$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04d89bae-21f4-4b20-a036-a8019801e2d8.roa File: 04d89bae-21f4-4b20-a036-a8019801e2d8.roa (raw, json) Hash identifier: a8lonJ8pm2gyDHiBTrT3mPJt7nHONPOylP9lcNcMDfw= Subject key identifier: 70:30:47:88:B8:68:CB:8B:86:7F:02:B9:E8:E2:BC:89:E0:F8:FC:A0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 260281937DACF026FCB447C3667835E2B87DFB03 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04d89bae-21f4-4b20-a036-a8019801e2d8.roa Signing time: Fri 09 Oct 2026 00:07:38 +0000 ROA not before: Fri 09 Oct 2026 00:07:38 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:02:81:93:7d:ac:f0:26:fc:b4:47:c3:66:78:35:e2:b8:7d:fb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:07:38 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=3dd9a9b5a7b89d3954ac017da01a0e40a590fcbcf0b0bfea08161f156ef75c0d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:1f:5c:db:b5:c3:c4:9f:fc:c7:53:09:53: 5b:8d:49:4a:1b:c2:6a:cf:f9:56:f2:94:ea:64:0a: 3a:ef:56:bd:77:59:bc:11:ae:79:f5:dd:6c:20:54: 27:4b:3e:43:5c:f4:60:4d:69:09:9d:43:0b:00:8e: 59:90:14:ab:44:3d:2c:a0:b5:9a:d1:67:68:b5:34: d6:59:c8:9e:10:68:da:4b:5f:6f:5b:cc:76:d7:60: 52:fd:7e:48:a8:82:d0:89:a6:2f:3c:57:92:8b:f4: 5d:40:f7:a5:cf:7b:0e:6b:0a:ea:b3:5d:3f:4c:03: e2:01:78:b3:3f:2e:61:a1:80:9d:24:e0:0c:e3:2b: f3:9a:61:e3:6d:36:0c:03:8b:ef:fb:b7:03:3d:8a: fe:14:37:d5:f0:45:f2:38:e6:e4:77:df:39:f1:c3: d8:32:39:fd:46:21:71:ab:d6:2e:8f:88:51:13:6f: 97:6c:28:fd:90:23:18:da:9a:9a:83:43:bc:23:67: 96:44:ea:3f:07:8f:97:5c:09:aa:74:a0:8d:ef:98: 02:aa:9a:52:94:d8:3f:c5:e6:74:30:46:e8:13:43: df:05:57:44:79:aa:ad:e9:fb:63:21:cc:4a:15:20: 89:54:79:ce:0c:de:ca:61:d3:98:cd:55:06:8a:4f: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:30:47:88:B8:68:CB:8B:86:7F:02:B9:E8:E2:BC:89:E0:F8:FC:A0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04d89bae-21f4-4b20-a036-a8019801e2d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:f080::/48 Signature Algorithm: sha256WithRSAEncryption cb:1a:46:17:9e:dd:66:7b:21:29:30:1d:d0:64:28:94:31:73: a5:d1:04:2d:45:bb:e6:4c:62:d2:74:98:ca:2a:1b:19:65:96: 00:2b:62:9f:f4:b2:8c:b4:ab:01:cb:c5:71:f8:88:29:32:05: 51:db:0a:1f:66:8f:5f:08:56:9e:e4:3b:8b:78:e9:2a:93:6f: fc:3e:22:97:98:1b:e8:ef:26:79:ab:c8:f1:22:ae:ba:e6:8c: fe:4f:34:9c:4b:35:c1:8b:fb:da:ef:95:9a:ed:58:d0:21:56: 99:8e:e5:2d:30:99:79:44:d5:ff:d5:c1:69:e6:31:50:d2:46: 0f:43:c2:f3:2b:f5:be:ae:70:48:5b:cd:db:07:9f:90:ec:f5: fc:aa:10:57:c4:06:29:7d:fe:ce:96:ae:33:78:4a:aa:c2:08: 24:fd:95:eb:be:c7:06:95:48:33:2c:19:ea:4f:3e:a3:69:03: 12:b4:ca:47:d8:da:7a:8b:7b:bd:a1:96:51:e8:76:09:47:96: 41:0f:fa:e0:4e:64:04:89:ec:57:df:bb:ff:20:f1:6f:16:63: 0d:d6:c5:d9:3e:1d:da:5d:bf:47:b0:f0:b2:2d:37:da:3c:2e: b1:ca:0a:76:3d:bc:95:bf:7b:d1:60:a7:4a:11:90:19:68:f8: 20:1a:1d:8a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJgKBk32s8Cb8tEfDZng14rh9+wMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDczOFoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAM2RkOWE5YjVhN2I4OWQzOTU0YWMw MTdkYTAxYTBlNDBhNTkwZmNiY2YwYjBiZmVhMDgxNjFmMTU2ZWY3NWMwZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKUfXNu1w8Sf/MdTCVNbjUlKG8Jq z/lW8pTqZAo671a9d1m8Ea559d1sIFQnSz5DXPRgTWkJnUMLAI5ZkBSrRD0soLWa 0WdotTTWWcieEGjaS19vW8x212BS/X5IqILQiaYvPFeSi/RdQPelz3sOawrqs10/ TAPiAXizPy5hoYCdJOAM4yvzmmHjbTYMA4vv+7cDPYr+FDfV8EXyOObkd9858cPY Mjn9RiFxq9Yuj4hRE2+XbCj9kCMY2pqag0O8I2eWROo/B4+XXAmqdKCN75gCqppS lNg/xeZ0MEboE0PfBVdEeaqt6ftjIcxKFSCJVHnODN7KYdOYzVUGik8JXQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHAwR4i4aMuLhn8CuejivIng+PygMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA0ZDg5YmFlLTIxZjQtNGIyMC1hMDM2LWE4MDE5ODAxZTJkOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6vCAMA0GCSqGSIb3DQEBCwUAA4IBAQDLGkYXnt1meyEpMB3Q ZCiUMXOl0QQtRbvmTGLSdJjKKhsZZZYAK2Kf9LKMtKsBy8Vx+IgpMgVR2wofZo9f CFae5DuLeOkqk2/8PiKXmBvo7yZ5q8jxIq665oz+TzScSzXBi/va75Wa7VjQIVaZ juUtMJl5RNX/1cFp5jFQ0kYPQ8LzK/W+rnBIW83bB5+Q7PX8qhBXxAYpff7Olq4z eEqqwggk/ZXrvscGlUgzLBnqTz6jaQMStMpH2Np6i3u9oZZR6HYJR5ZBD/rgTmQE iexX37v/IPFvFmMN1sXZPh3aXb9HsPCyLTfaPC6xygp2PbyVv3vRYKdKEZAZaPgg Gh2K -----END CERTIFICATE-----Generated at Sun Oct 11 18:54:26 2026 by rpki-client