$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/64f65495-d8de-4492-a38d-c668479818e2.roa File: 64f65495-d8de-4492-a38d-c668479818e2.roa (raw, json) Hash identifier: Kj+FCB5o9Wlx0b6VrTggRTG5xIeYI2j71ix/mQxSkAQ= Subject key identifier: 52:4B:20:63:EA:B6:38:B5:5B:57:36:98:29:73:DF:B7:A5:07:4E:8C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 141638079548F9F1578BA4F57B9F6B2468BBE784 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/64f65495-d8de-4492-a38d-c668479818e2.roa Signing time: Mon 26 Oct 2026 00:02:37 +0000 ROA not before: Mon 26 Oct 2026 00:02:37 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:16:38:07:95:48:f9:f1:57:8b:a4:f5:7b:9f:6b:24:68:bb:e7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 26 00:02:37 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=ea3d931523750a493454a394ce53c5edb39b8d26651acb2727443871cf5b60ca, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a0:04:d6:7c:2c:16:57:09:a7:52:9e:99:c9: 67:00:62:62:64:7f:45:f9:25:bd:c3:22:14:12:f6: d6:c3:a4:05:76:05:7f:2a:8e:0f:0a:d0:cd:6b:17: 09:4e:d9:4b:81:a0:50:7e:81:66:2d:7e:61:db:2c: 8e:1b:40:ac:8a:06:58:2b:8a:92:70:18:58:5c:5e: 1d:d0:3c:27:ac:e2:34:8c:b7:15:ed:7f:e0:58:ad: 99:e2:40:a0:9f:98:18:39:fa:17:37:e8:f4:c5:73: 5a:4a:20:d1:9b:45:62:37:10:31:d9:d9:5a:cc:ce: 8a:d1:9e:50:6f:57:c8:2a:23:a5:3a:4c:d0:8c:df: 41:02:d9:4e:35:d3:b6:79:1a:35:eb:b9:a3:98:19: b7:8c:ff:a0:e5:18:21:c2:50:71:b3:d7:76:02:16: 74:a8:a1:51:19:a6:2c:77:2d:43:5c:48:ff:2f:0e: 2b:0c:14:02:da:81:8e:71:b3:75:49:70:ec:3a:30: 35:e7:15:44:3e:7f:c9:26:e6:d6:09:e5:d8:41:72: ca:d4:02:1f:11:82:0c:74:bd:a3:b5:92:0f:28:d9: 52:8c:73:0a:e0:9d:d8:39:16:0e:1e:75:62:a4:70: c7:62:2d:e9:47:c5:51:9a:66:7b:ac:96:32:03:12: 12:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4B:20:63:EA:B6:38:B5:5B:57:36:98:29:73:DF:B7:A5:07:4E:8C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/64f65495-d8de-4492-a38d-c668479818e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:800::/40 Signature Algorithm: sha256WithRSAEncryption a9:e7:61:93:df:0b:00:dd:c6:82:16:fb:e8:f9:01:2d:b1:2a: 67:2e:42:26:62:5e:82:8d:b6:75:e3:57:5f:38:00:b3:2b:b9: 61:0b:8c:5e:b9:ea:10:e4:2a:18:8a:5a:49:7f:6a:e7:85:4a: e1:8f:d1:e2:d1:98:0e:1b:18:ae:87:6b:10:d7:81:f1:67:98: c3:da:a8:c0:94:ab:89:0c:84:f5:81:40:0c:88:44:99:0c:d6: da:36:72:c0:c8:e9:be:d3:66:f8:1e:38:71:6b:18:cd:ae:64: 15:b9:44:c8:a5:e6:9d:c6:b8:b7:48:d7:50:3f:26:ab:de:63: 76:9c:71:7c:fc:e2:c2:d8:a3:0b:9c:3c:eb:9e:6b:63:6e:09: fd:c9:55:da:90:93:68:fd:c2:2f:5f:97:50:81:37:0f:60:47: e2:69:ff:81:9f:53:be:2d:18:8e:ae:25:32:86:ba:6e:46:3b: bd:c4:c0:02:4e:82:f7:92:b9:fa:da:0c:fc:8b:e2:16:14:33: 42:6d:ea:0e:9e:11:f1:b8:b3:90:1e:b1:0e:c6:fc:1a:78:3b: 66:f2:f8:f3:97:56:5e:b2:ef:6c:f4:01:a0:06:23:81:fc:84: 30:f4:21:00:29:4c:b3:11:5d:81:b8:2f:7f:bd:d7:dd:27:a5: 43:e0:28:8b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFBY4B5VI+fFXi6T1e59rJGi754QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyNjAwMDIzN1oX DTI3MDEyNDIzNTk1OVowejFJMEcGA1UEBRNAZWEzZDkzMTUyMzc1MGE0OTM0NTRh Mzk0Y2U1M2M1ZWRiMzliOGQyNjY1MWFjYjI3Mjc0NDM4NzFjZjViNjBjYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6AE1nwsFlcJp1KemclnAGJiZH9F +SW9wyIUEvbWw6QFdgV/Ko4PCtDNaxcJTtlLgaBQfoFmLX5h2yyOG0CsigZYK4qS cBhYXF4d0DwnrOI0jLcV7X/gWK2Z4kCgn5gYOfoXN+j0xXNaSiDRm0ViNxAx2dla zM6K0Z5Qb1fIKiOlOkzQjN9BAtlONdO2eRo167mjmBm3jP+g5RghwlBxs9d2AhZ0 qKFRGaYsdy1DXEj/Lw4rDBQC2oGOcbN1SXDsOjA15xVEPn/JJubWCeXYQXLK1AIf EYIMdL2jtZIPKNlSjHMK4J3YORYOHnVipHDHYi3pR8VRmmZ7rJYyAxIS7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFJLIGPqtji1W1c2mClz37elB06MMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY0ZjY1NDk1LWQ4ZGUtNDQ5Mi1hMzhkLWM2Njg0Nzk4MThlMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7wgwDQYJKoZIhvcNAQELBQADggEBAKnnYZPfCwDdxoIW++j5 AS2xKmcuQiZiXoKNtnXjV184ALMruWELjF656hDkKhiKWkl/aueFSuGP0eLRmA4b GK6HaxDXgfFnmMPaqMCUq4kMhPWBQAyIRJkM1to2csDI6b7TZvgeOHFrGM2uZBW5 RMil5p3GuLdI11A/JqveY3accXz84sLYowucPOuea2NuCf3JVdqQk2j9wi9fl1CB Nw9gR+Jp/4GfU74tGI6uJTKGum5GO73EwAJOgveSufraDPyL4hYUM0Jt6g6eEfG4 s5AesQ7G/Bp4O2by+POXVl6y72z0AaAGI4H8hDD0IQApTLMRXYG4L3+9190npUPg KIs= -----END CERTIFICATE-----Generated at Thu Nov 5 09:04:33 2026 by rpki-client