$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84292d65-2b01-4a5c-9515-02cb05bc483c.roa File: 84292d65-2b01-4a5c-9515-02cb05bc483c.roa (raw, json) Hash identifier: mHFn7OE/nvEg+KSsEYNOCpsdjOqNJf1SHreS27kuIBo= Subject key identifier: E0:D1:C3:BE:E4:B0:20:BB:44:04:87:B7:59:96:D1:7E:8B:F7:73:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6F7C17F0869215246113985D248424349ED52727 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84292d65-2b01-4a5c-9515-02cb05bc483c.roa Signing time: Tue 20 Oct 2026 00:20:31 +0000 ROA not before: Tue 20 Oct 2026 00:20:31 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Nov 2026 00:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7c:17:f0:86:92:15:24:61:13:98:5d:24:84:24:34:9e:d5:27:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:20:31 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=8d51b8ae5cebbfdbf089d6bc05aeeec67c5fb6a88a61cf0dd1e08fb92e4b04e1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:76:b5:4e:54:d8:b4:1f:f1:1c:71:8a:bd: c3:83:7e:48:0f:1c:4f:79:07:f6:37:fe:63:b4:b8: df:62:9f:5f:d4:53:60:4d:46:f9:27:48:ce:41:64: 31:1d:bc:e2:cc:38:76:06:88:22:01:75:b1:5a:79: 37:f9:98:45:e0:9f:dd:9d:69:bb:4a:db:9e:b7:6f: 46:4a:cc:b0:a3:41:3c:ce:24:7c:19:75:dc:a8:68: 87:9a:f3:c1:1c:e7:8b:fd:5b:18:df:23:33:98:fb: 44:b0:0c:6c:c6:a9:4d:ab:14:a3:ee:0b:6d:be:80: a7:28:6e:21:72:7a:16:99:b4:54:e3:ce:e5:70:b0: 9f:52:46:98:07:b1:c6:61:38:14:23:19:4a:75:40: 5d:1c:00:57:b1:85:50:e9:28:bc:78:ea:a8:d5:af: 27:71:63:b6:9e:4c:9a:f1:f7:20:48:c9:dd:bd:7c: 05:1d:da:be:69:e3:68:e5:74:fa:83:44:08:cc:28: a5:74:ac:35:17:3e:c6:08:d8:4d:e6:1d:fd:23:c8: 09:2f:2f:a0:a5:4f:89:02:98:f9:06:33:60:bd:06: 8f:cd:3a:11:78:0a:ad:1d:54:59:a3:af:55:73:82: b9:b7:8c:54:44:24:9e:14:b1:6d:f9:cd:86:ae:dc: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D1:C3:BE:E4:B0:20:BB:44:04:87:B7:59:96:D1:7E:8B:F7:73:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84292d65-2b01-4a5c-9515-02cb05bc483c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:8000::/40 Signature Algorithm: sha256WithRSAEncryption 72:97:6e:47:ab:c3:3a:de:dc:56:66:e2:ec:4e:35:65:36:e3: 89:3c:c7:30:37:47:d2:5e:ad:71:c7:ab:4d:16:04:17:56:93: 6b:87:a6:aa:8e:90:a4:ab:4f:be:b2:29:9d:84:14:06:30:fa: 60:66:3e:6b:07:5c:e1:6d:cc:99:a2:6b:74:0c:05:ca:39:ad: 8b:2e:8d:b6:ce:87:c1:26:6a:ce:59:1b:5d:d1:b3:e2:75:25: 10:d9:a8:e4:45:ae:75:8b:e2:f7:9c:e7:cc:34:fc:45:83:04: e9:5c:c9:4c:f1:f8:13:5b:cf:e8:07:41:a1:f9:87:b4:26:fa: 1e:fd:4a:e5:5a:9a:3f:e0:88:86:2d:eb:c0:de:8e:b4:4a:ed: 09:88:47:b1:4f:82:4d:c9:11:4e:de:5d:e4:44:3f:f5:a4:f3: 4d:fd:0f:00:80:b4:a9:75:f4:3d:5d:28:ad:38:19:a9:14:e1: b0:45:ac:6e:38:2c:48:ee:25:52:c2:ef:ed:58:93:49:98:40: a5:8b:6d:44:13:d5:78:89:62:34:5b:50:ce:5e:19:76:8e:f1: 44:de:eb:86:25:32:e4:09:a9:d5:20:62:98:2f:91:a5:66:e5: e2:1b:7c:56:88:e2:99:a6:15:12:63:3d:22:64:87:65:52:d5: 58:9b:16:8d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUb3wX8IaSFSRhE5hdJIQkNJ7VJycwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMjAzMVoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAOGQ1MWI4YWU1Y2ViYmZkYmYwODlk NmJjMDVhZWVlYzY3YzVmYjZhODhhNjFjZjBkZDFlMDhmYjkyZTRiMDRlMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1R2tU5U2LQf8Rxxir3Dg35IDxxP eQf2N/5jtLjfYp9f1FNgTUb5J0jOQWQxHbzizDh2BogiAXWxWnk3+ZhF4J/dnWm7 Stuet29GSsywo0E8ziR8GXXcqGiHmvPBHOeL/VsY3yMzmPtEsAxsxqlNqxSj7gtt voCnKG4hcnoWmbRU487lcLCfUkaYB7HGYTgUIxlKdUBdHABXsYVQ6Si8eOqo1a8n cWO2nkya8fcgSMndvXwFHdq+aeNo5XT6g0QIzCildKw1Fz7GCNhN5h39I8gJLy+g pU+JApj5BjNgvQaPzToReAqtHVRZo69Vc4K5t4xURCSeFLFt+c2Grtyr8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFODRw77ksCC7RASHt1mW0X6L93PQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0MjkyZDY1LTJiMDEtNGE1Yy05NTE1LTAyY2IwNWJjNDgzYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8YAwDQYJKoZIhvcNAQELBQADggEBAHKXbkerwzre3FZm4uxO NWU244k8xzA3R9JerXHHq00WBBdWk2uHpqqOkKSrT76yKZ2EFAYw+mBmPmsHXOFt zJmia3QMBco5rYsujbbOh8Emas5ZG13Rs+J1JRDZqORFrnWL4vec58w0/EWDBOlc yUzx+BNbz+gHQaH5h7Qm+h79SuVamj/giIYt68DejrRK7QmIR7FPgk3JEU7eXeRE P/Wk8039DwCAtKl19D1dKK04GakU4bBFrG44LEjuJVLC7+1Yk0mYQKWLbUQT1XiJ YjRbUM5eGXaO8UTe64YlMuQJqdUgYpgvkaVm5eIbfFaI4pmmFRJjPSJkh2VS1Vib Fo0= -----END CERTIFICATE-----Generated at Tue Nov 10 11:05:09 2026 by rpki-client