$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a97cdb74-6034-404c-9242-94c95c3bb581.roa File: a97cdb74-6034-404c-9242-94c95c3bb581.roa (raw, json) Hash identifier: njAPfmKRvAlLSTfW0rbgo0MbfakRM8okG2EoUvTkIMA= Subject key identifier: 20:86:3E:33:4F:95:43:CC:B6:88:C2:D9:44:62:C2:9A:AB:AB:3E:0A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0D5C665EE681B0C21254E903BCC22B0AB42CDEBF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a97cdb74-6034-404c-9242-94c95c3bb581.roa Signing time: Fri 09 Oct 2026 00:11:06 +0000 ROA not before: Fri 09 Oct 2026 00:11:06 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:5c:66:5e:e6:81:b0:c2:12:54:e9:03:bc:c2:2b:0a:b4:2c:de:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:11:06 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=95c5823b24f83328014bc6c3da4e23a8144af13bcbf7ffe1606f495a8abcde25, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f5:25:92:fe:70:fc:86:04:81:d1:d3:a6:7f: 79:88:2f:8d:2a:81:60:30:fb:d7:c6:69:73:85:c1: 66:d9:0d:77:e3:1d:1b:12:be:92:37:fb:d0:32:30: 07:ee:2c:7c:1a:c0:9b:5d:c9:2d:e2:53:a6:f8:9e: 98:ff:b9:eb:c0:c5:30:34:55:07:1f:e5:6e:11:19: 97:74:c1:5b:d7:82:59:fe:8b:47:8b:f5:94:8c:48: cd:07:a0:e9:66:48:e2:21:ce:e3:b5:60:83:d2:09: eb:32:cc:42:15:ad:67:f6:89:42:72:d4:50:06:f3: 32:c1:b0:f2:37:9e:fa:f2:e1:6a:e7:c2:b9:93:22: a1:fd:9d:15:eb:f6:71:c8:db:48:01:af:71:75:8a: 53:38:d5:b7:82:bc:cd:9f:a2:e7:5c:b3:82:eb:be: 0f:1c:2b:68:4c:1d:f7:37:0e:15:3c:6d:59:74:ed: 9a:9c:72:8b:12:d1:2d:3c:eb:57:a9:0f:f0:d6:45: 71:a7:d9:88:36:d1:72:2c:11:24:1c:e1:db:b8:d9: 5b:d4:f7:55:41:ec:02:2e:7c:32:dc:48:74:53:5b: 2c:5f:9c:96:ef:9a:92:25:ce:6d:c3:46:d9:c9:db: e8:76:56:c6:1d:4c:74:d4:c6:87:ad:d6:f7:1c:b9: a8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:86:3E:33:4F:95:43:CC:B6:88:C2:D9:44:62:C2:9A:AB:AB:3E:0A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a97cdb74-6034-404c-9242-94c95c3bb581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:b000::/40 Signature Algorithm: sha256WithRSAEncryption aa:43:7a:5a:ba:b9:24:6a:1e:a8:12:88:0c:64:1f:c8:09:9c: 9a:03:6e:12:80:d6:31:84:77:9a:46:c0:95:f7:ae:f6:18:a1: e0:4b:c8:34:01:56:03:32:90:c3:86:bb:4d:cf:00:00:05:3d: 22:36:e1:ff:03:31:ab:3c:6b:0e:95:e4:f0:c4:75:05:fe:22: 2b:78:24:8e:67:c5:18:af:2d:44:fe:1e:50:e7:8a:47:eb:64: 5b:79:b9:db:49:65:72:fd:70:c5:62:a6:f0:e2:a1:29:30:96: 45:81:a4:8d:73:cc:4e:a4:6e:f4:61:6c:e0:62:2f:ca:af:fa: 0b:47:82:6f:78:26:ab:de:87:b5:24:c0:53:4c:a4:57:3a:70: d5:2a:e1:7e:29:6e:4b:26:67:fe:5c:fd:ba:17:90:9f:e8:d3: 6c:01:35:af:cf:fb:12:8e:de:9a:29:88:6e:f9:68:c1:0c:a1: 84:0b:18:24:14:c3:05:f5:df:91:b8:be:75:27:2c:16:47:90: 2d:78:97:f0:89:fa:15:59:dd:f5:49:bb:e1:56:e7:54:13:84: 07:08:36:83:87:98:dc:ed:42:6b:b5:3c:5a:2e:ad:d9:14:ab: 19:75:d8:f5:a3:fe:09:11:20:98:b4:6e:23:ba:8d:40:31:d2: ab:05:6d:1d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDVxmXuaBsMISVOkDvMIrCrQs3r8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMTEwNloX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAOTVjNTgyM2IyNGY4MzMyODAxNGJj NmMzZGE0ZTIzYTgxNDRhZjEzYmNiZjdmZmUxNjA2ZjQ5NWE4YWJjZGUyNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfUlkv5w/IYEgdHTpn95iC+NKoFg MPvXxmlzhcFm2Q134x0bEr6SN/vQMjAH7ix8GsCbXckt4lOm+J6Y/7nrwMUwNFUH H+VuERmXdMFb14JZ/otHi/WUjEjNB6DpZkjiIc7jtWCD0gnrMsxCFa1n9olCctRQ BvMywbDyN5768uFq58K5kyKh/Z0V6/ZxyNtIAa9xdYpTONW3grzNn6LnXLOC674P HCtoTB33Nw4VPG1ZdO2anHKLEtEtPOtXqQ/w1kVxp9mINtFyLBEkHOHbuNlb1PdV QewCLnwy3Eh0U1ssX5yW75qSJc5tw0bZydvodlbGHUx01MaHrdb3HLmo/wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCCGPjNPlUPMtojC2URiwpqrqz4KMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5N2NkYjc0LTYwMzQtNDA0Yy05MjQyLTk0Yzk1YzNiYjU4MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba87AwDQYJKoZIhvcNAQELBQADggEBAKpDelq6uSRqHqgSiAxk H8gJnJoDbhKA1jGEd5pGwJX3rvYYoeBLyDQBVgMykMOGu03PAAAFPSI24f8DMas8 aw6V5PDEdQX+Iit4JI5nxRivLUT+HlDnikfrZFt5udtJZXL9cMVipvDioSkwlkWB pI1zzE6kbvRhbOBiL8qv+gtHgm94Jqveh7UkwFNMpFc6cNUq4X4pbksmZ/5c/boX kJ/o02wBNa/P+xKO3popiG75aMEMoYQLGCQUwwX135G4vnUnLBZHkC14l/CJ+hVZ 3fVJu+FW51QThAcINoOHmNztQmu1PFourdkUqxl12PWj/gkRIJi0biO6jUAx0qsF bR0= -----END CERTIFICATE-----Generated at Sun Oct 11 18:56:49 2026 by rpki-client