$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1219e8ec-d527-4910-8cb6-e0e4e3503f2a.roa File: 1219e8ec-d527-4910-8cb6-e0e4e3503f2a.roa (raw, json) Hash identifier: Pvv0261JmviFunsLc9z0faiEcgNEk7Xj446Yguqs0BQ= Subject key identifier: 57:E2:B3:11:67:D8:84:A2:DF:D1:F4:91:79:EC:BC:2F:97:B7:EC:33 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 79D8376C8B2B3DE6CEA89CB142F965B2B6E0FABB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1219e8ec-d527-4910-8cb6-e0e4e3503f2a.roa Signing time: Sun 04 Oct 2026 00:00:12 +0000 ROA not before: Sun 04 Oct 2026 00:00:12 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da68:a0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d8:37:6c:8b:2b:3d:e6:ce:a8:9c:b1:42:f9:65:b2:b6:e0:fa:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:12 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=d5090ce5bf9a08aa109dd6c1aaa32e85284da8642898d54cfeb407dc5e3dcfa9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:7f:5b:d5:81:a3:8d:f7:42:28:75:6d:64: 82:9a:ae:78:ff:f9:7d:80:cc:15:a7:f7:e0:6c:aa: 5c:5c:fc:c2:c4:ac:0e:2b:d5:6c:d9:54:c0:ee:7f: cc:af:1c:67:d4:98:3e:e5:dc:54:ed:e0:f9:80:77: a5:9e:76:c9:27:fb:58:0b:c3:69:06:5b:fa:3e:cf: db:4c:ed:bf:19:2f:51:25:24:29:5a:1d:39:ca:2a: b9:34:d5:6d:5f:fb:63:39:94:a2:be:ab:c8:12:e4: c8:9f:e7:97:0c:8e:09:9f:10:23:7d:53:ee:14:79: 03:10:69:42:1a:cf:ca:fe:eb:16:15:70:d5:2e:e7: 9f:fe:46:d5:e4:0b:a5:a4:93:be:7c:db:28:d5:cd: 02:98:b3:12:c8:47:42:4e:24:ac:ca:52:61:2c:49: dd:f0:0d:2d:1c:1f:59:b4:bd:9c:70:80:d5:7e:f5: c5:66:a9:76:b3:3f:ef:f3:41:98:c2:c9:7f:7b:42: ca:2a:80:2f:e7:50:bf:e7:6b:44:c7:c9:f7:e6:e8: 4c:f4:cc:a0:d9:7c:f6:ea:94:2b:c6:db:d1:0d:ab: 0f:a9:9a:ce:d0:af:85:97:4a:72:22:e0:59:36:13: 68:3f:20:61:c9:26:56:ed:18:06:6d:a7:0d:4e:47: b1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E2:B3:11:67:D8:84:A2:DF:D1:F4:91:79:EC:BC:2F:97:B7:EC:33 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1219e8ec-d527-4910-8cb6-e0e4e3503f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:a0c0::/46 Signature Algorithm: sha256WithRSAEncryption 49:bf:2d:fe:af:30:85:2a:92:55:d7:32:72:1d:2d:e6:bf:82: e7:f7:31:ab:10:41:6e:32:50:a4:9e:f0:2c:1b:5f:f8:85:cc: 03:93:af:1f:d7:84:b6:ab:64:44:62:33:71:58:d2:28:cb:8b: ca:47:6a:7e:08:b0:2a:b9:e6:56:df:ae:64:89:0d:80:81:3f: 64:67:4a:ec:13:f8:db:86:3e:f8:21:61:f0:0a:22:70:1c:85: 88:cd:5b:69:0c:2c:b0:f5:f5:d2:a3:eb:c0:f2:f1:2d:2f:1c: 4d:74:6f:db:d4:3c:30:f0:5c:64:c7:0a:7d:b3:9a:c0:64:57: d3:8d:23:6f:e8:fb:36:9f:a6:62:c4:8a:ae:9a:43:81:f2:1e: 94:03:8d:ab:63:d0:68:13:a4:9d:57:d6:5a:07:aa:eb:19:2c: 15:bc:b0:c3:13:82:d7:aa:42:4c:38:02:65:c9:57:1c:6b:26: 9a:e4:f5:23:23:30:76:31:2a:1f:45:61:4c:74:ac:e5:58:d2: 22:ad:9d:74:2b:c0:20:6c:11:db:9e:98:bd:51:33:21:72:fc: 89:92:f6:8e:e5:a4:85:ca:73:9c:02:c8:bf:95:15:aa:09:c4: c2:42:3e:b4:6e:1f:61:01:34:40:8a:f2:8d:c1:fe:10:0f:fd: 27:37:3c:15 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUedg3bIsrPebOqJyxQvllsrbg+rswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwNDAwMDAxMloX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNAZDUwOTBjZTViZjlhMDhhYTEwOWRk NmMxYWFhMzJlODUyODRkYTg2NDI4OThkNTRjZmViNDA3ZGM1ZTNkY2ZhOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6Z/W9WBo433Qih1bWSCmq54//l9 gMwVp/fgbKpcXPzCxKwOK9Vs2VTA7n/Mrxxn1Jg+5dxU7eD5gHelnnbJJ/tYC8Np Blv6Ps/bTO2/GS9RJSQpWh05yiq5NNVtX/tjOZSivqvIEuTIn+eXDI4JnxAjfVPu FHkDEGlCGs/K/usWFXDVLuef/kbV5AulpJO+fNso1c0CmLMSyEdCTiSsylJhLEnd 8A0tHB9ZtL2ccIDVfvXFZql2sz/v80GYwsl/e0LKKoAv51C/52tEx8n35uhM9Myg 2Xz26pQrxtvRDasPqZrO0K+Fl0pyIuBZNhNoPyBhySZW7RgGbacNTkexEQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFfisxFn2ISi39H0kXnsvC+Xt+wzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEyMTllOGVjLWQ1MjctNDkxMC04Y2I2LWUwZTRlMzUwM2YyYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaKDAMA0GCSqGSIb3DQEBCwUAA4IBAQBJvy3+rzCFKpJV1zJy HS3mv4Ln9zGrEEFuMlCknvAsG1/4hcwDk68f14S2q2REYjNxWNIoy4vKR2p+CLAq ueZW365kiQ2AgT9kZ0rsE/jbhj74IWHwCiJwHIWIzVtpDCyw9fXSo+vA8vEtLxxN dG/b1Dww8Fxkxwp9s5rAZFfTjSNv6Ps2n6ZixIqumkOB8h6UA42rY9BoE6SdV9Za B6rrGSwVvLDDE4LXqkJMOAJlyVccayaa5PUjIzB2MSofRWFMdKzlWNIirZ10K8Ag bBHbnpi9UTMhcvyJkvaO5aSFynOcAsi/lRWqCcTCQj60bh9hATRAivKNwf4QD/0n NzwV -----END CERTIFICATE-----Generated at Wed Oct 7 19:01:56 2026 by rpki-client