$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcb796cd-0001-4f06-a9c5-198757a8dde6.roa File: dcb796cd-0001-4f06-a9c5-198757a8dde6.roa (raw, json) Hash identifier: /LB4dPdRAwc12DLycrdbYcSCj4Z4J+gMW7U1fjZlb/o= Subject key identifier: 97:3C:AE:1E:65:37:9E:C9:34:5A:F7:7F:D4:28:ED:80:81:98:8A:B9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2FC1C7C859E83E6E9FBB85D9CDEADF48B5D40C47 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcb796cd-0001-4f06-a9c5-198757a8dde6.roa Signing time: Tue 20 Oct 2026 00:09:43 +0000 ROA not before: Tue 20 Oct 2026 00:09:43 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c1:c7:c8:59:e8:3e:6e:9f:bb:85:d9:cd:ea:df:48:b5:d4:0c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:09:43 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=bc31871d060faa60c9a7cd18d5efcd69205c16de6cfa4bfae7c68696deca2c7a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:79:83:b5:7c:97:c5:bc:39:df:c6:f1:30:07: ff:9e:0e:b8:1e:1d:9d:e0:f8:02:99:8e:22:99:55: 9f:3f:cc:2e:98:e2:b0:6f:93:18:13:fd:b8:3d:44: a5:96:2c:48:b5:62:9b:02:df:44:64:21:55:f5:55: 87:cf:c3:7e:7b:e3:40:81:9d:e9:73:0e:54:96:d6: db:9c:69:43:c7:0f:b8:b3:9e:15:2b:a9:a7:45:20: 71:cf:0b:f3:65:f4:27:d0:cb:3a:2b:64:97:34:4a: bf:2d:82:eb:a2:0b:3b:1b:78:07:cf:a5:40:c1:63: f6:62:71:ef:d3:e2:00:66:bb:42:ba:a9:ab:39:99: 09:a5:80:fc:aa:21:a4:49:17:44:ea:6e:f5:e1:9d: 3a:28:6b:e5:17:5e:6d:a4:75:6a:3a:83:6b:96:5a: 50:94:3d:a9:56:a1:7b:90:78:36:d7:36:50:ca:1f: a8:82:54:e7:1e:10:9e:48:88:7a:09:3d:c1:a8:0a: af:f5:63:1f:da:07:48:f1:52:b9:84:98:ed:9a:34: b9:43:63:f4:e2:ef:fd:1c:2a:48:b3:61:21:c1:15: 74:65:8e:87:e1:42:c1:15:9c:a5:b8:71:f5:f7:6c: 8c:03:a3:57:21:17:52:00:bb:38:6d:86:4a:0c:3e: b5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3C:AE:1E:65:37:9E:C9:34:5A:F7:7F:D4:28:ED:80:81:98:8A:B9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcb796cd-0001-4f06-a9c5-198757a8dde6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14::/38 Signature Algorithm: sha256WithRSAEncryption 19:4e:1a:18:a5:ae:56:81:86:1a:f2:d7:7e:73:b2:97:6f:57: e4:ab:aa:62:1f:ff:93:6a:c6:18:d0:88:04:9f:63:fa:f0:19: 83:7a:26:8a:35:80:ee:aa:1e:75:27:91:59:21:42:d0:67:f5: 37:c6:a8:a2:a2:ff:f4:bc:48:e9:d4:d7:f8:8b:47:ca:8e:70: bd:2e:0b:18:33:52:08:2c:ca:a9:64:d0:8d:61:a4:ff:3b:99: 5f:d5:d7:e9:8e:b4:2b:ec:b3:25:d9:ca:d8:b4:7f:87:df:ec: 05:d5:fd:9b:98:48:0e:f2:83:32:c4:6d:84:a3:78:d3:12:8a: ae:28:b8:7a:19:16:94:dd:fd:7d:ab:5c:08:47:2f:6c:63:82: fc:e5:c0:50:04:b9:5d:1d:cb:35:f1:c3:a5:eb:e6:9a:10:48: 09:de:fc:f9:7a:be:f7:d3:64:b7:f7:9b:3b:9e:53:3e:a5:88: 6a:f1:1e:2c:be:2a:5d:df:e4:f7:93:22:6c:39:2e:85:50:1f: 84:28:2e:dc:ac:24:48:d0:67:64:19:15:0c:82:fb:c3:4e:eb: 3c:f1:6f:b4:ed:08:6c:57:28:fa:4e:a7:9f:62:71:56:b8:a7: 62:4b:ad:17:c4:d3:3b:23:59:53:17:ae:c8:25:bc:1b:a4:29: 19:1f:48:ba -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUL8HHyFnoPm6fu4XZzerfSLXUDEcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMDk0M1oX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAYmMzMTg3MWQwNjBmYWE2MGM5YTdj ZDE4ZDVlZmNkNjkyMDVjMTZkZTZjZmE0YmZhZTdjNjg2OTZkZWNhMmM3YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHmDtXyXxbw538bxMAf/ng64Hh2d 4PgCmY4imVWfP8wumOKwb5MYE/24PUSllixItWKbAt9EZCFV9VWHz8N+e+NAgZ3p cw5UltbbnGlDxw+4s54VK6mnRSBxzwvzZfQn0Ms6K2SXNEq/LYLrogs7G3gHz6VA wWP2YnHv0+IAZrtCuqmrOZkJpYD8qiGkSRdE6m714Z06KGvlF15tpHVqOoNrllpQ lD2pVqF7kHg21zZQyh+oglTnHhCeSIh6CT3BqAqv9WMf2gdI8VK5hJjtmjS5Q2P0 4u/9HCpIs2EhwRV0ZY6H4ULBFZyluHH192yMA6NXIRdSALs4bYZKDD619QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJc8rh5lN57JNFr3f9Qo7YCBmIq5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjYjc5NmNkLTAwMDEtNGYwNi1hOWM1LTE5ODc1N2E4ZGRlNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFAAwDQYJKoZIhvcNAQELBQADggEBABlOGhilrlaBhhry135z spdvV+SrqmIf/5NqxhjQiASfY/rwGYN6Joo1gO6qHnUnkVkhQtBn9TfGqKKi//S8 SOnU1/iLR8qOcL0uCxgzUggsyqlk0I1hpP87mV/V1+mOtCvssyXZyti0f4ff7AXV /ZuYSA7ygzLEbYSjeNMSiq4ouHoZFpTd/X2rXAhHL2xjgvzlwFAEuV0dyzXxw6Xr 5poQSAne/Pl6vvfTZLf3mzueUz6liGrxHiy+Kl3f5PeTImw5LoVQH4QoLtysJEjQ Z2QZFQyC+8NO6zzxb7TtCGxXKPpOp59icVa4p2JLrRfE0zsjWVMXrsglvBukKRkf SLo= -----END CERTIFICATE-----Generated at Thu Nov 5 04:29:03 2026 by rpki-client