$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5637e746-68a9-4187-b79d-5e4d4b5c348e.roa File: 5637e746-68a9-4187-b79d-5e4d4b5c348e.roa (raw, json) Hash identifier: chAMNTx5FqbkbZ+0JFLX0xDVW/pXyYMTGcjIrC6kzl8= Subject key identifier: EE:DA:8E:A7:63:C4:D2:6B:22:21:40:1E:CE:EC:EB:1E:1A:7A:8D:45 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 55AC1F82ED777EF90B2A33B198199A7EBFDAD19C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5637e746-68a9-4187-b79d-5e4d4b5c348e.roa Signing time: Tue 20 Oct 2026 00:09:22 +0000 ROA not before: Tue 20 Oct 2026 00:09:22 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2c:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ac:1f:82:ed:77:7e:f9:0b:2a:33:b1:98:19:9a:7e:bf:da:d1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:09:22 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=421100a584b5fe6ea0d982fac2ec3ec5fa7bc4dbd9b969df835661815e3404df, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:8d:46:b4:d5:55:3e:cc:65:40:6d:3a:af: f1:62:f8:78:b1:a7:ce:fe:7f:01:de:de:de:a8:aa: f3:7c:d5:4c:c6:57:7b:46:68:d1:b7:3e:2b:33:a8: 35:9c:e3:c5:13:02:63:34:4f:aa:f2:da:a5:88:a8: c2:db:37:f0:9d:46:12:57:37:72:f4:92:9a:41:12: 6d:bc:fb:8a:b8:10:33:16:42:97:21:ab:8c:ef:2a: e5:73:f0:8a:76:5c:e8:34:41:bf:f7:67:32:22:ac: 72:9e:08:ab:1e:a9:4b:de:9d:b1:2d:2a:e7:e9:97: 7e:e1:7a:ec:b6:b1:b4:18:9c:d3:36:7d:69:5c:52: 7a:0c:41:77:ea:3e:c1:2f:73:7f:c2:ee:33:96:f3: cd:c0:5a:e5:9e:8e:34:8f:f3:f8:91:8c:1b:1e:78: 68:29:93:92:76:07:17:8c:f3:1b:de:1f:b0:4f:91: 6b:73:a9:e6:28:9c:54:51:25:8a:f1:4d:de:23:71: 3f:3c:27:e4:2e:db:bf:fe:13:e2:98:d0:64:61:e7: 22:29:16:1f:fe:23:3d:1a:8d:8c:0e:d1:16:df:1b: 0f:78:e3:c4:83:aa:5c:0d:6a:88:c9:d5:46:08:12: ea:70:0f:8a:3b:54:66:19:ff:c5:cc:82:61:59:c4: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DA:8E:A7:63:C4:D2:6B:22:21:40:1E:CE:EC:EB:1E:1A:7A:8D:45 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5637e746-68a9-4187-b79d-5e4d4b5c348e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2c:8000::/36 Signature Algorithm: sha256WithRSAEncryption 29:93:10:91:7b:91:a7:7f:6e:6a:57:13:b7:e9:86:77:26:db: f4:8b:a2:47:51:08:e5:83:e5:df:7a:92:a6:09:f1:a6:fa:c2: 31:81:2a:60:06:81:fd:58:46:d8:23:f1:2d:39:dc:c9:67:df: 5c:3e:94:13:a9:09:59:c7:3e:ef:44:42:7a:54:c9:e9:f0:c1: 2f:31:b9:b4:26:71:8c:d6:34:79:e3:95:ea:e1:bc:34:45:69: 30:ec:d4:1b:64:e5:c3:ec:be:32:69:d3:5c:66:ab:b8:6f:03: 1d:cf:d7:b8:d7:f0:3c:41:cf:1f:e8:d2:96:80:5d:84:5a:83: 14:72:1b:de:d7:53:90:9f:d7:47:a0:af:01:ae:e1:91:3a:32: 5f:31:79:2e:44:ee:58:fe:1d:6f:b9:56:bf:8d:3c:3f:6c:cf: f7:2e:a5:a9:2d:14:d9:d2:14:80:39:e6:3a:77:12:76:44:53: e7:e9:b6:0e:66:3f:53:b3:44:b4:4b:3a:31:cd:a6:aa:b3:63: 36:bb:85:8e:b8:91:e4:b4:ed:25:96:3a:a1:94:d2:e9:13:a0: ab:fc:c5:df:6d:f6:7f:1d:e6:ce:62:11:d2:f4:47:0b:1e:34: 27:e9:0d:56:20:4c:fd:96:81:42:31:50:90:12:dd:81:86:12: 2d:09:5a:f9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVawfgu13fvkLKjOxmBmafr/a0ZwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMDkyMloX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNANDIxMTAwYTU4NGI1ZmU2ZWEwZDk4 MmZhYzJlYzNlYzVmYTdiYzRkYmQ5Yjk2OWRmODM1NjYxODE1ZTM0MDRkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY+NRrTVVT7MZUBtOq/xYvh4safO /n8B3t7eqKrzfNVMxld7RmjRtz4rM6g1nOPFEwJjNE+q8tqliKjC2zfwnUYSVzdy 9JKaQRJtvPuKuBAzFkKXIauM7yrlc/CKdlzoNEG/92cyIqxyngirHqlL3p2xLSrn 6Zd+4XrstrG0GJzTNn1pXFJ6DEF36j7BL3N/wu4zlvPNwFrlno40j/P4kYwbHnho KZOSdgcXjPMb3h+wT5Frc6nmKJxUUSWK8U3eI3E/PCfkLtu//hPimNBkYeciKRYf /iM9Go2MDtEW3xsPeOPEg6pcDWqIydVGCBLqcA+KO1RmGf/FzIJhWcSZDQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO7ajqdjxNJrIiFAHs7s6x4aeo1FMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2MzdlNzQ2LTY4YTktNDE4Ny1iNzlkLTVlNGQ0YjVjMzQ4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLIAwDQYJKoZIhvcNAQELBQADggEBACmTEJF7kad/bmpXE7fp hncm2/SLokdRCOWD5d96kqYJ8ab6wjGBKmAGgf1YRtgj8S053Mln31w+lBOpCVnH Pu9EQnpUyenwwS8xubQmcYzWNHnjlerhvDRFaTDs1Btk5cPsvjJp01xmq7hvAx3P 17jX8DxBzx/o0paAXYRagxRyG97XU5Cf10egrwGu4ZE6Ml8xeS5E7lj+HW+5Vr+N PD9sz/cupaktFNnSFIA55jp3EnZEU+fptg5mP1OzRLRLOjHNpqqzYza7hY64keS0 7SWWOqGU0ukToKv8xd9t9n8d5s5iEdL0RwseNCfpDVYgTP2WgUIxUJAS3YGGEi0J Wvk= -----END CERTIFICATE-----Generated at Thu Nov 5 18:43:29 2026 by rpki-client