$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f3b60eb-56a9-47ae-9183-268d07b9ce96.roa File: 4f3b60eb-56a9-47ae-9183-268d07b9ce96.roa (raw, json) Hash identifier: saR0wE2lpiPVTUEWVJ0d/UWXe/jBuxmyCsLX920TgyQ= Subject key identifier: 98:B8:B3:A8:3D:B6:55:88:F6:A1:02:AC:63:A7:26:CF:25:9B:B1:70 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3BAFA681A5EAFAFDFBAC242EEB94E90D9276D121 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f3b60eb-56a9-47ae-9183-268d07b9ce96.roa Signing time: Sun 04 Oct 2026 00:00:34 +0000 ROA not before: Sun 04 Oct 2026 00:00:34 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da28:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:af:a6:81:a5:ea:fa:fd:fb:ac:24:2e:eb:94:e9:0d:92:76:d1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:34 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=6e372ff16ba37d40b7493fefd69e6c6436c78ce7694346981dc1449d2c0e71b1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:df:13:4f:8f:0c:ac:47:c8:7f:9d:23:ae:a5: 65:46:ba:74:79:92:0e:93:3b:43:ef:fc:28:e0:28: 79:ed:e6:60:39:eb:70:a2:55:e0:d9:0e:39:f8:14: 21:be:ba:00:f0:f0:8e:74:c4:e1:e1:6b:6b:97:7e: 7e:47:a0:a8:95:68:57:96:3d:d7:aa:d5:50:4f:e5: 22:32:1b:53:5f:97:45:ce:fc:46:f5:a3:2d:ec:b0: 59:8a:ee:5a:b8:71:70:c4:44:31:d9:c6:2e:4e:53: 1e:ab:58:26:b8:8e:ee:f0:77:c3:ca:1b:e1:dd:b3: db:54:bd:8a:36:5a:c1:c2:ac:e4:05:e8:80:ac:bf: 01:b9:57:71:c1:9d:33:6b:17:d7:4f:b1:73:05:19: cb:ac:f2:5f:22:3c:fa:cb:eb:9f:4f:2a:16:7b:94: 02:ea:ca:3b:9a:14:0b:65:4b:2f:ae:14:c4:43:83: 72:c5:63:e0:5f:35:12:7d:90:a7:17:83:40:b5:34: 5a:ee:a4:e6:28:22:52:1d:0b:1f:f9:11:a5:f3:a7: ae:b2:14:73:22:68:e3:63:c5:5c:8e:d4:d6:b9:bc: 74:c1:16:14:63:c9:3e:d7:34:bd:90:00:d8:a3:c7: a6:b4:01:cb:3c:34:98:c0:33:ce:bd:0c:59:73:a5: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B8:B3:A8:3D:B6:55:88:F6:A1:02:AC:63:A7:26:CF:25:9B:B1:70 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f3b60eb-56a9-47ae-9183-268d07b9ce96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da28:8000::/36 Signature Algorithm: sha256WithRSAEncryption 5a:8e:77:ff:84:17:30:e2:ec:7c:d5:9a:3f:dd:60:1e:22:e1: b1:b1:a3:62:3b:e0:e7:3c:17:7b:03:93:8a:f6:ab:87:cc:06: a6:0e:39:cf:d7:7b:41:7b:f5:83:26:ea:dd:c3:6c:1e:7b:82: ab:96:61:af:ff:8d:f7:79:7d:7e:0c:c1:6a:10:4b:26:43:7f: a3:9c:e8:c2:9c:ce:ae:eb:44:5b:cc:d5:e9:07:ce:55:b3:ab: 38:91:5e:27:3c:01:42:9d:b3:cc:b5:dc:c4:54:6d:7e:e6:16: c2:c8:cf:a6:45:1e:b1:5b:19:2f:2c:23:a4:a2:24:47:c8:a8: be:1c:8f:7f:70:1b:10:68:39:72:1f:6c:5a:f4:48:71:4c:25: 3e:b9:48:c2:e5:d0:bf:d0:50:08:29:49:ab:e4:95:6f:4a:9e: 9e:08:af:95:35:20:73:1c:cf:40:cf:81:1c:83:ca:7a:b3:c3: 87:ef:ac:58:e8:05:18:59:de:d3:ec:ef:d9:1f:11:2c:64:56: fa:df:29:f3:52:6b:db:7d:9f:af:b2:b5:74:6c:3c:a9:49:ee: 0f:c4:a9:3a:72:19:5b:cf:96:88:9e:1e:75:88:60:61:f5:59: 7e:da:e1:84:c5:86:b2:7f:f4:e7:6d:cf:cf:d1:bf:47:cb:37: 4b:bb:f5:a7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUO6+mgaXq+v37rCQu65TpDZJ20SEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwNDAwMDAzNFoX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNANmUzNzJmZjE2YmEzN2Q0MGI3NDkz ZmVmZDY5ZTZjNjQzNmM3OGNlNzY5NDM0Njk4MWRjMTQ0OWQyYzBlNzFiMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+d8TT48MrEfIf50jrqVlRrp0eZIO kztD7/wo4Ch57eZgOetwolXg2Q45+BQhvroA8PCOdMTh4Wtrl35+R6ColWhXlj3X qtVQT+UiMhtTX5dFzvxG9aMt7LBZiu5auHFwxEQx2cYuTlMeq1gmuI7u8HfDyhvh 3bPbVL2KNlrBwqzkBeiArL8BuVdxwZ0zaxfXT7FzBRnLrPJfIjz6y+ufTyoWe5QC 6so7mhQLZUsvrhTEQ4NyxWPgXzUSfZCnF4NAtTRa7qTmKCJSHQsf+RGl86eushRz ImjjY8VcjtTWubx0wRYUY8k+1zS9kADYo8emtAHLPDSYwDPOvQxZc6Xv0QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJi4s6g9tlWI9qECrGOnJs8lm7FwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmM2I2MGViLTU2YTktNDdhZS05MTgzLTI2OGQwN2I5Y2U5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaKIAwDQYJKoZIhvcNAQELBQADggEBAFqOd/+EFzDi7HzVmj/d YB4i4bGxo2I74Oc8F3sDk4r2q4fMBqYOOc/Xe0F79YMm6t3DbB57gquWYa//jfd5 fX4MwWoQSyZDf6Oc6MKczq7rRFvM1ekHzlWzqziRXic8AUKds8y13MRUbX7mFsLI z6ZFHrFbGS8sI6SiJEfIqL4cj39wGxBoOXIfbFr0SHFMJT65SMLl0L/QUAgpSavk lW9Knp4Ir5U1IHMcz0DPgRyDynqzw4fvrFjoBRhZ3tPs79kfESxkVvrfKfNSa9t9 n6+ytXRsPKlJ7g/EqTpyGVvPloieHnWIYGH1WX7a4YTFhrJ/9Odtz8/Rv0fLN0u7 9ac= -----END CERTIFICATE-----Generated at Sun Oct 11 22:15:51 2026 by rpki-client