$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bea2a0b-4dde-47d8-bddc-999dd3f4152e.roa File: 8bea2a0b-4dde-47d8-bddc-999dd3f4152e.roa (raw, json) Hash identifier: VHMcVQBdyn+8F794a82uEYHogpKipzY78MmqTSVGMlE= Subject key identifier: 56:93:D7:90:BD:7A:2B:5A:CA:91:2A:C4:4A:4A:69:97:B3:69:B3:6F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 160219B7212D779404F2E771D249A536E5C89AB3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bea2a0b-4dde-47d8-bddc-999dd3f4152e.roa Signing time: Tue 13 Oct 2026 00:09:01 +0000 ROA not before: Tue 13 Oct 2026 00:09:01 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:02:19:b7:21:2d:77:94:04:f2:e7:71:d2:49:a5:36:e5:c8:9a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 00:09:01 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=8f15ce8d9a9b59bcf4414f282fdbf4190a114f7af4157ce4e7b741d8cd372d9e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c2:15:72:26:3f:27:d0:8d:b5:53:36:24:fc: 68:49:6e:3d:6c:f1:94:f2:e5:53:ac:b1:29:53:e2: 9e:f6:36:bc:5d:60:ef:44:e3:a9:aa:d4:44:4a:83: 83:53:55:d9:e2:15:ec:63:17:e9:d4:1f:01:72:a6: fc:1d:40:69:ba:9e:2f:50:55:55:bb:17:84:9e:47: 5d:8d:db:a5:50:3a:a7:87:66:d5:aa:38:4f:55:60: 14:de:b0:44:b3:47:65:ac:ca:69:01:e2:c0:92:01: 19:50:f9:99:80:95:7d:f1:13:b5:dd:94:bb:b4:1c: 65:fc:e0:ba:f4:21:b7:74:88:cf:6b:72:0f:09:9c: f2:90:49:ff:39:8a:93:09:99:37:23:48:7f:9a:40: 6e:ee:55:05:9f:d5:0b:af:d3:c7:3c:7a:81:c5:06: 29:a4:ec:b9:18:1e:f3:67:10:e5:c0:2a:88:ac:2c: c2:47:a3:64:b5:dd:da:27:df:a5:70:63:3f:9c:3a: b3:3b:d6:c8:b8:b6:aa:0b:ba:79:0c:1e:0e:2a:09: 62:ae:76:aa:36:f9:98:04:6c:86:6f:61:44:62:b4: 2e:28:39:c4:ca:b1:4f:d9:cb:5f:4c:73:22:47:7e: fe:c7:3d:f6:50:31:53:01:cd:56:e2:6b:0a:32:96: e8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:93:D7:90:BD:7A:2B:5A:CA:91:2A:C4:4A:4A:69:97:B3:69:B3:6F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bea2a0b-4dde-47d8-bddc-999dd3f4152e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:f000::/40 Signature Algorithm: sha256WithRSAEncryption 4f:ca:e7:b4:72:a9:80:61:34:ef:7c:8a:85:e6:89:8a:a9:b4: d9:8d:da:47:64:b3:46:fa:98:bf:6d:26:03:02:fc:47:64:30: 6c:2e:f8:a7:11:d8:f4:ff:ff:8f:41:e7:a1:c9:51:71:64:5b: bc:7a:9e:bc:5f:37:e2:ba:ef:7f:78:db:89:8f:34:ae:be:ac: b6:73:e0:ac:2a:9d:87:d0:c7:15:3b:d4:6f:ef:1a:6e:e0:41: d5:db:36:21:ce:1f:6e:53:f3:8e:58:61:02:47:8a:65:9f:e1: 60:fd:4f:44:de:0f:c2:28:1b:4c:16:b0:b9:6b:0e:ad:84:e1: 8e:13:b1:b5:c6:0a:69:5e:5f:cb:98:98:07:be:e8:05:df:d8: fd:66:41:d9:88:9b:2b:5b:71:2c:29:fd:b1:90:2d:5c:14:4c: 13:65:5c:06:9b:e7:ff:a1:50:3e:18:ce:65:ff:81:24:a6:3a: 89:79:2e:33:d3:b8:57:bd:7c:93:a9:d8:66:f9:98:af:2d:b7: 44:67:dc:6a:ec:8b:83:a5:f4:b3:06:c5:b6:45:f6:31:f8:5a: ee:6c:62:8d:cf:6a:46:67:19:4c:73:89:ff:d5:70:b6:4e:30: f4:18:cb:3f:9f:5e:d2:dc:6c:95:03:b7:dd:a0:40:db:a8:21: bd:be:c6:f8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFgIZtyEtd5QE8udx0kmlNuXImrMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxMzAwMDkwMVoX DTI3MDExMTIzNTk1OVowejFJMEcGA1UEBRNAOGYxNWNlOGQ5YTliNTliY2Y0NDE0 ZjI4MmZkYmY0MTkwYTExNGY3YWY0MTU3Y2U0ZTdiNzQxZDhjZDM3MmQ5ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8IVciY/J9CNtVM2JPxoSW49bPGU 8uVTrLEpU+Ke9ja8XWDvROOpqtRESoODU1XZ4hXsYxfp1B8Bcqb8HUBpup4vUFVV uxeEnkddjdulUDqnh2bVqjhPVWAU3rBEs0dlrMppAeLAkgEZUPmZgJV98RO13ZS7 tBxl/OC69CG3dIjPa3IPCZzykEn/OYqTCZk3I0h/mkBu7lUFn9ULr9PHPHqBxQYp pOy5GB7zZxDlwCqIrCzCR6Nktd3aJ9+lcGM/nDqzO9bIuLaqC7p5DB4OKglirnaq NvmYBGyGb2FEYrQuKDnEyrFP2ctfTHMiR37+xz32UDFTAc1W4msKMpboswIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFaT15C9eitaypEqxEpKaZezabNvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiZWEyYTBiLTRkZGUtNDdkOC1iZGRjLTk5OWRkM2Y0MTUyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYPAwDQYJKoZIhvcNAQELBQADggEBAE/K57RyqYBhNO98ioXm iYqptNmN2kdks0b6mL9tJgMC/EdkMGwu+KcR2PT//49B56HJUXFkW7x6nrxfN+K6 739424mPNK6+rLZz4KwqnYfQxxU71G/vGm7gQdXbNiHOH25T845YYQJHimWf4WD9 T0TeD8IoG0wWsLlrDq2E4Y4TsbXGCmleX8uYmAe+6AXf2P1mQdmImytbcSwp/bGQ LVwUTBNlXAab5/+hUD4YzmX/gSSmOol5LjPTuFe9fJOp2Gb5mK8tt0Rn3Grsi4Ol 9LMGxbZF9jH4Wu5sYo3PakZnGUxzif/VcLZOMPQYyz+fXtLcbJUDt92gQNuoIb2+ xvg= -----END CERTIFICATE-----Generated at Sat Nov 7 10:26:57 2026 by rpki-client