$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5e65b753-8597-4b6b-8503-71fffd27145a.roa File: 5e65b753-8597-4b6b-8503-71fffd27145a.roa (raw, json) Hash identifier: INovsz/XGgusrGXbsgEzjXZ7mSRNkj/sP9xtdoO6+w4= Subject key identifier: 91:DA:00:89:B8:76:0E:8B:CB:B3:35:27:69:92:F5:CB:03:DC:8A:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12257CF309FFEE80126D7DBCFF0B7F2753B526E5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5e65b753-8597-4b6b-8503-71fffd27145a.roa Signing time: Thu 29 Oct 2026 00:03:03 +0000 ROA not before: Thu 29 Oct 2026 00:03:03 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:25:7c:f3:09:ff:ee:80:12:6d:7d:bc:ff:0b:7f:27:53:b5:26:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:03:03 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=41a3e2decdd7641e64f69d8f2af7fad64e77e4e32dc6b17fa7ff005399f21bb7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:b9:92:89:e3:d5:50:b9:0b:72:6a:8c:50: ec:b0:58:e0:96:e6:b4:bb:90:d0:51:be:5c:bc:35: 41:ce:73:ae:d9:28:ac:7d:a8:b7:dc:0c:65:7f:29: 27:98:44:19:da:74:81:f4:e9:4d:3c:b1:6d:db:76: f6:e5:c2:2d:4e:e6:c9:19:d8:01:8a:7a:99:44:b2: 12:89:af:a6:44:d7:6d:05:ab:63:38:b7:e6:1a:ea: 0a:c9:9f:1c:a7:61:1f:be:2a:2d:72:e0:3d:16:29: 19:70:e7:93:9c:a2:0e:72:b0:c4:4c:d8:62:d0:74: 8b:c9:b6:23:71:bb:82:1c:91:7b:9a:44:f2:1c:ab: ed:df:8b:8d:79:d2:10:a2:3c:48:96:c1:69:ba:6c: ac:73:bb:a4:88:28:92:b6:18:ec:d0:e4:ad:07:79: bd:a6:76:ca:0c:30:c3:eb:59:f0:97:4e:15:be:a8: 24:07:e6:5f:2b:c7:cb:79:b2:6f:9e:b5:ca:25:c5: b6:85:38:6a:1d:61:e9:45:0b:ad:df:86:ef:43:a1: 48:81:94:d4:89:4b:26:c9:be:77:bc:e4:b3:f5:5b: 47:c2:c7:1b:25:a3:02:56:80:95:ab:9f:31:bb:d5: ab:06:f4:b0:74:82:a8:59:85:7d:6c:a1:73:0f:c6: c3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DA:00:89:B8:76:0E:8B:CB:B3:35:27:69:92:F5:CB:03:DC:8A:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5e65b753-8597-4b6b-8503-71fffd27145a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:800::/40 Signature Algorithm: sha256WithRSAEncryption 56:09:f1:d5:60:dc:6b:20:37:32:5a:5d:0a:47:54:07:c2:41: 3f:9e:f0:b1:e3:6c:ae:25:85:5a:ab:e7:0c:21:27:f9:f6:7d: 94:c2:40:17:eb:5f:2c:ee:3d:83:3d:ba:4b:61:b8:1d:a5:c1: 66:62:17:84:16:6b:6c:71:8c:41:7c:1a:b7:8d:36:05:93:17: 80:0e:07:9b:da:a7:21:8a:14:8a:38:f5:f5:01:e2:6c:92:c2: 85:0f:b1:e4:a9:ac:39:f7:1e:ea:1a:fe:92:36:21:8c:cc:25: 06:5c:64:45:c4:1d:50:ab:d3:74:d7:bb:78:8b:6d:24:22:2b: dd:04:6b:87:cc:91:c2:ba:0a:99:8e:91:a0:42:99:b0:09:57: ab:01:35:94:ad:cc:27:a5:d6:39:f4:62:48:b0:af:d8:d1:d7: b2:93:27:8d:38:da:ea:a3:ed:1b:3a:fa:67:69:24:75:c0:63: 74:ae:30:c7:00:e0:73:c1:7f:78:3d:bd:d8:a9:08:e5:38:6e: c7:8a:b0:06:f7:0b:02:2b:5b:54:7d:47:4c:c5:6b:ed:5c:40: e8:cf:c0:ba:04:1b:38:1d:50:c4:c0:9f:ed:4d:29:ce:63:ac: 4e:79:22:7b:28:e1:04:62:79:3f:aa:9b:4f:1a:62:89:8b:04: 41:2b:db:a4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEiV88wn/7oASbX28/wt/J1O1JuUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyOTAwMDMwM1oX DTI3MDEyNzIzNTk1OVowejFJMEcGA1UEBRNANDFhM2UyZGVjZGQ3NjQxZTY0ZjY5 ZDhmMmFmN2ZhZDY0ZTc3ZTRlMzJkYzZiMTdmYTdmZjAwNTM5OWYyMWJiNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvC5konj1VC5C3JqjFDssFjglua0 u5DQUb5cvDVBznOu2Sisfai33AxlfyknmEQZ2nSB9OlNPLFt23b25cItTubJGdgB inqZRLISia+mRNdtBatjOLfmGuoKyZ8cp2EfviotcuA9FikZcOeTnKIOcrDETNhi 0HSLybYjcbuCHJF7mkTyHKvt34uNedIQojxIlsFpumysc7ukiCiSthjs0OStB3m9 pnbKDDDD61nwl04VvqgkB+ZfK8fLebJvnrXKJcW2hThqHWHpRQut34bvQ6FIgZTU iUsmyb53vOSz9VtHwscbJaMCVoCVq58xu9WrBvSwdIKoWYV9bKFzD8bDdwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJHaAIm4dg6Ly7M1J2mS9csD3IrKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVlNjViNzUzLTg1OTctNGI2Yi04NTAzLTcxZmZmZDI3MTQ1YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6AgwDQYJKoZIhvcNAQELBQADggEBAFYJ8dVg3GsgNzJaXQpH VAfCQT+e8LHjbK4lhVqr5wwhJ/n2fZTCQBfrXyzuPYM9ukthuB2lwWZiF4QWa2xx jEF8GreNNgWTF4AOB5vapyGKFIo49fUB4mySwoUPseSprDn3Huoa/pI2IYzMJQZc ZEXEHVCr03TXu3iLbSQiK90Ea4fMkcK6CpmOkaBCmbAJV6sBNZStzCel1jn0Ykiw r9jR17KTJ4042uqj7Rs6+mdpJHXAY3SuMMcA4HPBf3g9vdipCOU4bseKsAb3CwIr W1R9R0zFa+1cQOjPwLoEGzgdUMTAn+1NKc5jrE55Inso4QRieT+qm08aYomLBEEr 26Q= -----END CERTIFICATE-----Generated at Thu Nov 5 05:18:55 2026 by rpki-client