$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23781dbd-24b4-4813-8de5-02c4d3e40236.roa File: 23781dbd-24b4-4813-8de5-02c4d3e40236.roa (raw, json) Hash identifier: jlFXQBnMzJhNIthtYnGSqwMfzRIaAgsSmwuRsFAkSJA= Subject key identifier: 6E:96:34:02:FE:6F:35:02:C0:8B:4B:83:D9:E9:94:9B:23:67:78:A3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6C39899587143B4AA1AF2F71C6A1F42DADA22E93 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23781dbd-24b4-4813-8de5-02c4d3e40236.roa Signing time: Mon 26 Oct 2026 00:02:44 +0000 ROA not before: Mon 26 Oct 2026 00:02:44 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:39:89:95:87:14:3b:4a:a1:af:2f:71:c6:a1:f4:2d:ad:a2:2e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 26 00:02:44 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=de0b2bab8ee0ec4de407125768b6a39c38c542ce398a25645253e6e7d41ee378, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c4:d7:aa:4f:01:78:db:0e:d0:dd:9f:43:38: e4:bc:c7:2a:10:df:d8:a3:a6:ba:e3:d4:54:f6:71: a7:99:56:af:41:8d:a3:72:ed:0f:e8:4e:1b:54:18: fb:49:3c:b3:5c:41:15:11:ab:7f:80:4b:df:48:8b: c4:ff:33:6f:f8:8b:88:33:71:aa:65:b0:a4:a7:b9: cc:bf:3f:60:69:87:dd:25:15:6e:18:34:ee:e1:70: d6:f4:c8:34:5c:99:11:78:ca:2d:d6:df:e9:03:c4: 03:2e:11:d9:9e:d3:5d:dd:79:42:a0:b3:92:8a:6d: 6e:4c:ab:34:f3:65:7a:31:66:66:26:94:37:5e:45: fd:d8:bb:86:5c:af:d0:f0:9b:d3:e8:a6:30:1f:b0: 5f:7d:75:69:81:26:c2:bd:35:af:f9:90:02:59:12: d9:5d:e0:f5:bb:25:d8:fc:88:74:29:a5:c0:88:05: 8b:77:72:df:3a:0c:98:f4:d7:c0:1c:7b:77:6a:2c: eb:07:da:2b:16:45:3a:0a:23:58:e6:70:3c:76:dd: c4:f9:aa:2c:fe:40:2c:d8:21:71:f7:71:1f:70:72: 02:ef:62:7a:9c:de:96:b2:17:17:a4:31:9f:9a:91: 08:37:99:68:b3:22:3e:25:81:20:e2:1b:24:e7:fb: 32:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:96:34:02:FE:6F:35:02:C0:8B:4B:83:D9:E9:94:9B:23:67:78:A3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23781dbd-24b4-4813-8de5-02c4d3e40236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:a000::/40 Signature Algorithm: sha256WithRSAEncryption 2f:49:34:57:a5:9e:47:4c:b1:67:51:9e:14:2d:7a:af:43:11: 35:c0:c6:a2:f7:9f:14:ab:7e:61:f8:2a:8f:cf:16:eb:51:59: e9:15:5a:11:15:38:f7:f5:a4:f1:45:bb:86:83:2b:aa:67:e0: e8:1f:29:8f:3e:17:be:7d:0f:78:44:c4:c6:a2:bb:ac:74:88: 66:bd:8b:7a:d7:90:bd:0c:f5:d9:fb:c9:bb:b8:5e:a7:64:a4: 62:70:94:72:98:76:cc:7b:b6:8a:49:fa:14:2e:3e:f6:21:5b: f6:74:d0:d4:3e:30:28:b5:b9:0e:68:b8:1f:5e:39:19:34:ee: 30:d8:6a:20:36:be:f3:b1:fe:c0:4b:12:06:00:c9:b6:f2:e3: 2d:0b:ff:f5:66:8f:c6:d4:14:58:b6:7d:d1:12:89:ed:5e:be: 56:78:fb:ca:0d:00:62:a8:13:2c:c0:91:cf:d1:05:f2:70:74: a2:62:61:eb:c5:de:da:bf:8a:da:5a:74:aa:de:23:66:4f:58: 29:12:80:bf:b3:7c:1d:61:44:2f:c8:56:50:65:76:aa:e1:5a: c2:23:1d:2e:4f:2a:ba:a1:fe:e6:8f:bf:1c:78:cb:03:e1:23: 60:f1:a6:92:6b:de:03:b0:6e:17:37:eb:cd:2d:01:a8:45:2a: d3:7d:e1:d9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbDmJlYcUO0qhry9xxqH0La2iLpMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyNjAwMDI0NFoX DTI3MDEyNDIzNTk1OVowejFJMEcGA1UEBRNAZGUwYjJiYWI4ZWUwZWM0ZGU0MDcx MjU3NjhiNmEzOWMzOGM1NDJjZTM5OGEyNTY0NTI1M2U2ZTdkNDFlZTM3ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksTXqk8BeNsO0N2fQzjkvMcqEN/Y o6a649RU9nGnmVavQY2jcu0P6E4bVBj7STyzXEEVEat/gEvfSIvE/zNv+IuIM3Gq ZbCkp7nMvz9gaYfdJRVuGDTu4XDW9Mg0XJkReMot1t/pA8QDLhHZntNd3XlCoLOS im1uTKs082V6MWZmJpQ3XkX92LuGXK/Q8JvT6KYwH7BffXVpgSbCvTWv+ZACWRLZ XeD1uyXY/Ih0KaXAiAWLd3LfOgyY9NfAHHt3aizrB9orFkU6CiNY5nA8dt3E+aos /kAs2CFx93EfcHIC72J6nN6WshcXpDGfmpEIN5losyI+JYEg4hsk5/syrQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG6WNAL+bzUCwItLg9nplJsjZ3ijMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzNzgxZGJkLTI0YjQtNDgxMy04ZGU1LTAyYzRkM2U0MDIzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba76AwDQYJKoZIhvcNAQELBQADggEBAC9JNFelnkdMsWdRnhQt eq9DETXAxqL3nxSrfmH4Ko/PFutRWekVWhEVOPf1pPFFu4aDK6pn4OgfKY8+F759 D3hExMaiu6x0iGa9i3rXkL0M9dn7ybu4XqdkpGJwlHKYdsx7topJ+hQuPvYhW/Z0 0NQ+MCi1uQ5ouB9eORk07jDYaiA2vvOx/sBLEgYAybby4y0L//Vmj8bUFFi2fdES ie1evlZ4+8oNAGKoEyzAkc/RBfJwdKJiYevF3tq/itpadKreI2ZPWCkSgL+zfB1h RC/IVlBldqrhWsIjHS5PKrqh/uaPvxx4ywPhI2DxppJr3gOwbhc3680tAahFKtN9 4dk= -----END CERTIFICATE-----Generated at Thu Nov 5 15:23:39 2026 by rpki-client