$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a1dbda51-e18a-491c-8227-ce3fff6e3caf.roa File: a1dbda51-e18a-491c-8227-ce3fff6e3caf.roa (raw, json) Hash identifier: 16NtZwIhjx1lPnkGvyGXLnix73kX5BHmElPabHhise0= Subject key identifier: A1:20:31:8D:6C:A3:0A:40:86:76:40:92:C1:41:0D:C6:62:93:15:94 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 40050E5DA2A1D0CF614B80C0F04FFEDC0993887C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a1dbda51-e18a-491c-8227-ce3fff6e3caf.roa Signing time: Thu 08 Oct 2026 17:13:44 +0000 ROA not before: Thu 08 Oct 2026 17:13:44 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae1:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 00:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:05:0e:5d:a2:a1:d0:cf:61:4b:80:c0:f0:4f:fe:dc:09:93:88:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 8 17:13:44 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=99432e9ee3d1c4eb046cf7d04c01caed8353949126699f71ce577a971179eab4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:f6:8d:b7:5b:32:50:d2:e7:96:dd:51:2d: 52:c9:7b:46:6b:34:b3:40:37:a2:06:60:25:64:8a: ae:27:66:07:55:ba:20:0c:14:8b:47:81:b7:3c:02: 51:a4:08:c0:fb:87:9b:fa:d4:42:db:ee:87:59:29: 5b:1a:8c:e5:78:06:80:24:4f:18:05:3e:c2:31:ee: 60:5e:d8:5b:50:be:63:69:5f:ae:92:16:19:eb:18: 10:02:c0:ba:5d:90:c9:a9:c7:d0:31:13:25:4d:0c: f7:bc:c9:3a:e0:2a:db:0e:df:66:b4:32:cb:4e:81: 48:e1:8b:bd:69:d4:61:c6:45:76:66:cb:eb:64:90: 1e:cf:d6:e6:0a:d9:a5:bf:38:2b:2d:22:e5:9b:62: a1:a3:ad:76:85:d9:41:9b:dd:89:49:54:7c:95:bc: 0f:6c:80:56:64:25:ae:a6:91:46:ad:b7:f4:a8:b2: 05:2e:11:9a:ce:a9:87:f6:7f:57:35:d9:70:de:f1: e0:5d:71:9f:6a:b5:08:f6:e9:9a:62:2c:86:ec:f4: 6d:81:5e:8f:99:ef:c8:ea:d5:ee:f6:60:5b:66:f8: 99:83:17:7d:43:d7:00:a6:1e:ae:42:9c:ea:e1:1c: 1d:ac:1a:93:20:7a:12:36:5e:c3:60:fc:bb:d1:52: 36:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:20:31:8D:6C:A3:0A:40:86:76:40:92:C1:41:0D:C6:62:93:15:94 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a1dbda51-e18a-491c-8227-ce3fff6e3caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae1:4000::/40 Signature Algorithm: sha256WithRSAEncryption 24:37:03:b1:2b:51:0b:e5:84:3b:61:bf:c1:a8:35:26:9d:ee: 5c:7f:9e:48:5c:33:1e:02:eb:6b:cd:9c:c4:42:5b:66:67:b2: f4:42:55:58:e2:64:54:9d:89:d0:8a:0e:b1:bb:29:6a:42:55: 97:d0:96:a9:38:a8:14:26:16:20:8b:6f:23:0f:93:59:b5:e0: 93:b4:44:af:31:08:b7:43:6f:18:be:cb:46:c0:8e:24:e9:43: b0:f5:54:e4:97:e8:e4:28:c8:7b:99:fb:15:a3:7a:5e:d3:eb: 28:63:31:ca:9e:47:d4:02:35:53:75:7d:6d:a4:ea:35:b6:3e: dd:b9:4f:60:75:95:d7:06:9e:ee:73:db:44:e6:06:04:f2:ce: 7a:bf:3b:ff:3c:bf:de:09:ce:f1:f6:7f:7e:56:1b:40:a1:b7: 95:9b:62:57:00:68:93:74:5f:3c:c9:ca:f4:70:b2:ba:ef:1d: ab:86:a1:23:45:65:6c:b8:9e:ad:e6:d5:c6:3e:50:8f:d5:cb: a9:c7:e7:d5:ea:29:5e:bb:6d:9e:dd:7e:97:af:53:16:60:cf: 78:70:a7:36:1a:20:18:c5:a3:df:f0:2c:69:b9:f8:6c:c5:df: 9c:e5:9f:30:db:be:65:ae:f2:36:e3:0d:69:e2:38:4a:9a:bc: 3c:f8:cd:0f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQAUOXaKh0M9hS4DA8E/+3AmTiHwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwODE3MTM0NFoX DTI3MDEwNjIzNTk1OVowejFJMEcGA1UEBRNAOTk0MzJlOWVlM2QxYzRlYjA0NmNm N2QwNGMwMWNhZWQ4MzUzOTQ5MTI2Njk5ZjcxY2U1NzdhOTcxMTc5ZWFiNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSP2jbdbMlDS55bdUS1SyXtGazSz QDeiBmAlZIquJ2YHVbogDBSLR4G3PAJRpAjA+4eb+tRC2+6HWSlbGozleAaAJE8Y BT7CMe5gXthbUL5jaV+ukhYZ6xgQAsC6XZDJqcfQMRMlTQz3vMk64CrbDt9mtDLL ToFI4Yu9adRhxkV2ZsvrZJAez9bmCtmlvzgrLSLlm2Kho612hdlBm92JSVR8lbwP bIBWZCWuppFGrbf0qLIFLhGazqmH9n9XNdlw3vHgXXGfarUI9umaYiyG7PRtgV6P me/I6tXu9mBbZviZgxd9Q9cAph6uQpzq4RwdrBqTIHoSNl7DYPy70VI2JwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKEgMY1sowpAhnZAksFBDcZikxWUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ExZGJkYTUxLWUxOGEtNDkxYy04MjI3LWNlM2ZmZjZlM2NhZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4UAwDQYJKoZIhvcNAQELBQADggEBACQ3A7ErUQvlhDthv8Go NSad7lx/nkhcMx4C62vNnMRCW2ZnsvRCVVjiZFSdidCKDrG7KWpCVZfQlqk4qBQm FiCLbyMPk1m14JO0RK8xCLdDbxi+y0bAjiTpQ7D1VOSX6OQoyHuZ+xWjel7T6yhj McqeR9QCNVN1fW2k6jW2Pt25T2B1ldcGnu5z20TmBgTyznq/O/88v94JzvH2f35W G0Cht5WbYlcAaJN0XzzJyvRwsrrvHauGoSNFZWy4nq3m1cY+UI/Vy6nH59XqKV67 bZ7dfpevUxZgz3hwpzYaIBjFo9/wLGm5+GzF35zlnzDbvmWu8jbjDWniOEqavDz4 zQ8= -----END CERTIFICATE-----Generated at Tue Oct 13 16:14:44 2026 by rpki-client