$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7b65b6ed-9125-422d-8aa2-da4ed8c043f2.roa File: 7b65b6ed-9125-422d-8aa2-da4ed8c043f2.roa (raw, json) Hash identifier: 0Uwl7LxLqfKZbTZwTyEKcXz5xeOzUnHugSgsvYqA868= Subject key identifier: A3:38:31:9C:BA:E0:A5:ED:87:BE:E9:C6:A4:3A:73:40:47:37:C4:9F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 690DA4F1E4B096EF1895EAF61EE34108FDE80C35 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7b65b6ed-9125-422d-8aa2-da4ed8c043f2.roa Signing time: Fri 09 Oct 2026 00:07:18 +0000 ROA not before: Fri 09 Oct 2026 00:07:18 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0d:a4:f1:e4:b0:96:ef:18:95:ea:f6:1e:e3:41:08:fd:e8:0c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:07:18 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=015539caedc0e3643a08651a7473ff61bb83da39d1a4aef57df81939c5862f9b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:3e:2e:29:4d:de:0c:ea:b5:51:4f:31:0a: 38:ba:e4:b8:7d:d9:c6:1e:9a:e5:b3:bc:04:d9:40: 61:ac:80:c8:09:60:cc:6a:fd:20:24:68:da:2e:35: ff:62:b1:a2:8e:fa:1a:b4:7a:98:6c:46:0a:19:c3: f1:53:9f:84:7b:94:e3:e2:9e:48:e8:b6:1e:d5:01: 89:26:68:15:4c:04:65:2d:52:6d:32:ef:6e:2c:a2: 5a:7a:e2:e2:d7:32:d1:52:f8:d6:1b:ee:11:42:a3: d9:6d:e2:fe:99:7c:cd:58:10:5f:fa:a2:5b:79:9f: 89:a6:c2:87:93:c9:96:60:7a:1a:eb:89:fe:61:ba: 8d:dd:c3:52:ac:55:47:bf:89:e3:48:3a:75:f9:59: b8:23:7e:63:20:e3:99:97:d1:7f:5c:d5:b9:93:b8: 20:83:2f:c4:ac:2b:2a:1a:e8:34:5e:35:a3:d4:a8: ba:b8:96:a8:2f:6d:01:db:bf:e7:26:70:f1:fb:d9: 2f:ca:48:5b:85:9a:a6:af:da:ae:76:63:a6:ec:7d: 97:13:e8:55:1b:a8:dc:5e:04:bd:22:d9:03:3b:e1: b6:07:66:5a:59:d3:02:39:61:08:4b:73:38:d6:bd: fa:e2:2c:68:a7:78:ed:78:55:26:c4:ee:39:1b:8a: 58:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:38:31:9C:BA:E0:A5:ED:87:BE:E9:C6:A4:3A:73:40:47:37:C4:9F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7b65b6ed-9125-422d-8aa2-da4ed8c043f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption 6a:3c:3a:b5:6c:57:cc:b3:de:7f:e1:00:21:16:5d:4e:74:8f: 49:73:20:85:38:e9:92:e9:2b:3c:68:f5:7f:c1:e7:63:38:c1: 37:1b:75:7c:8d:7d:82:38:f2:87:d2:48:b1:d5:d0:70:f4:c5: 42:5d:8b:ed:42:65:e9:3d:4f:54:18:cd:c5:14:3e:61:12:9a: 51:ba:70:48:85:76:2e:41:a4:fd:4d:af:7d:c7:94:51:64:e8: e0:83:68:e6:f8:ff:dc:a9:aa:42:ed:a9:09:84:54:96:fa:e6: 38:20:cf:1d:8e:b3:37:fa:f2:f2:86:0e:17:6b:60:14:63:d1: fa:71:16:3b:b9:b0:98:5d:bc:3c:bc:af:b9:48:00:f3:e8:c0: 63:9a:ff:c5:77:8f:9d:3c:bf:70:b0:e2:5f:c2:fb:a1:57:50: 26:7f:e0:e8:ab:17:f0:b2:b5:30:74:1e:fd:ef:2f:47:93:9e: 63:e0:3b:02:7f:82:07:d1:e2:34:46:22:5a:e8:3c:99:0f:bb: 56:87:c8:cd:6a:71:85:75:92:c3:11:94:72:ba:fa:9a:64:c6: 35:82:ef:53:b2:f3:26:ee:be:34:4f:5a:35:94:b0:8a:18:51: 2e:d7:ec:58:fd:a8:bd:0e:41:da:9a:48:3f:db:30:ef:f4:4e: 2e:a0:4c:26 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaQ2k8eSwlu8Yler2HuNBCP3oDDUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDcxOFoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAMDE1NTM5Y2FlZGMwZTM2NDNhMDg2 NTFhNzQ3M2ZmNjFiYjgzZGEzOWQxYTRhZWY1N2RmODE5MzljNTg2MmY5YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+E+LilN3gzqtVFPMQo4uuS4fdnG Hprls7wE2UBhrIDICWDMav0gJGjaLjX/YrGijvoatHqYbEYKGcPxU5+Ee5Tj4p5I 6LYe1QGJJmgVTARlLVJtMu9uLKJaeuLi1zLRUvjWG+4RQqPZbeL+mXzNWBBf+qJb eZ+JpsKHk8mWYHoa64n+YbqN3cNSrFVHv4njSDp1+Vm4I35jIOOZl9F/XNW5k7gg gy/ErCsqGug0XjWj1Ki6uJaoL20B27/nJnDx+9kvykhbhZqmr9qudmOm7H2XE+hV G6jcXgS9ItkDO+G2B2ZaWdMCOWEIS3M41r364ixop3jteFUmxO45G4pY8wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKM4MZy64KXth77pxqQ6c0BHN8SfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdiNjViNmVkLTkxMjUtNDIyZC04YWEyLWRhNGVkOGMwNDNmMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6sDAMA0GCSqGSIb3DQEBCwUAA4IBAQBqPDq1bFfMs95/4QAh Fl1OdI9JcyCFOOmS6Ss8aPV/wedjOME3G3V8jX2COPKH0kix1dBw9MVCXYvtQmXp PU9UGM3FFD5hEppRunBIhXYuQaT9Ta99x5RRZOjgg2jm+P/cqapC7akJhFSW+uY4 IM8djrM3+vLyhg4Xa2AUY9H6cRY7ubCYXbw8vK+5SADz6MBjmv/Fd4+dPL9wsOJf wvuhV1Amf+DoqxfwsrUwdB797y9Hk55j4DsCf4IH0eI0RiJa6DyZD7tWh8jNanGF dZLDEZRyuvqaZMY1gu9TsvMm7r40T1o1lLCKGFEu1+xY/ai9DkHamkg/2zDv9E4u oEwm -----END CERTIFICATE-----Generated at Sun Oct 11 22:16:23 2026 by rpki-client