$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8be75f8f-1aaa-4b7a-98da-8a80278fc657.roa File: 8be75f8f-1aaa-4b7a-98da-8a80278fc657.roa (raw, json) Hash identifier: Z4MdT4TQBdsD3iO3noBUjZbNB6DXXmUZoQI3T3ka+RQ= Subject key identifier: 93:68:E8:29:8F:82:A0:87:98:AA:00:D5:28:7A:21:B1:4B:4A:25:2D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3BF7D3EFD0E18CC92D18B9DD90C581533D0D9929 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8be75f8f-1aaa-4b7a-98da-8a80278fc657.roa Signing time: Fri 09 Oct 2026 00:10:45 +0000 ROA not before: Fri 09 Oct 2026 00:10:45 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f7:d3:ef:d0:e1:8c:c9:2d:18:b9:dd:90:c5:81:53:3d:0d:99:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:10:45 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=b9ab21d8d9dbe41cf91c98d9276c57698a45bb2d85fd192a98efd1f116cec901, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:61:b3:9c:23:f2:62:74:b3:39:8f:2a:53: 9c:ec:b7:83:0f:08:9e:28:2d:5e:35:e6:cd:dc:ba: 7b:33:1b:58:29:9a:9b:f4:c0:16:1d:c3:39:80:48: dd:63:29:c0:c3:7b:c8:3c:70:00:fb:c2:d8:81:79: 86:6e:08:b3:8a:b3:15:a3:be:88:e6:6a:5b:46:55: 6a:21:f1:a5:93:e4:02:04:e5:e3:c2:3c:2b:a6:99: 69:09:99:0c:46:0e:7d:a4:4f:bf:79:31:d5:20:93: d5:62:b1:fa:92:06:2b:05:ba:1c:29:89:54:9c:43: 43:87:64:9a:19:98:7c:5f:91:be:b9:c6:5f:7b:d8: a6:d3:a1:b5:e9:6b:1d:10:02:98:19:20:b5:0f:96: b0:95:d1:f7:e7:0e:1f:d6:b1:aa:f3:51:37:dc:72: d2:ad:65:f5:bc:50:c6:dd:7d:ca:6e:26:e9:69:50: 1d:86:b3:f3:75:cf:b1:35:b7:34:20:25:d2:22:ea: c0:b3:4a:e9:02:bc:25:b0:c3:f7:92:e4:f2:97:8e: 73:81:e8:dd:d8:07:e7:0d:d0:d8:de:27:97:ee:6f: ce:53:d7:39:27:44:34:73:f5:7b:2a:bc:09:55:2b: 28:d2:45:f9:77:35:8e:08:3e:a3:33:0a:e1:f7:49: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:68:E8:29:8F:82:A0:87:98:AA:00:D5:28:7A:21:B1:4B:4A:25:2D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8be75f8f-1aaa-4b7a-98da-8a80278fc657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:840::/48 Signature Algorithm: sha256WithRSAEncryption b3:25:e4:ec:84:3a:ea:22:44:5e:1a:0c:1e:ab:c3:eb:81:2d: 06:75:2a:6f:2a:f2:a2:58:f7:84:75:e0:2a:84:c2:34:07:d7: 1e:e8:25:db:59:3d:2b:02:52:b8:fd:d5:bf:d1:ef:17:ce:f3: 85:ec:a0:bd:6f:00:4a:16:aa:28:cc:5a:c6:f3:a0:c6:91:17: c4:42:fd:e5:7c:62:40:30:8b:f7:37:b5:2b:55:75:12:04:9d: f4:42:1e:eb:2c:17:c8:f3:27:54:bd:75:96:37:a0:01:5c:04: db:d2:b6:42:ec:24:41:c5:96:0e:44:b1:be:56:e8:14:1e:cc: 7f:0a:82:2d:2e:b9:09:b4:83:52:e9:82:4c:0e:22:69:93:43: 69:72:95:66:aa:50:b9:75:25:cb:76:7c:a1:48:9a:3b:f0:8f: c3:96:c0:fd:db:8d:0c:41:7e:c8:a1:32:a3:e2:68:3d:7e:03: 2e:00:ac:c4:2e:de:82:da:6b:91:23:88:cd:bb:4b:20:d2:80: 03:89:90:cb:0c:64:4e:b8:53:32:39:9f:a3:9a:93:b8:90:75: b2:96:1d:ed:2d:1a:aa:a4:d7:88:48:0d:f9:30:4e:da:82:b8: 98:f2:8e:f3:9c:31:df:90:51:49:1e:60:52:e0:59:28:8f:d3: d5:fc:c9:e2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUO/fT79DhjMktGLndkMWBUz0NmSkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMTA0NVoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAYjlhYjIxZDhkOWRiZTQxY2Y5MWM5 OGQ5Mjc2YzU3Njk4YTQ1YmIyZDg1ZmQxOTJhOThlZmQxZjExNmNlYzkwMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGBhs5wj8mJ0szmPKlOc7LeDDwie KC1eNebN3Lp7MxtYKZqb9MAWHcM5gEjdYynAw3vIPHAA+8LYgXmGbgizirMVo76I 5mpbRlVqIfGlk+QCBOXjwjwrpplpCZkMRg59pE+/eTHVIJPVYrH6kgYrBbocKYlU nENDh2SaGZh8X5G+ucZfe9im06G16WsdEAKYGSC1D5awldH35w4f1rGq81E33HLS rWX1vFDG3X3KbibpaVAdhrPzdc+xNbc0ICXSIurAs0rpArwlsMP3kuTyl45zgejd 2AfnDdDY3ieX7m/OU9c5J0Q0c/V7KrwJVSso0kX5dzWOCD6jMwrh90knrQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJNo6CmPgqCHmKoA1Sh6IbFLSiUtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiZTc1ZjhmLTFhYWEtNGI3YS05OGRhLThhODAyNzhmYzY1Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ghAMA0GCSqGSIb3DQEBCwUAA4IBAQCzJeTshDrqIkReGgwe q8PrgS0GdSpvKvKiWPeEdeAqhMI0B9ce6CXbWT0rAlK4/dW/0e8XzvOF7KC9bwBK FqoozFrG86DGkRfEQv3lfGJAMIv3N7UrVXUSBJ30Qh7rLBfI8ydUvXWWN6ABXATb 0rZC7CRBxZYORLG+VugUHsx/CoItLrkJtINS6YJMDiJpk0NpcpVmqlC5dSXLdnyh SJo78I/DlsD9240MQX7IoTKj4mg9fgMuAKzELt6C2muRI4jNu0sg0oADiZDLDGRO uFMyOZ+jmpO4kHWylh3tLRqqpNeISA35ME7agriY8o7znDHfkFFJHmBS4Fkoj9PV /Mni -----END CERTIFICATE-----Generated at Mon Oct 12 00:46:24 2026 by rpki-client