$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/cc671c79-21f0-4fff-b898-595966ecd1a9.roa File: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (raw, json) Hash identifier: bCxmHdL+unu38R9ml+09zoVGrJd1Ey3pw4pz0o5BVp0= Subject key identifier: 67:CE:08:A7:6D:46:01:2A:67:A3:80:E5:3A:F7:48:44:D8:35:C0:D3 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 57332867A32C8C88EF32A4388C197EFC72825A2B Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/cc671c79-21f0-4fff-b898-595966ecd1a9.roa Signing time: Sun 04 Oct 2026 00:00:10 +0000 ROA not before: Sun 04 Oct 2026 00:00:10 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6700:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:33:28:67:a3:2c:8c:88:ef:32:a4:38:8c:19:7e:fc:72:82:5a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 4 00:00:10 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=44d58ba0890f05b7b7d76c3bd4d984ff0f42ad607976e9a43badf901c1b5d1a1, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:66:f2:39:bf:28:73:f3:5c:cb:36:ee:3d: 33:76:d5:7b:eb:5a:98:0e:55:5e:c9:fd:55:c4:23: 85:a7:64:ef:9a:24:80:fa:7e:4a:f2:74:22:55:3f: a7:30:2d:45:59:cf:cf:f1:8a:98:fb:c0:a9:b8:99: e3:6e:43:c9:98:a4:8e:be:ef:54:22:f2:e3:f9:53: 1e:f8:48:ae:e7:7c:b9:19:3b:67:c5:9c:24:dd:3b: 39:4b:a9:91:9a:ee:f8:34:ab:85:f9:67:d6:15:41: eb:0a:d1:12:ff:a6:b4:88:20:5b:5d:37:b9:ce:64: b7:d9:ba:72:75:08:68:07:18:4e:c8:82:09:2e:e4: 8e:5e:7f:c3:43:49:8a:e5:b1:e6:bc:15:e4:b0:7e: c2:e6:91:15:14:dd:bd:1b:94:1f:4d:86:1a:c9:15: 7c:c5:43:50:1e:42:2a:48:aa:11:76:78:21:fa:f2: 33:d7:e5:d3:f8:05:21:98:67:59:9f:0c:f6:e4:b7: 73:75:f4:66:e6:c2:44:77:f8:b5:f1:be:12:64:db: 76:5c:5c:fe:c9:b6:a2:1d:e1:6d:b5:7f:f9:34:00: c0:ac:1a:9d:3c:b0:7f:24:af:14:54:ea:4d:6e:d6: a7:f8:21:0a:c6:a5:69:f8:73:91:3d:ed:7b:fb:5f: e4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CE:08:A7:6D:46:01:2A:67:A3:80:E5:3A:F7:48:44:D8:35:C0:D3 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/cc671c79-21f0-4fff-b898-595966ecd1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6700:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 82:96:e5:18:0e:94:87:a4:ea:15:44:f6:26:1d:7f:d4:f7:f0: a0:ba:02:bf:a8:81:13:ac:1e:07:c1:f2:8b:c8:6d:4f:7d:bb: e7:ef:b9:c5:94:81:45:24:a1:1c:b6:7f:97:8d:c4:38:22:47: 42:32:b2:fd:b3:b6:5e:26:db:25:67:f4:9b:42:e5:12:3e:7d: eb:f5:82:01:37:d0:23:e2:c3:53:d9:a2:36:41:34:c8:96:03: ee:e0:5f:0e:54:d5:cb:2f:e1:cf:23:d7:53:46:45:f2:ea:d6: fd:da:82:60:89:95:e3:d5:ed:d3:eb:61:c3:0b:6a:53:21:10: 73:cc:fe:7e:2d:65:a2:7b:34:48:53:ad:5d:99:97:9b:72:b2: aa:3a:5a:41:b0:49:cc:b8:1e:71:e8:bc:25:40:88:f7:d4:dc: f8:2c:8c:d8:ea:30:29:6a:c5:a0:67:80:e5:1e:cb:eb:f1:ce: bc:a0:aa:55:05:f9:fc:ef:9f:15:b5:93:12:c9:66:2b:fe:a2: 36:d0:5e:e1:3d:11:29:7e:76:0d:66:80:9a:0d:1f:82:82:06: c1:28:e2:2c:31:43:e5:45:3e:b6:82:33:78:91:da:23:ff:dd: c6:09:35:2e:58:6d:35:bd:b9:7b:e3:1a:02:22:b2:d1:c7:19: 45:aa:0d:00 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVzMoZ6MsjIjvMqQ4jBl+/HKCWiswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAwNDAwMDAxMFoX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNANDRkNThiYTA4OTBmMDViN2I3ZDc2 YzNiZDRkOTg0ZmYwZjQyYWQ2MDc5NzZlOWE0M2JhZGY5MDFjMWI1ZDFhMTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ9m8jm/KHPzXMs27j0zdtV761qY DlVeyf1VxCOFp2TvmiSA+n5K8nQiVT+nMC1FWc/P8YqY+8CpuJnjbkPJmKSOvu9U IvLj+VMe+Eiu53y5GTtnxZwk3Ts5S6mRmu74NKuF+WfWFUHrCtES/6a0iCBbXTe5 zmS32bpydQhoBxhOyIIJLuSOXn/DQ0mK5bHmvBXksH7C5pEVFN29G5QfTYYayRV8 xUNQHkIqSKoRdngh+vIz1+XT+AUhmGdZnwz25LdzdfRm5sJEd/i18b4SZNt2XFz+ ybaiHeFttX/5NADArBqdPLB/JK8UVOpNbtan+CEKxqVp+HORPe17+1/kAwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGfOCKdtRgEqZ6OA5Tr3SETYNcDTMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 L2NjNjcxYzc5LTIxZjAtNGZmZi1iODk4LTU5NTk2NmVjZDFhOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJABnAP8AMA0GCSqGSIb3DQEBCwUAA4IBAQCCluUYDpSHpOoVRPYm HX/U9/CgugK/qIETrB4HwfKLyG1Pfbvn77nFlIFFJKEctn+XjcQ4IkdCMrL9s7Ze JtslZ/SbQuUSPn3r9YIBN9Aj4sNT2aI2QTTIlgPu4F8OVNXLL+HPI9dTRkXy6tb9 2oJgiZXj1e3T62HDC2pTIRBzzP5+LWWiezRIU61dmZebcrKqOlpBsEnMuB5x6Lwl QIj31Nz4LIzY6jApasWgZ4DlHsvr8c68oKpVBfn8758VtZMSyWYr/qI20F7hPREp fnYNZoCaDR+CggbBKOIsMUPlRT62gjN4kdoj/93GCTUuWG01vbl74xoCIrLRxxlF qg0A -----END CERTIFICATE-----Generated at Thu Nov 5 05:56:00 2026 by rpki-client