$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b660a4f9-3eab-4a9a-a2db-560d6997eaf9.roa File: b660a4f9-3eab-4a9a-a2db-560d6997eaf9.roa (raw, json) Hash identifier: clF4iW6C/2ewpgIR9d95cnv/S9DoPTu7DszqW6h9IQE= Subject key identifier: A6:06:B4:94:5B:70:A0:73:85:50:C0:1A:ED:07:37:C0:72:E2:6B:B9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 67C4DA618FF56BC815B24AF25F914F9C3D8364E3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b660a4f9-3eab-4a9a-a2db-560d6997eaf9.roa Signing time: Sun 04 Oct 2026 00:00:13 +0000 ROA not before: Sun 04 Oct 2026 00:00:13 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daed:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 00:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c4:da:61:8f:f5:6b:c8:15:b2:4a:f2:5f:91:4f:9c:3d:83:64:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:13 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=ed966672e7db9fcc62f0ed9bb32c84c212ac2c7fa9da9c297ea3c54725ca3123, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:05:e5:53:01:ca:3c:23:d0:29:c9:ad:97:fa: a5:3b:b4:f2:3e:cc:70:a4:d9:57:7d:39:56:b2:6c: e6:79:f6:2b:57:50:45:7b:88:06:81:f5:4e:08:6c: 53:b4:70:c3:11:2e:22:db:40:51:34:01:a4:7b:51: 6d:c5:21:0e:56:15:f6:11:7b:57:64:05:ca:15:48: 2d:d9:35:92:6e:5a:ca:9d:c0:85:86:0a:0a:11:9c: 6c:d0:d2:95:ad:94:85:68:a4:9a:ec:bf:68:98:89: ed:d5:db:f8:f8:2c:85:87:e3:04:60:55:0d:28:21: 9a:38:5d:46:31:97:64:a1:8d:20:fd:65:05:ff:01: 69:e2:cf:a0:40:31:0c:a4:ce:cc:03:43:6b:96:2e: d9:10:bf:ae:1e:0d:bc:c8:9d:23:aa:cc:ac:dd:cf: 7c:6d:ad:22:12:de:04:f8:ce:2f:1f:02:2f:6e:c3: 6b:11:69:1a:96:f1:dd:03:29:c8:bb:e5:e0:3f:a1: fd:5a:5b:df:a7:91:81:e9:9a:be:9e:6b:27:0c:3b: 9d:7d:6c:04:8d:c1:a6:8b:12:cd:d0:7b:03:be:0b: 24:78:cf:da:35:c3:19:56:79:d9:59:4c:e0:78:24: 51:b6:74:14:dc:0b:16:7a:f5:b5:07:d5:2c:b2:74: 87:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:06:B4:94:5B:70:A0:73:85:50:C0:1A:ED:07:37:C0:72:E2:6B:B9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b660a4f9-3eab-4a9a-a2db-560d6997eaf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption 69:72:19:89:9d:b3:2e:44:2f:d2:29:35:7a:6e:30:8a:60:94: ef:44:dc:c7:05:a1:d5:20:66:c5:e1:43:6c:15:a6:f2:6b:27: c3:1a:01:75:dc:bf:aa:39:12:e0:65:9c:40:22:32:4d:a9:2d: 49:eb:24:4a:58:59:78:b2:0d:cf:ee:d5:83:fc:93:c0:40:9e: d2:c7:a0:45:90:30:c9:a5:e0:e0:79:25:f0:b9:c1:39:cf:69: ac:31:2d:fb:7c:36:e6:c1:54:f9:4c:c1:7f:a1:91:a1:df:5b: 77:0d:30:33:b2:09:1c:51:ad:b5:f8:4a:85:b9:15:78:da:1d: 1a:7b:34:25:7a:5a:89:d5:35:ee:27:a8:69:64:f1:16:96:58: 67:cc:5f:40:ad:c7:64:bd:00:02:03:9c:b7:c6:61:da:81:11: fb:59:dd:51:44:e3:f5:08:f9:39:5d:1d:1b:30:a0:48:f2:fe: 91:3e:93:09:f2:76:cb:f4:bb:4e:c0:fb:c4:aa:ca:db:81:75: 56:15:bc:4c:38:5b:fb:bc:6c:c9:19:e3:7c:bd:30:d9:7c:9d: 63:5f:3f:50:5b:4a:09:0f:67:12:ce:64:b1:0d:9c:93:5f:53: a7:57:f5:30:20:5d:b2:36:d3:05:a2:e5:53:1d:11:04:69:dd: d1:79:fc:98 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZ8TaYY/1a8gVskryX5FPnD2DZOMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwNDAwMDAxM1oX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNAZWQ5NjY2NzJlN2RiOWZjYzYyZjBl ZDliYjMyYzg0YzIxMmFjMmM3ZmE5ZGE5YzI5N2VhM2M1NDcyNWNhMzEyMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQXlUwHKPCPQKcmtl/qlO7TyPsxw pNlXfTlWsmzmefYrV1BFe4gGgfVOCGxTtHDDES4i20BRNAGke1FtxSEOVhX2EXtX ZAXKFUgt2TWSblrKncCFhgoKEZxs0NKVrZSFaKSa7L9omInt1dv4+CyFh+MEYFUN KCGaOF1GMZdkoY0g/WUF/wFp4s+gQDEMpM7MA0Nrli7ZEL+uHg28yJ0jqsys3c98 ba0iEt4E+M4vHwIvbsNrEWkalvHdAynIu+XgP6H9Wlvfp5GB6Zq+nmsnDDudfWwE jcGmixLN0HsDvgskeM/aNcMZVnnZWUzgeCRRtnQU3AsWevW1B9UssnSHxQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKYGtJRbcKBzhVDAGu0HN8By4mu5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I2NjBhNGY5LTNlYWItNGE5YS1hMmRiLTU2MGQ2OTk3ZWFmOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7aDAMA0GCSqGSIb3DQEBCwUAA4IBAQBpchmJnbMuRC/SKTV6 bjCKYJTvRNzHBaHVIGbF4UNsFabyayfDGgF13L+qORLgZZxAIjJNqS1J6yRKWFl4 sg3P7tWD/JPAQJ7Sx6BFkDDJpeDgeSXwucE5z2msMS37fDbmwVT5TMF/oZGh31t3 DTAzsgkcUa21+EqFuRV42h0aezQlelqJ1TXuJ6hpZPEWllhnzF9ArcdkvQACA5y3 xmHagRH7Wd1RROP1CPk5XR0bMKBI8v6RPpMJ8nbL9LtOwPvEqsrbgXVWFbxMOFv7 vGzJGeN8vTDZfJ1jXz9QW0oJD2cSzmSxDZyTX1OnV/UwIF2yNtMFouVTHREEad3R efyY -----END CERTIFICATE-----Generated at Tue Oct 6 14:52:03 2026 by rpki-client