$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d4c35f5a-920e-40b5-a121-af88c146965d.roa File: d4c35f5a-920e-40b5-a121-af88c146965d.roa (raw, json) Hash identifier: IfbXldykmSwY4Q7tikP/mqkfOdvQMTs78dlT6KDfZCg= Subject key identifier: B9:41:7F:19:69:85:D8:8B:CD:5C:5B:AB:1B:AC:8F:41:CC:9D:12:2B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 54B24DC1A6C6BECA02998BA33ADB8B2BD4FC0A46 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d4c35f5a-920e-40b5-a121-af88c146965d.roa Signing time: Wed 09 Sep 2026 15:55:44 +0000 ROA not before: Wed 09 Sep 2026 15:55:44 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da6a:5000::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b2:4d:c1:a6:c6:be:ca:02:99:8b:a3:3a:db:8b:2b:d4:fc:0a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 9 15:55:44 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=4ef73e0d418593681230a965517cc769a557aabe4087765af36a7951d24ddec7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:2a:16:1b:85:cf:19:04:c1:03:af:00:a9: dc:a9:ff:02:c4:6d:2c:a8:b3:e6:03:39:33:77:e6: 42:be:65:d9:f4:c2:f5:dd:d1:32:e0:ae:89:22:75: 66:95:ce:8d:00:75:03:7a:8f:6a:be:dd:a8:ea:83: 78:0a:82:73:dc:31:76:7c:39:2f:d8:ef:63:78:a2: c2:13:28:02:55:ed:49:a4:af:8a:29:bf:72:de:84: ed:f0:b4:e3:b7:1c:b9:53:35:1e:30:7f:02:03:8f: 28:21:61:74:4a:1c:63:1e:68:c3:a0:1b:6d:6c:f2: 6d:56:61:ed:df:20:87:63:87:c3:74:11:3c:c2:d1: 44:19:fa:0d:2b:19:ca:98:aa:f8:89:5c:43:a9:91: 79:7c:2a:dd:1b:a9:60:02:5d:8f:99:29:d9:c9:86: db:ef:bb:c2:f4:c4:17:99:67:f3:b1:95:5d:5e:40: 16:dc:46:95:c3:4f:54:50:f6:12:5c:d0:de:70:91: 55:b0:0b:56:ae:01:9c:d1:72:32:6e:d5:31:0b:2e: 17:4a:ee:28:f0:c6:5d:c2:80:24:32:6b:33:f7:99: e9:66:bd:58:da:8a:d8:60:5d:d2:ea:6d:5c:63:c8: 62:d1:50:ea:64:dd:5a:99:60:5d:c0:d1:19:82:ca: 0e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:41:7F:19:69:85:D8:8B:CD:5C:5B:AB:1B:AC:8F:41:CC:9D:12:2B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d4c35f5a-920e-40b5-a121-af88c146965d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da6a:5000::/46 Signature Algorithm: sha256WithRSAEncryption 1d:12:d1:31:fd:fc:6c:2b:a4:8b:b2:49:f1:ae:00:32:a2:66: b7:3a:aa:e8:f4:af:87:ea:33:bd:9e:78:b2:48:c4:ff:d1:6d: 3e:28:21:59:20:95:03:ce:f5:21:32:b7:78:e9:a7:75:31:99: d1:0d:8c:60:59:7f:d7:0e:04:63:80:8d:2e:0a:ac:75:1b:f8: 10:cd:62:c9:06:b5:0a:e4:1d:51:75:d5:c1:c3:46:49:59:3e: 73:8b:bb:5b:7d:90:de:a6:97:8d:eb:03:23:1b:9a:75:8c:73: bc:3f:51:3a:36:31:0a:89:c3:e4:c3:d6:85:99:91:58:e6:ee: 07:9f:ff:65:5d:79:da:ed:4f:6e:98:3f:a1:2b:5b:b2:61:b3: a9:a1:fe:9f:68:4d:88:49:51:d3:aa:8f:56:da:7b:12:c8:9b: 6f:84:32:74:a4:e2:d7:eb:63:e1:33:c8:96:05:a5:a9:db:91: ff:be:e1:32:e1:bb:30:c4:0c:74:ca:4b:39:7f:01:f2:7f:5f: 85:89:94:59:81:2b:8d:46:bc:4e:b0:83:7d:6a:34:62:9c:a0: 7a:fc:7f:11:75:a9:f5:17:f7:af:6b:55:66:82:68:f2:11:ed: c8:a3:14:7b:87:09:0d:94:0f:20:af:2f:6a:db:31:b7:e2:3a: 54:e4:39:c5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVLJNwabGvsoCmYujOtuLK9T8CkYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkwOTE1NTU0NFoX DTI2MTIwODIzNTk1OVowejFJMEcGA1UEBRNANGVmNzNlMGQ0MTg1OTM2ODEyMzBh OTY1NTE3Y2M3NjlhNTU3YWFiZTQwODc3NjVhZjM2YTc5NTFkMjRkZGVjNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmQqFhuFzxkEwQOvAKncqf8CxG0s qLPmAzkzd+ZCvmXZ9ML13dEy4K6JInVmlc6NAHUDeo9qvt2o6oN4CoJz3DF2fDkv 2O9jeKLCEygCVe1JpK+KKb9y3oTt8LTjtxy5UzUeMH8CA48oIWF0ShxjHmjDoBtt bPJtVmHt3yCHY4fDdBE8wtFEGfoNKxnKmKr4iVxDqZF5fCrdG6lgAl2PmSnZyYbb 77vC9MQXmWfzsZVdXkAW3EaVw09UUPYSXNDecJFVsAtWrgGc0XIybtUxCy4XSu4o 8MZdwoAkMmsz95npZr1Y2orYYF3S6m1cY8hi0VDqZN1amWBdwNEZgsoOxQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLlBfxlphdiLzVxbqxusj0HMnRIrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q0YzM1ZjVhLTkyMGUtNDBiNS1hMTIxLWFmODhjMTQ2OTY1ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaalAAMA0GCSqGSIb3DQEBCwUAA4IBAQAdEtEx/fxsK6SLsknx rgAyoma3Oqro9K+H6jO9nniySMT/0W0+KCFZIJUDzvUhMrd46ad1MZnRDYxgWX/X DgRjgI0uCqx1G/gQzWLJBrUK5B1RddXBw0ZJWT5zi7tbfZDeppeN6wMjG5p1jHO8 P1E6NjEKicPkw9aFmZFY5u4Hn/9lXXna7U9umD+hK1uyYbOpof6faE2ISVHTqo9W 2nsSyJtvhDJ0pOLX62PhM8iWBaWp25H/vuEy4bswxAx0yks5fwHyf1+FiZRZgSuN RrxOsIN9ajRinKB6/H8Rdan1F/eva1VmgmjyEe3IoxR7hwkNlA8gry9q2zG34jpU 5DnF -----END CERTIFICATE-----Generated at Sun Sep 20 16:36:51 2026 by rpki-client