$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a37838b8-524c-4ff8-b517-727be63ea330.roa File: a37838b8-524c-4ff8-b517-727be63ea330.roa (raw, json) Hash identifier: KsYa4jrR6ulZGX+pVgO0N92JQXTWm71tllQUd19DmRo= Subject key identifier: 96:EB:C8:00:76:AA:3B:7F:87:D2:81:CD:CD:6A:FE:D4:15:62:C9:B7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48971476E4CBB61EFF63BF44AE26C6188D5691E7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a37838b8-524c-4ff8-b517-727be63ea330.roa Signing time: Fri 09 Oct 2026 00:11:11 +0000 ROA not before: Fri 09 Oct 2026 00:11:11 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:a040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:97:14:76:e4:cb:b6:1e:ff:63:bf:44:ae:26:c6:18:8d:56:91:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:11:11 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=aa126bbc55596e564670b18f5292a46514415fecc92404169bea99d22e2cc23d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:fb:00:a5:02:54:2e:45:d5:b5:d7:8d:72: 53:29:50:1d:3a:81:46:51:01:dd:20:80:61:48:8b: 47:5f:13:e5:28:9f:82:ae:21:df:5c:d0:c3:3e:56: 42:b6:71:7c:18:0c:1c:fc:ad:7d:e3:4b:6a:0d:43: 88:e9:0f:03:18:5c:09:47:87:89:41:c6:89:c2:a9: b9:25:82:cd:a8:c5:73:28:e2:7a:73:1e:24:af:a6: 7c:fd:de:c8:e3:67:b7:5e:9d:53:cc:1f:7f:96:d7: bb:77:cf:65:c9:67:6c:a2:8d:21:3b:61:b2:77:12: b0:33:ed:a5:eb:68:b2:5e:d2:63:c7:3c:08:6f:72: 58:8a:a8:20:ad:d8:1d:9a:cf:b1:35:ad:ef:8a:7f: aa:65:bb:fc:1d:72:e2:72:9e:0b:77:a5:9c:81:91: 77:17:db:e0:44:bf:d0:cd:86:2d:4d:5b:bd:6b:c6: c5:a0:41:95:f7:f4:07:ea:5c:3e:d0:45:c3:9a:ba: d8:57:6e:53:8c:11:6f:30:e9:af:e9:4f:0d:b1:39: 8b:65:0b:78:48:2b:83:8c:2e:86:b7:ee:b3:5e:5d: ed:45:15:f5:f3:dd:3c:93:3e:a9:84:33:07:40:72: e3:81:c7:26:ee:73:0e:8f:24:5c:4b:f4:ad:c3:49: d7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EB:C8:00:76:AA:3B:7F:87:D2:81:CD:CD:6A:FE:D4:15:62:C9:B7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a37838b8-524c-4ff8-b517-727be63ea330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:a040::/48 Signature Algorithm: sha256WithRSAEncryption 96:92:1e:1e:fa:cb:2d:63:b0:81:96:e9:e6:c4:5b:f5:21:e2: 65:6f:0f:7d:07:ad:e9:be:7a:3a:73:9c:57:4d:93:7d:c5:73: f7:9b:00:32:97:d0:4a:cf:64:8c:2c:f7:84:01:de:9f:f3:70: ad:a4:6a:9e:c5:86:1c:ec:f7:55:30:fb:10:1f:c5:d3:32:1c: ba:29:cb:e9:32:1f:00:c3:92:0b:03:f5:d0:3d:3f:fb:94:b2: d1:cb:ab:9f:54:90:26:a6:71:66:49:d5:c4:00:33:aa:c5:1c: 83:f3:c9:54:18:e8:c1:98:d7:37:ef:03:69:45:e4:95:2d:4d: b2:4d:75:7c:72:75:e4:18:8b:76:9b:c2:e3:ac:d1:a7:1a:e6: b8:c2:56:bc:71:7b:28:67:fc:d6:b6:b3:7d:b0:d9:89:8f:ec: e5:f5:6b:0d:9d:6c:b3:b8:7d:4e:b0:ed:cc:cd:ff:b5:7f:6c: b7:a0:48:61:e5:53:9e:30:d0:2a:c0:d7:56:39:6e:44:64:14: 43:cf:03:79:c9:7b:58:c9:f4:b3:77:4f:5a:8e:ab:9a:c4:1d: 9f:bd:49:c2:d0:f0:b8:ad:d0:21:78:bd:9d:ae:25:ce:ae:ae: a0:41:1a:d5:7c:4e:f6:3f:15:d1:23:1f:11:88:4c:33:ca:34: 01:84:83:64 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSJcUduTLth7/Y79EribGGI1WkecwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMTExMVoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAYWExMjZiYmM1NTU5NmU1NjQ2NzBi MThmNTI5MmE0NjUxNDQxNWZlY2M5MjQwNDE2OWJlYTk5ZDIyZTJjYzIzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMT7AKUCVC5F1bXXjXJTKVAdOoFG UQHdIIBhSItHXxPlKJ+CriHfXNDDPlZCtnF8GAwc/K1940tqDUOI6Q8DGFwJR4eJ QcaJwqm5JYLNqMVzKOJ6cx4kr6Z8/d7I42e3Xp1TzB9/lte7d89lyWdsoo0hO2Gy dxKwM+2l62iyXtJjxzwIb3JYiqggrdgdms+xNa3vin+qZbv8HXLicp4Ld6WcgZF3 F9vgRL/QzYYtTVu9a8bFoEGV9/QH6lw+0EXDmrrYV25TjBFvMOmv6U8NsTmLZQt4 SCuDjC6Gt+6zXl3tRRX18908kz6phDMHQHLjgccm7nMOjyRcS/Stw0nXJQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJbryAB2qjt/h9KBzc1q/tQVYsm3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EzNzgzOGI4LTUyNGMtNGZmOC1iNTE3LTcyN2JlNjNlYTMzMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6qBAMA0GCSqGSIb3DQEBCwUAA4IBAQCWkh4e+sstY7CBlunm xFv1IeJlbw99B63pvno6c5xXTZN9xXP3mwAyl9BKz2SMLPeEAd6f83CtpGqexYYc 7PdVMPsQH8XTMhy6KcvpMh8Aw5ILA/XQPT/7lLLRy6ufVJAmpnFmSdXEADOqxRyD 88lUGOjBmNc37wNpReSVLU2yTXV8cnXkGIt2m8LjrNGnGua4wla8cXsoZ/zWtrN9 sNmJj+zl9WsNnWyzuH1OsO3Mzf+1f2y3oEhh5VOeMNAqwNdWOW5EZBRDzwN5yXtY yfSzd09ajquaxB2fvUnC0PC4rdAheL2driXOrq6gQRrVfE72PxXRIx8RiEwzyjQB hINk -----END CERTIFICATE-----Generated at Sun Oct 11 23:11:23 2026 by rpki-client