$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab6c1a5b-baf2-4a51-9278-bb551e8fe5cb.roa File: ab6c1a5b-baf2-4a51-9278-bb551e8fe5cb.roa (raw, json) Hash identifier: m6W7OrxcGZnFZgwf8Ym0uV9vgh4LENQeji1gIHQa8r8= Subject key identifier: FD:F4:48:D8:CD:73:92:E7:38:51:D2:D0:34:4D:5B:93:64:EB:CE:86 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E97AC4247684DEA22B4BF9E9A8DC59016CF88CD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab6c1a5b-baf2-4a51-9278-bb551e8fe5cb.roa Signing time: Thu 29 Oct 2026 00:03:34 +0000 ROA not before: Thu 29 Oct 2026 00:03:34 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:97:ac:42:47:68:4d:ea:22:b4:bf:9e:9a:8d:c5:90:16:cf:88:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:03:34 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=8a1b6bfe36aa7d0b4bd4daa8bd01c403203988ff82ee1abb15df383d53189b69, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:76:29:40:79:2a:f2:90:69:4c:36:cc:08:30: a8:23:17:b5:85:e8:aa:05:88:7a:90:35:24:0e:18: 59:b9:25:40:07:69:7d:bf:e1:92:69:0c:e8:5d:15: b7:8c:83:6e:27:a8:45:11:f8:6f:5c:09:5d:38:ca: d9:64:2c:a9:98:5e:db:0b:ec:54:68:6b:61:2c:ce: ac:d8:33:e0:5b:e2:2b:70:34:e6:7a:67:df:8d:24: bf:aa:76:04:8d:cf:f7:a3:50:ee:87:0b:02:71:bf: d1:55:b8:79:77:2f:32:b1:20:a5:15:2f:c9:d8:40: fc:c5:ed:67:b0:fe:39:5a:fa:74:ae:31:10:cf:21: 0c:3d:d1:02:a1:ab:d9:fa:3b:86:96:f9:fd:dc:a7: a9:7f:0f:11:b2:ea:94:2c:00:51:f1:38:e3:7b:b6: f4:2a:cc:d0:0b:9d:68:7e:62:e5:47:a2:58:fa:3e: fc:5a:d6:33:2c:5d:59:8a:39:56:13:ac:26:eb:28: 3d:27:48:d1:fe:aa:8f:52:c8:4a:02:d3:e6:fc:bd: 79:29:c7:8e:d4:39:28:91:72:8f:6b:58:01:b1:4b: d8:89:11:f3:dc:f0:2b:73:11:d9:e4:46:f2:48:68: 82:39:ea:75:ee:7f:e3:0b:60:37:ae:d0:d6:07:8d: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F4:48:D8:CD:73:92:E7:38:51:D2:D0:34:4D:5B:93:64:EB:CE:86 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab6c1a5b-baf2-4a51-9278-bb551e8fe5cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:4800::/40 Signature Algorithm: sha256WithRSAEncryption 53:13:7a:70:59:14:d4:56:7b:fb:56:4e:e5:84:a6:aa:b8:c8: c9:df:2f:f1:83:03:af:76:1c:52:0b:94:ee:15:0f:36:9b:b5: c3:34:01:6a:46:b8:48:a8:93:aa:3e:01:27:2f:bf:75:36:e0: f8:e0:8a:8c:56:f8:28:53:18:de:14:23:ba:97:5b:ec:82:92: 93:65:5c:6b:9a:20:da:18:a1:30:9b:3a:cf:bf:e0:42:37:23: c0:cd:2e:27:8a:b3:f0:40:f8:03:bf:1e:7f:42:b5:81:02:21: 4d:78:47:0d:63:24:23:19:4c:dd:52:52:58:ad:b5:bf:ba:75: a3:55:9e:54:e2:41:0e:db:5b:cc:cb:f4:96:2d:44:f6:3a:78: 78:fd:34:19:cd:7b:c6:2d:94:13:ab:bd:ac:dd:42:92:0e:6d: b2:32:23:27:8c:9b:b0:b9:1c:08:37:1e:d6:a7:41:62:b9:5b: 87:5f:9e:5f:84:d5:93:18:7d:fd:1e:11:ef:8f:74:58:42:8c: b7:ee:83:c2:5c:fe:8c:44:d8:80:57:c1:23:0e:4d:00:31:79: 08:03:7f:25:29:81:61:da:66:4c:c8:35:1b:5a:d1:f4:d9:58: 31:f9:e1:31:5c:01:7e:8c:57:7a:bc:a8:f4:6b:a7:0c:09:1b: 06:46:8a:4d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbpesQkdoTeoitL+emo3FkBbPiM0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyOTAwMDMzNFoX DTI3MDEyNzIzNTk1OVowejFJMEcGA1UEBRNAOGExYjZiZmUzNmFhN2QwYjRiZDRk YWE4YmQwMWM0MDMyMDM5ODhmZjgyZWUxYWJiMTVkZjM4M2Q1MzE4OWI2OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nYpQHkq8pBpTDbMCDCoIxe1heiq BYh6kDUkDhhZuSVAB2l9v+GSaQzoXRW3jINuJ6hFEfhvXAldOMrZZCypmF7bC+xU aGthLM6s2DPgW+IrcDTmemffjSS/qnYEjc/3o1DuhwsCcb/RVbh5dy8ysSClFS/J 2ED8xe1nsP45Wvp0rjEQzyEMPdECoavZ+juGlvn93Kepfw8RsuqULABR8Tjje7b0 KszQC51ofmLlR6JY+j78WtYzLF1ZijlWE6wm6yg9J0jR/qqPUshKAtPm/L15KceO 1DkokXKPa1gBsUvYiRHz3PArcxHZ5EbySGiCOep17n/jC2A3rtDWB43ukwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP30SNjNc5LnOFHS0DRNW5Nk686GMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FiNmMxYTViLWJhZjItNGE1MS05Mjc4LWJiNTUxZThmZTVjYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6EgwDQYJKoZIhvcNAQELBQADggEBAFMTenBZFNRWe/tWTuWE pqq4yMnfL/GDA692HFILlO4VDzabtcM0AWpGuEiok6o+AScvv3U24PjgioxW+ChT GN4UI7qXW+yCkpNlXGuaINoYoTCbOs+/4EI3I8DNLieKs/BA+AO/Hn9CtYECIU14 Rw1jJCMZTN1SUlittb+6daNVnlTiQQ7bW8zL9JYtRPY6eHj9NBnNe8YtlBOrvazd QpIObbIyIyeMm7C5HAg3HtanQWK5W4dfnl+E1ZMYff0eEe+PdFhCjLfug8Jc/oxE 2IBXwSMOTQAxeQgDfyUpgWHaZkzINRta0fTZWDH54TFcAX6MV3q8qPRrpwwJGwZG ik0= -----END CERTIFICATE-----Generated at Thu Nov 5 15:20:17 2026 by rpki-client