$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa File: b9e1c759-db10-4a48-b586-da1f1ff39287.roa (raw, json) Hash identifier: YoeNzV2oS32mmqxnPugptb1A+idIinCwRpBSyUu4Ojs= Subject key identifier: 73:61:81:79:23:30:F5:D2:61:B3:B5:69:04:62:9A:BC:9A:47:D0:89 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0D00D43BF69EAE43152407E8D0C264D8DAF62DC8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa Signing time: Sat 24 Oct 2026 00:03:02 +0000 ROA not before: Sat 24 Oct 2026 00:03:02 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Nov 2026 00:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:00:d4:3b:f6:9e:ae:43:15:24:07:e8:d0:c2:64:d8:da:f6:2d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 24 00:03:02 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=2f6647b53c1b67f768a3562e5cc172c4de34c11012d01240e509f2a818214436, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:14:9c:23:72:76:fe:50:bd:a4:d1:a5:b2: e7:1f:5d:4b:96:95:b0:94:e2:bb:1b:a8:c0:27:76: ba:52:6f:9b:96:b1:29:b0:8b:f4:e8:30:3b:6c:73: 1d:ef:de:c1:2b:a5:64:7f:1c:06:50:29:13:4d:d7: 9d:20:47:77:3e:d2:b7:a4:ec:c5:82:a1:b7:d2:93: 81:2e:43:35:80:20:f6:e2:a7:92:24:92:7f:f9:36: 05:39:fb:6c:c2:e1:ec:be:cc:df:29:61:44:04:17: 06:a5:c0:e1:af:2b:e2:70:6b:12:4a:c8:c8:92:c9: dc:4f:47:41:66:61:a8:f3:05:51:91:05:0a:86:21: 8a:bb:24:c9:10:e2:e2:1a:49:ae:40:3a:c7:ce:f5: b1:50:62:ff:99:69:6e:e9:ae:c4:f5:c9:ac:85:cb: 82:7c:c8:81:03:fc:e8:8a:71:3a:87:17:83:39:7d: 19:6c:9a:c0:43:ec:a8:10:cb:4b:b1:b6:d3:af:ee: 3b:cf:aa:42:2e:04:e3:49:28:f5:2b:66:0a:6f:be: 1b:00:28:1f:00:9b:ed:69:ad:fc:21:81:72:9d:fe: 0c:15:82:08:23:f9:be:cf:b6:1f:6d:8a:9e:b5:4f: 42:cb:09:27:ea:6d:29:8e:2e:e8:23:17:1b:49:54: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:61:81:79:23:30:F5:D2:61:B3:B5:69:04:62:9A:BC:9A:47:D0:89 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:9000::/40 Signature Algorithm: sha256WithRSAEncryption c1:2c:ff:1e:4f:74:a8:d8:f4:19:50:16:a5:53:47:0f:b3:5d: 00:a5:59:db:12:70:fd:fc:81:bc:e0:90:18:c9:13:3a:42:7d: 49:51:c0:38:d0:f4:9e:58:f9:e4:d3:0f:4f:e4:37:b2:62:b4: 49:fc:90:d3:68:8e:ce:29:15:40:5b:3f:6f:30:28:06:50:22: 42:fe:bf:6c:6c:bd:2e:d5:fb:fb:fd:95:ce:5d:cf:25:e5:84: 97:a2:f3:1e:73:33:22:cd:50:59:16:3b:eb:21:7c:ff:39:fb: f9:45:58:2e:99:ec:14:cb:4f:c5:3c:b8:79:95:d0:70:b3:1c: de:63:f3:f1:db:3e:36:c9:92:45:e3:0f:87:cf:f5:b0:64:0a: f7:ab:b1:ab:96:e5:81:f3:0f:64:99:72:4f:d9:5d:7c:10:94: 3f:55:6a:9b:c0:9d:84:7d:e6:c7:d0:65:1b:ac:d1:70:5b:df: 9b:bd:9f:0e:15:68:9d:60:9b:e6:15:5c:f2:26:d8:e1:5d:53: 0b:6e:b3:f5:bf:8e:85:1c:0f:0e:07:6c:9d:a6:5f:1f:b0:47: 2d:74:3d:8f:51:a4:99:ad:b2:8a:36:2a:3f:0b:26:49:72:a5: 0f:3c:f4:80:80:12:13:c3:f0:46:5e:5a:73:7a:09:74:26:71: 7a:29:17:d2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDQDUO/aerkMVJAfo0MJk2Nr2LcgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyNDAwMDMwMloX DTI3MDEyMjIzNTk1OVowejFJMEcGA1UEBRNAMmY2NjQ3YjUzYzFiNjdmNzY4YTM1 NjJlNWNjMTcyYzRkZTM0YzExMDEyZDAxMjQwZTUwOWYyYTgxODIxNDQzNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEsUnCNydv5QvaTRpbLnH11LlpWw lOK7G6jAJ3a6Um+blrEpsIv06DA7bHMd797BK6VkfxwGUCkTTdedIEd3PtK3pOzF gqG30pOBLkM1gCD24qeSJJJ/+TYFOftswuHsvszfKWFEBBcGpcDhryvicGsSSsjI ksncT0dBZmGo8wVRkQUKhiGKuyTJEOLiGkmuQDrHzvWxUGL/mWlu6a7E9cmshcuC fMiBA/zoinE6hxeDOX0ZbJrAQ+yoEMtLsbbTr+47z6pCLgTjSSj1K2YKb74bACgf AJvtaa38IYFynf4MFYIII/m+z7YfbYqetU9Cywkn6m0pji7oIxcbSVTwrwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHNhgXkjMPXSYbO1aQRimryaR9CJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I5ZTFjNzU5LWRiMTAtNGE0OC1iNTg2LWRhMWYxZmYzOTI4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7ZAwDQYJKoZIhvcNAQELBQADggEBAMEs/x5PdKjY9BlQFqVT Rw+zXQClWdsScP38gbzgkBjJEzpCfUlRwDjQ9J5Y+eTTD0/kN7JitEn8kNNojs4p FUBbP28wKAZQIkL+v2xsvS7V+/v9lc5dzyXlhJei8x5zMyLNUFkWO+shfP85+/lF WC6Z7BTLT8U8uHmV0HCzHN5j8/HbPjbJkkXjD4fP9bBkCversauW5YHzD2SZck/Z XXwQlD9VapvAnYR95sfQZRus0XBb35u9nw4VaJ1gm+YVXPIm2OFdUwtus/W/joUc Dw4HbJ2mXx+wRy10PY9RpJmtsoo2Kj8LJklypQ889ICAEhPD8EZeWnN6CXQmcXop F9I= -----END CERTIFICATE-----Generated at Mon Nov 9 08:22:45 2026 by rpki-client