$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f270c0f-8558-4d31-85d5-eef46790c938.roa File: 4f270c0f-8558-4d31-85d5-eef46790c938.roa (raw, json) Hash identifier: +zJu02Hnnn8Bt80eJE6MAqJBaLqfG1xAd0inAqn/Kw4= Subject key identifier: 6B:D0:B4:BA:84:9A:FC:B1:28:73:E6:14:1D:38:A0:6B:DD:AA:DE:87 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1F942FCAB1C8E1DD6731343A528469E60920E1B8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f270c0f-8558-4d31-85d5-eef46790c938.roa Signing time: Mon 19 Oct 2026 00:10:15 +0000 ROA not before: Mon 19 Oct 2026 00:10:15 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:94:2f:ca:b1:c8:e1:dd:67:31:34:3a:52:84:69:e6:09:20:e1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:10:15 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=da99b4b43ba6b72d32925c78b9da4526c0fbdc53d20bc228d1d952517e04887c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:84:f8:14:87:d2:53:29:87:8c:f4:c0:37: 93:c4:8b:b4:cc:be:30:f2:b2:c9:5e:c1:b9:08:89: 1c:cf:9e:a6:2b:58:9d:62:c8:b1:10:48:52:6d:9e: 13:72:a8:25:d6:20:3c:69:b5:16:59:e4:0b:55:08: bb:27:8d:6e:7a:de:09:c7:e1:9d:83:ea:78:dc:4d: 39:d7:0e:85:f9:74:4b:e3:19:72:5d:b4:5f:9f:4c: eb:1a:05:48:95:5d:7d:5a:d1:50:8f:35:71:c8:0d: e3:62:20:71:d4:3b:d3:89:55:40:b4:73:d3:c5:59: aa:5a:e2:e1:68:6f:ec:aa:7a:fc:6c:d6:18:1c:ed: 6f:69:c8:02:9b:57:be:44:f5:ea:cc:e2:8d:b4:cf: 53:68:39:35:76:aa:17:6d:96:74:02:ea:29:57:61: ce:5b:1b:e5:ad:04:c3:52:69:75:07:02:77:b6:89: 78:25:06:37:42:8c:db:f6:3d:94:ab:3d:00:f1:f4: b0:05:70:ba:3b:84:ff:81:94:db:2e:d4:4e:79:3a: 78:ca:45:de:ae:4e:06:22:43:43:e6:48:e0:19:6d: f5:01:7a:49:25:e4:cb:74:7f:99:59:a5:27:e7:69: af:bf:a2:c7:b2:15:36:cc:04:ec:fd:5c:68:89:5c: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D0:B4:BA:84:9A:FC:B1:28:73:E6:14:1D:38:A0:6B:DD:AA:DE:87 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f270c0f-8558-4d31-85d5-eef46790c938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:a080::/48 Signature Algorithm: sha256WithRSAEncryption c2:ef:37:82:8a:12:5b:8a:f0:49:7f:94:0b:65:df:d7:bd:99: 10:b5:4e:1d:78:2e:36:82:b8:8b:aa:7b:2b:cf:b6:34:6f:c5: 92:a9:70:69:72:c6:19:17:22:73:53:2b:e4:0c:82:66:7e:98: 2c:3c:f3:ac:6d:f8:72:9e:71:fa:12:49:93:66:8b:b5:7e:f5: 09:21:46:9c:68:b8:3a:cf:d2:f0:5a:f4:8c:e7:8b:a4:38:18: 93:28:a6:9c:02:f5:69:2e:90:30:0f:df:89:72:55:31:c6:fc: 51:4b:43:97:2b:dd:f6:df:47:9d:d3:39:4c:2d:e6:1e:a5:4d: b0:44:b6:72:61:35:60:ca:8d:06:e3:2e:b1:83:1a:c5:fc:05: 41:0d:fa:65:14:f8:0b:97:89:1b:ad:ed:7b:95:cc:fd:70:d3: 75:88:ca:d2:00:09:d3:be:df:7e:62:da:63:2e:96:f2:c3:8f: c8:41:48:e3:27:47:17:28:09:31:a8:f6:fc:7b:4c:87:a4:81: 5e:52:5c:cb:02:6e:42:c7:e5:d2:f7:7e:f1:80:f6:ea:ea:93: 8a:ed:6b:2d:f7:02:c3:3a:41:a5:ac:23:27:d4:77:f3:c4:5a: f9:2b:6f:ae:6f:01:cd:2f:59:7d:9c:5e:6d:2c:51:59:b3:df: 0e:a1:51:30 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUH5QvyrHI4d1nMTQ6UoRp5gkg4bgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMTAxNVoX DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNAZGE5OWI0YjQzYmE2YjcyZDMyOTI1 Yzc4YjlkYTQ1MjZjMGZiZGM1M2QyMGJjMjI4ZDFkOTUyNTE3ZTA0ODg3YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswWE+BSH0lMph4z0wDeTxIu0zL4w 8rLJXsG5CIkcz56mK1idYsixEEhSbZ4Tcqgl1iA8abUWWeQLVQi7J41uet4Jx+Gd g+p43E051w6F+XRL4xlyXbRfn0zrGgVIlV19WtFQjzVxyA3jYiBx1DvTiVVAtHPT xVmqWuLhaG/sqnr8bNYYHO1vacgCm1e+RPXqzOKNtM9TaDk1dqoXbZZ0AuopV2HO WxvlrQTDUml1BwJ3tol4JQY3Qozb9j2Uqz0A8fSwBXC6O4T/gZTbLtROeTp4ykXe rk4GIkND5kjgGW31AXpJJeTLdH+ZWaUn52mvv6LHshU2zATs/VxoiVyWtwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGvQtLqEmvyxKHPmFB04oGvdqt6HMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmMjcwYzBmLTg1NTgtNGQzMS04NWQ1LWVlZjQ2NzkwYzkzOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8qCAMA0GCSqGSIb3DQEBCwUAA4IBAQDC7zeCihJbivBJf5QL Zd/XvZkQtU4deC42griLqnsrz7Y0b8WSqXBpcsYZFyJzUyvkDIJmfpgsPPOsbfhy nnH6EkmTZou1fvUJIUacaLg6z9LwWvSM54ukOBiTKKacAvVpLpAwD9+JclUxxvxR S0OXK93230ed0zlMLeYepU2wRLZyYTVgyo0G4y6xgxrF/AVBDfplFPgLl4kbre17 lcz9cNN1iMrSAAnTvt9+YtpjLpbyw4/IQUjjJ0cXKAkxqPb8e0yHpIFeUlzLAm5C x+XS937xgPbq6pOK7Wst9wLDOkGlrCMn1HfzxFr5K2+ubwHNL1l9nF5tLFFZs98O oVEw -----END CERTIFICATE-----Generated at Thu Nov 5 07:36:05 2026 by rpki-client