$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1bb658d-621e-4348-96fa-5f81f0d9578b.roa File: c1bb658d-621e-4348-96fa-5f81f0d9578b.roa (raw, json) Hash identifier: 8ehKsOcwxXOXk5A7sbAoCDfWHc1TjU/MlXwuEEHvMU0= Subject key identifier: 61:24:48:93:20:F0:41:32:71:CB:F6:BF:4E:08:71:5E:BC:26:16:89 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1B39F681F8255E0B248F54236BDE56593969E422 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1bb658d-621e-4348-96fa-5f81f0d9578b.roa Signing time: Sun 18 Oct 2026 00:08:58 +0000 ROA not before: Sun 18 Oct 2026 00:08:58 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:39:f6:81:f8:25:5e:0b:24:8f:54:23:6b:de:56:59:39:69:e4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:08:58 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=53834251799433fbed87863cb135e82defcc3755b1b40760592b5cc13fb43b71, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:25:d3:d1:c9:0d:a0:15:fc:e2:eb:2b:03: 32:8b:e1:4c:fe:12:3a:70:55:ce:8a:0f:99:be:d2: 74:42:03:d2:b8:79:ec:cb:39:39:64:8d:52:45:26: 73:16:c6:ec:85:f1:cf:5b:5b:53:fa:2f:c2:5b:e4: 3b:4d:7c:d2:d5:b2:1b:47:02:bd:be:97:19:c7:a4: 71:f9:5f:ff:e5:be:6a:57:d8:1a:4b:f5:6e:99:4c: 7c:ed:47:52:9b:5e:1f:86:93:34:25:14:5b:95:8d: c1:57:c2:39:94:5d:2a:0c:be:26:5c:a2:dd:a9:48: 5b:96:c9:cb:f6:a2:61:e7:49:5c:26:1f:82:88:41: c8:20:4e:0b:d1:3d:9f:b5:e7:8b:f0:22:bd:40:df: 91:cf:84:ff:bd:49:3a:e5:a4:24:a0:30:0d:91:d5: 0f:08:54:ee:d6:01:2c:e9:31:49:f7:10:cc:7b:cb: c4:ec:3d:ae:46:82:d6:a6:6d:a9:bb:08:7b:35:d7: 6f:0d:c7:94:c7:5d:0e:67:05:84:c8:a1:6f:b2:d5: 7e:fd:7d:6b:97:11:b0:94:bb:7f:b0:62:fa:a0:de: bd:36:76:6a:b8:49:e2:1f:74:52:9b:80:57:ba:15: d0:c7:cd:70:5c:f5:0d:61:59:04:95:ae:32:b7:23: 19:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:24:48:93:20:F0:41:32:71:CB:F6:BF:4E:08:71:5E:BC:26:16:89 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1bb658d-621e-4348-96fa-5f81f0d9578b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 8d:5c:05:25:31:a3:a5:fa:e8:d4:d0:19:2a:2c:f3:93:27:23: c3:b0:ec:bc:c4:9e:1a:b2:44:8b:5a:e5:44:8f:a6:ef:27:3e: 8a:53:06:1f:a7:2e:63:1a:f3:11:19:d2:bc:48:06:d5:6f:bb: 20:57:84:52:44:eb:86:65:92:9c:8a:6e:a6:77:d8:94:cb:a2: a0:06:9d:79:69:a3:65:56:12:6d:4f:87:b4:05:fe:83:5d:6f: 35:9c:71:bd:a0:0f:6c:f5:74:cd:d3:7c:a9:a7:6f:2f:c2:6c: 58:5d:8b:ed:57:23:94:0d:c0:c8:5f:90:4e:fa:b2:8e:b7:14: e1:b9:a4:e3:f5:14:cc:5a:58:79:be:e4:02:09:16:9e:b9:4c: 35:fe:f1:a5:cd:ec:a6:1a:b0:48:43:64:14:05:54:49:cd:81: bb:bc:07:b9:48:f1:d3:2f:1d:6c:ce:ed:5b:a3:ce:95:b3:41: 0e:df:f0:28:d0:41:79:33:78:d4:35:18:14:1a:10:01:b1:8d: 6e:84:12:6c:7e:85:22:bc:b6:1a:6b:6e:66:2a:ad:b0:c8:6e: 8e:ca:29:e8:79:b1:ab:25:20:d5:a9:ae:46:fd:87:8b:60:7f: ea:70:32:c6:97:1b:1f:3b:fd:24:83:d2:04:25:d7:f8:00:4b: a0:15:29:17 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGzn2gfglXgskj1Qja95WWTlp5CIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMDg1OFoX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNANTM4MzQyNTE3OTk0MzNmYmVkODc4 NjNjYjEzNWU4MmRlZmNjMzc1NWIxYjQwNzYwNTkyYjVjYzEzZmI0M2I3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpEl09HJDaAV/OLrKwMyi+FM/hI6 cFXOig+ZvtJ0QgPSuHnsyzk5ZI1SRSZzFsbshfHPW1tT+i/CW+Q7TXzS1bIbRwK9 vpcZx6Rx+V//5b5qV9gaS/VumUx87UdSm14fhpM0JRRblY3BV8I5lF0qDL4mXKLd qUhblsnL9qJh50lcJh+CiEHIIE4L0T2fteeL8CK9QN+Rz4T/vUk65aQkoDANkdUP CFTu1gEs6TFJ9xDMe8vE7D2uRoLWpm2puwh7NddvDceUx10OZwWEyKFvstV+/X1r lxGwlLt/sGL6oN69NnZquEniH3RSm4BXuhXQx81wXPUNYVkEla4ytyMZ/wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGEkSJMg8EEyccv2v04IcV68JhaJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MxYmI2NThkLTYyMWUtNDM0OC05NmZhLTVmODFmMGQ5NTc4Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8kjAMA0GCSqGSIb3DQEBCwUAA4IBAQCNXAUlMaOl+ujU0Bkq LPOTJyPDsOy8xJ4askSLWuVEj6bvJz6KUwYfpy5jGvMRGdK8SAbVb7sgV4RSROuG ZZKcim6md9iUy6KgBp15aaNlVhJtT4e0Bf6DXW81nHG9oA9s9XTN03ypp28vwmxY XYvtVyOUDcDIX5BO+rKOtxThuaTj9RTMWlh5vuQCCRaeuUw1/vGlzeymGrBIQ2QU BVRJzYG7vAe5SPHTLx1szu1bo86Vs0EO3/Ao0EF5M3jUNRgUGhABsY1uhBJsfoUi vLYaa25mKq2wyG6OyinoebGrJSDVqa5G/YeLYH/qcDLGlxsfO/0kg9IEJdf4AEug FSkX -----END CERTIFICATE-----Generated at Thu Nov 5 04:29:09 2026 by rpki-client