$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e37673a-83c3-4d8a-ad7d-b6f0e02e1891.roa File: 4e37673a-83c3-4d8a-ad7d-b6f0e02e1891.roa (raw, json) Hash identifier: fUSrS3S4nGDpT155jVocadkvuUPNHn7n8U2386k1/5A= Subject key identifier: 2A:5B:C9:9B:2C:03:F3:A2:CF:53:D8:57:E5:7D:B8:45:06:79:78:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6BD948A35A2F036C8342A3A36CDC36E7D4869989 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e37673a-83c3-4d8a-ad7d-b6f0e02e1891.roa Signing time: Mon 19 Oct 2026 00:10:16 +0000 ROA not before: Mon 19 Oct 2026 00:10:16 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d9:48:a3:5a:2f:03:6c:83:42:a3:a3:6c:dc:36:e7:d4:86:99:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:10:16 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=aa53ea627a8b8867fdebe82df36a10b7c7846e795499fcc80b8229382d3f1614, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3c:9a:10:76:97:58:f7:fd:0c:8e:d0:dc:91: b1:e9:9d:04:bb:0b:f1:59:3a:53:c6:d3:52:59:df: 5f:59:b0:50:9c:8d:c9:07:3d:1c:30:29:9d:e7:e2: c2:67:16:df:d1:db:1e:84:74:d6:1f:0f:be:59:29: 61:05:4d:b6:e1:95:8b:04:92:22:50:c9:a3:b2:d4: 20:4b:ac:e1:cd:d4:14:dd:af:4a:a9:40:03:6d:4d: 54:99:1f:77:30:f4:61:1c:07:7d:c4:96:6e:0a:18: 65:11:bd:01:d1:5f:d5:ca:d1:6a:a6:92:2a:e4:3e: 29:15:a7:ef:d4:58:7c:b4:a3:dc:57:56:3d:46:c1: a9:fa:68:c7:43:be:71:e2:87:4c:a0:bf:58:fa:20: 4c:2d:b9:bd:86:41:05:30:4f:59:eb:ba:af:ed:15: da:89:47:91:3d:ff:f0:55:83:24:5b:a2:b6:3b:01: 2a:3b:12:75:f9:5a:dc:4b:6b:d9:a7:66:93:85:0c: 0f:5d:68:b4:f4:da:6d:ef:ed:d4:25:8d:58:5b:e2: 76:f9:65:5c:e9:8b:29:cb:c4:45:f7:43:6f:2f:c7: 3b:4d:88:16:e5:22:ac:13:ac:0f:ce:42:14:dd:33: ec:c7:e8:39:e9:ec:14:a1:d1:b0:08:84:e0:6a:d7: 36:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5B:C9:9B:2C:03:F3:A2:CF:53:D8:57:E5:7D:B8:45:06:79:78:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e37673a-83c3-4d8a-ad7d-b6f0e02e1891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption 16:0c:99:83:38:87:b4:1d:33:dc:fa:13:fb:1f:39:fb:93:5a: fc:3a:97:f6:f4:a0:70:55:2b:18:6a:8c:03:87:c1:17:78:cf: 0e:41:e3:37:47:be:fc:81:58:b1:50:cd:b3:7b:46:69:99:7d: f7:66:eb:a5:96:59:44:24:a4:3d:a6:91:c2:ea:f9:99:6c:73: 01:91:70:67:9f:00:13:28:d6:96:1e:df:0c:1b:6f:c4:d8:15: fa:17:52:ab:63:2e:36:3e:fa:f2:96:12:46:fd:69:c3:3f:cc: 45:05:90:74:f0:03:b9:4f:4b:c7:90:4f:59:00:64:f9:17:bd: 3d:a9:d1:ee:90:9f:a5:c3:32:c0:2b:f5:c8:bd:0a:d6:18:1a: cc:6d:f3:58:7a:c9:b7:69:56:73:49:ef:62:05:69:b1:e6:9d: c5:44:e6:9e:b4:1e:37:ae:f8:f0:11:d3:39:cb:83:04:9c:7f: 19:7a:dd:5a:1f:d9:cf:05:85:d5:9a:02:ab:72:55:ab:d2:3e: c5:04:8f:8f:e6:1c:07:87:61:56:06:e3:d8:22:9a:c7:cf:c8: ac:8e:41:3f:1d:f3:e1:85:91:48:e4:fe:5e:a4:24:24:4c:a9: 51:ab:3e:4e:28:3c:34:72:6a:83:d2:57:91:7c:e8:d5:ee:de: 99:78:82:d1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUa9lIo1ovA2yDQqOjbNw259SGmYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMTAxNloX DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNAYWE1M2VhNjI3YThiODg2N2ZkZWJl ODJkZjM2YTEwYjdjNzg0NmU3OTU0OTlmY2M4MGI4MjI5MzgyZDNmMTYxNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzyaEHaXWPf9DI7Q3JGx6Z0Euwvx WTpTxtNSWd9fWbBQnI3JBz0cMCmd5+LCZxbf0dsehHTWHw++WSlhBU224ZWLBJIi UMmjstQgS6zhzdQU3a9KqUADbU1UmR93MPRhHAd9xJZuChhlEb0B0V/VytFqppIq 5D4pFafv1Fh8tKPcV1Y9RsGp+mjHQ75x4odMoL9Y+iBMLbm9hkEFME9Z67qv7RXa iUeRPf/wVYMkW6K2OwEqOxJ1+VrcS2vZp2aThQwPXWi09Npt7+3UJY1YW+J2+WVc 6Yspy8RF90NvL8c7TYgW5SKsE6wPzkIU3TPsx+g56ewUodGwCITgatc2IwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCpbyZssA/Oiz1PYV+V9uEUGeXj0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRlMzc2NzNhLTgzYzMtNGQ4YS1hZDdkLWI2ZjBlMDJlMTg5MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOKDAMA0GCSqGSIb3DQEBCwUAA4IBAQAWDJmDOIe0HTPc+hP7 Hzn7k1r8Opf29KBwVSsYaowDh8EXeM8OQeM3R778gVixUM2ze0ZpmX33ZuullllE JKQ9ppHC6vmZbHMBkXBnnwATKNaWHt8MG2/E2BX6F1KrYy42PvrylhJG/WnDP8xF BZB08AO5T0vHkE9ZAGT5F709qdHukJ+lwzLAK/XIvQrWGBrMbfNYesm3aVZzSe9i BWmx5p3FROaetB43rvjwEdM5y4MEnH8Zet1aH9nPBYXVmgKrclWr0j7FBI+P5hwH h2FWBuPYIprHz8isjkE/HfPhhZFI5P5epCQkTKlRqz5OKDw0cmqD0leRfOjV7t6Z eILR -----END CERTIFICATE-----Generated at Thu Nov 5 12:13:43 2026 by rpki-client