$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db220e13-41f0-424d-8455-0c7d6c90010a.roa File: db220e13-41f0-424d-8455-0c7d6c90010a.roa (raw, json) Hash identifier: qrrVzPDeDsukIQ+j9jmkfDHn80ADqw51+Qmw7Uw60K8= Subject key identifier: 11:4A:8F:41:78:C8:D9:97:89:01:35:05:25:20:1A:40:41:42:AF:FB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3D5D636E96F9993674BF13D7AE8AD6033B1A9719 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db220e13-41f0-424d-8455-0c7d6c90010a.roa Signing time: Fri 06 Nov 2026 00:02:09 +0000 ROA not before: Fri 06 Nov 2026 00:02:09 +0000 ROA not after: Thu 04 Feb 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da33:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Nov 2026 00:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:5d:63:6e:96:f9:99:36:74:bf:13:d7:ae:8a:d6:03:3b:1a:97:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 6 00:02:09 2026 GMT Not After : Feb 4 23:59:59 2027 GMT Subject: serialNumber=d5cbf5924b1e1f0b01ba7996bc8fc6760faff7d29206b4b027708d9fcf0faa76, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:ba:d8:a1:74:ab:13:bb:dc:d3:22:58:e6: ee:eb:85:0f:61:97:07:bf:94:cf:13:2a:60:39:be: 4e:b7:97:1d:08:13:28:4b:5f:93:f6:a5:09:12:97: ad:37:9d:fd:74:93:d2:6b:5d:0f:60:fd:66:2e:10: ef:f9:72:23:27:08:65:6a:1b:86:8a:fd:2e:16:1f: 8e:08:bc:92:b7:21:ff:59:41:01:a6:b6:17:b4:dc: 63:08:f4:fe:0b:61:b6:07:29:88:2f:3f:0e:2a:f5: 5c:e8:dc:97:7c:67:d5:89:e8:e5:a1:17:df:9f:ae: fe:43:aa:7a:dc:07:7f:af:13:c0:bd:33:32:87:5b: 19:7e:ce:fc:b3:1d:e5:fe:93:09:16:7e:35:ac:97: c1:ef:b8:37:b8:fa:e2:10:42:3f:9c:cc:82:33:17: 47:94:9e:5a:6b:e2:0a:e3:ca:39:5e:1f:24:8a:e9: 95:59:d6:43:3d:e4:48:eb:37:b2:69:b4:fe:d1:f2: b3:9e:1f:ca:21:d0:cf:42:d8:00:a6:99:63:ca:91: 6a:69:f3:28:c7:6a:b1:64:1e:ec:8f:b7:c0:80:a3: da:db:e7:d5:ee:61:47:e4:8e:63:a2:c2:7e:81:5b: 04:2b:a1:9e:6d:3c:bd:af:ee:19:ad:63:43:d8:98: e6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4A:8F:41:78:C8:D9:97:89:01:35:05:25:20:1A:40:41:42:AF:FB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db220e13-41f0-424d-8455-0c7d6c90010a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:e000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:4a:48:f6:15:b2:f5:8a:bf:88:82:a3:f2:4f:a5:a9:ed:7b: d1:53:c2:bc:36:ca:2e:09:bd:5c:39:1c:c6:df:d1:47:d1:1e: d9:e7:df:ce:6d:c7:2c:62:7b:72:a9:56:3b:3c:9f:5c:84:2b: 74:e6:7d:13:c3:2a:b9:75:f1:ae:e9:4f:77:8f:be:e6:2a:fc: fb:dd:be:60:86:d6:32:96:46:78:82:ba:c2:1c:71:b9:23:35: b2:60:60:71:3d:fc:98:61:78:43:d1:6a:a7:b7:96:6f:71:fd: 6d:79:96:ad:00:1f:d6:aa:4a:5d:77:4b:83:44:59:82:07:16: ac:e7:43:b8:e2:f4:bc:af:52:8d:4c:0a:23:b0:e4:0c:45:96: 65:e4:00:4d:48:2a:61:53:20:09:a1:e5:5e:47:07:c8:5b:fd: 2f:63:96:2f:31:2d:04:30:b5:98:5d:92:b2:e4:77:29:bb:41: 9e:c2:0e:89:f2:20:29:3d:ee:ba:a0:f9:95:98:1c:1d:37:f6: ff:fe:ae:44:fe:af:6f:70:13:88:d0:b8:16:5b:90:3f:5f:33: 34:74:da:51:2d:0e:7e:d7:9f:2f:44:03:a7:b0:5b:20:74:47: a3:ff:cb:cc:70:bd:50:14:fc:d0:02:e8:aa:8f:7c:a9:2f:6a: cb:c9:76:04 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPV1jbpb5mTZ0vxPXrorWAzsalxkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTEwNjAwMDIwOVoX DTI3MDIwNDIzNTk1OVowejFJMEcGA1UEBRNAZDVjYmY1OTI0YjFlMWYwYjAxYmE3 OTk2YmM4ZmM2NzYwZmFmZjdkMjkyMDZiNGIwMjc3MDhkOWZjZjBmYWE3NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7W62KF0qxO73NMiWObu64UPYZcH v5TPEypgOb5Ot5cdCBMoS1+T9qUJEpetN539dJPSa10PYP1mLhDv+XIjJwhlahuG iv0uFh+OCLyStyH/WUEBprYXtNxjCPT+C2G2BymILz8OKvVc6NyXfGfViejloRff n67+Q6p63Ad/rxPAvTMyh1sZfs78sx3l/pMJFn41rJfB77g3uPriEEI/nMyCMxdH lJ5aa+IK48o5Xh8kiumVWdZDPeRI6zeyabT+0fKznh/KIdDPQtgAppljypFqafMo x2qxZB7sj7fAgKPa2+fV7mFH5I5josJ+gVsEK6GebTy9r+4ZrWND2Jjm/QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBFKj0F4yNmXiQE1BSUgGkBBQq/7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RiMjIwZTEzLTQxZjAtNDI0ZC04NDU1LTBjN2Q2YzkwMDEwYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaM+AwDQYJKoZIhvcNAQELBQADggEBABtKSPYVsvWKv4iCo/JP pante9FTwrw2yi4JvVw5HMbf0UfRHtnn385txyxie3KpVjs8n1yEK3TmfRPDKrl1 8a7pT3ePvuYq/PvdvmCG1jKWRniCusIccbkjNbJgYHE9/JhheEPRaqe3lm9x/W15 lq0AH9aqSl13S4NEWYIHFqznQ7ji9LyvUo1MCiOw5AxFlmXkAE1IKmFTIAmh5V5H B8hb/S9jli8xLQQwtZhdkrLkdym7QZ7CDonyICk97rqg+ZWYHB039v/+rkT+r29w E4jQuBZbkD9fMzR02lEtDn7Xny9EA6ewWyB0R6P/y8xwvVAU/NAC6KqPfKkvasvJ dgQ= -----END CERTIFICATE-----Generated at Tue Nov 10 08:29:02 2026 by rpki-client