$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e781105a-ae32-4758-8a74-1bd76214d9fa.roa File: e781105a-ae32-4758-8a74-1bd76214d9fa.roa (raw, json) Hash identifier: jc8o4aZt1s8gPI2t6qofs8LmEAVcJFp8n2b9piOv1mU= Subject key identifier: BF:5B:52:30:AB:65:5B:68:B5:10:A0:8C:C2:C0:68:1D:55:D2:18:B5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D5AEED6F35AF08D39CDEB610F655D7322218CEC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e781105a-ae32-4758-8a74-1bd76214d9fa.roa Signing time: Thu 10 Sep 2026 00:10:09 +0000 ROA not before: Thu 10 Sep 2026 00:10:09 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5a:ee:d6:f3:5a:f0:8d:39:cd:eb:61:0f:65:5d:73:22:21:8c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:10:09 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=a5b5842ffc248c2e3406e504f573bc218feca76c789d1eaf19e44ca2e04b4cfd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ad:29:19:ee:73:c0:f6:6c:fc:e5:a8:51:8b: 75:09:85:ad:bd:41:bd:9a:00:d7:54:a2:c9:a0:6d: e9:4e:2b:b7:05:48:75:04:48:b9:58:a0:5c:08:63: 4f:6f:3b:06:b4:a9:7f:c1:a0:eb:7e:58:fb:b1:ff: cc:36:8c:a5:b3:16:80:6e:a3:8b:f3:61:91:62:c0: 3d:ea:ee:7e:8c:b3:3d:54:73:f5:ba:71:03:cb:7d: 03:cb:68:ca:07:71:d9:9a:2d:94:27:9a:94:46:6d: 9e:f8:2e:fc:71:21:44:88:5c:a7:33:bc:f2:aa:ec: b1:8f:f7:8e:53:02:13:60:50:44:43:df:72:6c:a8: 9b:5e:c9:67:3b:a1:93:22:1f:7d:25:10:a6:1f:4a: a9:9e:95:4c:74:8e:52:91:57:42:67:2b:4c:e8:bf: 69:ff:3e:5c:12:aa:74:75:ea:13:22:fc:4c:80:cd: d1:b9:75:21:9b:e8:84:a4:95:54:2b:d3:0a:87:ce: 54:63:32:45:05:1e:61:b1:ac:8e:63:01:b1:fe:ac: 6f:b4:6b:17:6b:33:36:0f:3c:5f:55:6a:88:b0:a2: 6c:d8:99:23:34:59:b1:c1:a5:0e:06:99:55:3b:4e: 01:10:49:ef:d1:04:28:15:6c:f4:b0:4f:4c:ca:0e: e6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5B:52:30:AB:65:5B:68:B5:10:A0:8C:C2:C0:68:1D:55:D2:18:B5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e781105a-ae32-4758-8a74-1bd76214d9fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:a000::/40 Signature Algorithm: sha256WithRSAEncryption 12:6d:04:7a:75:06:43:82:d5:57:61:33:5d:02:37:00:3f:64: 95:16:06:a7:74:8e:b0:a5:03:71:8b:90:ef:f0:f3:0f:b8:98: 12:09:e5:34:43:57:26:e2:dc:83:79:db:24:fd:f2:db:42:d0: 42:b7:fd:4d:2d:e6:23:69:6b:ed:12:3a:03:3a:ef:84:f2:92: 51:1a:fa:68:bb:3e:93:53:94:e6:a9:1e:b6:6f:5f:1b:ad:3b: 77:eb:fa:ca:6a:46:50:9e:2d:91:a1:08:9d:9c:b1:25:dc:eb: d0:e6:48:a9:77:25:3c:45:c1:44:05:da:1f:36:29:f4:b6:7b: eb:d6:a7:7b:88:94:1e:e3:3e:a5:26:d1:ca:b2:60:ff:3a:fd: a0:2e:e8:d9:4d:7e:60:9b:f0:91:d7:72:2b:f8:aa:63:58:00: 9f:4b:f4:b2:3e:79:d9:7b:38:54:df:1e:67:23:8b:3f:10:31: b9:b6:4a:39:bb:1a:3c:38:c3:72:4e:9c:42:86:ae:a0:d3:83: 6d:2d:c7:dc:88:f3:cd:7d:68:95:3d:b9:1f:81:5e:98:ec:e6: e7:3f:26:c5:84:8b:48:67:f5:3e:b8:b7:db:33:a6:6a:de:36: 19:15:75:bc:44:34:f1:02:71:e5:5e:e2:14:88:db:da:dc:e1: a7:1e:0e:7e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbVru1vNa8I05zethD2VdcyIhjOwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMTAwOVoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAYTViNTg0MmZmYzI0OGMyZTM0MDZl NTA0ZjU3M2JjMjE4ZmVjYTc2Yzc4OWQxZWFmMTllNDRjYTJlMDRiNGNmZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi60pGe5zwPZs/OWoUYt1CYWtvUG9 mgDXVKLJoG3pTiu3BUh1BEi5WKBcCGNPbzsGtKl/waDrflj7sf/MNoylsxaAbqOL 82GRYsA96u5+jLM9VHP1unEDy30Dy2jKB3HZmi2UJ5qURm2e+C78cSFEiFynM7zy quyxj/eOUwITYFBEQ99ybKibXslnO6GTIh99JRCmH0qpnpVMdI5SkVdCZytM6L9p /z5cEqp0deoTIvxMgM3RuXUhm+iEpJVUK9MKh85UYzJFBR5hsayOYwGx/qxvtGsX azM2DzxfVWqIsKJs2JkjNFmxwaUOBplVO04BEEnv0QQoFWz0sE9Myg7mXQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL9bUjCrZVtotRCgjMLAaB1V0hi1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U3ODExMDVhLWFlMzItNDc1OC04YTc0LTFiZDc2MjE0ZDlmYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba66AwDQYJKoZIhvcNAQELBQADggEBABJtBHp1BkOC1VdhM10C NwA/ZJUWBqd0jrClA3GLkO/w8w+4mBIJ5TRDVybi3IN52yT98ttC0EK3/U0t5iNp a+0SOgM674TyklEa+mi7PpNTlOapHrZvXxutO3fr+spqRlCeLZGhCJ2csSXc69Dm SKl3JTxFwUQF2h82KfS2e+vWp3uIlB7jPqUm0cqyYP86/aAu6NlNfmCb8JHXciv4 qmNYAJ9L9LI+edl7OFTfHmcjiz8QMbm2Sjm7Gjw4w3JOnEKGrqDTg20tx9yI8819 aJU9uR+BXpjs5uc/JsWEi0hn9T64t9szpmreNhkVdbxENPECceVe4hSI29rc4ace Dn4= -----END CERTIFICATE-----Generated at Mon Sep 21 14:01:38 2026 by rpki-client