$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7df54ca1-fa6b-41e4-8480-61d86d49f455.roa File: 7df54ca1-fa6b-41e4-8480-61d86d49f455.roa (raw, json) Hash identifier: Fy331QtcSSXzZ631yLqBsrEKEutH5ZWGvsqhvEM4RHk= Subject key identifier: 6F:4F:B1:59:7B:29:0F:EF:53:2C:1F:DF:12:B3:D8:A3:AF:7D:B7:AC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 649EEBFE647E0891BB311C6721FFB6015B24BD69 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7df54ca1-fa6b-41e4-8480-61d86d49f455.roa Signing time: Mon 19 Oct 2026 00:10:45 +0000 ROA not before: Mon 19 Oct 2026 00:10:45 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9e:eb:fe:64:7e:08:91:bb:31:1c:67:21:ff:b6:01:5b:24:bd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:10:45 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=07b4743a6beecd7a6faba320846a6c5419e38e5c3c51a265b4b34425c956aed4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0c:59:c1:dc:06:f9:1d:b0:fc:c5:ea:e0:ef: 6f:83:49:34:53:58:c9:5a:9f:bb:65:7b:89:b5:73: e2:13:f2:90:d3:d9:ac:c3:83:fb:4c:f5:2c:f4:25: b1:bf:de:be:2c:91:19:3b:58:27:76:05:b3:44:d5: cc:36:b5:37:48:29:c4:1c:89:c8:06:41:42:4e:87: 04:0f:e9:a0:c1:dd:35:8b:b9:d6:fb:06:ef:21:c7: d1:3f:a9:b5:80:ab:be:58:2b:0c:44:8c:dd:e2:47: b6:c4:1d:ff:65:0d:1d:14:1e:bd:01:06:d2:1f:23: 16:6f:fa:a4:ce:58:10:86:42:7b:86:b2:00:86:bb: 18:a9:66:a1:f0:05:7f:2e:8a:16:d6:7d:c8:8d:85: 31:c2:26:84:94:55:9f:ec:d7:56:a6:40:35:c1:b3: 2c:c3:0f:a3:35:0e:b0:3f:1c:8f:21:ce:9f:23:36: eb:30:68:d0:a1:67:7e:79:35:25:f5:cc:2c:f6:f1: da:79:7b:ec:19:d9:78:c3:e0:39:bb:01:1e:24:d3: 8c:8f:8b:cd:3d:96:8d:eb:a5:e8:6c:e2:59:1e:8a: ee:ff:2d:98:f4:b1:21:bf:51:e6:0e:31:c7:be:fd: fe:39:9b:66:53:b2:e8:28:8f:23:d6:07:93:73:58: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4F:B1:59:7B:29:0F:EF:53:2C:1F:DF:12:B3:D8:A3:AF:7D:B7:AC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7df54ca1-fa6b-41e4-8480-61d86d49f455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8040::/48 Signature Algorithm: sha256WithRSAEncryption 64:2d:3a:12:68:b1:38:51:34:22:4e:3e:3d:61:4d:94:74:eb: 44:73:58:1b:0c:69:82:39:3a:3e:bd:16:73:e2:f4:0e:9f:c0: 02:78:72:ee:02:85:95:cc:cc:3a:2b:32:54:14:08:2b:6d:c0: 3b:3c:6e:27:f5:10:8d:20:e3:5b:09:21:07:e4:1e:4c:af:e7: dd:69:f2:50:74:3d:e0:4a:ff:d8:3b:9d:ef:db:2e:08:2b:a2: f1:86:0b:61:a4:16:53:48:35:99:85:43:c7:25:bc:ec:ef:10: d1:11:8b:a8:f4:f2:d2:10:2d:17:1e:a8:c7:a0:98:23:6c:e5: 7d:56:47:b4:a2:a2:63:80:f6:cd:79:55:3b:3d:e8:f2:c4:3d: f2:c2:05:5e:d8:8c:cc:f2:0f:69:33:09:86:54:5f:b1:4e:22: 9f:df:21:97:b2:1c:7f:7f:52:ca:66:28:0c:14:d4:33:2b:7b: 4f:7e:6a:d7:84:c7:6d:13:c4:42:d7:7b:73:61:e4:57:04:8b: 39:aa:23:fc:7c:2d:cf:e2:41:13:7b:d4:c7:f7:92:34:40:ff: c8:d7:6d:18:36:74:4e:6d:b5:30:a4:db:8a:6a:57:be:6c:97: b2:07:e1:31:56:ce:7a:0a:4a:b6:6b:aa:27:db:9e:b2:24:15: fd:c2:7a:5f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZJ7r/mR+CJG7MRxnIf+2AVskvWkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMTA0NVoX DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNAMDdiNDc0M2E2YmVlY2Q3YTZmYWJh MzIwODQ2YTZjNTQxOWUzOGU1YzNjNTFhMjY1YjRiMzQ0MjVjOTU2YWVkNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AxZwdwG+R2w/MXq4O9vg0k0U1jJ Wp+7ZXuJtXPiE/KQ09msw4P7TPUs9CWxv96+LJEZO1gndgWzRNXMNrU3SCnEHInI BkFCTocED+mgwd01i7nW+wbvIcfRP6m1gKu+WCsMRIzd4ke2xB3/ZQ0dFB69AQbS HyMWb/qkzlgQhkJ7hrIAhrsYqWah8AV/LooW1n3IjYUxwiaElFWf7NdWpkA1wbMs ww+jNQ6wPxyPIc6fIzbrMGjQoWd+eTUl9cws9vHaeXvsGdl4w+A5uwEeJNOMj4vN PZaN66XobOJZHoru/y2Y9LEhv1HmDjHHvv3+OZtmU7LoKI8j1geTc1jFRQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFG9PsVl7KQ/vUywf3xKz2KOvfbesMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdkZjU0Y2ExLWZhNmItNDFlNC04NDgwLTYxZDg2ZDQ5ZjQ1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8oBAMA0GCSqGSIb3DQEBCwUAA4IBAQBkLToSaLE4UTQiTj49 YU2UdOtEc1gbDGmCOTo+vRZz4vQOn8ACeHLuAoWVzMw6KzJUFAgrbcA7PG4n9RCN IONbCSEH5B5Mr+fdafJQdD3gSv/YO53v2y4IK6LxhgthpBZTSDWZhUPHJbzs7xDR EYuo9PLSEC0XHqjHoJgjbOV9Vke0oqJjgPbNeVU7PejyxD3ywgVe2IzM8g9pMwmG VF+xTiKf3yGXshx/f1LKZigMFNQzK3tPfmrXhMdtE8RC13tzYeRXBIs5qiP8fC3P 4kETe9TH95I0QP/I120YNnRObbUwpNuKale+bJeyB+ExVs56Ckq2a6on256yJBX9 wnpf -----END CERTIFICATE-----Generated at Thu Nov 12 20:58:51 2026 by rpki-client