$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6d439a9-d0b0-44a2-b326-95d1592e6156.roa File: d6d439a9-d0b0-44a2-b326-95d1592e6156.roa (raw, json) Hash identifier: xrxuo+lPu/yUONIhmSlbFDnV7SyMnFPZ7OUC/ykY/AQ= Subject key identifier: 7C:28:E7:80:0D:7A:6F:4B:CD:07:62:65:91:6B:BB:FB:DE:0C:98:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3035D3C7691485BFF0B09494A7681C47DE3C6F32 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6d439a9-d0b0-44a2-b326-95d1592e6156.roa Signing time: Tue 13 Oct 2026 00:09:00 +0000 ROA not before: Tue 13 Oct 2026 00:09:00 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:35:d3:c7:69:14:85:bf:f0:b0:94:94:a7:68:1c:47:de:3c:6f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 00:09:00 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=798752c3a89886a8136e017a7a3150c59cffda9e52c8070fbb16e52b24409462, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:3d:c1:23:5b:a5:aa:94:25:6c:0a:e3:3a: 0c:60:47:ec:c2:c9:c1:4b:bd:1b:8f:5b:b2:2a:3c: f8:8a:a5:f4:a5:6b:65:5a:28:c4:40:b8:92:81:f5: 4f:6f:c8:0c:b6:f7:e8:5e:cd:a9:9e:3e:4c:b9:38: 76:bc:1d:50:1c:4a:82:c5:29:57:06:26:43:4f:53: 33:96:ef:c1:40:c2:c0:17:7a:7b:61:ea:c6:1b:8c: af:63:de:d9:28:92:ca:a2:f1:c9:ed:da:af:5b:04: a1:03:9a:b1:32:f5:ee:29:5b:74:97:0f:c7:37:75: 0c:db:a4:7b:a3:c0:63:65:9b:ad:12:a0:38:d5:5d: fd:d7:79:2f:f8:c9:18:4b:b8:93:00:92:ad:bf:a5: 35:85:9e:82:7b:8b:5a:fb:56:7c:cf:65:dc:0c:58: f6:e6:15:a8:a6:35:1e:7b:b2:27:f8:76:19:20:34: 7c:3c:c0:ff:06:c5:8b:f6:37:d4:d6:ab:6b:4f:73: 11:59:cf:95:19:ef:07:1e:47:0f:a4:62:82:dc:cb: 6a:cb:f5:0a:db:01:82:52:31:4d:71:bc:86:9a:ab: 08:2e:5d:ec:f2:c0:94:c0:52:7e:bb:e9:d3:78:fe: 17:ac:93:66:e2:4a:c2:f6:47:2e:a9:a0:cf:f1:4e: 90:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:28:E7:80:0D:7A:6F:4B:CD:07:62:65:91:6B:BB:FB:DE:0C:98:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6d439a9-d0b0-44a2-b326-95d1592e6156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:e000::/40 Signature Algorithm: sha256WithRSAEncryption 37:39:5d:08:e4:00:c8:71:b8:d8:3d:26:d9:5a:4c:ea:f8:3f: e2:44:59:fb:b8:28:77:ff:5d:ec:a8:eb:cd:f9:88:ad:9d:27: b5:d0:ce:6c:57:e7:c7:65:34:2c:73:0b:20:0d:b6:18:3d:83: dd:6e:e8:a0:8d:1b:48:7e:8d:d2:7d:28:21:4c:95:51:53:c7: c4:20:71:c1:23:2a:9e:3d:2d:f3:8c:74:d8:bc:63:5e:5b:f3: 45:8e:a5:23:fc:57:2f:00:6c:3f:1e:e7:cf:77:ef:67:b7:80: eb:e3:ef:4a:4d:96:0d:7b:c0:22:2a:0b:1c:47:e0:b7:af:84: a6:ff:05:55:44:ce:c2:e4:08:0c:62:6f:46:0d:8b:d2:98:99: 05:1a:1f:b7:fe:7e:c6:e4:9e:e6:a9:c2:03:79:91:0e:b5:2a: b7:83:64:a6:19:52:a0:8b:51:b7:16:a8:ca:a8:76:fb:14:81: 6d:2c:27:e4:6f:31:68:1c:67:44:6f:0c:3c:b2:a3:6b:09:bf: e0:2d:00:cc:3d:80:0b:f8:0c:75:d1:0b:30:8e:cd:70:1e:54: 51:9e:82:dc:d5:0f:bb:ff:8f:ae:9c:c6:70:2f:7d:61:6d:9b: 5f:08:98:f6:5a:cb:f1:ba:bb:8f:40:5b:52:1d:54:df:22:c8: d7:32:3c:b9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMDXTx2kUhb/wsJSUp2gcR948bzIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxMzAwMDkwMFoX DTI3MDExMTIzNTk1OVowejFJMEcGA1UEBRNANzk4NzUyYzNhODk4ODZhODEzNmUw MTdhN2EzMTUwYzU5Y2ZmZGE5ZTUyYzgwNzBmYmIxNmU1MmIyNDQwOTQ2MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk89wSNbpaqUJWwK4zoMYEfswsnB S70bj1uyKjz4iqX0pWtlWijEQLiSgfVPb8gMtvfoXs2pnj5MuTh2vB1QHEqCxSlX BiZDT1Mzlu/BQMLAF3p7YerGG4yvY97ZKJLKovHJ7dqvWwShA5qxMvXuKVt0lw/H N3UM26R7o8BjZZutEqA41V3913kv+MkYS7iTAJKtv6U1hZ6Ce4ta+1Z8z2XcDFj2 5hWopjUee7In+HYZIDR8PMD/BsWL9jfU1qtrT3MRWc+VGe8HHkcPpGKC3Mtqy/UK 2wGCUjFNcbyGmqsILl3s8sCUwFJ+u+nTeP4XrJNm4krC9kcuqaDP8U6QzQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHwo54ANem9LzQdiZZFru/veDJhEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q2ZDQzOWE5LWQwYjAtNDRhMi1iMzI2LTk1ZDE1OTJlNjE1Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYOAwDQYJKoZIhvcNAQELBQADggEBADc5XQjkAMhxuNg9Jtla TOr4P+JEWfu4KHf/Xeyo6835iK2dJ7XQzmxX58dlNCxzCyANthg9g91u6KCNG0h+ jdJ9KCFMlVFTx8QgccEjKp49LfOMdNi8Y15b80WOpSP8Vy8AbD8e589372e3gOvj 70pNlg17wCIqCxxH4LevhKb/BVVEzsLkCAxib0YNi9KYmQUaH7f+fsbknuapwgN5 kQ61KreDZKYZUqCLUbcWqMqodvsUgW0sJ+RvMWgcZ0RvDDyyo2sJv+AtAMw9gAv4 DHXRCzCOzXAeVFGegtzVD7v/j66cxnAvfWFtm18ImPZay/G6u49AW1IdVN8iyNcy PLk= -----END CERTIFICATE-----Generated at Thu Nov 5 19:24:18 2026 by rpki-client