$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b772f459-72fe-4c7d-8f8c-61cce5a944c0.roa File: b772f459-72fe-4c7d-8f8c-61cce5a944c0.roa (raw, json) Hash identifier: 82p+8nE+7WtYAX315A9LTpz75R/lKN2hvYZjnb3p/Qs= Subject key identifier: 7C:F0:2E:CA:08:02:44:C1:79:C3:38:4D:76:2F:13:2F:B8:73:B6:A3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4D55975CFCD3C34B83277ABECE55C93C4C38608C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b772f459-72fe-4c7d-8f8c-61cce5a944c0.roa Signing time: Tue 13 Oct 2026 00:09:22 +0000 ROA not before: Tue 13 Oct 2026 00:09:22 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:55:97:5c:fc:d3:c3:4b:83:27:7a:be:ce:55:c9:3c:4c:38:60:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 00:09:22 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=f94e4bb91424ba4662d91ac0fa2b9c9ae2fafbf9f0cb5eb64bb4ea241885bcaf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:86:c6:0d:6c:14:e3:1b:09:24:86:1a:96:72: 40:2a:49:d6:7b:0f:55:25:f9:fd:18:1d:99:29:9f: db:b2:68:42:29:aa:f5:2a:6d:9a:ff:f2:c9:b1:8a: 76:d1:f0:92:7e:89:2f:e6:6b:3b:50:be:aa:9f:ba: ef:a7:56:30:75:80:bc:6e:d7:cd:d9:03:3e:b5:99: 19:ed:c3:58:ab:65:ab:18:5c:eb:a1:81:39:6f:04: ca:61:66:34:6e:08:2d:22:ae:42:45:ca:89:9a:ba: 63:89:12:85:f5:5d:12:28:03:80:1f:cd:32:59:e4: ac:06:92:58:ff:bb:81:e0:82:14:d6:fd:5a:35:46: 89:d4:98:e7:d6:72:3e:06:ee:8f:d3:ec:3d:73:52: b7:44:77:47:1d:dd:76:a1:9b:fa:84:bc:70:31:ee: 9e:17:4c:ac:5e:ae:83:9c:0c:f7:68:75:4b:61:81: 6b:cc:c0:a6:dc:1c:05:b4:d9:7c:14:f2:00:68:ea: 46:76:e4:37:72:77:18:9f:3d:06:18:c0:06:bf:4b: 5c:af:65:ee:6c:4f:a8:53:c0:3c:44:a4:7a:1a:a2: 4a:9f:ab:97:01:ae:d3:9c:b3:15:a3:17:66:f3:42: 56:b0:c4:81:5c:8f:77:6b:18:56:a5:f4:c3:c0:bd: 4b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F0:2E:CA:08:02:44:C1:79:C3:38:4D:76:2F:13:2F:B8:73:B6:A3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b772f459-72fe-4c7d-8f8c-61cce5a944c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:7000::/48 Signature Algorithm: sha256WithRSAEncryption 37:f7:49:0c:e7:d4:5e:d4:30:05:2b:28:bc:4f:c7:de:33:84: 82:66:7d:4d:fa:5f:7b:a7:83:2f:81:cb:94:78:3c:18:e8:5f: f5:8d:7c:73:03:56:af:da:07:8d:3a:45:f2:a4:c7:19:93:0c: eb:1c:c2:77:3a:22:bd:a2:90:c6:48:fb:64:56:3e:0e:a8:fa: 2b:ac:37:f8:20:41:9d:5d:a6:15:61:62:5e:40:3e:91:6f:71: fe:5a:d4:25:bf:51:e3:c3:6d:44:b5:98:87:bb:4f:c4:dd:e7: 54:32:7d:7f:5a:f0:93:30:80:74:83:ea:bf:16:3e:dc:1f:58: 6f:b3:76:f1:c4:db:9e:b4:55:df:e6:15:d9:7c:d3:2d:e1:b3: 23:4c:3f:4b:cd:82:cf:4f:71:59:76:67:7d:51:cf:be:a3:8f: 2f:ee:30:0f:e9:19:5d:a7:64:15:e3:13:00:4f:0f:05:1d:2a: 89:a7:bf:87:1e:df:89:89:12:c4:3c:9a:64:54:79:51:61:0b: 98:da:24:d4:77:ae:97:7c:66:e6:ca:e9:a5:e8:23:9e:04:41: b5:9f:de:e0:4a:cd:46:af:b6:12:56:8b:3b:2a:e8:af:16:f0: d3:d3:45:68:2b:7f:3d:93:3f:6c:3e:4e:82:41:d5:9b:77:36: f0:8f:e6:e6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTVWXXPzTw0uDJ3q+zlXJPEw4YIwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxMzAwMDkyMloX DTI3MDExMTIzNTk1OVowejFJMEcGA1UEBRNAZjk0ZTRiYjkxNDI0YmE0NjYyZDkx YWMwZmEyYjljOWFlMmZhZmJmOWYwY2I1ZWI2NGJiNGVhMjQxODg1YmNhZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIbGDWwU4xsJJIYalnJAKknWew9V Jfn9GB2ZKZ/bsmhCKar1Km2a//LJsYp20fCSfokv5ms7UL6qn7rvp1YwdYC8btfN 2QM+tZkZ7cNYq2WrGFzroYE5bwTKYWY0bggtIq5CRcqJmrpjiRKF9V0SKAOAH80y WeSsBpJY/7uB4IIU1v1aNUaJ1Jjn1nI+Bu6P0+w9c1K3RHdHHd12oZv6hLxwMe6e F0ysXq6DnAz3aHVLYYFrzMCm3BwFtNl8FPIAaOpGduQ3cncYnz0GGMAGv0tcr2Xu bE+oU8A8RKR6GqJKn6uXAa7TnLMVoxdm80JWsMSBXI93axhWpfTDwL1LkwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHzwLsoIAkTBecM4TXYvEy+4c7ajMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3NzJmNDU5LTcyZmUtNGM3ZC04ZjhjLTYxY2NlNWE5NDRjMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9nAAMA0GCSqGSIb3DQEBCwUAA4IBAQA390kM59Re1DAFKyi8 T8feM4SCZn1N+l97p4MvgcuUeDwY6F/1jXxzA1av2geNOkXypMcZkwzrHMJ3OiK9 opDGSPtkVj4OqPorrDf4IEGdXaYVYWJeQD6Rb3H+WtQlv1Hjw21EtZiHu0/E3edU Mn1/WvCTMIB0g+q/Fj7cH1hvs3bxxNuetFXf5hXZfNMt4bMjTD9LzYLPT3FZdmd9 Uc++o48v7jAP6Rldp2QV4xMATw8FHSqJp7+HHt+JiRLEPJpkVHlRYQuY2iTUd66X fGbmyuml6COeBEG1n97gSs1Gr7YSVos7KuivFvDT00VoK389kz9sPk6CQdWbdzbw j+bm -----END CERTIFICATE-----Generated at Thu Nov 5 18:41:14 2026 by rpki-client