$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa File: 98bbbcef-0217-4c51-a717-7af30c63be28.roa (raw, json) Hash identifier: CDhWo9Nyd6t+a97uRxwburXl+Z6L20GOrtSOI/T373s= Subject key identifier: C6:D7:FF:B0:55:75:13:7A:AE:5D:A7:A1:46:72:9E:01:13:DF:D0:15 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A1FFE2A6550B005F1855B894A13A41A69CDFD19 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa Signing time: Fri 09 Oct 2026 00:06:45 +0000 ROA not before: Fri 09 Oct 2026 00:06:45 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:1f:fe:2a:65:50:b0:05:f1:85:5b:89:4a:13:a4:1a:69:cd:fd:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:06:45 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=793cdb38f93451cfee923238540e784c0445d096801db4a4acf1cbbd859eebd2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:8e:eb:f3:8a:c2:4f:04:24:74:cb:ba:76: a8:be:bf:22:f2:72:43:d2:d8:03:ff:34:38:c8:c4: a5:d7:3a:51:21:32:c8:00:7e:2c:40:4a:cd:16:d3: aa:86:d3:4b:a2:56:17:1d:6c:10:1f:bf:0f:ca:b8: 79:dd:3b:60:05:14:42:76:f6:ed:74:be:b7:23:13: 88:0c:77:24:5a:cc:c8:74:36:bf:62:35:f2:34:74: 67:2e:57:ea:a0:27:ec:af:db:3c:86:d8:b5:27:0e: 52:58:00:13:d8:ab:ee:9c:30:6a:16:17:6c:54:8c: 88:b6:58:ab:ae:df:97:fb:e5:28:9f:ff:26:82:58: 01:a4:53:bf:c7:8d:17:c8:4f:b6:2f:aa:37:d0:c8: cd:f6:69:f2:93:33:73:74:81:b9:84:71:76:39:9a: 6b:aa:6b:55:c7:62:b1:d9:4b:b5:46:9a:c2:4a:11: 7f:c1:6f:d3:b8:ba:67:71:75:46:56:ff:d0:de:56: 92:51:83:48:6e:19:6b:1b:76:57:66:e4:6e:56:7a: 8f:ed:77:2b:c4:02:cf:6b:3b:02:95:0b:7e:1a:7f: 8f:1a:db:9a:bf:43:80:6d:e9:08:cb:55:cf:bb:7e: 95:13:71:e3:f8:1a:45:54:18:91:21:cc:0e:1f:78: 36:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D7:FF:B0:55:75:13:7A:AE:5D:A7:A1:46:72:9E:01:13:DF:D0:15 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:8800::/40 Signature Algorithm: sha256WithRSAEncryption 85:df:32:85:dc:a0:80:78:39:67:ff:83:df:08:60:92:8b:34: 4b:ca:0c:9f:b1:c3:16:dc:fb:da:53:0d:c7:d7:4d:9a:ca:23: 7b:47:d4:69:21:c9:64:c8:96:82:14:5d:08:22:2f:de:ec:e3: 6c:f6:13:eb:6b:15:19:e9:e3:b7:5e:8a:1e:0c:4c:18:22:87: b6:5b:8c:cb:05:03:cc:93:fa:9d:18:9a:b7:2b:90:32:7f:dc: 3d:54:fc:b3:98:a3:e4:3a:61:a4:cf:9f:e4:19:53:e4:1d:2b: 2d:a5:5a:07:1b:58:dc:04:b5:69:66:70:f3:83:f3:c8:9a:c0: b6:d2:9b:3d:77:4c:c1:05:c6:85:6b:fb:ee:ee:3b:17:29:36: be:9e:73:32:c1:5e:48:c9:2f:e0:01:c7:49:b6:5b:7f:70:14: 8b:be:4e:06:30:2f:41:13:52:8e:b8:86:72:80:44:a9:19:3c: a0:28:b6:43:c5:51:92:1c:3e:6d:5f:25:a6:9b:79:16:68:2d: e1:44:ce:3c:9c:07:db:30:ec:ad:07:45:ab:f6:a6:63:a1:b9: ef:98:1b:ca:bc:15:d8:11:9c:4f:24:49:c1:4f:04:1f:6d:1a: ba:c8:ca:1c:9b:a0:11:cc:19:d0:20:97:0f:f8:3f:db:76:8a: a7:80:77:a6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeh/+KmVQsAXxhVuJShOkGmnN/RkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDY0NVoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNANzkzY2RiMzhmOTM0NTFjZmVlOTIz MjM4NTQwZTc4NGMwNDQ1ZDA5NjgwMWRiNGE0YWNmMWNiYmQ4NTllZWJkMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC6O6/OKwk8EJHTLunaovr8i8nJD 0tgD/zQ4yMSl1zpRITLIAH4sQErNFtOqhtNLolYXHWwQH78Pyrh53TtgBRRCdvbt dL63IxOIDHckWszIdDa/YjXyNHRnLlfqoCfsr9s8hti1Jw5SWAAT2KvunDBqFhds VIyItlirrt+X++Uon/8mglgBpFO/x40XyE+2L6o30MjN9mnykzNzdIG5hHF2OZpr qmtVx2Kx2Uu1RprCShF/wW/TuLpncXVGVv/Q3laSUYNIbhlrG3ZXZuRuVnqP7Xcr xALPazsClQt+Gn+PGtuav0OAbekIy1XPu36VE3Hj+BpFVBiRIcwOH3g2kQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMbX/7BVdRN6rl2noUZyngET39AVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4YmJiY2VmLTAyMTctNGM1MS1hNzE3LTdhZjMwYzYzYmUyOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+IgwDQYJKoZIhvcNAQELBQADggEBAIXfMoXcoIB4OWf/g98I YJKLNEvKDJ+xwxbc+9pTDcfXTZrKI3tH1GkhyWTIloIUXQgiL97s42z2E+trFRnp 47deih4MTBgih7ZbjMsFA8yT+p0YmrcrkDJ/3D1U/LOYo+Q6YaTPn+QZU+QdKy2l WgcbWNwEtWlmcPOD88iawLbSmz13TMEFxoVr++7uOxcpNr6eczLBXkjJL+ABx0m2 W39wFIu+TgYwL0ETUo64hnKARKkZPKAotkPFUZIcPm1fJaabeRZoLeFEzjycB9sw 7K0HRav2pmOhue+YG8q8FdgRnE8kScFPBB9tGrrIyhyboBHMGdAglw/4P9t2iqeA d6Y= -----END CERTIFICATE-----Generated at Sun Oct 11 18:56:56 2026 by rpki-client