$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8d5c0ed2-ab5c-4d4b-99fa-204a8746d73f.roa File: 8d5c0ed2-ab5c-4d4b-99fa-204a8746d73f.roa (raw, json) Hash identifier: NBFr585fD0vfDNZddiY+5sfFC+PWnWbbSdxcnygC8LA= Subject key identifier: 7B:F3:F4:E6:FE:D1:C6:08:6B:13:FA:37:5C:11:E3:37:F7:5E:78:BB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5B27D43E250D0797F7E8A9C0895563230E3D1779 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8d5c0ed2-ab5c-4d4b-99fa-204a8746d73f.roa Signing time: Fri 06 Nov 2026 00:02:11 +0000 ROA not before: Fri 06 Nov 2026 00:02:11 +0000 ROA not after: Thu 04 Feb 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da33:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:27:d4:3e:25:0d:07:97:f7:e8:a9:c0:89:55:63:23:0e:3d:17:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 6 00:02:11 2026 GMT Not After : Feb 4 23:59:59 2027 GMT Subject: serialNumber=951897b0aca3f5f51e094198b9b2deab0326c4b0f6d58faf7a084e48fa422432, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:b2:90:10:0e:58:85:40:20:64:0d:13:dc: 04:3b:c2:e0:6b:8a:c5:af:16:ef:69:15:ab:2a:69: 13:d7:a0:a9:c2:cf:1f:aa:19:11:d4:a7:b6:d9:75: 41:a6:a3:9d:2b:e9:2b:f6:81:5b:cb:0f:7a:ba:99: 03:44:bf:92:04:f2:1e:f9:e4:99:4f:2b:84:31:44: 06:5e:2c:e3:10:87:de:3b:fb:df:74:b1:42:ca:56: 1f:22:fe:3b:57:f0:b6:41:09:95:61:b2:cf:90:0f: 40:a9:5a:50:80:1a:b1:1c:cc:cf:10:81:80:c5:ea: a5:04:ca:4b:90:22:02:e3:04:d8:d3:cc:b2:f5:fd: 43:22:36:8c:de:84:db:ed:4f:44:7f:ef:ca:a6:6e: 8a:81:91:79:28:bb:a8:03:66:be:e7:22:6c:c4:48: 22:4b:7a:95:49:27:b1:1c:74:f9:f5:13:a8:98:7d: d1:5f:6a:8b:db:15:8c:8d:40:7e:b2:34:45:46:3c: 7d:d5:a0:7b:19:11:c3:cc:3f:d7:9b:f2:0a:a6:d0: 48:1f:30:6e:15:0e:be:a8:9c:72:61:d9:b7:7a:fd: f4:45:53:d5:30:d7:66:29:ca:ba:ce:6e:10:0a:c5: c8:dd:cf:88:a6:c2:49:cd:94:df:07:56:b0:1a:2d: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F3:F4:E6:FE:D1:C6:08:6B:13:FA:37:5C:11:E3:37:F7:5E:78:BB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8d5c0ed2-ab5c-4d4b-99fa-204a8746d73f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:800::/40 Signature Algorithm: sha256WithRSAEncryption b1:c8:5d:e6:55:1f:5d:89:35:11:7f:02:f5:fa:ea:89:eb:d2: f5:39:06:51:39:cb:63:36:ae:e2:d9:cc:84:ab:24:59:c2:27: da:52:5f:38:f0:cc:a3:25:9f:b8:11:b9:57:1d:f6:d7:c1:5e: 4e:e2:ce:f8:24:b8:49:92:ce:43:02:24:ce:6e:93:2d:ac:70: a5:dc:7c:b6:40:d8:31:2c:c0:65:b9:6c:53:63:bf:3f:ae:d2: 00:28:c5:fa:dd:e8:0a:92:e8:65:69:11:c0:9f:f4:a1:7d:39: 1b:2b:40:cc:c9:2d:a3:4e:0d:56:96:71:4b:43:25:3e:d1:ef: 51:6c:a3:9b:a3:d4:90:e1:c6:bf:b8:b4:81:01:28:d3:98:70: 10:1c:13:4c:33:8e:a1:36:0d:f2:fc:fc:df:b5:a7:0a:c3:ed: 6f:db:cf:7f:23:73:e5:07:f7:d8:13:c6:0e:08:ba:31:6d:5c: 91:49:b6:f2:e4:19:f8:3b:04:d3:43:e6:5c:93:46:91:75:b1: 9b:b4:f6:9d:20:f1:65:b9:fe:5a:71:dd:2a:2d:3e:5b:b4:74: b8:ea:f2:b2:d3:cd:a6:bc:33:48:11:9a:43:a2:2a:48:c6:0b: eb:df:a1:71:2e:30:82:45:c2:72:96:77:47:42:e9:6f:ce:0d: 08:be:d5:eb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWyfUPiUNB5f36KnAiVVjIw49F3kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTEwNjAwMDIxMVoX DTI3MDIwNDIzNTk1OVowejFJMEcGA1UEBRNAOTUxODk3YjBhY2EzZjVmNTFlMDk0 MTk4YjliMmRlYWIwMzI2YzRiMGY2ZDU4ZmFmN2EwODRlNDhmYTQyMjQzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKCykBAOWIVAIGQNE9wEO8Lga4rF rxbvaRWrKmkT16Cpws8fqhkR1Ke22XVBpqOdK+kr9oFbyw96upkDRL+SBPIe+eSZ TyuEMUQGXizjEIfeO/vfdLFCylYfIv47V/C2QQmVYbLPkA9AqVpQgBqxHMzPEIGA xeqlBMpLkCIC4wTY08yy9f1DIjaM3oTb7U9Ef+/Kpm6KgZF5KLuoA2a+5yJsxEgi S3qVSSexHHT59ROomH3RX2qL2xWMjUB+sjRFRjx91aB7GRHDzD/Xm/IKptBIHzBu FQ6+qJxyYdm3ev30RVPVMNdmKcq6zm4QCsXI3c+IpsJJzZTfB1awGi1e1QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHvz9Ob+0cYIaxP6N1wR4zf3Xni7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhkNWMwZWQyLWFiNWMtNGQ0Yi05OWZhLTIwNGE4NzQ2ZDczZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMwgwDQYJKoZIhvcNAQELBQADggEBALHIXeZVH12JNRF/AvX6 6onr0vU5BlE5y2M2ruLZzISrJFnCJ9pSXzjwzKMln7gRuVcd9tfBXk7izvgkuEmS zkMCJM5uky2scKXcfLZA2DEswGW5bFNjvz+u0gAoxfrd6AqS6GVpEcCf9KF9ORsr QMzJLaNODVaWcUtDJT7R71Fso5uj1JDhxr+4tIEBKNOYcBAcE0wzjqE2DfL8/N+1 pwrD7W/bz38jc+UH99gTxg4IujFtXJFJtvLkGfg7BNND5lyTRpF1sZu09p0g8WW5 /lpx3SotPlu0dLjq8rLTzaa8M0gRmkOiKkjGC+vfoXEuMIJFwnKWd0dC6W/ODQi+ 1es= -----END CERTIFICATE-----Generated at Thu Nov 12 18:55:14 2026 by rpki-client