$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a41ae715-9e63-4e83-af61-a9364bcaac32.roa File: a41ae715-9e63-4e83-af61-a9364bcaac32.roa (raw, json) Hash identifier: QXMcz5PQ5V6TI3Ld+WZmUEvQbKWN7hyeMwKR1cXZxqA= Subject key identifier: 56:34:51:8F:12:7C:83:C7:33:2A:77:EA:06:CD:21:3C:09:8C:E7:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2EA7206FD8F86519F2AA3467FBB5FA3D40D836A2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a41ae715-9e63-4e83-af61-a9364bcaac32.roa Signing time: Tue 13 Oct 2026 00:09:19 +0000 ROA not before: Tue 13 Oct 2026 00:09:19 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a7:20:6f:d8:f8:65:19:f2:aa:34:67:fb:b5:fa:3d:40:d8:36:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 00:09:19 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=d89c1c69145f63b91b4f87a165413c970c05c8643deae379ef4b34808eca7367, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:58:86:34:f0:92:fc:9f:98:61:36:51:3e: 29:7f:ae:08:53:2e:88:1f:28:d6:34:03:c7:24:14: 74:5e:dc:11:e6:99:0a:ad:95:8f:8a:38:a8:60:12: 2b:0a:a5:74:e2:97:95:2e:19:29:07:d8:40:2b:ff: b7:3d:0b:81:ec:8f:41:dd:e2:89:04:e3:ec:22:6a: 66:78:57:06:3c:fa:2b:52:d2:6e:75:78:2f:be:23: 37:7d:3f:54:26:02:db:83:69:9c:5c:d8:21:98:f8: 07:0a:a1:6b:ec:26:88:5c:67:60:31:19:d9:0b:6a: 6f:04:1b:da:c2:b7:03:bb:81:c6:2d:de:66:dd:f2: f0:18:25:0f:a7:8d:39:c6:0e:17:ec:46:76:05:8a: 67:ac:e4:da:12:44:73:54:d0:7e:55:1a:62:1c:21: 7e:20:a0:89:13:3b:d0:79:74:3f:57:09:93:0e:72: 2d:16:02:70:fe:47:42:95:0e:40:4b:29:26:b7:5a: be:2b:d4:12:de:de:7e:dc:12:21:8e:a1:d4:5d:93: 75:35:c7:7d:92:69:e1:09:1f:76:ca:42:7f:cc:1f: 8f:87:34:fd:5b:74:7a:d0:aa:70:85:12:84:01:09: a4:6d:85:85:c7:a1:0a:2b:58:34:28:cc:3f:c4:d5: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:34:51:8F:12:7C:83:C7:33:2A:77:EA:06:CD:21:3C:09:8C:E7:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a41ae715-9e63-4e83-af61-a9364bcaac32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60::/32 Signature Algorithm: sha256WithRSAEncryption 12:b4:65:11:3d:bc:7a:83:67:0c:b8:9e:2a:62:8a:e0:cf:9c: ee:a2:d9:ae:8f:57:5a:cc:cd:46:a0:13:06:13:32:66:fe:bb: 5b:fb:a7:53:80:7f:c8:6b:55:35:c9:5c:5e:ac:70:d1:c0:5a: fd:1e:49:7e:f0:ed:0d:b8:82:fd:05:e6:07:62:11:0c:4d:1f: 51:6d:cb:47:9c:f1:16:07:5b:94:80:5d:4c:4a:80:4a:95:28: e7:4d:cf:7b:0e:2f:ca:bc:cb:b4:be:55:c7:00:62:6e:23:5e: 05:02:57:25:1c:ef:e0:2e:17:75:d1:7c:be:e3:7c:d6:35:41: 03:68:ed:f7:df:c3:81:84:73:e7:41:e2:47:29:3b:f9:40:44: 0a:60:5f:7a:a9:98:2a:b7:7e:fc:d3:d1:4e:ea:49:2a:e8:97: 18:a1:84:ee:f7:0a:b9:38:b3:02:44:f8:b4:50:a8:57:f3:51: 76:66:96:30:cc:1d:17:92:83:bf:d0:1c:b8:04:e3:1d:fa:45: 76:ba:45:19:e9:e7:07:3d:fe:0c:0d:13:66:62:eb:a7:66:b3: 53:ed:0d:0e:84:88:a3:63:c8:ec:7c:d7:82:5e:a9:33:05:53: d4:83:82:38:59:91:03:9f:ce:f3:d8:95:0d:73:63:83:1e:69: 75:ab:2a:63 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIULqcgb9j4ZRnyqjRn+7X6PUDYNqIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxMzAwMDkxOVoX DTI3MDExMTIzNTk1OVowejFJMEcGA1UEBRNAZDg5YzFjNjkxNDVmNjNiOTFiNGY4 N2ExNjU0MTNjOTcwYzA1Yzg2NDNkZWFlMzc5ZWY0YjM0ODA4ZWNhNzM2NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwZYhjTwkvyfmGE2UT4pf64IUy6I HyjWNAPHJBR0XtwR5pkKrZWPijioYBIrCqV04peVLhkpB9hAK/+3PQuB7I9B3eKJ BOPsImpmeFcGPPorUtJudXgvviM3fT9UJgLbg2mcXNghmPgHCqFr7CaIXGdgMRnZ C2pvBBvawrcDu4HGLd5m3fLwGCUPp405xg4X7EZ2BYpnrOTaEkRzVNB+VRpiHCF+ IKCJEzvQeXQ/VwmTDnItFgJw/kdClQ5ASykmt1q+K9QS3t5+3BIhjqHUXZN1Ncd9 kmnhCR92ykJ/zB+PhzT9W3R60KpwhRKEAQmkbYWFx6EKK1g0KMw/xNVJpQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFFY0UY8SfIPHMyp36gbNITwJjOciMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E0MWFlNzE1LTllNjMtNGU4My1hZjYxLWE5MzY0YmNhYWMzMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaYDANBgkqhkiG9w0BAQsFAAOCAQEAErRlET28eoNnDLieKmKK 4M+c7qLZro9XWszNRqATBhMyZv67W/unU4B/yGtVNclcXqxw0cBa/R5JfvDtDbiC /QXmB2IRDE0fUW3LR5zxFgdblIBdTEqASpUo503Pew4vyrzLtL5VxwBibiNeBQJX JRzv4C4XddF8vuN81jVBA2jt99/DgYRz50HiRyk7+UBECmBfeqmYKrd+/NPRTupJ KuiXGKGE7vcKuTizAkT4tFCoV/NRdmaWMMwdF5KDv9AcuATjHfpFdrpFGennBz3+ DA0TZmLrp2azU+0NDoSIo2PI7HzXgl6pMwVT1IOCOFmRA5/O89iVDXNjgx5pdasq Yw== -----END CERTIFICATE-----Generated at Thu Nov 5 16:23:14 2026 by rpki-client