$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57b64146-2dfe-4666-822a-d00679884d52.roa File: 57b64146-2dfe-4666-822a-d00679884d52.roa (raw, json) Hash identifier: FEKioU7wBkUla2lKXvjVj38ZfbjVc787LDNheRQivLU= Subject key identifier: 61:C7:72:C9:67:91:80:5D:5E:B9:05:0C:10:71:C6:15:94:FA:16:A0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 11127B4F9507B8EEB6503ABC32DC7BF2B0287728 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57b64146-2dfe-4666-822a-d00679884d52.roa Signing time: Fri 09 Oct 2026 00:10:12 +0000 ROA not before: Fri 09 Oct 2026 00:10:12 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c8c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:12:7b:4f:95:07:b8:ee:b6:50:3a:bc:32:dc:7b:f2:b0:28:77:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:10:12 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=fd0d8545e8f94d9ae7344006c29d337cfb8d56814a6f4d7b7367d24b65e09e96, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7d:89:4a:de:1b:4b:fa:1f:96:7b:7e:0f:fe: d5:c9:81:85:f4:53:8f:31:b7:1e:70:f8:15:d4:eb: b5:23:3f:10:c1:28:43:6a:dd:80:3e:9d:0d:c6:e7: 3c:86:cd:ac:bf:5a:5d:06:7b:00:d8:3e:9f:58:f8: 8e:4d:22:0b:69:a5:10:53:5a:1f:32:1a:4b:37:8a: 7c:8a:7d:09:cc:c0:38:86:de:d1:91:d9:f7:85:d6: 96:5b:31:55:81:54:fb:db:eb:50:23:af:85:75:47: 80:09:1d:e4:66:2b:e2:79:7c:74:a6:fe:61:00:2b: b3:b0:96:fc:04:83:7a:43:ed:39:d3:87:49:5b:44: d3:1e:88:b5:a8:30:60:aa:ee:5b:df:27:dc:42:41: a4:2c:76:ae:b6:bb:0d:72:03:c6:5c:d3:f3:50:3c: 82:36:4e:ec:7c:af:36:30:d1:b6:78:72:63:65:19: d5:27:e5:e8:b8:3b:cd:c6:68:dd:69:67:ca:28:42: 95:7d:76:43:7d:49:5f:3e:41:45:bb:87:d9:3a:c3: 61:c6:1d:9f:38:a6:67:4d:6f:8e:4d:6b:57:4b:32: a4:02:dc:a8:1b:d2:1e:4c:18:32:66:e0:d9:f8:5f: d4:7c:0f:38:32:56:3a:b9:9e:a7:81:d3:88:b0:f8: f9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C7:72:C9:67:91:80:5D:5E:B9:05:0C:10:71:C6:15:94:FA:16:A0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57b64146-2dfe-4666-822a-d00679884d52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c8c0::/46 Signature Algorithm: sha256WithRSAEncryption 22:03:1f:53:9d:e1:10:a4:be:25:ea:41:6d:a1:d6:32:f8:85: cc:cd:80:c7:98:e0:02:ad:57:d8:5e:b9:21:0b:33:45:d8:b5: c7:2c:3a:cb:ea:9d:e1:d8:ab:33:c5:46:46:b3:e7:aa:55:7b: 55:6e:50:5c:c3:83:c3:5a:b6:a5:96:5e:a6:b9:e9:38:3d:f8: 8c:bb:cd:c7:1d:9e:35:4d:c3:e7:be:71:9a:24:e3:6e:4b:4e: 9b:fe:cd:2b:3d:ce:d8:59:57:f3:c9:83:3b:55:a9:f3:2c:5a: 8c:c3:46:a2:3c:e9:55:97:0f:15:ec:3b:cb:be:d8:d3:f2:a3: 10:1e:f7:d4:b7:ea:03:66:3a:74:e0:bf:74:2a:4f:97:25:0a: 9e:c3:14:b6:d9:94:eb:b2:52:31:8c:67:af:17:20:98:00:59: 48:13:c5:86:bc:ee:3a:65:81:84:b8:c5:d6:9f:83:25:4e:a1: ef:2f:29:bc:0c:d1:2c:4a:49:e9:c0:3d:64:c3:8a:ea:08:34: a1:14:96:6e:f5:47:48:43:94:77:ea:3b:c0:b2:91:3d:32:f9: 47:cb:d4:07:dd:ec:7e:cf:f9:83:4d:05:70:ce:2d:c6:a3:df: e7:a6:14:9c:75:10:07:7b:45:ca:3e:b7:ab:6d:86:a2:ac:5c: 31:d2:0d:a2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUERJ7T5UHuO62UDq8Mtx78rAodygwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMTAxMloX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAZmQwZDg1NDVlOGY5NGQ5YWU3MzQ0 MDA2YzI5ZDMzN2NmYjhkNTY4MTRhNmY0ZDdiNzM2N2QyNGI2NWUwOWU5NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA232JSt4bS/oflnt+D/7VyYGF9FOP MbcecPgV1Ou1Iz8QwShDat2APp0Nxuc8hs2sv1pdBnsA2D6fWPiOTSILaaUQU1of MhpLN4p8in0JzMA4ht7Rkdn3hdaWWzFVgVT72+tQI6+FdUeACR3kZivieXx0pv5h ACuzsJb8BIN6Q+0504dJW0TTHoi1qDBgqu5b3yfcQkGkLHautrsNcgPGXNPzUDyC Nk7sfK82MNG2eHJjZRnVJ+XouDvNxmjdaWfKKEKVfXZDfUlfPkFFu4fZOsNhxh2f OKZnTW+OTWtXSzKkAtyoG9IeTBgyZuDZ+F/UfA84MlY6uZ6ngdOIsPj55QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGHHcslnkYBdXrkFDBBxxhWU+hagMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU3YjY0MTQ2LTJkZmUtNDY2Ni04MjJhLWQwMDY3OTg4NGQ1Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88jAMA0GCSqGSIb3DQEBCwUAA4IBAQAiAx9TneEQpL4l6kFt odYy+IXMzYDHmOACrVfYXrkhCzNF2LXHLDrL6p3h2KszxUZGs+eqVXtVblBcw4PD Wralll6muek4PfiMu83HHZ41TcPnvnGaJONuS06b/s0rPc7YWVfzyYM7VanzLFqM w0aiPOlVlw8V7DvLvtjT8qMQHvfUt+oDZjp04L90Kk+XJQqewxS22ZTrslIxjGev FyCYAFlIE8WGvO46ZYGEuMXWn4MlTqHvLym8DNEsSknpwD1kw4rqCDShFJZu9UdI Q5R36jvAspE9MvlHy9QH3ex+z/mDTQVwzi3Go9/nphScdRAHe0XKPrerbYairFwx 0g2i -----END CERTIFICATE-----Generated at Sun Oct 11 18:57:27 2026 by rpki-client