$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a36f1c28-0bd2-48f5-bcb5-145a60c04f71.roa File: a36f1c28-0bd2-48f5-bcb5-145a60c04f71.roa (raw, json) Hash identifier: AyrR6+8nldfcdgEcuj0MdSabkJyAt3VQ1xvsgugpUSE= Subject key identifier: 66:F6:B8:42:ED:5A:72:67:AE:9C:15:9F:71:70:1E:30:BC:71:F0:35 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 43199D8A6975009CFA29D4D5CC6CDDF04EE59FCA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a36f1c28-0bd2-48f5-bcb5-145a60c04f71.roa Signing time: Fri 09 Oct 2026 00:07:17 +0000 ROA not before: Fri 09 Oct 2026 00:07:17 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:4040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:19:9d:8a:69:75:00:9c:fa:29:d4:d5:cc:6c:dd:f0:4e:e5:9f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:07:17 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=c426790b07d94c9e768b03ed16849a274b87d119d43900f329257cc0c3296f02, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:cb:a8:86:2a:37:04:a3:72:6a:ac:c6:62: 19:5d:b1:2e:02:4f:09:00:19:c2:82:13:c9:37:d7: 24:53:f0:f9:cf:7b:ee:8c:46:09:8b:97:18:62:4c: 02:a5:0b:e7:96:fe:10:11:5f:16:21:b6:e3:49:9a: 00:ba:96:b2:c6:48:8c:f9:5d:11:06:fe:8a:7b:8f: c8:cb:ea:b7:1e:85:e8:1c:75:9d:f9:98:bc:21:7f: 7a:51:5d:7e:be:14:3c:fa:24:73:cc:50:98:ec:5c: da:44:0d:53:a8:0f:97:da:62:e1:37:e6:34:e5:36: b5:2d:e4:b0:6d:f6:69:4b:35:ee:0f:1e:7c:48:57: b7:d6:05:8c:ce:2b:97:0a:d8:74:12:02:5c:e2:ed: 6a:cd:92:ba:37:b2:2c:36:27:cc:77:e0:fa:70:98: 3e:c3:c1:34:df:9d:a4:0a:4c:a2:67:6e:82:f3:57: 46:b4:38:76:e6:70:02:b7:f9:9a:26:af:8e:48:4b: 7a:01:13:74:8e:eb:73:cb:78:13:d7:87:28:10:79: 0a:78:14:46:56:c2:7b:b5:b5:d7:8b:f4:e0:f4:da: 24:d0:1c:86:ba:a0:a7:30:e8:05:1d:70:70:a7:73: 58:63:b2:68:30:af:af:f4:15:0d:de:95:2a:8c:e1: ff:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F6:B8:42:ED:5A:72:67:AE:9C:15:9F:71:70:1E:30:BC:71:F0:35 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a36f1c28-0bd2-48f5-bcb5-145a60c04f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:4040::/46 Signature Algorithm: sha256WithRSAEncryption 51:5d:37:c7:58:b9:0b:7e:50:44:cc:01:45:3e:43:8d:4d:65: 81:fa:e1:69:09:d9:91:ef:b9:c7:50:da:a7:b7:17:1c:fa:71: 39:51:1a:76:97:6a:fa:da:35:c9:96:a2:88:8b:60:27:e1:0b: b6:40:a5:7c:2f:51:6c:f6:de:06:c3:6b:91:19:96:e1:57:f0: d8:7a:6b:58:25:c1:d3:ac:87:6e:99:ab:99:1d:f2:e0:2d:04: 61:61:4a:8d:ed:67:cd:30:c9:9e:37:06:31:d7:ee:cd:77:55: a6:76:88:4b:23:b9:f3:30:e3:5b:96:e3:f5:6b:43:dd:00:6f: e1:36:b8:4c:40:76:99:a5:d8:d5:ed:0c:9a:b8:b6:0a:a7:1c: e2:a0:cc:60:cc:e4:80:53:6c:ba:51:76:97:12:c5:bb:84:c5: 76:e2:ec:24:01:f3:82:82:dd:ee:37:bb:4b:ce:1a:91:1a:79: 9a:ae:8c:f3:91:ec:be:06:44:b0:a5:d0:3d:41:19:86:1b:c5: 40:44:92:8c:f9:71:ef:93:3c:25:c4:32:19:e4:f1:0b:e1:7b: 31:e2:6b:7f:09:01:a9:ca:02:42:e5:b0:69:ab:b8:70:7c:e9: e9:7a:2c:dc:f8:51:31:5c:5a:d8:7d:d5:76:db:c5:79:6b:b0: d1:38:e9:79 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQxmdiml1AJz6KdTVzGzd8E7ln8owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDcxN1oX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAYzQyNjc5MGIwN2Q5NGM5ZTc2OGIw M2VkMTY4NDlhMjc0Yjg3ZDExOWQ0MzkwMGYzMjkyNTdjYzBjMzI5NmYwMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1LLqIYqNwSjcmqsxmIZXbEuAk8J ABnCghPJN9ckU/D5z3vujEYJi5cYYkwCpQvnlv4QEV8WIbbjSZoAupayxkiM+V0R Bv6Ke4/Iy+q3HoXoHHWd+Zi8IX96UV1+vhQ8+iRzzFCY7FzaRA1TqA+X2mLhN+Y0 5Ta1LeSwbfZpSzXuDx58SFe31gWMziuXCth0EgJc4u1qzZK6N7IsNifMd+D6cJg+ w8E0352kCkyiZ26C81dGtDh25nACt/maJq+OSEt6ARN0jutzy3gT14coEHkKeBRG VsJ7tbXXi/Tg9Nok0ByGuqCnMOgFHXBwp3NYY7JoMK+v9BUN3pUqjOH/AwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGb2uELtWnJnrpwVn3FwHjC8cfA1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EzNmYxYzI4LTBiZDItNDhmNS1iY2I1LTE0NWE2MGMwNGY3MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba80BAMA0GCSqGSIb3DQEBCwUAA4IBAQBRXTfHWLkLflBEzAFF PkONTWWB+uFpCdmR77nHUNqntxcc+nE5URp2l2r62jXJlqKIi2An4Qu2QKV8L1Fs 9t4Gw2uRGZbhV/DYemtYJcHTrIdumauZHfLgLQRhYUqN7WfNMMmeNwYx1+7Nd1Wm dohLI7nzMONbluP1a0PdAG/hNrhMQHaZpdjV7QyauLYKpxzioMxgzOSAU2y6UXaX EsW7hMV24uwkAfOCgt3uN7tLzhqRGnmarozzkey+BkSwpdA9QRmGG8VARJKM+XHv kzwlxDIZ5PEL4Xsx4mt/CQGpygJC5bBpq7hwfOnpeizc+FExXFrYfdV228V5a7DR OOl5 -----END CERTIFICATE-----Generated at Sun Oct 11 23:12:15 2026 by rpki-client