$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38aee75-1c20-4c34-b0d4-c226c1afc502.roa File: f38aee75-1c20-4c34-b0d4-c226c1afc502.roa (raw, json) Hash identifier: 1roEhyrzsdAB0COhUtzuOiFSFSaaA4iiNCwOK+BHEMI= Subject key identifier: F4:CB:C0:BB:4C:0C:DA:8A:CB:3F:D1:28:9D:B6:11:FA:BD:03:EE:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E0E5F5C4CC773AEAC53FD4C8105E0C283C697B8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38aee75-1c20-4c34-b0d4-c226c1afc502.roa Signing time: Sun 18 Oct 2026 00:09:00 +0000 ROA not before: Sun 18 Oct 2026 00:09:00 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0e:5f:5c:4c:c7:73:ae:ac:53:fd:4c:81:05:e0:c2:83:c6:97:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:09:00 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=2d76dc1957bcc6a4ae9d8e7b95fc7f2eb2de7f0b6928125bccd7d4f0351bed8b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f7:1a:9e:7a:b4:45:cd:6d:f4:0d:ed:4c:c9: 95:72:56:3f:7e:bc:c3:44:f1:0e:34:b9:57:e3:f4: 40:34:ae:1b:8a:7a:12:d0:f5:23:3a:85:2e:ef:6c: 63:ad:04:90:21:d9:e4:4f:5f:7d:09:cd:3d:8c:32: fc:c6:57:ca:27:0b:f3:6d:04:6e:ea:aa:dc:53:c5: e2:5d:27:fc:28:e8:54:e3:4a:bb:18:62:3f:f9:38: c9:c1:3a:fc:1d:1b:4c:c9:c6:46:46:3b:3a:0c:5f: 3d:c4:42:04:d3:81:08:d4:ab:b8:29:0b:1d:9d:49: ce:9e:80:a1:64:cf:c6:8f:20:dc:df:49:19:af:e7: 02:81:37:d2:0d:6e:60:c2:e4:95:0d:4a:85:dc:06: 7b:44:8a:76:f9:8d:ee:92:2f:8d:c3:84:f5:55:86: 79:c2:4a:fa:34:99:0d:7b:3d:d1:a9:40:d5:cd:20: 0a:84:e9:1b:1f:cd:3d:72:13:09:f0:59:00:b6:d3: bd:ff:2a:bd:0d:8c:f1:82:a1:b0:40:bb:70:59:1a: 79:05:df:ef:d3:45:c6:2b:2f:1b:5c:78:1c:b0:a7: cb:75:6a:a9:e2:41:84:28:41:f1:0c:ef:13:70:79: 5f:92:6f:74:16:c4:54:61:e0:39:58:60:e5:75:da: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CB:C0:BB:4C:0C:DA:8A:CB:3F:D1:28:9D:B6:11:FA:BD:03:EE:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38aee75-1c20-4c34-b0d4-c226c1afc502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9040::/48 Signature Algorithm: sha256WithRSAEncryption 30:dc:2a:93:68:17:03:95:a7:38:3a:69:db:a0:5c:23:8f:2d: 3f:33:7f:cb:30:0b:23:3a:e2:9d:f5:5d:3c:75:da:d0:a2:1e: 02:92:ee:6f:f0:93:ab:44:0e:2b:53:05:24:41:1b:67:7f:59: 52:0b:53:2f:88:bf:a0:f7:e7:1d:ed:8c:c5:af:c9:02:02:d8: e3:5c:39:d7:a2:40:b8:e0:95:14:05:7a:64:9d:75:ec:87:80: e6:57:67:0c:49:51:8d:0d:ca:65:fd:5e:ea:ee:66:3b:a6:0f: 7a:c8:c3:6b:fe:57:ee:fd:82:e7:85:9b:71:fb:ee:cc:74:41: 6b:cc:6d:41:e4:32:52:db:e2:20:c4:4c:7e:79:1c:61:b3:55: 37:06:49:c3:b8:00:e2:87:7c:b9:c1:40:fd:fa:f9:d2:5a:a2: 5c:2f:8c:b4:70:d7:18:00:05:7b:ad:52:78:ce:14:76:85:19: b4:26:08:10:13:8f:94:25:ab:04:75:e2:fd:1e:e4:c4:17:01: 51:7d:c2:09:73:fd:ef:02:f5:a2:69:30:ed:01:68:7a:8b:e1: bb:7a:1f:9f:70:cf:89:94:41:cc:fc:f5:8c:76:57:1c:f0:ec: da:e3:89:94:dd:45:76:d0:73:85:7a:73:ac:25:1f:7b:d6:75: bf:1f:c0:53 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULg5fXEzHc66sU/1MgQXgwoPGl7gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMDkwMFoX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAMmQ3NmRjMTk1N2JjYzZhNGFlOWQ4 ZTdiOTVmYzdmMmViMmRlN2YwYjY5MjgxMjViY2NkN2Q0ZjAzNTFiZWQ4YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfcannq0Rc1t9A3tTMmVclY/frzD RPEONLlX4/RANK4binoS0PUjOoUu72xjrQSQIdnkT199Cc09jDL8xlfKJwvzbQRu 6qrcU8XiXSf8KOhU40q7GGI/+TjJwTr8HRtMycZGRjs6DF89xEIE04EI1Ku4KQsd nUnOnoChZM/GjyDc30kZr+cCgTfSDW5gwuSVDUqF3AZ7RIp2+Y3uki+Nw4T1VYZ5 wkr6NJkNez3RqUDVzSAKhOkbH809chMJ8FkAttO9/yq9DYzxgqGwQLtwWRp5Bd/v 00XGKy8bXHgcsKfLdWqp4kGEKEHxDO8TcHlfkm90FsRUYeA5WGDlddqVewIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPTLwLtMDNqKyz/RKJ22Efq9A+7LMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YzOGFlZTc1LTFjMjAtNGMzNC1iMGQ0LWMyMjZjMWFmYzUwMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/5BAMA0GCSqGSIb3DQEBCwUAA4IBAQAw3CqTaBcDlac4Omnb oFwjjy0/M3/LMAsjOuKd9V08ddrQoh4Cku5v8JOrRA4rUwUkQRtnf1lSC1MviL+g 9+cd7YzFr8kCAtjjXDnXokC44JUUBXpknXXsh4DmV2cMSVGNDcpl/V7q7mY7pg96 yMNr/lfu/YLnhZtx++7MdEFrzG1B5DJS2+IgxEx+eRxhs1U3BknDuADih3y5wUD9 +vnSWqJcL4y0cNcYAAV7rVJ4zhR2hRm0JggQE4+UJasEdeL9HuTEFwFRfcIJc/3v AvWiaTDtAWh6i+G7eh+fcM+JlEHM/PWMdlcc8Oza44mU3UV20HOFenOsJR971nW/ H8BT -----END CERTIFICATE-----Generated at Thu Nov 5 05:22:00 2026 by rpki-client