$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa File: 616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa (raw, json) Hash identifier: tb7Mem0Q5PTUk3SocQ6B6voLJrySoFC5khkAfTKHybQ= Subject key identifier: DD:AD:1C:B3:F1:67:75:D4:2F:00:54:49:FC:2F:8A:FA:03:60:FB:4F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 761CA43AD382F2B213B65D39CD0BE83313562F6C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa Signing time: Thu 22 Oct 2026 00:07:36 +0000 ROA not before: Thu 22 Oct 2026 00:07:36 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1c:a4:3a:d3:82:f2:b2:13:b6:5d:39:cd:0b:e8:33:13:56:2f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 22 00:07:36 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=dbb97c091a5e6a8abf707d663c2271d33e6b90090324715e55c6255f7609db6b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:80:90:2f:e2:1e:a8:f1:c1:bf:2e:e4:d5: fe:fc:77:49:f3:45:16:08:cd:b3:6c:b5:60:9a:f3: ef:3d:6b:50:f0:35:cd:e7:6b:2a:3f:45:e0:42:57: 4b:6f:ed:29:7b:37:cc:24:79:ea:a1:ee:c6:ca:dc: 62:bc:12:36:3a:a5:8f:ba:d1:ff:0e:6a:59:b2:91: f7:b7:26:e6:09:02:91:fa:57:cb:2c:a5:84:3c:c7: fd:f5:91:b1:d6:17:93:90:c1:7c:5c:9a:5b:0d:a0: 01:86:e9:d8:89:7f:42:51:5c:09:76:ea:15:1f:ec: 56:54:6d:70:44:54:a2:af:45:7b:a5:31:e7:02:d6: 70:61:db:cc:af:f9:82:0b:f9:32:7b:74:07:61:ae: ed:66:14:4a:12:4a:ee:51:cb:fd:3f:58:ee:e1:5e: cf:5d:e0:40:a4:43:3e:63:7f:c1:92:82:a8:92:c4: 3b:22:50:73:81:3f:5f:a5:91:bd:49:d8:5c:10:bf: 85:88:b3:d8:2d:d1:db:65:7b:89:98:5f:98:d7:92: 2b:27:fb:49:6b:9b:17:91:1c:02:84:ed:3a:2a:28: 4c:95:b3:34:94:b2:c5:7b:09:5e:13:31:bb:dc:2f: 27:da:38:98:29:61:43:b9:fd:43:de:4d:db:13:49: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AD:1C:B3:F1:67:75:D4:2F:00:54:49:FC:2F:8A:FA:03:60:FB:4F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1::/32 Signature Algorithm: sha256WithRSAEncryption 37:20:b2:36:42:73:67:05:c3:f2:c5:d2:da:50:4c:45:15:78: 12:df:cb:ac:01:3d:9f:20:d6:c4:f5:61:3c:0b:a7:c4:92:df: 79:96:f5:ea:9c:e2:0a:db:bf:4e:b5:8c:fe:c0:36:c7:83:c5: 3e:5e:f1:35:7c:65:0c:22:9f:a9:46:94:72:b3:81:9a:6f:66: c7:e7:b8:28:8b:8b:ed:9a:20:ae:38:0a:c0:e8:74:78:51:97: 52:0e:ae:15:fd:8e:96:a1:c4:49:2b:59:e3:7d:a4:7b:e6:97: 9d:30:e8:99:e3:41:8d:76:8c:c4:db:3f:88:42:91:80:ff:1a: 84:36:08:a9:b3:ec:52:d3:d3:7a:1b:90:28:c7:d2:fb:df:e5: 18:c7:77:32:98:d2:d7:fb:e5:b1:1e:92:13:37:17:fd:a2:60: d5:6e:29:e9:87:ae:5b:82:a8:d9:dc:f9:67:6c:d9:45:83:da: d0:16:b9:ae:c1:e8:39:bb:ef:b8:b2:7a:02:23:d0:12:9e:54: cc:94:27:0a:5c:b0:c2:8c:63:fc:48:23:49:68:1a:cd:de:12: 85:26:b9:8f:a4:82:8a:f7:4d:c0:5e:cb:00:61:8f:b0:f8:15: d2:51:79:c7:97:e4:96:76:5d:92:e2:59:6e:59:56:2c:3d:1a: 14:86:f2:47 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUdhykOtOC8rITtl05zQvoMxNWL2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMjAwMDczNloX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAZGJiOTdjMDkxYTVlNmE4YWJmNzA3 ZDY2M2MyMjcxZDMzZTZiOTAwOTAzMjQ3MTVlNTVjNjI1NWY3NjA5ZGI2YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oKAkC/iHqjxwb8u5NX+/HdJ80UW CM2zbLVgmvPvPWtQ8DXN52sqP0XgQldLb+0pezfMJHnqoe7GytxivBI2OqWPutH/ DmpZspH3tybmCQKR+lfLLKWEPMf99ZGx1heTkMF8XJpbDaABhunYiX9CUVwJduoV H+xWVG1wRFSir0V7pTHnAtZwYdvMr/mCC/kye3QHYa7tZhRKEkruUcv9P1ju4V7P XeBApEM+Y3/BkoKoksQ7IlBzgT9fpZG9SdhcEL+FiLPYLdHbZXuJmF+Y15IrJ/tJ a5sXkRwChO06KihMlbM0lLLFewleEzG73C8n2jiYKWFDuf1D3k3bE0kupwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFN2tHLPxZ3XULwBUSfwvivoDYPtPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxNmRkYWUxLTJlMDctNDU1NS1hYjQ3LTFlZWFjMWQzYjNmNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba8TANBgkqhkiG9w0BAQsFAAOCAQEANyCyNkJzZwXD8sXS2lBM RRV4Et/LrAE9nyDWxPVhPAunxJLfeZb16pziCtu/TrWM/sA2x4PFPl7xNXxlDCKf qUaUcrOBmm9mx+e4KIuL7ZogrjgKwOh0eFGXUg6uFf2OlqHESStZ432ke+aXnTDo meNBjXaMxNs/iEKRgP8ahDYIqbPsUtPTehuQKMfS+9/lGMd3MpjS1/vlsR6SEzcX /aJg1W4p6YeuW4Ko2dz5Z2zZRYPa0Ba5rsHoObvvuLJ6AiPQEp5UzJQnClywwoxj /EgjSWgazd4ShSa5j6SCivdNwF7LAGGPsPgV0lF5x5fklnZdkuJZbllWLD0aFIby Rw== -----END CERTIFICATE-----Generated at Thu Nov 5 18:43:31 2026 by rpki-client