$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e6d6097d-1328-48a2-bf02-2aaeeecbb593.roa File: e6d6097d-1328-48a2-bf02-2aaeeecbb593.roa (raw, json) Hash identifier: 9o6QAxh8fA+AJyRdHmWNQ6aIEReqYl9Eif1LQ6pM1ZA= Subject key identifier: B8:99:36:A1:85:82:09:E4:FB:82:6B:31:2C:FD:C4:F6:09:4F:33:19 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5291A37B543297B68145CB7E2A42FEDAFF40177F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e6d6097d-1328-48a2-bf02-2aaeeecbb593.roa Signing time: Sat 07 Nov 2026 00:20:23 +0000 ROA not before: Sat 07 Nov 2026 00:20:23 +0000 ROA not after: Fri 05 Feb 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:91:a3:7b:54:32:97:b6:81:45:cb:7e:2a:42:fe:da:ff:40:17:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:20:23 2026 GMT Not After : Feb 5 23:59:59 2027 GMT Subject: serialNumber=e8243da235d14a84193b4dd785607f18ab18963993ad9223f25a97a3c647fcc7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:5a:70:81:7e:10:18:86:94:8f:9f:18:24: 9b:52:a6:f7:76:ee:48:27:e3:74:e4:92:45:d7:1b: 78:e6:27:cb:ce:c1:e3:16:9d:69:8e:32:3f:ef:d6: 3a:d6:06:e7:7b:9e:bd:e9:2c:be:af:d8:db:e1:82: 6b:12:6a:02:2b:59:09:e2:e5:07:6f:5b:3f:7f:5c: a0:ed:05:ce:40:13:7f:10:a6:3d:46:d8:4e:9d:06: 2d:ef:97:7e:c1:57:bc:a8:74:a6:18:6d:5c:61:fb: 9e:3f:74:73:d3:83:dd:01:0e:76:c4:01:e9:67:cc: 96:d6:b2:ce:a4:51:4a:01:fd:65:04:fc:a7:00:1d: 60:00:d8:19:d5:dc:ce:ac:b0:2e:33:ce:51:50:8f: f1:32:ef:e5:46:32:91:ef:e7:eb:4a:63:2b:01:d0: d4:ed:00:0e:7d:8a:52:58:07:a1:30:a5:7e:ac:81: 3d:05:e9:54:44:2b:7e:1c:ef:91:d6:e4:4d:83:86: 9a:c4:3e:15:04:95:22:90:77:6e:3c:ba:d0:bb:00: 73:a3:a7:35:13:48:8a:80:85:c1:49:3f:95:52:06: 83:b9:f3:e7:9b:c0:84:57:31:05:62:9c:d1:4f:f7: 71:88:cc:43:02:9a:84:07:4b:dd:f8:b6:84:69:12: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:99:36:A1:85:82:09:E4:FB:82:6B:31:2C:FD:C4:F6:09:4F:33:19 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e6d6097d-1328-48a2-bf02-2aaeeecbb593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:c880::/48 Signature Algorithm: sha256WithRSAEncryption 28:dd:0a:6e:e6:94:f2:b3:2c:70:ed:7f:35:75:71:a6:98:a4: 97:66:07:01:37:b9:e4:52:85:b0:4b:bb:3e:c1:cb:c7:61:17: e2:bb:0a:7b:40:cd:b8:bc:9c:ef:da:fc:41:98:df:f1:d2:52: c8:bd:08:fc:b3:73:2b:a6:4a:13:8d:9c:0e:ac:0f:70:d7:e4: 77:58:99:3e:97:da:67:21:71:77:29:dc:e1:2e:55:bb:8d:4d: fc:2e:1e:87:2f:0d:23:0d:0f:59:cf:d2:a8:27:5e:34:cd:a3: 67:02:8b:c2:6d:8c:da:24:a8:27:90:4b:73:c5:d9:b0:8d:68: 94:de:66:6c:23:c6:84:0b:86:06:30:c1:28:23:af:9f:8a:92: bb:a1:9e:f7:4b:3a:5d:f8:19:af:2e:00:bd:05:0d:7f:3a:10: 38:23:7c:06:4e:da:81:d8:bf:a5:46:74:68:93:46:cd:03:bf: e0:c1:51:d5:2b:6a:25:e0:3d:d8:1e:4b:ff:d0:1b:a9:8a:22: 40:02:b1:f3:b5:00:63:33:84:11:8c:a6:83:a7:9a:9e:f4:ed: 5f:6b:a1:e1:30:87:4e:c3:7a:89:a5:c0:8b:06:96:1b:d4:3a: 56:02:c1:17:79:23:9e:a1:19:d2:1f:68:37:35:3f:27:26:64: 8d:99:c9:c8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUpGje1Qyl7aBRct+KkL+2v9AF38wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTEwNzAwMjAyM1oX DTI3MDIwNTIzNTk1OVowejFJMEcGA1UEBRNAZTgyNDNkYTIzNWQxNGE4NDE5M2I0 ZGQ3ODU2MDdmMThhYjE4OTYzOTkzYWQ5MjIzZjI1YTk3YTNjNjQ3ZmNjNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvNacIF+EBiGlI+fGCSbUqb3du5I J+N05JJF1xt45ifLzsHjFp1pjjI/79Y61gbne5696Sy+r9jb4YJrEmoCK1kJ4uUH b1s/f1yg7QXOQBN/EKY9RthOnQYt75d+wVe8qHSmGG1cYfueP3Rz04PdAQ52xAHp Z8yW1rLOpFFKAf1lBPynAB1gANgZ1dzOrLAuM85RUI/xMu/lRjKR7+frSmMrAdDU 7QAOfYpSWAehMKV+rIE9BelURCt+HO+R1uRNg4aaxD4VBJUikHduPLrQuwBzo6c1 E0iKgIXBST+VUgaDufPnm8CEVzEFYpzRT/dxiMxDApqEB0vd+LaEaRJCzQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLiZNqGFggnk+4JrMSz9xPYJTzMZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U2ZDYwOTdkLTEzMjgtNDhhMi1iZjAyLTJhYWVlZWNiYjU5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbausiAMA0GCSqGSIb3DQEBCwUAA4IBAQAo3Qpu5pTysyxw7X81 dXGmmKSXZgcBN7nkUoWwS7s+wcvHYRfiuwp7QM24vJzv2vxBmN/x0lLIvQj8s3Mr pkoTjZwOrA9w1+R3WJk+l9pnIXF3KdzhLlW7jU38Lh6HLw0jDQ9Zz9KoJ140zaNn AovCbYzaJKgnkEtzxdmwjWiU3mZsI8aEC4YGMMEoI6+fipK7oZ73Szpd+BmvLgC9 BQ1/OhA4I3wGTtqB2L+lRnRok0bNA7/gwVHVK2ol4D3YHkv/0BupiiJAArHztQBj M4QRjKaDp5qe9O1fa6HhMIdOw3qJpcCLBpYb1DpWAsEXeSOeoRnSH2g3NT8nJmSN mcnI -----END CERTIFICATE-----Generated at Sun Nov 8 03:09:11 2026 by rpki-client