$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7b1c1ce-ca99-4712-96c8-2e4dc35d25f1.roa File: c7b1c1ce-ca99-4712-96c8-2e4dc35d25f1.roa (raw, json) Hash identifier: Kbfs19nXAlORd2ZHainvoyonVb/urGTBupmPGG5QYIA= Subject key identifier: DF:ED:50:67:A4:77:06:89:47:B8:37:8C:F6:FA:73:7B:FC:74:B8:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 356AEB620091AC205EB5721103194A3EFB984214 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7b1c1ce-ca99-4712-96c8-2e4dc35d25f1.roa Signing time: Thu 15 Oct 2026 00:07:48 +0000 ROA not before: Thu 15 Oct 2026 00:07:48 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6a:eb:62:00:91:ac:20:5e:b5:72:11:03:19:4a:3e:fb:98:42:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:07:48 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=404174945c9970caa8459f58635d9dd08046efcc0a37dbdb06dcf1501b874a47, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cf:ef:81:3f:38:89:d7:e3:dd:16:f0:9d:8a: 9a:a1:0f:34:53:8f:a3:e5:dd:fc:5d:61:23:4e:f8: e9:59:c1:a4:10:e7:dd:bf:c2:28:3b:d3:6f:c0:af: 9a:71:b9:38:f4:22:1c:ea:e8:d9:d6:e6:c2:a4:e9: e6:4f:56:e1:ef:b7:47:d3:58:a2:f8:b7:f2:01:95: 3c:8b:97:21:ef:84:f5:3a:55:c7:87:44:95:31:48: b2:c7:33:8a:02:9b:0a:e3:a4:d4:e8:26:ad:87:4b: 45:db:90:a2:75:8a:43:93:ce:c4:46:f7:01:f9:b4: 73:f4:01:55:8f:22:ba:af:b8:eb:f3:91:10:b1:3f: bf:c7:db:df:86:5d:b1:28:0a:8e:96:e5:b0:07:7e: 95:ed:4d:f0:41:03:07:5c:d7:d5:b3:6d:c3:1e:24: aa:74:0f:15:d8:12:84:f6:8e:82:43:d5:f1:71:44: 7e:7b:95:c5:58:b0:3a:be:7b:70:e2:8a:dd:44:00: 26:a5:fa:2c:d3:ad:fe:be:ba:f7:f2:6f:df:ff:61: a4:a0:41:a7:ea:d8:d9:30:5a:2c:b5:4a:e6:f5:e9: 49:d7:34:a9:a6:da:74:3e:ae:6b:9f:d0:fc:c7:8c: d7:1f:c6:be:ea:64:d3:a9:91:83:df:d3:95:78:73: bb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:ED:50:67:A4:77:06:89:47:B8:37:8C:F6:FA:73:7B:FC:74:B8:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7b1c1ce-ca99-4712-96c8-2e4dc35d25f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:a000::/40 Signature Algorithm: sha256WithRSAEncryption 72:e6:b1:e7:f2:0e:10:95:d3:4f:ad:09:2c:a2:cc:45:95:b5: 22:0c:fc:1a:75:dc:44:30:90:5e:99:58:24:15:d0:f3:0b:92: 3e:50:91:3a:a8:70:a0:e1:ba:a9:09:c3:80:56:cc:f5:52:f3: e4:c7:dc:4e:e2:9a:c2:d6:0d:ea:6b:a4:f9:eb:01:e6:49:77: be:41:2f:b1:10:e5:de:68:2e:75:00:92:3c:f2:11:d8:7b:da: 07:79:f2:81:bb:d5:66:ac:12:be:55:13:14:32:cb:aa:17:65: 7b:04:9d:71:04:11:1a:f8:24:3c:18:17:3b:ac:a7:f3:43:50: 7e:51:93:c5:b8:01:b6:fe:41:be:a6:53:c0:3c:a5:6f:16:82: 8e:3d:4f:24:9c:77:0e:89:f7:29:61:6b:38:13:00:bd:c5:99: 5e:a8:c4:0e:49:c6:28:c0:97:47:52:b7:2b:a0:61:df:ff:85: bd:d9:68:6b:b4:50:5e:61:e3:4d:ce:00:f2:c5:db:f6:2e:5a: 56:1f:ab:b8:77:16:18:da:b4:69:ad:77:c7:97:e3:b4:95:e0: b0:68:e1:c9:08:82:15:5d:99:8d:ef:2a:7a:25:ae:e1:3b:f8: a3:16:a0:1f:14:38:b6:36:fd:03:2c:10:31:ac:fc:42:77:41: 64:fa:a1:e1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNWrrYgCRrCBetXIRAxlKPvuYQhQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxNTAwMDc0OFoX DTI3MDExMzIzNTk1OVowejFJMEcGA1UEBRNANDA0MTc0OTQ1Yzk5NzBjYWE4NDU5 ZjU4NjM1ZDlkZDA4MDQ2ZWZjYzBhMzdkYmRiMDZkY2YxNTAxYjg3NGE0NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48/vgT84idfj3RbwnYqaoQ80U4+j 5d38XWEjTvjpWcGkEOfdv8IoO9NvwK+acbk49CIc6ujZ1ubCpOnmT1bh77dH01ii +LfyAZU8i5ch74T1OlXHh0SVMUiyxzOKApsK46TU6Cath0tF25CidYpDk87ERvcB +bRz9AFVjyK6r7jr85EQsT+/x9vfhl2xKAqOluWwB36V7U3wQQMHXNfVs23DHiSq dA8V2BKE9o6CQ9XxcUR+e5XFWLA6vntw4ordRAAmpfos063+vrr38m/f/2GkoEGn 6tjZMFostUrm9elJ1zSpptp0Pq5rn9D8x4zXH8a+6mTTqZGD39OVeHO75wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN/tUGekdwaJR7g3jPb6c3v8dLgHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3YjFjMWNlLWNhOTktNDcxMi05NmM4LTJlNGRjMzVkMjVmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9KAwDQYJKoZIhvcNAQELBQADggEBAHLmsefyDhCV00+tCSyi zEWVtSIM/Bp13EQwkF6ZWCQV0PMLkj5QkTqocKDhuqkJw4BWzPVS8+TH3E7imsLW DeprpPnrAeZJd75BL7EQ5d5oLnUAkjzyEdh72gd58oG71WasEr5VExQyy6oXZXsE nXEEERr4JDwYFzusp/NDUH5Rk8W4Abb+Qb6mU8A8pW8Wgo49TyScdw6J9ylhazgT AL3FmV6oxA5JxijAl0dStyugYd//hb3ZaGu0UF5h403OAPLF2/YuWlYfq7h3Fhja tGmtd8eX47SV4LBo4ckIghVdmY3vKnolruE7+KMWoB8UOLY2/QMsEDGs/EJ3QWT6 oeE= -----END CERTIFICATE-----Generated at Thu Nov 12 21:04:47 2026 by rpki-client