$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326b5e17-ace3-4579-8ae9-5219c81c9034.roa File: 326b5e17-ace3-4579-8ae9-5219c81c9034.roa (raw, json) Hash identifier: hUll+YvXSktKthkOyqrZ/kf3F3nXSaCwlNvqjw2L2ZE= Subject key identifier: E8:17:6B:79:B4:CE:9B:FB:25:2A:10:6C:50:72:1F:FA:08:1D:D2:55 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1D34329357201FFE43AB586CBA06829853F9CD1A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326b5e17-ace3-4579-8ae9-5219c81c9034.roa Signing time: Fri 24 Jul 2026 00:00:38 +0000 ROA not before: Fri 24 Jul 2026 00:00:38 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:34:32:93:57:20:1f:fe:43:ab:58:6c:ba:06:82:98:53:f9:cd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 24 00:00:38 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=d0533f48f72bc4a831eace783ae3188b2fa0ef2351fdcfa826be77fd29e823b4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:81:71:76:9e:bc:bc:c0:4c:85:2e:08:12: 25:bb:ac:f0:32:dc:43:f0:7e:26:38:df:4d:9f:79: ab:49:0f:b8:92:68:2a:a6:0d:a8:11:c9:3c:bd:90: 44:18:65:b5:c7:fe:e5:f4:c0:b9:ee:25:5f:b1:79: e8:f6:8d:0f:f2:b6:47:04:61:19:e9:b2:74:11:1a: b1:08:c7:4c:6e:e8:3b:c6:b7:4b:7b:ef:2b:92:3b: f6:17:9e:2c:09:0f:e8:c6:a0:16:a7:cc:68:c4:c6: b9:d1:82:5b:41:45:4a:02:30:85:d4:39:42:65:bb: 7a:67:b4:83:37:84:ae:47:59:48:00:5d:45:71:af: 02:e6:8a:0f:9d:e8:32:4a:47:f0:dd:b4:25:97:86: 91:2b:41:96:9d:e6:5f:a6:3f:cf:aa:56:30:0a:2b: dc:97:c5:f8:9a:6f:f0:e2:e3:f8:59:c5:18:d3:00: 86:81:71:a0:91:fb:6b:23:ba:90:73:06:3e:87:7e: 15:b9:25:e0:7b:71:11:ab:fc:b8:f9:4c:a1:69:aa: 64:37:22:ad:ca:66:5e:61:33:69:36:94:cf:0d:f8: aa:c5:62:a8:f0:04:08:dd:59:70:99:3d:3d:00:59: 7c:57:dd:b3:03:ff:ba:b8:95:83:7a:ca:9c:65:88: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:17:6B:79:B4:CE:9B:FB:25:2A:10:6C:50:72:1F:FA:08:1D:D2:55 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326b5e17-ace3-4579-8ae9-5219c81c9034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2e::/36 Signature Algorithm: sha256WithRSAEncryption 4e:25:86:66:8f:c9:5b:96:e5:0b:af:77:df:f4:e7:d0:e3:d2: b3:e7:2e:90:69:56:85:b4:78:8b:b8:01:67:12:e0:9e:7f:3e: 68:ff:19:0f:53:4c:93:4b:91:ea:55:23:32:c9:8f:bb:bd:8d: d2:ef:53:81:42:83:3e:10:bc:c3:fc:93:d4:34:24:c6:34:b1: a1:d8:70:3b:8d:86:a4:99:2e:8c:95:ce:45:37:57:e4:d4:0f: 63:ad:df:0d:8b:63:98:a2:78:44:08:94:d3:9b:c2:da:36:57: 8c:a1:11:9e:21:4f:43:81:fb:6c:44:ad:8e:9b:9e:f3:d1:d2: 56:ca:e3:1a:7e:9a:76:b7:33:87:c7:e3:66:19:36:9c:8b:eb: 7c:90:c2:43:94:19:d8:5a:5a:34:29:e0:5a:fa:ed:21:ca:00: bd:d9:24:9c:a5:9d:85:5d:c3:9b:ca:3d:04:9c:8c:01:38:ad: 6c:8f:25:42:77:e2:dc:83:4b:2a:69:d1:d2:98:77:09:52:31: 34:f8:29:3e:6b:1c:a2:0b:e7:a7:13:cf:e2:db:02:d2:51:e5: f2:da:59:e0:73:b7:c4:6e:f3:0c:75:c4:d3:a0:ae:f2:d2:92: e8:a4:bb:63:a9:83:fa:39:28:4f:0c:38:b3:9f:d6:61:fb:dd: 2c:11:d0:fd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHTQyk1cgH/5Dq1hsugaCmFP5zRowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNDAwMDAzOFoX DTI2MTAyMjIzNTk1OVowejFJMEcGA1UEBRNAZDA1MzNmNDhmNzJiYzRhODMxZWFj ZTc4M2FlMzE4OGIyZmEwZWYyMzUxZmRjZmE4MjZiZTc3ZmQyOWU4MjNiNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYWBcXaevLzATIUuCBIlu6zwMtxD 8H4mON9Nn3mrSQ+4kmgqpg2oEck8vZBEGGW1x/7l9MC57iVfsXno9o0P8rZHBGEZ 6bJ0ERqxCMdMbug7xrdLe+8rkjv2F54sCQ/oxqAWp8xoxMa50YJbQUVKAjCF1DlC Zbt6Z7SDN4SuR1lIAF1Fca8C5ooPnegySkfw3bQll4aRK0GWneZfpj/PqlYwCivc l8X4mm/w4uP4WcUY0wCGgXGgkftrI7qQcwY+h34VuSXge3ERq/y4+UyhaapkNyKt ymZeYTNpNpTPDfiqxWKo8AQI3VlwmT09AFl8V92zA/+6uJWDesqcZYjvHwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOgXa3m0zpv7JSoQbFByH/oIHdJVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyNmI1ZTE3LWFjZTMtNDU3OS04YWU5LTUyMTljODFjOTAzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLgAwDQYJKoZIhvcNAQELBQADggEBAE4lhmaPyVuW5Quvd9/0 59Dj0rPnLpBpVoW0eIu4AWcS4J5/Pmj/GQ9TTJNLkepVIzLJj7u9jdLvU4FCgz4Q vMP8k9Q0JMY0saHYcDuNhqSZLoyVzkU3V+TUD2Ot3w2LY5iieEQIlNObwto2V4yh EZ4hT0OB+2xErY6bnvPR0lbK4xp+mna3M4fH42YZNpyL63yQwkOUGdhaWjQp4Fr6 7SHKAL3ZJJylnYVdw5vKPQScjAE4rWyPJUJ34tyDSypp0dKYdwlSMTT4KT5rHKIL 56cTz+LbAtJR5fLaWeBzt8Ru8wx1xNOgrvLSkuiku2Opg/o5KE8MOLOf1mH73SwR 0P0= -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:13 2026 by rpki-client