$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c3ea66e-90d9-4e10-953b-447ec792ecb9.roa File: 9c3ea66e-90d9-4e10-953b-447ec792ecb9.roa (raw, json) Hash identifier: 9y3upLNryjUMAHNa1yxjolJsrt0ersI2nTGXQJADOrk= Subject key identifier: 43:26:99:48:F6:0F:37:CE:49:C2:25:9D:40:49:5F:10:98:1E:83:EE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 387A280E00C13330DE9B9B0C895D9AF345617D20 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c3ea66e-90d9-4e10-953b-447ec792ecb9.roa Signing time: Sat 07 Nov 2026 00:02:40 +0000 ROA not before: Sat 07 Nov 2026 00:02:40 +0000 ROA not after: Fri 05 Feb 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7a:28:0e:00:c1:33:30:de:9b:9b:0c:89:5d:9a:f3:45:61:7d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:02:40 2026 GMT Not After : Feb 5 23:59:59 2027 GMT Subject: serialNumber=4e6c9fdd74211e0f04ef1ff03bc406cb2c0763874209e99ac99c8df9fdcf12fb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:a9:df:d8:4a:bf:79:f4:86:e6:73:cb:ce: 45:f0:fa:bb:8f:30:c2:4c:2c:1b:ab:76:76:ed:bd: 0d:4e:4d:6c:f7:31:71:2f:4b:87:28:5b:d1:52:a6: 9d:e1:d7:e1:a3:91:14:48:65:1b:37:f2:58:e4:07: 74:80:b5:ce:76:86:5f:05:6c:16:84:9f:13:47:fd: f6:96:1e:08:1d:21:6d:91:ea:ef:73:ac:a3:ca:85: ec:a6:90:67:81:52:95:aa:5e:26:ba:9e:6c:51:25: 82:54:37:30:34:ad:39:81:e2:f4:eb:49:5c:13:b2: 71:4a:53:08:5f:67:cc:72:df:b3:d5:97:1e:ef:fa: 2e:8b:26:7f:fe:02:9c:d1:16:c1:e3:76:c9:95:aa: 00:1e:c3:5f:4c:2f:84:83:77:cf:dd:4c:1e:aa:4f: 0e:63:aa:90:1a:ba:79:0b:a0:64:65:8c:60:91:df: 81:e3:52:a1:40:28:13:58:e8:2f:3d:b7:9e:a8:0e: b5:9b:32:bd:75:e0:a1:00:f8:90:d7:84:74:5f:d4: 74:9f:cc:03:68:e8:73:a4:04:02:e9:5f:a4:59:54: aa:29:0e:89:21:43:cf:fa:04:b5:58:62:50:df:13: e3:dc:0c:1e:e4:f9:3e:17:40:e2:7e:1f:e9:17:ce: a3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:26:99:48:F6:0F:37:CE:49:C2:25:9D:40:49:5F:10:98:1E:83:EE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c3ea66e-90d9-4e10-953b-447ec792ecb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:4800::/40 Signature Algorithm: sha256WithRSAEncryption 27:14:88:78:ee:6d:d2:b5:16:9c:c9:0e:af:b3:bb:80:98:dd: 95:8f:0e:32:79:d2:0f:84:b3:ab:fd:2e:94:d0:05:a3:64:98: ff:7c:7c:10:3d:4d:10:0c:51:65:97:b6:6c:0f:17:03:f0:9b: 7b:b7:dd:ec:07:d6:cb:2b:8f:d0:23:5f:15:f2:a6:34:d2:24: e9:02:60:f5:4f:1f:44:ec:e4:78:dc:dc:53:c2:d1:c3:b2:97: ad:72:2a:be:f3:ab:06:c2:74:ae:ec:4f:ab:0d:d7:a9:2b:e2: 49:83:49:8a:7b:31:24:df:ad:b1:ba:aa:39:68:2b:bf:ab:7f: b9:e3:71:dc:be:5c:70:50:f5:37:f8:0d:0c:b6:b3:9e:a2:e6: 9c:ef:b1:f7:5d:24:1e:fc:88:8b:5a:6d:89:db:5d:37:74:d0: a5:08:7f:eb:19:2b:89:3c:9d:e6:97:6e:72:8f:4c:1f:86:13: dd:b5:69:ed:85:bb:f8:d9:a0:eb:94:62:a3:02:36:ef:09:23: 74:54:45:53:28:5d:b3:46:92:fe:de:61:69:29:50:0e:41:af: f3:32:35:28:45:37:e6:66:50:9e:17:de:a5:58:38:b2:24:67: 2b:51:9a:ce:bb:33:34:38:8a:02:99:51:c9:e7:a2:1c:31:c1: 5c:f2:c7:ed -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOHooDgDBMzDem5sMiV2a80VhfSAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTEwNzAwMDI0MFoX DTI3MDIwNTIzNTk1OVowejFJMEcGA1UEBRNANGU2YzlmZGQ3NDIxMWUwZjA0ZWYx ZmYwM2JjNDA2Y2IyYzA3NjM4NzQyMDllOTlhYzk5YzhkZjlmZGNmMTJmYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkap39hKv3n0huZzy85F8Pq7jzDC TCwbq3Z27b0NTk1s9zFxL0uHKFvRUqad4dfho5EUSGUbN/JY5Ad0gLXOdoZfBWwW hJ8TR/32lh4IHSFtkervc6yjyoXsppBngVKVql4mup5sUSWCVDcwNK05geL060lc E7JxSlMIX2fMct+z1Zce7/ouiyZ//gKc0RbB43bJlaoAHsNfTC+Eg3fP3Uweqk8O Y6qQGrp5C6BkZYxgkd+B41KhQCgTWOgvPbeeqA61mzK9deChAPiQ14R0X9R0n8wD aOhzpAQC6V+kWVSqKQ6JIUPP+gS1WGJQ3xPj3Awe5Pk+F0Difh/pF86j7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEMmmUj2DzfOScIlnUBJXxCYHoPuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzljM2VhNjZlLTkwZDktNGUxMC05NTNiLTQ0N2VjNzkyZWNiOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaukgwDQYJKoZIhvcNAQELBQADggEBACcUiHjubdK1FpzJDq+z u4CY3ZWPDjJ50g+Es6v9LpTQBaNkmP98fBA9TRAMUWWXtmwPFwPwm3u33ewH1ssr j9AjXxXypjTSJOkCYPVPH0Ts5Hjc3FPC0cOyl61yKr7zqwbCdK7sT6sN16kr4kmD SYp7MSTfrbG6qjloK7+rf7njcdy+XHBQ9Tf4DQy2s56i5pzvsfddJB78iItabYnb XTd00KUIf+sZK4k8neaXbnKPTB+GE921ae2Fu/jZoOuUYqMCNu8JI3RURVMoXbNG kv7eYWkpUA5Br/MyNShFN+ZmUJ4X3qVYOLIkZytRms67MzQ4igKZUcnnohwxwVzy x+0= -----END CERTIFICATE-----Generated at Thu Nov 12 20:53:44 2026 by rpki-client