$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/22d65c52-15d0-4b0e-a9e4-35cebf9f101f.roa File: 22d65c52-15d0-4b0e-a9e4-35cebf9f101f.roa (raw, json) Hash identifier: x06LwT1kfD4WkvKiVhCWhZ8VYGdUbCWjyfJQShK/y9I= Subject key identifier: CF:D5:FB:95:C3:10:C4:4B:5B:28:FF:DE:50:E2:3B:6F:41:6F:40:97 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6EE6704E784BBA48DDB0D39552097DECAD7E7638 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/22d65c52-15d0-4b0e-a9e4-35cebf9f101f.roa Signing time: Mon 26 Oct 2026 00:03:14 +0000 ROA not before: Mon 26 Oct 2026 00:03:14 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e6:70:4e:78:4b:ba:48:dd:b0:d3:95:52:09:7d:ec:ad:7e:76:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 26 00:03:14 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=ee3d1900458c2f5d04a87ae78b55d471aee07ac39ff5a36ee00409c1ebf3c2d6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:f9:db:b9:c6:6d:38:a9:6e:5a:32:d3:56: 2f:c4:27:12:38:09:26:e9:aa:a6:9e:5d:78:90:f6: 89:87:f1:85:0c:86:52:06:bd:f7:9a:a0:6f:a0:66: 32:24:9b:74:03:95:65:91:52:44:a7:33:31:71:19: ef:f9:2f:56:d3:91:01:81:71:f7:2c:84:c0:2f:77: 22:41:5e:39:79:f8:c1:ab:3e:52:b1:34:ce:26:1e: 82:18:7e:0f:67:7e:89:19:dc:ad:1e:2c:e0:db:0d: f8:c4:f1:32:5f:e6:2e:39:01:af:ce:5a:0e:16:93: 30:5f:92:36:98:ba:34:dc:c1:58:33:51:61:f0:22: b1:da:28:0c:2b:32:6e:aa:53:cf:4e:68:85:7d:81: fc:91:1c:d2:a4:0d:a4:b4:ba:0f:1e:99:67:61:a0: 56:b5:07:e5:57:f0:da:f5:36:47:b3:ef:47:92:12: dd:d2:f1:f0:25:81:08:4a:be:b8:be:6b:98:52:87: c0:d5:bf:d8:f6:0a:c8:2d:64:20:ed:76:24:8d:45: cc:d6:69:8b:5a:d4:80:6f:10:7b:e0:60:1c:b3:8c: 73:c6:34:49:cf:fd:8c:75:b2:cc:b4:c0:ed:35:d2: d7:29:28:2f:79:94:b9:99:f0:1e:cc:d0:a0:66:db: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D5:FB:95:C3:10:C4:4B:5B:28:FF:DE:50:E2:3B:6F:41:6F:40:97 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/22d65c52-15d0-4b0e-a9e4-35cebf9f101f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:e000::/40 Signature Algorithm: sha256WithRSAEncryption 99:16:88:e0:2b:de:1e:f7:66:8b:30:41:32:de:c6:03:4a:ff: 95:43:d1:d5:20:97:c5:df:ed:60:c6:01:31:d1:d2:36:bd:8c: 3e:33:10:46:13:ef:16:82:eb:1e:dc:ca:06:e8:55:5b:23:27: db:fa:d0:9a:4d:1a:c9:e2:10:5e:80:53:d7:a3:db:06:b3:a4: 9e:a1:07:27:dc:44:dc:d3:b5:9a:4b:7b:ef:a6:f6:70:6c:e4: 2f:cc:5a:b5:3c:3b:43:19:c2:54:13:41:69:f5:e3:ae:9d:48: 3c:95:5d:4f:06:6b:97:2b:4f:ba:04:20:36:f8:37:c9:5c:8f: f9:8b:f2:94:49:a9:c5:bb:0d:39:39:03:82:1c:73:53:ab:b0: f1:11:57:e2:40:00:4e:6d:e5:72:d0:90:69:64:2f:17:31:97: 1f:29:c7:fb:d3:e3:9a:8f:c1:94:86:ef:ac:f7:65:a9:45:d3: 9f:1b:c4:67:2b:9f:36:36:fd:a6:76:0f:54:70:a3:ac:c1:f2: 0d:2e:c2:8a:a8:ab:cd:8b:c2:af:c6:c2:fe:02:4f:c9:4b:fd: cf:72:34:5a:00:53:6d:89:64:89:75:c0:16:de:8a:cb:13:89: 74:98:1d:ec:a8:a0:8c:07:2e:b6:42:a8:8d:13:1b:b7:3c:01: 2d:d0:52:11 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbuZwTnhLukjdsNOVUgl97K1+djgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyNjAwMDMxNFoX DTI3MDEyNDIzNTk1OVowejFJMEcGA1UEBRNAZWUzZDE5MDA0NThjMmY1ZDA0YTg3 YWU3OGI1NWQ0NzFhZWUwN2FjMzlmZjVhMzZlZTAwNDA5YzFlYmYzYzJkNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZH527nGbTipbloy01YvxCcSOAkm 6aqmnl14kPaJh/GFDIZSBr33mqBvoGYyJJt0A5VlkVJEpzMxcRnv+S9W05EBgXH3 LITAL3ciQV45efjBqz5SsTTOJh6CGH4PZ36JGdytHizg2w34xPEyX+YuOQGvzloO FpMwX5I2mLo03MFYM1Fh8CKx2igMKzJuqlPPTmiFfYH8kRzSpA2ktLoPHplnYaBW tQflV/Da9TZHs+9HkhLd0vHwJYEISr64vmuYUofA1b/Y9grILWQg7XYkjUXM1mmL WtSAbxB74GAcs4xzxjRJz/2MdbLMtMDtNdLXKSgveZS5mfAezNCgZtvdCwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM/V+5XDEMRLWyj/3lDiO29Bb0CXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIyZDY1YzUyLTE1ZDAtNGIwZS1hOWU0LTM1Y2ViZjlmMTAxZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7+AwDQYJKoZIhvcNAQELBQADggEBAJkWiOAr3h73ZoswQTLe xgNK/5VD0dUgl8Xf7WDGATHR0ja9jD4zEEYT7xaC6x7cygboVVsjJ9v60JpNGsni EF6AU9ej2wazpJ6hByfcRNzTtZpLe++m9nBs5C/MWrU8O0MZwlQTQWn1466dSDyV XU8Ga5crT7oEIDb4N8lcj/mL8pRJqcW7DTk5A4Icc1OrsPERV+JAAE5t5XLQkGlk Lxcxlx8px/vT45qPwZSG76z3ZalF058bxGcrnzY2/aZ2D1Rwo6zB8g0uwoqoq82L wq/Gwv4CT8lL/c9yNFoAU22JZIl1wBbeissTiXSYHeyooIwHLrZCqI0TG7c8AS3Q UhE= -----END CERTIFICATE-----Generated at Thu Nov 5 16:26:09 2026 by rpki-client