$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e590de8-1575-4eee-a8c7-f53656724632.roa File: 6e590de8-1575-4eee-a8c7-f53656724632.roa (raw, json) Hash identifier: oJUDTyCtSe0KKkpgSx/iFlfUnsgSFs6xU2nI8OENAXM= Subject key identifier: 85:4F:85:9C:63:C6:13:67:8A:BB:A5:47:DE:17:C7:CC:F8:26:89:63 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 61C4DD90E0D6E7D81319155D77F5993613CFFCBB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e590de8-1575-4eee-a8c7-f53656724632.roa Signing time: Fri 09 Oct 2026 00:20:04 +0000 ROA not before: Fri 09 Oct 2026 00:20:04 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 00:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c4:dd:90:e0:d6:e7:d8:13:19:15:5d:77:f5:99:36:13:cf:fc:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:20:04 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=2f93cefe5982d31660ef84dc3a4233b5927c66f126805034105e7fcc4c9f9b71, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4c:33:b8:4c:90:6d:5b:9a:ce:f5:19:df:ed: aa:bd:b6:2c:4c:41:df:fa:4b:e2:a4:bc:c2:8b:a0: c9:11:99:1c:6f:dd:f2:8c:a8:af:27:6c:52:20:88: 6d:27:2e:a3:5b:57:fa:82:da:a3:df:c9:51:1c:51: a8:89:88:ed:10:5d:14:6e:97:e0:db:2d:bc:e5:40: 6a:00:cf:3e:76:6f:9b:a4:f7:99:41:04:01:ad:e2: e6:d3:c4:7f:8a:3d:27:23:73:22:d2:6d:25:27:d3: 37:77:eb:48:48:ab:95:05:f5:98:1d:fe:c0:4e:10: 32:c2:d0:6d:c2:1d:de:6f:56:8c:8c:42:53:3c:49: 66:13:13:78:41:6a:50:66:81:ac:40:23:45:c2:41: 53:28:85:bb:72:1d:df:d1:c0:49:87:d8:6f:ae:de: 74:89:7a:44:0d:3f:05:a9:ee:bf:1c:3c:56:62:95: a7:4d:64:59:d6:d9:ca:0d:32:b2:da:5e:1b:31:fe: 1a:4b:15:26:9a:03:4f:bc:24:fd:5f:7e:8a:1d:67: e8:fe:89:af:d0:e7:8c:8a:d9:54:a5:aa:5c:d9:86: 52:8c:e1:b1:ba:03:46:cd:4e:8a:69:37:0f:73:21: 80:b5:ba:a4:f1:17:04:18:eb:c0:a1:89:74:a8:64: 8f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4F:85:9C:63:C6:13:67:8A:BB:A5:47:DE:17:C7:CC:F8:26:89:63 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e590de8-1575-4eee-a8c7-f53656724632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:4880::/48 Signature Algorithm: sha256WithRSAEncryption 90:f1:55:4c:42:a0:e3:0d:01:e9:cc:d3:00:9e:56:a4:44:0f: 10:8a:f2:08:72:6d:ff:d7:16:c9:2d:a5:6d:b3:5a:f7:ba:7b: 43:51:9e:fa:02:41:c7:7e:6c:0b:f7:19:2c:76:6a:7b:9d:7f: 63:f0:b7:73:97:3c:76:0d:dc:d8:2c:b5:8b:65:de:59:1d:41: 5a:a9:7d:a9:e2:85:4e:32:9f:07:d6:a3:ee:05:f6:0c:64:4c: 22:ab:fa:4a:e9:26:97:3f:cf:14:72:45:25:8a:72:8b:1d:94: 31:6e:67:ed:08:92:e7:4b:5e:79:59:56:32:27:a5:b8:b9:34: dc:d3:5d:ba:a1:96:8e:fb:01:c6:49:72:56:cb:ea:d7:d6:60: a5:79:45:3b:be:0e:54:9e:9e:97:81:99:97:bd:cc:c2:58:a1: 51:fb:62:f8:c0:12:4a:51:2a:b6:96:be:ab:6f:31:fe:7e:52: 45:4d:1e:aa:bd:f0:72:e3:9b:56:3d:5c:e6:55:0f:63:17:27: 65:c0:b1:85:d1:df:5a:0f:d5:c2:47:cf:4f:09:f6:8d:dc:5d: fe:52:6b:64:e7:c5:ca:12:3c:1f:de:1a:17:78:8f:d1:13:69: 89:25:43:a9:cc:d5:3b:93:43:34:fa:3c:5e:36:0f:75:6a:68: 7e:aa:e2:2d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYcTdkODW59gTGRVdd/WZNhPP/LswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMjAwNFoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAMmY5M2NlZmU1OTgyZDMxNjYwZWY4 NGRjM2E0MjMzYjU5MjdjNjZmMTI2ODA1MDM0MTA1ZTdmY2M0YzlmOWI3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UwzuEyQbVuazvUZ3+2qvbYsTEHf +kvipLzCi6DJEZkcb93yjKivJ2xSIIhtJy6jW1f6gtqj38lRHFGoiYjtEF0Ubpfg 2y285UBqAM8+dm+bpPeZQQQBreLm08R/ij0nI3Mi0m0lJ9M3d+tISKuVBfWYHf7A ThAywtBtwh3eb1aMjEJTPElmExN4QWpQZoGsQCNFwkFTKIW7ch3f0cBJh9hvrt50 iXpEDT8Fqe6/HDxWYpWnTWRZ1tnKDTKy2l4bMf4aSxUmmgNPvCT9X36KHWfo/omv 0OeMitlUpapc2YZSjOGxugNGzU6KaTcPcyGAtbqk8RcEGOvAoYl0qGSPdwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIVPhZxjxhNnirulR94Xx8z4JoljMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZlNTkwZGU4LTE1NzUtNGVlZS1hOGM3LWY1MzY1NjcyNDYzMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6kiAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ8VVMQqDjDQHpzNMA nlakRA8QivIIcm3/1xbJLaVts1r3untDUZ76AkHHfmwL9xksdmp7nX9j8Ldzlzx2 DdzYLLWLZd5ZHUFaqX2p4oVOMp8H1qPuBfYMZEwiq/pK6SaXP88UckUlinKLHZQx bmftCJLnS155WVYyJ6W4uTTc0126oZaO+wHGSXJWy+rX1mCleUU7vg5Unp6XgZmX vczCWKFR+2L4wBJKUSq2lr6rbzH+flJFTR6qvfBy45tWPVzmVQ9jFydlwLGF0d9a D9XCR89PCfaN3F3+Umtk58XKEjwf3hoXeI/RE2mJJUOpzNU7k0M0+jxeNg91amh+ quIt -----END CERTIFICATE-----Generated at Tue Oct 13 17:33:10 2026 by rpki-client