$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28624f2-29a1-4d66-bb6c-dd38f883f14b.roa File: f28624f2-29a1-4d66-bb6c-dd38f883f14b.roa (raw, json) Hash identifier: BL0/gcAXOUX0KO/yff8yX6lWBznb4jtLlCOQ6dEvTV0= Subject key identifier: 35:44:08:0A:83:F1:48:85:F1:C2:B9:1C:46:85:2C:79:1C:3B:9E:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3825A0E82B0AF4AB1E4E2C2B9FD840B2EC7ED44A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28624f2-29a1-4d66-bb6c-dd38f883f14b.roa Signing time: Tue 20 Oct 2026 00:30:12 +0000 ROA not before: Tue 20 Oct 2026 00:30:12 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da19:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:25:a0:e8:2b:0a:f4:ab:1e:4e:2c:2b:9f:d8:40:b2:ec:7e:d4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:30:12 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=ea7e9048f109d377dbaed925f58c4093dc4eba2403f2bf217169ba1d4cbb0e44, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d5:db:b8:d0:d1:77:95:e2:cf:08:77:f6:84: dc:c9:72:be:1f:73:11:f3:8f:99:19:06:ea:a8:b2: f4:64:d6:e9:46:2c:0b:7c:a3:fb:65:69:37:7e:2b: 34:5f:6d:e0:7f:51:09:2e:10:cc:85:b8:07:dc:38: 0e:29:bb:b5:b6:31:28:55:9c:2a:bd:92:95:45:fd: 44:71:e6:c6:2c:46:a0:77:92:6b:cb:f8:fe:91:26: 85:8b:e2:ff:24:9e:c6:f0:48:58:38:f3:91:95:c8: b7:45:a4:07:40:92:89:84:2c:0a:86:89:3d:01:34: ef:22:f9:8a:a5:1a:f3:d9:e9:da:93:4c:15:34:79: 83:04:34:68:6c:6d:5f:fc:0e:c7:43:b6:d7:dc:ae: cc:b4:a5:eb:04:55:97:b4:5d:19:ed:1d:f6:82:bc: be:f2:6c:b4:e0:98:2d:4e:1e:98:ce:73:33:14:be: 63:23:30:12:1a:81:2c:3f:1a:ab:7a:83:94:2e:82: e1:a8:02:3a:3f:b6:e1:6c:6e:be:07:c2:a1:9f:d2: b9:b2:fd:d7:2b:4d:51:5f:dc:f1:f1:7a:b5:c5:49: a0:bc:74:91:14:2d:fc:10:75:af:18:37:ec:32:c0: f3:12:57:9c:9e:c6:0e:d4:48:21:03:a5:14:21:c8: f3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:44:08:0A:83:F1:48:85:F1:C2:B9:1C:46:85:2C:79:1C:3B:9E:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28624f2-29a1-4d66-bb6c-dd38f883f14b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da19:c00::/38 Signature Algorithm: sha256WithRSAEncryption 5f:c7:b4:29:68:95:a8:2c:5b:bb:5b:ba:8e:4d:f5:67:b1:d7: b7:48:12:fa:8a:d2:c5:b6:5f:26:50:e4:4b:9d:5e:dd:9b:70: 80:80:a4:e6:6e:58:9c:06:5d:b8:d5:f3:df:9a:c4:25:c8:13: 59:69:7b:ba:45:86:12:e4:a0:3c:74:33:23:2c:6a:0a:e7:91: ef:3f:76:6c:0a:ff:cf:90:30:aa:e1:01:eb:9d:ec:0a:e2:1d: 0b:2a:7b:1a:88:1e:17:c3:44:a4:7f:62:8c:9c:a3:b2:b3:32: 70:1c:19:42:01:f5:ea:ab:69:8f:ec:5e:e5:7c:03:d5:6d:ef: 4a:be:4f:87:c0:fd:52:e6:fa:e1:9a:a3:8d:d9:f2:51:a2:f7: 35:8f:31:41:ea:9f:c1:60:c9:f6:ca:b1:14:dc:41:77:e3:a6: c6:62:1f:07:8f:0b:8b:e5:63:25:8f:c6:05:0e:7c:32:24:02: 45:0a:58:f4:41:9f:8e:34:25:92:8f:f9:81:35:ec:60:ca:5e: e0:13:c3:44:22:d7:74:cf:52:1a:e2:0c:18:b9:63:16:5a:88: 36:fe:ee:54:34:57:79:c4:ce:28:f1:b7:ed:46:b1:ff:36:55: 35:e3:8f:20:c3:5c:2f:55:9e:38:35:1d:9a:1a:41:7e:f1:89: 89:80:de:07 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOCWg6CsK9KseTiwrn9hAsux+1EowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMzAxMloX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAZWE3ZTkwNDhmMTA5ZDM3N2RiYWVk OTI1ZjU4YzQwOTNkYzRlYmEyNDAzZjJiZjIxNzE2OWJhMWQ0Y2JiMGU0NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NXbuNDRd5Xizwh39oTcyXK+H3MR 84+ZGQbqqLL0ZNbpRiwLfKP7ZWk3fis0X23gf1EJLhDMhbgH3DgOKbu1tjEoVZwq vZKVRf1EcebGLEagd5Jry/j+kSaFi+L/JJ7G8EhYOPORlci3RaQHQJKJhCwKhok9 ATTvIvmKpRrz2enak0wVNHmDBDRobG1f/A7HQ7bX3K7MtKXrBFWXtF0Z7R32gry+ 8my04JgtTh6YznMzFL5jIzASGoEsPxqreoOULoLhqAI6P7bhbG6+B8Khn9K5sv3X K01RX9zx8Xq1xUmgvHSRFC38EHWvGDfsMsDzElecnsYO1EghA6UUIcjz/wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDVECAqD8UiF8cK5HEaFLHkcO56OMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YyODYyNGYyLTI5YTEtNGQ2Ni1iYjZjLWRkMzhmODgzZjE0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGQwwDQYJKoZIhvcNAQELBQADggEBAF/HtClolagsW7tbuo5N 9Wex17dIEvqK0sW2XyZQ5EudXt2bcICApOZuWJwGXbjV89+axCXIE1lpe7pFhhLk oDx0MyMsagrnke8/dmwK/8+QMKrhAeud7AriHQsqexqIHhfDRKR/Yoyco7KzMnAc GUIB9eqraY/sXuV8A9Vt70q+T4fA/VLm+uGao43Z8lGi9zWPMUHqn8FgyfbKsRTc QXfjpsZiHwePC4vlYyWPxgUOfDIkAkUKWPRBn440JZKP+YE17GDKXuATw0Qi13TP UhriDBi5YxZaiDb+7lQ0V3nEzijxt+1Gsf82VTXjjyDDXC9Vnjg1HZoaQX7xiYmA 3gc= -----END CERTIFICATE-----Generated at Thu Nov 5 19:23:15 2026 by rpki-client