$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/550b1aee-a231-4dc7-be8b-ddacfddffd19.roa File: 550b1aee-a231-4dc7-be8b-ddacfddffd19.roa (raw, json) Hash identifier: vVX/qi2sUeX+ZyoDEqNz27dmCkoqS9derqLj6x7xQlY= Subject key identifier: 5C:CC:78:90:68:0E:F2:86:17:A6:01:FF:F7:24:5B:0E:7A:23:BF:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5DBA4222E45F1ADFA2971746B72B75FE6D45FB82 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/550b1aee-a231-4dc7-be8b-ddacfddffd19.roa Signing time: Sun 18 Oct 2026 00:09:12 +0000 ROA not before: Sun 18 Oct 2026 00:09:12 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ba:42:22:e4:5f:1a:df:a2:97:17:46:b7:2b:75:fe:6d:45:fb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:09:12 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=c939f15451fd235b6b8991a86cc235302cdb4959b693c31ac438a5964ce43475, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:ef:c5:9f:4b:23:73:b1:2f:ae:fd:06:96: be:61:75:1f:0c:b8:f6:ad:a7:a5:b2:a5:60:28:30: 18:38:62:e8:18:51:f5:94:0c:c3:14:0d:f8:c2:cd: 66:8b:1e:a6:56:14:6f:4d:2d:76:e8:87:15:16:45: ac:6f:98:31:85:07:53:6d:38:db:bb:20:43:53:5e: 01:1a:8e:ef:09:a9:8c:7f:67:f6:21:94:b0:5c:d8: 28:aa:4a:ff:25:94:6a:7e:68:f7:b6:34:48:88:07: 77:6d:c2:65:3c:3f:89:18:f6:cb:43:0a:89:7f:ac: c8:c7:19:7e:a5:d6:ee:eb:ee:34:1f:1a:4a:69:f2: 9f:19:50:d8:0d:8b:75:34:fa:c5:49:aa:27:9e:73: 21:9d:33:fe:03:2a:ea:cf:e5:28:53:a0:4f:6b:f6: 85:32:ac:f7:f1:64:6a:c6:16:94:56:7f:5d:ca:5e: 1c:83:84:4c:fd:42:e1:b3:ec:61:61:fd:b1:f8:04: e4:e8:f3:3f:b6:30:b1:57:42:da:16:f2:a4:b4:fb: 07:cd:60:72:72:ed:8a:11:1f:f4:1b:d1:e2:19:e1: b7:44:6e:ee:06:a0:13:68:50:3b:cc:e9:8b:f8:1b: 4c:8c:f4:a5:63:0e:07:23:1d:d6:b9:3b:82:36:f1: a8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CC:78:90:68:0E:F2:86:17:A6:01:FF:F7:24:5B:0E:7A:23:BF:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/550b1aee-a231-4dc7-be8b-ddacfddffd19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:9000::/40 Signature Algorithm: sha256WithRSAEncryption 97:05:9f:e8:9a:a9:53:07:fa:fa:ac:9e:91:b0:e1:7c:54:bc: 32:a5:08:d9:e4:f5:a2:74:a4:a4:35:c5:51:a7:01:05:50:b3: e3:2f:e6:4e:e3:7a:98:ba:c5:4a:54:98:48:25:ea:be:1b:31: fa:5d:3b:aa:45:a2:b1:da:13:50:46:98:44:b2:86:1f:83:1a: c1:e6:9c:8e:4f:07:db:53:7e:8a:ed:6f:66:2e:74:ba:67:a4: fc:52:1b:2e:93:55:eb:c3:f0:03:9a:0f:3d:d9:41:68:15:e2: 63:8c:f2:bb:c2:74:b6:ab:b9:8c:9d:13:83:e1:b6:7d:03:f6: ae:42:6c:76:8b:91:d1:b0:23:95:25:95:5a:d1:fe:9b:74:30: 20:b3:c4:b0:4e:55:66:3d:ee:0a:91:e6:34:a9:25:04:d6:ad: 13:9d:fe:fd:b8:99:5b:68:27:74:19:16:e4:ef:24:aa:f2:ad: 9b:90:8e:68:93:62:14:f7:f7:d3:e5:b6:dc:a0:21:00:b1:f3: 2c:11:98:16:90:e1:b4:26:82:e5:1f:15:02:e5:51:dd:7c:c5: 20:f8:4e:d0:8c:79:ee:2b:0e:92:66:96:d7:47:24:f2:dd:6c: b0:12:2c:82:82:72:c0:a5:b9:a7:fb:4f:b4:01:26:e1:54:78: 76:05:2c:a9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXbpCIuRfGt+ilxdGtyt1/m1F+4IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMDkxMloX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAYzkzOWYxNTQ1MWZkMjM1YjZiODk5 MWE4NmNjMjM1MzAyY2RiNDk1OWI2OTNjMzFhYzQzOGE1OTY0Y2U0MzQ3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqzvxZ9LI3OxL679Bpa+YXUfDLj2 raelsqVgKDAYOGLoGFH1lAzDFA34ws1mix6mVhRvTS126IcVFkWsb5gxhQdTbTjb uyBDU14BGo7vCamMf2f2IZSwXNgoqkr/JZRqfmj3tjRIiAd3bcJlPD+JGPbLQwqJ f6zIxxl+pdbu6+40HxpKafKfGVDYDYt1NPrFSaonnnMhnTP+Ayrqz+UoU6BPa/aF Mqz38WRqxhaUVn9dyl4cg4RM/ULhs+xhYf2x+ATk6PM/tjCxV0LaFvKktPsHzWBy cu2KER/0G9HiGeG3RG7uBqATaFA7zOmL+BtMjPSlYw4HIx3WuTuCNvGoLQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFzMeJBoDvKGF6YB//ckWw56I79bMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1MGIxYWVlLWEyMzEtNGRjNy1iZThiLWRkYWNmZGRmZmQxOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAJAwDQYJKoZIhvcNAQELBQADggEBAJcFn+iaqVMH+vqsnpGw 4XxUvDKlCNnk9aJ0pKQ1xVGnAQVQs+Mv5k7jepi6xUpUmEgl6r4bMfpdO6pForHa E1BGmESyhh+DGsHmnI5PB9tTfortb2YudLpnpPxSGy6TVevD8AOaDz3ZQWgV4mOM 8rvCdLaruYydE4Phtn0D9q5CbHaLkdGwI5UllVrR/pt0MCCzxLBOVWY97gqR5jSp JQTWrROd/v24mVtoJ3QZFuTvJKryrZuQjmiTYhT399PlttygIQCx8ywRmBaQ4bQm guUfFQLlUd18xSD4TtCMee4rDpJmltdHJPLdbLASLIKCcsCluaf7T7QBJuFUeHYF LKk= -----END CERTIFICATE-----Generated at Thu Nov 5 04:24:14 2026 by rpki-client