$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa File: eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa (raw, json) Hash identifier: P1//sXtbVtcRCBg5KiOb+s0vW+pUw6KiJINFUOsGNUQ= Subject key identifier: 28:00:07:22:B9:4E:BA:BF:E8:B6:3A:CA:C6:5F:06:B2:E9:95:00:26 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 268B73BFDB2ACCBCF0220B21ECAAC4261523E220 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa Signing time: Tue 20 Oct 2026 00:09:43 +0000 ROA not before: Tue 20 Oct 2026 00:09:43 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:8b:73:bf:db:2a:cc:bc:f0:22:0b:21:ec:aa:c4:26:15:23:e2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:09:43 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=837faa80dfb03c7ad1d75b8e4758f82f96d17f9bdeebf14c75f1a381447da05b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:8d:8a:13:ec:1d:18:9b:bd:32:03:db:45: e0:dd:7a:11:2a:24:85:8a:24:ed:51:97:61:28:78: aa:8d:2e:3a:c6:af:96:3b:3f:4d:99:4d:2f:a2:f6: e2:51:46:3c:be:cf:5c:10:6c:5b:a1:76:5f:3a:8c: bb:de:55:76:32:52:1a:44:23:bc:5e:a3:24:86:8a: 1a:1e:3a:c5:41:9a:45:a3:22:6c:b2:ab:2b:87:15: 04:26:bf:0e:ac:f4:2b:54:94:9c:39:43:c9:ed:f2: 9f:4f:09:41:68:58:c8:0f:2d:5a:1f:e3:9c:21:4a: 4d:13:b7:22:ac:25:8e:9f:ee:5a:d1:57:3c:b9:97: 1f:3a:fa:7d:db:44:dc:a5:b5:1b:1d:81:80:5a:f8: 17:cb:bb:e5:f0:d6:93:6e:70:45:31:2e:57:58:b1: 83:e3:87:53:d1:2e:13:51:df:61:fd:11:73:fe:3d: 18:e9:15:c3:8f:24:1f:2e:e8:fe:55:59:92:e6:6e: 74:38:2c:b5:43:60:21:4d:80:01:09:bd:c1:c2:14: 3f:48:4c:79:f6:d1:e5:50:22:3f:a3:48:e7:91:82: 9f:77:f1:7d:78:bc:56:7a:be:e6:a6:fc:c7:dd:bd: c5:35:b9:66:59:47:a9:ec:62:e2:1d:9f:69:51:b8: 88:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:00:07:22:B9:4E:BA:BF:E8:B6:3A:CA:C6:5F:06:B2:E9:95:00:26 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:4000::/40 Signature Algorithm: sha256WithRSAEncryption b9:0b:fd:a6:3c:03:f4:1e:4d:f3:85:37:5a:47:d0:59:b1:0b: 60:ea:b9:c3:10:3a:54:9d:02:28:3f:03:ed:a0:8d:d5:39:d7: ee:68:97:2a:9a:e4:52:67:d8:23:6e:5b:0f:a7:63:58:cd:3f: 62:57:94:50:6a:80:93:8c:fd:f0:12:ee:ee:cc:47:2d:00:76: 2f:30:43:99:52:dc:d3:e2:52:c9:59:88:1e:74:e6:01:f2:a4: a2:50:9b:ba:cf:28:58:79:9f:a3:88:89:b6:d7:0e:2b:fd:6f: a3:fb:6c:2e:2f:62:eb:1e:74:38:7c:f9:0b:33:86:31:ac:a3: 58:a4:6a:c1:13:56:98:b6:93:03:91:84:9e:7e:6e:cc:7f:31: 8f:ed:11:7d:12:b3:82:75:77:19:a3:1a:79:b5:d7:bc:91:70: dc:2b:46:2b:f6:2a:41:2e:09:f6:6e:3d:ca:60:eb:70:b8:d4: 1c:b5:08:4e:31:0e:ea:35:4d:f4:a4:7e:7c:fd:ba:c5:0c:85: 57:aa:8c:04:f7:11:1f:29:bf:0f:a8:52:c9:3c:60:9e:1e:cc: 0a:64:e7:c2:da:c8:a5:59:4f:f3:ab:d8:17:b3:02:06:16:2b: 6e:ee:87:be:25:e2:d9:d2:ea:5b:c4:e0:e1:07:ce:8f:af:cd: 75:e9:6b:b4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJotzv9sqzLzwIgsh7KrEJhUj4iAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMDk0M1oX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAODM3ZmFhODBkZmIwM2M3YWQxZDc1 YjhlNDc1OGY4MmY5NmQxN2Y5YmRlZWJmMTRjNzVmMWEzODE0NDdkYTA1YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK2NihPsHRibvTID20Xg3XoRKiSF iiTtUZdhKHiqjS46xq+WOz9NmU0vovbiUUY8vs9cEGxboXZfOoy73lV2MlIaRCO8 XqMkhooaHjrFQZpFoyJssqsrhxUEJr8OrPQrVJScOUPJ7fKfTwlBaFjIDy1aH+Oc IUpNE7cirCWOn+5a0Vc8uZcfOvp920TcpbUbHYGAWvgXy7vl8NaTbnBFMS5XWLGD 44dT0S4TUd9h/RFz/j0Y6RXDjyQfLuj+VVmS5m50OCy1Q2AhTYABCb3BwhQ/SEx5 9tHlUCI/o0jnkYKfd/F9eLxWer7mpvzH3b3FNblmWUep7GLiHZ9pUbiIPQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCgAByK5Trq/6LY6ysZfBrLplQAmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ViMTQ3YjBhLTkzYWMtNGFiNy04YzQwLTFkZjJjODg3MjVhNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8UAwDQYJKoZIhvcNAQELBQADggEBALkL/aY8A/QeTfOFN1pH 0FmxC2DqucMQOlSdAig/A+2gjdU51+5olyqa5FJn2CNuWw+nY1jNP2JXlFBqgJOM /fAS7u7MRy0Adi8wQ5lS3NPiUslZiB505gHypKJQm7rPKFh5n6OIibbXDiv9b6P7 bC4vYusedDh8+QszhjGso1ikasETVpi2kwORhJ5+bsx/MY/tEX0Ss4J1dxmjGnm1 17yRcNwrRiv2KkEuCfZuPcpg63C41By1CE4xDuo1TfSkfnz9usUMhVeqjAT3ER8p vw+oUsk8YJ4ezApk58LayKVZT/Or2BezAgYWK27uh74l4tnS6lvE4OEHzo+vzXXp a7Q= -----END CERTIFICATE-----Generated at Thu Nov 5 16:28:34 2026 by rpki-client