7:79:8b:c3:46:f8:e9:ad: dc:fd:7e:d0:45:9d:be:18:c0:fa:7a:e1:bd:bf:9f: e6:d2:4d:49:b7:41:4a:36:a1:a3:00:4d:0c:aa:87: c3:b9:3e:cb:89:4e:3c:fd:95:2e:5f:37:f0:5c:28: ec:46:cb:f5:90:21:1c:9f:d2:41:27:aa:a8:4d:9d: 1f:53:d4:02:aa:78:15:73:f1:0a:f9:3d:fe:87:a4: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D1:E5:1E:19:AB:B0:1F:B6:15:C8:79:87:4D:3D:E2:65:77:6F:1E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e8bd73a5-421b-4f80-8244-b5656eb9c595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:9040::/48 Signature Algorithm: sha256WithRSAEncryption 94:21:24:3a:dc:c3:8c:27:30:c8:f3:87:b3:32:18:c4:1d:89: 84:5f:47:0c:ce:88:50:02:65:a5:bb:c6:3f:09:ab:70:dc:ef: ba:46:a5:dc:f2:b4:a7:4b:05:c3:f4:dd:84:a7:17:02:d7:6a: d0:a2:2d:42:1e:45:76:4b:d1:9a:6f:19:b7:4b:2a:62:4c:3d: f4:4e:72:56:fe:e4:af:fa:43:57:7b:ec:9c:71:21:87:81:ed: c3:bf:e2:5d:22:44:9c:d3:1a:1b:28:d4:03:d9:15:35:5f:21: 24:0b:2e:72:f0:fa:cb:40:93:72:21:9b:c4:41:cd:39:b4:bd: 79:b5:98:15:8c:b7:34:3d:73:c0:7d:f2:95:3a:d4:29:4f:18: 3f:f2:5b:11:16:f3:c5:a8:f3:37:e1:99:91:f2:72:df:16:21: 75:84:f1:14:d3:3c:11:e6:7c:09:66:ae:9d:fd:bc:e2:7e:e1: 53:6c:f1:b5:5c:6f:af:4b:d8:4f:c5:b6:06:11:a6:2f:98:21: c7:e6:47:3f:1e:72:e8:0e:e2:b1:32:29:b4:90:4f:4e:e8:63: 98:d8:10:d9:3b:d2:e9:41:a9:2f:2a:8c:47:f7:b8:8e:e0:40: 08:1b:da:39:21:6e:59:91:e9:2a:96:6f:9a:b3:cd:c1:5a:2e: eb:9f:83:ac -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMU1RRKbCp3fUdZRvTBB4DV3Pmh8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDAzOVoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNANTBhNWMyM2M3MmIxOTI5MGVjY2Q4 NjEwMjJjZDRlZDM1OWM5MGJjN2Y0YzZmYjNhZDIzYjA3YTgwM2UwMjFiMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/j29nxQ3sJHDmEB6xDZBzbo+Wv+ K85B+bFGvDStEAp9TNNePXFxoAawvsYwlUj9RDMlot4MZDJPw65tRKRKbOJMt5Bh a5c10nXnkAgJprOYgh52pW5J16yqGGTfbcuyW9tdxR6jsjBHvI58XWPDfSTUyVJP R/1bY84DXmDbYtNvlnART2czMbzzUtqmnHcXr3pkdolLq0jcds6nbp0AkKMYY+xI HcY5Q5SS53mLw0b46a3c/X7QRZ2+GMD6euG9v5/m0k1Jt0FKNqGjAE0MqofDuT7L iU48/ZUuXzfwXCjsRsv1kCEcn9JBJ6qoTZ0fU9QCqngVc/EK+T3+h6Tu+QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCXR5R4Zq7AfthXIeYdNPeJld28eMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U4YmQ3M2E1LTQyMWItNGY4MC04MjQ0LWI1NjU2ZWI5YzU5NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba65BAMA0GCSqGSIb3DQEBCwUAA4IBAQCUISQ63MOMJzDI84ez MhjEHYmEX0cMzohQAmWlu8Y/Catw3O+6RqXc8rSnSwXD9N2EpxcC12rQoi1CHkV2 S9Gabxm3SypiTD30TnJW/uSv+kNXe+yccSGHge3Dv+JdIkSc0xobKNQD2RU1XyEk Cy5y8PrLQJNyIZvEQc05tL15tZgVjLc0PXPAffKVOtQpTxg/8lsRFvPFqPM34ZmR 8nLfFiF1hPEU0zwR5nwJZq6d/bzifuFTbPG1XG+vS9hPxbYGEaYvmCHH5kc/HnLo DuKxMim0kE9O6GOY2BDZO9LpQakvKoxH97iO4EAIG9o5IW5Zkekqlm+as83BWi7r n4Os -----END CERTIFICATE-----Generated at Sun Sep 20 22:11:35 2026 by rpki-client