$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93481cfb-13ea-4186-866d-3569f7f622f0.roa File: 93481cfb-13ea-4186-866d-3569f7f622f0.roa (raw, json) Hash identifier: b8TL7is6xa1PIWVx6uUHd1Mc1AYC23g6m1VPfbS46+k= Subject key identifier: 7C:EC:55:59:97:22:95:E9:7E:F9:22:E1:36:CB:9A:4A:74:DC:B0:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 27E490F30B5F136F841682EFA1A0B8123A0A5FB9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93481cfb-13ea-4186-866d-3569f7f622f0.roa Signing time: Fri 09 Oct 2026 00:07:02 +0000 ROA not before: Fri 09 Oct 2026 00:07:02 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 00:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e4:90:f3:0b:5f:13:6f:84:16:82:ef:a1:a0:b8:12:3a:0a:5f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:07:02 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=dc9c7884f057a6365cc6d29debfe15c2418867bfe6cdae4708c6d36558c7cf8d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:bb:2d:81:e0:c5:f3:36:63:a3:84:26:3f: 85:4a:b9:2c:e5:b2:13:ba:61:84:27:a9:bb:47:cb: db:8f:2f:16:76:ab:d7:89:23:93:dc:cc:9c:6f:0f: 4c:b8:31:8e:15:a3:80:70:d0:a6:60:14:37:ee:ef: 85:55:7b:c0:c4:c0:3c:a6:1c:50:3c:83:9c:b4:83: 6c:92:73:ec:d8:05:f2:31:7c:c3:3e:d7:0c:9e:4d: ea:ed:52:c7:e3:aa:1f:c9:cb:e1:52:6a:85:88:49: ed:f0:31:95:3c:8d:32:76:0b:43:73:34:78:44:c6: 48:0d:16:cb:0b:f5:e0:31:e8:3b:9b:98:bd:a0:97: 01:e3:ec:63:b5:b0:fc:3f:48:61:14:02:c7:4e:10: cf:2f:24:10:15:1c:72:25:41:e4:fd:12:a1:2e:8f: c0:64:75:e4:a6:27:83:64:39:23:b8:aa:b8:8a:bd: 95:8c:3c:80:34:89:a0:c0:e8:e0:42:4e:43:c2:37: b6:9d:b7:d2:d3:69:34:6c:9d:65:78:e3:e5:75:53: da:cd:7f:58:24:8e:4b:8c:91:6b:ad:28:21:11:dc: 9c:07:07:1a:95:a1:db:8b:28:7d:35:27:2b:28:b8: b1:33:45:15:d4:92:7f:0e:e6:1f:bd:ef:54:d3:8a: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EC:55:59:97:22:95:E9:7E:F9:22:E1:36:CB:9A:4A:74:DC:B0:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93481cfb-13ea-4186-866d-3569f7f622f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:800::/40 Signature Algorithm: sha256WithRSAEncryption 83:eb:06:fc:38:98:ab:c9:9b:1d:88:5b:f5:02:2e:cc:ad:52: 85:1e:63:7c:de:17:68:dd:84:e2:cb:a9:c0:25:7f:98:1b:43: e7:ec:df:37:52:82:9e:7c:f3:fc:8e:1a:1d:1d:42:0d:ac:e6: 49:b4:cd:7b:e5:9d:c6:ec:d0:e2:45:b0:ae:32:42:17:53:94: fe:90:66:3c:91:b3:71:2b:71:a8:7d:8c:26:74:de:67:36:cc: 60:0b:cc:11:8c:87:b4:ce:41:d4:bd:00:03:1a:da:8d:92:f9: 2a:07:4a:0f:c2:6c:5c:9a:49:e9:67:46:74:4f:3e:c0:35:bb: 4f:40:81:2e:4d:c1:31:99:3c:69:c9:ef:c3:9e:71:00:de:5f: cc:d2:f3:4a:78:55:de:da:79:39:ff:c3:7c:7e:37:09:37:60: a4:64:1d:8c:ec:fe:91:a0:d0:1b:5b:95:8a:83:5e:ae:b1:19: 7d:86:59:8a:f2:2b:3c:d3:e8:c8:77:81:27:cb:3c:69:04:44: 6d:af:57:dc:04:f1:0c:7d:06:a2:e6:48:f5:fe:4b:96:12:31: 75:37:c9:d4:8a:5f:ad:4d:df:8d:00:6f:41:66:73:c3:d4:aa: 15:93:fb:5d:e6:b3:9b:80:c6:06:9a:53:27:0e:c7:c9:07:57: a3:a1:05:0d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJ+SQ8wtfE2+EFoLvoaC4EjoKX7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDcwMloX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAZGM5Yzc4ODRmMDU3YTYzNjVjYzZk MjlkZWJmZTE1YzI0MTg4NjdiZmU2Y2RhZTQ3MDhjNmQzNjU1OGM3Y2Y4ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzC7LYHgxfM2Y6OEJj+FSrks5bIT umGEJ6m7R8vbjy8WdqvXiSOT3Mycbw9MuDGOFaOAcNCmYBQ37u+FVXvAxMA8phxQ PIOctINsknPs2AXyMXzDPtcMnk3q7VLH46ofycvhUmqFiEnt8DGVPI0ydgtDczR4 RMZIDRbLC/XgMeg7m5i9oJcB4+xjtbD8P0hhFALHThDPLyQQFRxyJUHk/RKhLo/A ZHXkpieDZDkjuKq4ir2VjDyANImgwOjgQk5Dwje2nbfS02k0bJ1leOPldVPazX9Y JI5LjJFrrSghEdycBwcalaHbiyh9NScrKLixM0UV1JJ/DuYfve9U04qu9QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHzsVVmXIpXpfvki4TbLmkp03LBIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkzNDgxY2ZiLTEzZWEtNDE4Ni04NjZkLTM1NjlmN2Y2MjJmMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6ggwDQYJKoZIhvcNAQELBQADggEBAIPrBvw4mKvJmx2IW/UC LsytUoUeY3zeF2jdhOLLqcAlf5gbQ+fs3zdSgp588/yOGh0dQg2s5km0zXvlncbs 0OJFsK4yQhdTlP6QZjyRs3Ercah9jCZ03mc2zGALzBGMh7TOQdS9AAMa2o2S+SoH Sg/CbFyaSelnRnRPPsA1u09AgS5NwTGZPGnJ78OecQDeX8zS80p4Vd7aeTn/w3x+ Nwk3YKRkHYzs/pGg0BtblYqDXq6xGX2GWYryKzzT6Mh3gSfLPGkERG2vV9wE8Qx9 BqLmSPX+S5YSMXU3ydSKX61N340Ab0Fmc8PUqhWT+13ms5uAxgaaUycOx8kHV6Oh BQ0= -----END CERTIFICATE-----Generated at Tue Oct 13 12:46:10 2026 by rpki-client