$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac61092-c5b2-4eca-96b5-655e9bc60b19.roa File: eac61092-c5b2-4eca-96b5-655e9bc60b19.roa (raw, json) Hash identifier: oK5PwOCYpfi5nx+zoty8OHOJPGWu1APgxbzfjWLiSuo= Subject key identifier: 5B:CB:80:0C:51:2D:A4:49:8F:FC:5D:26:E6:4A:37:89:73:1D:64:E9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3CBFC56D9C3BFE9F80DB3E69EB17FC2D628D8907 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac61092-c5b2-4eca-96b5-655e9bc60b19.roa Signing time: Wed 09 Sep 2026 15:54:34 +0000 ROA not before: Wed 09 Sep 2026 15:54:34 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae7:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bf:c5:6d:9c:3b:fe:9f:80:db:3e:69:eb:17:fc:2d:62:8d:89:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 9 15:54:34 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=fa6523307efebe0df737b97caaa9d28c856434c7259ed2835d2560afcceca940, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:ba:69:c0:a9:6d:0a:7d:12:18:63:05:f9: ed:2c:a8:99:54:5b:3f:73:87:2d:5c:41:61:7b:21: 91:28:59:46:4b:d1:86:58:b4:e3:96:c3:9c:b3:7b: 32:28:81:6e:14:f3:14:51:77:b2:c1:c0:e2:26:56: 4e:a8:13:37:c4:bc:a3:2a:04:28:78:5a:f6:12:e8: ec:0d:06:d7:69:4b:7a:7a:88:72:9f:d5:a9:54:eb: e7:f8:ac:88:0f:5b:32:f3:9a:c4:64:ab:05:8b:f1: be:6d:c8:53:ef:72:a9:1f:85:90:ed:40:17:49:90: b3:97:33:01:db:e7:c6:24:84:d8:c8:67:51:22:c6: db:75:ee:3f:43:1b:69:46:2f:c0:79:8e:37:36:b6: 11:50:98:7a:3d:46:d5:50:79:ba:5e:f8:26:3a:aa: aa:d6:65:30:b8:d0:57:25:29:38:fd:87:57:15:de: 2b:e9:fe:ff:3c:37:cb:19:d0:46:92:18:11:31:65: a9:9b:22:d3:1c:a1:58:bb:7f:f5:20:0e:f1:59:b6: 3d:aa:b5:dc:dd:7d:ac:8b:c5:b0:f4:47:0a:c1:14: 2c:9a:58:57:55:4d:0f:d2:e6:1c:ac:9c:09:26:87: 03:52:00:43:94:99:5e:13:6f:73:01:e3:12:be:a0: ee:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CB:80:0C:51:2D:A4:49:8F:FC:5D:26:E6:4A:37:89:73:1D:64:E9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac61092-c5b2-4eca-96b5-655e9bc60b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae7:2000::/40 Signature Algorithm: sha256WithRSAEncryption 7e:00:ac:b2:d7:d0:a7:15:a3:18:e1:20:eb:28:30:fd:1b:5f: bc:50:c4:37:55:78:77:ab:8c:c1:79:cb:4f:92:d1:44:3b:1e: e1:e6:9a:d7:bc:ae:4c:ab:2a:7d:63:81:c3:4d:45:7c:bc:21: 62:da:e5:78:e2:4f:2e:a8:91:ee:40:15:dc:b1:8f:b5:e4:c7: 4e:c3:1d:0b:83:d9:df:bc:b9:5d:6c:44:82:76:c7:d6:50:bd: f5:b3:c9:1d:99:1b:d9:8c:a8:22:5d:d9:a4:5e:79:3d:02:b4: 85:3f:ec:9a:37:1f:13:ae:44:4f:1a:c5:e2:2b:ef:2c:b0:59: c1:a8:c9:52:e6:9a:a3:df:c1:d8:cf:ee:0b:4b:f6:21:70:d0: 7a:05:d3:51:97:a3:ba:e0:ab:73:6f:b2:a7:35:f9:8f:97:23: bc:31:09:ee:c0:cb:35:75:ad:5b:d3:e2:e1:6a:19:ea:0e:de: 36:bd:be:d0:50:88:ae:ca:57:e3:e8:cf:e3:1c:0a:dc:65:b0: 68:05:a6:ca:86:f7:19:d4:03:b2:98:47:84:fc:9d:2d:c8:32: 09:02:72:fe:52:6f:c5:95:6b:0c:de:21:61:d8:1e:31:ed:59: 29:69:3b:17:7f:a0:b4:9d:bd:4c:82:cf:6a:ad:b4:bd:5d:19: 3e:06:f1:f2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPL/FbZw7/p+A2z5p6xf8LWKNiQcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkwOTE1NTQzNFoX DTI2MTIwODIzNTk1OVowejFJMEcGA1UEBRNAZmE2NTIzMzA3ZWZlYmUwZGY3Mzdi OTdjYWFhOWQyOGM4NTY0MzRjNzI1OWVkMjgzNWQyNTYwYWZjY2VjYTk0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsey6acCpbQp9EhhjBfntLKiZVFs/ c4ctXEFheyGRKFlGS9GGWLTjlsOcs3syKIFuFPMUUXeywcDiJlZOqBM3xLyjKgQo eFr2EujsDQbXaUt6eohyn9WpVOvn+KyID1sy85rEZKsFi/G+bchT73KpH4WQ7UAX SZCzlzMB2+fGJITYyGdRIsbbde4/QxtpRi/AeY43NrYRUJh6PUbVUHm6XvgmOqqq 1mUwuNBXJSk4/YdXFd4r6f7/PDfLGdBGkhgRMWWpmyLTHKFYu3/1IA7xWbY9qrXc 3X2si8Ww9EcKwRQsmlhXVU0P0uYcrJwJJocDUgBDlJleE29zAeMSvqDutwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFvLgAxRLaRJj/xdJuZKN4lzHWTpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VhYzYxMDkyLWM1YjItNGVjYS05NmI1LTY1NWU5YmM2MGIxOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba5yAwDQYJKoZIhvcNAQELBQADggEBAH4ArLLX0KcVoxjhIOso MP0bX7xQxDdVeHerjMF5y0+S0UQ7HuHmmte8rkyrKn1jgcNNRXy8IWLa5XjiTy6o ke5AFdyxj7Xkx07DHQuD2d+8uV1sRIJ2x9ZQvfWzyR2ZG9mMqCJd2aReeT0CtIU/ 7Jo3HxOuRE8axeIr7yywWcGoyVLmmqPfwdjP7gtL9iFw0HoF01GXo7rgq3Nvsqc1 +Y+XI7wxCe7AyzV1rVvT4uFqGeoO3ja9vtBQiK7KV+Poz+McCtxlsGgFpsqG9xnU A7KYR4T8nS3IMgkCcv5Sb8WVawzeIWHYHjHtWSlpOxd/oLSdvUyCz2qttL1dGT4G 8fI= -----END CERTIFICATE-----Generated at Mon Sep 21 04:04:58 2026 by rpki-client