$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3627d10a-1926-4271-b849-8cb3cd31f066.roa File: 3627d10a-1926-4271-b849-8cb3cd31f066.roa (raw, json) Hash identifier: /0fHqmVXxFqm+uQeoPAvxmbKpYhqUFrJ8vf2njN2wYs= Subject key identifier: F1:B2:01:A6:CF:8F:38:14:A2:F2:BC:90:11:00:F2:47:AE:0D:C2:1B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 021639106B676D294BC01C7C9E13916DF7FF0935 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3627d10a-1926-4271-b849-8cb3cd31f066.roa Signing time: Fri 09 Oct 2026 00:20:05 +0000 ROA not before: Fri 09 Oct 2026 00:20:05 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:16:39:10:6b:67:6d:29:4b:c0:1c:7c:9e:13:91:6d:f7:ff:09:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:20:05 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=1f8af0415495dbcff5941b1eda83979075a85c503c30133aabd9a218af6490a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:04:9b:0f:54:9b:c7:42:eb:13:de:a2:2d: c8:e9:9b:16:6e:15:93:50:af:30:52:b6:da:6c:28: 39:af:c6:3c:16:35:c0:7e:08:10:19:cb:07:83:47: 29:f5:bd:2a:e5:36:bc:44:c2:35:02:0b:0c:19:d3: 2f:c1:fd:fe:b1:6c:a8:63:0f:4b:e5:b9:9a:14:9f: 42:72:60:d6:34:d6:9b:85:45:3e:d6:ae:dc:03:dc: ee:e7:62:7e:80:c5:d3:4b:c8:b3:cd:73:c4:64:af: 5f:d3:5b:9b:21:30:ae:2a:d3:99:21:b8:9d:49:2e: 87:d6:25:36:74:fc:e3:a6:ec:13:47:6f:0e:d6:6e: 54:f4:44:43:fd:06:c6:90:d2:91:d1:2c:a1:ee:9b: 78:a0:a2:fa:79:83:06:b0:b0:5d:d6:63:ae:1a:03: a2:05:9c:72:9e:b0:ad:44:d9:90:a2:54:46:81:9b: c2:09:df:4c:55:f1:31:96:2d:fa:09:9e:4d:85:8f: 5e:7c:cf:30:9c:fa:d2:d5:59:b2:01:02:51:dc:67: ff:d7:c2:fe:2b:cb:45:95:c0:d4:77:a5:e1:bb:0b: a7:01:40:4e:fa:09:31:ad:34:da:7e:0d:90:e3:35: 87:b6:90:3f:fb:f0:6d:5c:a0:5b:48:df:d0:6a:c9: 2c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B2:01:A6:CF:8F:38:14:A2:F2:BC:90:11:00:F2:47:AE:0D:C2:1B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3627d10a-1926-4271-b849-8cb3cd31f066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:6080::/48 Signature Algorithm: sha256WithRSAEncryption 19:74:62:f1:c8:fe:d0:ac:64:e9:e9:d3:b8:77:b3:a9:9e:de: d7:cf:10:e7:57:d4:18:cb:90:a0:30:cf:b7:63:ed:80:5b:34: 8c:96:4d:1a:d7:24:ba:ba:7b:20:01:c1:3f:90:d3:31:9b:7c: 1b:72:9e:4f:7a:11:90:42:d2:1c:b2:41:c9:73:c8:1d:69:31: 98:82:cc:a4:b0:f5:f4:c0:c1:88:91:f1:57:b8:20:b2:67:58: 12:cf:2a:2b:21:18:fd:54:ba:e1:d2:08:c5:14:d1:08:9f:e5: ab:dc:e6:49:52:9e:4d:84:5e:77:d5:40:28:c5:87:22:68:88: db:5e:7e:4c:d2:16:fe:65:3f:9f:71:fc:e0:10:19:d9:cc:d4: 61:07:02:c6:f4:2e:46:4a:be:1b:7e:ac:fc:b0:d8:bd:38:c8: 15:e4:c0:1d:3c:64:19:68:f5:7d:17:65:55:b7:40:0c:7a:c8: 4d:02:f2:bf:00:0a:bb:14:b8:26:30:1f:da:3f:3f:bd:68:6f: 53:a6:7c:4f:0f:bf:9d:41:dd:54:47:4d:c6:ec:8c:d4:01:8e: 8e:0d:28:65:2d:67:b9:5a:1c:3c:b2:ba:6d:e4:95:cd:c9:6d: 86:b2:a1:64:0d:e8:a1:ae:a7:bc:fd:02:13:69:8a:36:88:3f: 65:7f:88:d0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAhY5EGtnbSlLwBx8nhORbff/CTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMjAwNVoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAMWY4YWYwNDE1NDk1ZGJjZmY1OTQx YjFlZGE4Mzk3OTA3NWE4NWM1MDNjMzAxMzNhYWJkOWEyMThhZjY0OTBhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYwEmw9Um8dC6xPeoi3I6ZsWbhWT UK8wUrbabCg5r8Y8FjXAfggQGcsHg0cp9b0q5Ta8RMI1AgsMGdMvwf3+sWyoYw9L 5bmaFJ9CcmDWNNabhUU+1q7cA9zu52J+gMXTS8izzXPEZK9f01ubITCuKtOZIbid SS6H1iU2dPzjpuwTR28O1m5U9ERD/QbGkNKR0Syh7pt4oKL6eYMGsLBd1mOuGgOi BZxynrCtRNmQolRGgZvCCd9MVfExli36CZ5NhY9efM8wnPrS1VmyAQJR3Gf/18L+ K8tFlcDUd6XhuwunAUBO+gkxrTTafg2Q4zWHtpA/+/BtXKBbSN/Qasks6QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPGyAabPjzgUovK8kBEA8keuDcIbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM2MjdkMTBhLTE5MjYtNDI3MS1iODQ5LThjYjNjZDMxZjA2Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6mCAMA0GCSqGSIb3DQEBCwUAA4IBAQAZdGLxyP7QrGTp6dO4 d7Opnt7XzxDnV9QYy5CgMM+3Y+2AWzSMlk0a1yS6unsgAcE/kNMxm3wbcp5PehGQ QtIcskHJc8gdaTGYgsyksPX0wMGIkfFXuCCyZ1gSzyorIRj9VLrh0gjFFNEIn+Wr 3OZJUp5NhF531UAoxYciaIjbXn5M0hb+ZT+fcfzgEBnZzNRhBwLG9C5GSr4bfqz8 sNi9OMgV5MAdPGQZaPV9F2VVt0AMeshNAvK/AAq7FLgmMB/aPz+9aG9TpnxPD7+d Qd1UR03G7IzUAY6ODShlLWe5Whw8srpt5JXNyW2GsqFkDeihrqe8/QITaYo2iD9l f4jQ -----END CERTIFICATE-----Generated at Sun Oct 11 22:18:05 2026 by rpki-client