$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/58370a36-bf5a-4314-8163-12b380e5ebe5.roa File: 58370a36-bf5a-4314-8163-12b380e5ebe5.roa (raw, json) Hash identifier: U/EQEZTK64sNaahfr8jdgTdt+RKvoWxzp9iFsXKNMXE= Subject key identifier: 9B:BB:A8:4B:7A:47:72:55:3D:A2:C0:95:63:40:B3:FD:3C:45:43:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 321D3B30457AD19DD2BEE3FE4EAC6B74B3716CA5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/58370a36-bf5a-4314-8163-12b380e5ebe5.roa Signing time: Wed 21 Oct 2026 00:09:16 +0000 ROA not before: Wed 21 Oct 2026 00:09:16 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1d:3b:30:45:7a:d1:9d:d2:be:e3:fe:4e:ac:6b:74:b3:71:6c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 21 00:09:16 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=0bdedfafaaf1ae8c5061247ffd000728db3f89ef7dfb581df8ca43902bcc1aa7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:5d:ee:e1:02:50:78:b8:9c:f7:9a:a9:a8: 87:5e:1e:bb:2e:8d:6b:3c:9d:3b:0c:91:24:c1:21: 5a:26:43:61:ba:5f:70:ea:88:85:82:d3:bf:b6:93: d4:4c:21:d2:6c:f0:2c:c2:66:2c:a4:5f:ac:f6:08: 4b:de:dc:91:3b:98:a6:b1:63:8b:6c:84:7c:e3:8b: 4b:ff:43:d3:2e:80:e3:75:d4:ae:8f:67:3b:04:5c: 10:68:d8:1e:b7:69:1f:9a:5d:ed:8d:14:60:af:8d: 3e:fc:ee:fd:30:24:23:c1:6e:42:0a:83:45:ea:e8: 6a:56:37:28:9e:ac:97:41:28:8e:47:a6:cc:04:9c: 65:92:6c:79:45:43:c1:f3:e0:e6:e2:8c:22:14:8b: f3:5c:5b:75:f8:b5:86:8f:4d:46:e7:1b:37:38:ef: 59:88:73:8c:d7:9b:8b:8e:78:03:1e:59:0c:63:97: 14:38:26:a0:4c:1b:8c:18:db:d6:50:97:d1:40:bc: ce:4b:81:c6:f9:b2:8a:be:01:2a:ce:52:f0:fd:30: 76:8a:72:d1:36:48:da:c8:d4:2f:5e:95:ee:3d:21: 68:3a:40:e5:2d:71:14:5b:3d:c5:4a:54:74:6e:6c: 93:68:95:60:77:34:31:83:16:0f:89:c6:e3:da:31: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BB:A8:4B:7A:47:72:55:3D:A2:C0:95:63:40:B3:FD:3C:45:43:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/58370a36-bf5a-4314-8163-12b380e5ebe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:4000::/40 Signature Algorithm: sha256WithRSAEncryption 27:68:23:a8:02:c6:6c:92:f1:a9:43:87:11:da:67:71:3e:34: f2:fa:6e:95:9a:35:47:ac:f4:aa:7a:93:e3:5d:45:51:81:53: 40:27:77:ac:80:c7:00:b8:44:34:ed:2b:97:ac:46:6c:89:8d: c1:b1:23:c4:25:da:bb:95:08:b9:6b:ab:60:e1:2d:42:16:df: 3e:0d:ca:f1:28:39:e5:c3:e7:89:f9:8a:d8:33:3f:8f:63:81: f2:19:11:84:ec:11:95:f6:b3:d0:86:d4:e3:9b:90:b7:ef:c8: 1f:20:56:8e:4b:e7:8e:38:98:6f:56:30:b6:a3:f9:31:cc:71: 25:16:ef:7b:b8:6e:84:67:93:58:ee:67:21:18:4c:20:97:72: 9b:75:58:fa:f4:77:d2:c6:05:fe:82:5f:28:4e:5f:8c:2c:eb: 2a:14:f8:56:ea:5a:7d:dc:41:39:e4:a2:fe:b0:9a:7a:5b:b4: b7:12:6d:c3:49:65:e4:b3:c9:ca:2f:8b:cf:d8:fa:c2:30:5c: ac:c5:44:74:13:98:82:0c:63:d1:e0:bc:53:87:0f:a2:04:e8: 2a:cb:dd:e8:c3:d5:46:f4:e5:1e:ab:f3:4a:6c:4f:6d:c3:5d: 1d:67:ea:39:35:3e:32:1e:de:41:37:00:e1:70:b8:1a:7d:3e: 75:7c:3d:0b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMh07MEV60Z3SvuP+TqxrdLNxbKUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMTAwMDkxNloX DTI3MDExOTIzNTk1OVowejFJMEcGA1UEBRNAMGJkZWRmYWZhYWYxYWU4YzUwNjEy NDdmZmQwMDA3MjhkYjNmODllZjdkZmI1ODFkZjhjYTQzOTAyYmNjMWFhNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKZd7uECUHi4nPeaqaiHXh67Lo1r PJ07DJEkwSFaJkNhul9w6oiFgtO/tpPUTCHSbPAswmYspF+s9ghL3tyRO5imsWOL bIR844tL/0PTLoDjddSuj2c7BFwQaNget2kfml3tjRRgr40+/O79MCQjwW5CCoNF 6uhqVjconqyXQSiOR6bMBJxlkmx5RUPB8+Dm4owiFIvzXFt1+LWGj01G5xs3OO9Z iHOM15uLjngDHlkMY5cUOCagTBuMGNvWUJfRQLzOS4HG+bKKvgEqzlLw/TB2inLR NkjayNQvXpXuPSFoOkDlLXEUWz3FSlR0bmyTaJVgdzQxgxYPicbj2jGgoQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJu7qEt6R3JVPaLAlWNAs/08RUNpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU4MzcwYTM2LWJmNWEtNDMxNC04MTYzLTEyYjM4MGU1ZWJlNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacEAwDQYJKoZIhvcNAQELBQADggEBACdoI6gCxmyS8alDhxHa Z3E+NPL6bpWaNUes9Kp6k+NdRVGBU0And6yAxwC4RDTtK5esRmyJjcGxI8Ql2ruV CLlrq2DhLUIW3z4NyvEoOeXD54n5itgzP49jgfIZEYTsEZX2s9CG1OObkLfvyB8g Vo5L5444mG9WMLaj+THMcSUW73u4boRnk1juZyEYTCCXcpt1WPr0d9LGBf6CXyhO X4ws6yoU+FbqWn3cQTnkov6wmnpbtLcSbcNJZeSzycovi8/Y+sIwXKzFRHQTmIIM Y9HgvFOHD6IE6CrL3ejD1Ub05R6r80psT23DXR1n6jk1PjIe3kE3AOFwuBp9PnV8 PQs= -----END CERTIFICATE-----Generated at Thu Nov 5 05:22:32 2026 by rpki-client