$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a4e1135e-0450-439a-84a4-3c19c06f382b.roa File: a4e1135e-0450-439a-84a4-3c19c06f382b.roa (raw, json) Hash identifier: lXEmWVkMvbjtmP89exw0LIDJIiYvElvQCTNBP9B1cU4= Subject key identifier: 5F:27:2B:B6:68:A8:30:10:84:97:CC:A8:AD:C5:32:20:FA:8E:34:A2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 306CD0DBBBBF55407DF8B993BA139D64A2DAE1D6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a4e1135e-0450-439a-84a4-3c19c06f382b.roa Signing time: Fri 09 Oct 2026 00:20:09 +0000 ROA not before: Fri 09 Oct 2026 00:20:09 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 00:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6c:d0:db:bb:bf:55:40:7d:f8:b9:93:ba:13:9d:64:a2:da:e1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:20:09 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=db2f59fc553ae90ec58beace9a17a740bd0cb2d372d4651d8166ab6d41077af3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:48:a4:e9:d9:30:ad:ff:96:0d:3f:d3:e1: 33:e0:47:1c:c9:23:65:0b:5f:92:f3:c9:f9:cf:7d: d9:89:cc:92:2b:a0:e5:69:37:77:ba:37:ef:85:ed: 41:cf:70:08:4d:ea:21:89:cd:3e:5f:4a:a4:70:5e: ea:af:6f:e7:f0:45:f1:9f:25:d1:5d:ad:f3:74:38: d3:31:f4:17:57:b2:f7:7a:6d:36:96:3a:63:3e:b0: 7f:5f:b7:f8:3d:27:e4:5d:f9:58:d8:98:9d:8a:26: 4d:f4:ac:f8:7f:3f:66:67:14:39:b0:5e:88:6a:94: ec:85:a1:b6:3a:cf:f7:d8:89:1a:77:a0:22:05:5a: 7d:df:2c:32:a1:b0:20:a6:3e:0e:36:a3:eb:1d:bc: 5a:78:2b:69:c2:3a:79:85:5c:68:58:80:13:65:04: d1:6f:ff:00:7f:5b:b3:16:b4:f4:80:45:79:72:db: a9:8e:81:7c:e4:87:c0:78:db:bd:da:c2:97:3c:59: 5a:48:8c:81:70:71:a4:f4:d0:5b:20:f5:3e:fa:5b: 93:f5:cb:92:5b:e0:4a:3e:b7:01:1b:ca:f4:f3:a1: d3:b0:86:84:a2:b3:ec:59:99:53:21:d0:9f:c2:92: 15:15:71:68:e9:0f:ce:30:ce:6d:2b:bb:6a:b1:1e: 8a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:27:2B:B6:68:A8:30:10:84:97:CC:A8:AD:C5:32:20:FA:8E:34:A2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a4e1135e-0450-439a-84a4-3c19c06f382b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:8800::/40 Signature Algorithm: sha256WithRSAEncryption 5f:5f:af:2f:33:6d:91:41:6a:ad:e8:37:18:f0:91:3f:09:cb: 7d:2a:be:19:f7:a8:7c:a5:37:a9:6e:12:14:74:d4:cf:d8:55: 0a:42:83:20:d7:b7:de:b0:6e:c6:cd:ab:4c:c8:cd:07:70:64: 4a:d4:db:70:82:d6:ca:66:af:87:bc:54:a9:77:a6:ab:14:81: b1:fb:1a:72:7c:36:c5:cf:f1:5b:3e:ed:de:b8:78:3e:b1:2e: 48:4b:3b:0e:40:8e:86:ee:42:fa:65:67:70:68:03:d1:91:f9: df:4c:15:d1:07:c3:89:97:ec:70:00:61:7f:e7:17:b1:fd:65: a7:57:31:87:1d:31:71:9e:8f:10:72:07:f1:58:dd:6b:70:58: 09:93:8a:78:aa:6d:41:3f:db:5f:4c:25:e7:a0:1c:d1:fd:3f: de:94:94:d0:62:e8:f2:68:04:2a:2f:97:7f:3f:b5:96:98:8c: ac:e0:5a:7c:df:ed:2a:d8:8a:3d:07:77:b9:c3:a5:53:d1:65: cd:08:6f:6b:13:61:07:da:21:c5:0e:a8:23:31:33:93:a4:f4: cd:4b:53:52:02:6b:50:35:e3:6e:3f:1f:04:30:79:bc:0f:aa: 15:db:3e:fb:3b:4c:e0:e3:e7:29:d6:2d:51:bf:ab:15:3e:ae: 44:75:b2:49 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMGzQ27u/VUB9+LmTuhOdZKLa4dYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMjAwOVoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAZGIyZjU5ZmM1NTNhZTkwZWM1OGJl YWNlOWExN2E3NDBiZDBjYjJkMzcyZDQ2NTFkODE2NmFiNmQ0MTA3N2FmMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWZIpOnZMK3/lg0/0+Ez4EccySNl C1+S88n5z33ZicySK6DlaTd3ujfvhe1Bz3AITeohic0+X0qkcF7qr2/n8EXxnyXR Xa3zdDjTMfQXV7L3em02ljpjPrB/X7f4PSfkXflY2JidiiZN9Kz4fz9mZxQ5sF6I apTshaG2Os/32Ikad6AiBVp93ywyobAgpj4ONqPrHbxaeCtpwjp5hVxoWIATZQTR b/8Af1uzFrT0gEV5ctupjoF85IfAeNu92sKXPFlaSIyBcHGk9NBbIPU++luT9cuS W+BKPrcBG8r086HTsIaEorPsWZlTIdCfwpIVFXFo6Q/OMM5tK7tqsR6K3wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFF8nK7ZoqDAQhJfMqK3FMiD6jjSiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E0ZTExMzVlLTA0NTAtNDM5YS04NGE0LTNjMTljMDZmMzgyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba84gwDQYJKoZIhvcNAQELBQADggEBAF9fry8zbZFBaq3oNxjw kT8Jy30qvhn3qHylN6luEhR01M/YVQpCgyDXt96wbsbNq0zIzQdwZErU23CC1spm r4e8VKl3pqsUgbH7GnJ8NsXP8Vs+7d64eD6xLkhLOw5AjobuQvplZ3BoA9GR+d9M FdEHw4mX7HAAYX/nF7H9ZadXMYcdMXGejxByB/FY3WtwWAmTiniqbUE/219MJeeg HNH9P96UlNBi6PJoBCovl38/tZaYjKzgWnzf7SrYij0Hd7nDpVPRZc0Ib2sTYQfa IcUOqCMxM5Ok9M1LU1ICa1A1424/HwQwebwPqhXbPvs7TODj5ynWLVG/qxU+rkR1 skk= -----END CERTIFICATE-----Generated at Mon Oct 12 12:41:54 2026 by rpki-client