$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e32899b9-14c3-4649-a1dc-82fec0214193.roa File: e32899b9-14c3-4649-a1dc-82fec0214193.roa (raw, json) Hash identifier: 6bUnhwwAYWN57QU4OUIxe0+7X1anwn/tMHxqetzpq6I= Subject key identifier: 5B:3E:17:40:25:DE:CF:92:5E:C0:73:49:E0:62:E1:5A:9C:BF:E7:EC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0C2F5520DA259B1E7942863D05DBAE8834A44D38 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e32899b9-14c3-4649-a1dc-82fec0214193.roa Signing time: Fri 16 Oct 2026 00:08:27 +0000 ROA not before: Fri 16 Oct 2026 00:08:27 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2f:55:20:da:25:9b:1e:79:42:86:3d:05:db:ae:88:34:a4:4d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 16 00:08:27 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=01c2d49126c6a5f1fb908525ea6a68bab03dec8ea9633060a06cec73a586e0a1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:7f:2e:22:c0:e8:22:ae:b3:3b:3b:83:39: da:49:4c:31:01:0e:fc:ac:fb:35:6e:e7:df:c2:db: a2:94:a6:8b:5b:fd:8d:f9:d3:1c:8b:50:18:93:ae: 77:0d:ea:3c:bf:61:06:f4:48:77:13:bb:8b:f2:1f: 4e:b1:29:9e:c4:c5:6d:28:63:04:27:3a:cc:df:b2: 5f:b4:24:d3:7e:a9:31:da:58:38:c1:87:1c:ba:2a: 03:88:55:fd:7a:19:76:24:77:4f:37:42:69:cb:25: ce:16:99:e7:4c:5f:cb:9e:e8:ea:85:33:1e:f9:18: 78:9e:3f:87:15:c8:db:d6:87:ee:93:d1:78:2c:d2: bc:40:e1:10:8f:5c:5a:7c:ee:a2:13:ad:d5:0a:dc: 5c:a9:a3:1f:c0:0c:59:54:1d:11:35:46:06:d5:a1: 28:a9:85:8f:69:08:e9:4c:cf:92:ee:8d:cd:49:a7: 93:ba:48:42:18:32:b1:82:95:8d:f3:a0:f0:fd:dd: 79:b1:19:4a:e3:99:ed:d4:3d:0b:40:b7:5f:b7:ed: a3:02:02:a7:20:24:3a:10:88:e5:99:50:a7:bf:89: ad:ff:58:4b:da:c8:93:9b:99:16:c7:72:81:39:be: 6d:22:7d:dd:06:7e:01:cc:5b:4e:1f:cb:58:42:c9: 29:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3E:17:40:25:DE:CF:92:5E:C0:73:49:E0:62:E1:5A:9C:BF:E7:EC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e32899b9-14c3-4649-a1dc-82fec0214193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:e080::/48 Signature Algorithm: sha256WithRSAEncryption 42:35:88:35:11:77:cb:85:0e:02:94:fd:61:ed:3b:35:c1:e3: 66:32:30:2c:07:fa:f7:a9:2b:5b:e3:22:00:39:9b:f4:bd:a3: 40:89:cb:e3:1e:88:17:77:9c:a3:73:af:e8:24:03:1f:de:06: e6:9a:53:4b:3d:aa:22:a8:48:96:dc:9f:ff:4a:06:d6:e4:9d: 58:67:78:38:ab:8a:a3:d6:c2:50:0f:05:58:5d:c7:60:ea:97: 07:52:5d:1d:76:93:41:e3:3a:f2:2e:90:d5:e1:e9:0a:a5:49: 88:7a:1d:be:d2:eb:23:74:36:9f:4c:4c:90:90:6f:c2:1d:4c: 97:41:e8:20:c7:f2:f2:50:13:81:1e:86:00:06:01:60:b1:a0: 8a:87:d7:97:d7:a2:a0:f3:2c:07:3c:92:62:0d:a4:ef:ea:77: b7:e6:0e:92:da:b2:55:63:6f:1f:e0:50:a3:2a:41:4b:aa:53: 75:1b:49:d6:bd:77:1b:11:40:33:04:11:58:fb:54:4f:46:25: 3e:de:ca:61:12:61:11:89:d0:96:1c:95:00:dd:ee:c0:41:09: 59:4c:4d:6e:64:6f:d7:e6:16:5a:c3:4f:3b:9e:71:25:c0:bb: c5:f1:75:84:14:78:7f:5f:93:dd:f4:bd:ea:42:c2:54:b7:1d: 3a:b6:bb:ac -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDC9VINolmx55QoY9BduuiDSkTTgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxNjAwMDgyN1oX DTI3MDExNDIzNTk1OVowejFJMEcGA1UEBRNAMDFjMmQ0OTEyNmM2YTVmMWZiOTA4 NTI1ZWE2YTY4YmFiMDNkZWM4ZWE5NjMzMDYwYTA2Y2VjNzNhNTg2ZTBhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq71/LiLA6CKuszs7gznaSUwxAQ78 rPs1buffwtuilKaLW/2N+dMci1AYk653Deo8v2EG9Eh3E7uL8h9OsSmexMVtKGME JzrM37JftCTTfqkx2lg4wYccuioDiFX9ehl2JHdPN0JpyyXOFpnnTF/LnujqhTMe +Rh4nj+HFcjb1ofuk9F4LNK8QOEQj1xafO6iE63VCtxcqaMfwAxZVB0RNUYG1aEo qYWPaQjpTM+S7o3NSaeTukhCGDKxgpWN86Dw/d15sRlK45nt1D0LQLdft+2jAgKn ICQ6EIjlmVCnv4mt/1hL2siTm5kWx3KBOb5tIn3dBn4BzFtOH8tYQskpGwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFs+F0Al3s+SXsBzSeBi4Vqcv+fsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzMjg5OWI5LTE0YzMtNDY0OS1hMWRjLTgyZmVjMDIxNDE5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAOCAMA0GCSqGSIb3DQEBCwUAA4IBAQBCNYg1EXfLhQ4ClP1h 7Ts1weNmMjAsB/r3qStb4yIAOZv0vaNAicvjHogXd5yjc6/oJAMf3gbmmlNLPaoi qEiW3J//SgbW5J1YZ3g4q4qj1sJQDwVYXcdg6pcHUl0ddpNB4zryLpDV4ekKpUmI eh2+0usjdDafTEyQkG/CHUyXQeggx/LyUBOBHoYABgFgsaCKh9eX16Kg8ywHPJJi DaTv6ne35g6S2rJVY28f4FCjKkFLqlN1G0nWvXcbEUAzBBFY+1RPRiU+3sphEmER idCWHJUA3e7AQQlZTE1uZG/X5hZaw087nnElwLvF8XWEFHh/X5Pd9L3qQsJUtx06 trus -----END CERTIFICATE-----Generated at Thu Nov 5 16:28:10 2026 by rpki-client