$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bcf07491-4148-4ad5-82e1-58df8b2e226c.roa File: bcf07491-4148-4ad5-82e1-58df8b2e226c.roa (raw, json) Hash identifier: GuSd81fm91qrBq2lgJ/ORyAQTAP4WgxzCzILcRA4664= Subject key identifier: 9D:FD:A3:AA:D7:7A:26:24:6B:6E:94:47:57:4B:A2:A3:66:7F:9A:B1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3AE6209576ACD0A868EEBCCB02D6D697243A991C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bcf07491-4148-4ad5-82e1-58df8b2e226c.roa Signing time: Fri 09 Oct 2026 00:10:31 +0000 ROA not before: Fri 09 Oct 2026 00:10:31 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e6:20:95:76:ac:d0:a8:68:ee:bc:cb:02:d6:d6:97:24:3a:99:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:10:31 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=75bab725a101650dacb66bbfb9d6a8f14f94dcf690d7bbc461310512b1f737dd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:15:c5:d9:f5:f5:98:48:e0:d2:71:19:05:cc: 42:bc:5a:84:52:ac:3f:ed:17:47:e6:9a:e2:37:f8: b0:63:60:45:fb:60:13:b8:cd:c4:0a:37:27:23:49: 5a:99:27:8e:6f:0f:8d:57:ee:12:bc:6b:04:ae:32: c1:41:ab:f1:a4:3b:67:03:f8:bf:49:c0:57:ac:de: b8:d4:bf:17:a7:72:a9:6c:9d:bb:b6:46:df:36:04: 46:cb:e9:fe:87:4a:d4:ad:bb:0a:97:72:f5:25:60: 5b:45:e7:45:30:32:5d:9a:b2:57:d0:2e:fd:cb:18: 04:2c:48:94:68:15:f3:dd:63:5c:9d:e4:f9:f3:ce: 89:09:d0:57:e7:43:85:87:20:8d:5b:b3:23:a0:6c: bc:a8:2a:c4:e0:9c:8c:dd:ff:c6:c7:4d:64:7b:2f: c1:9a:ce:f5:e4:a4:aa:b9:48:37:e5:64:6a:29:e3: 10:0d:de:bc:49:b8:37:15:fe:74:ca:90:33:3a:dc: e8:51:d2:3f:39:26:73:37:14:ce:20:61:da:e0:8d: a0:c1:6d:45:e5:23:b4:b6:6a:60:5f:28:62:ef:d3: 28:bb:ff:0a:e1:98:5f:80:f0:3c:94:6d:34:2d:56: 69:5a:27:8a:a0:3a:53:20:7f:33:f2:2a:5c:a6:9c: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FD:A3:AA:D7:7A:26:24:6B:6E:94:47:57:4B:A2:A3:66:7F:9A:B1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bcf07491-4148-4ad5-82e1-58df8b2e226c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 0d:22:0d:a8:2d:f7:1e:b5:fd:13:6e:12:81:23:0b:62:9e:7d: f4:58:57:44:b3:c0:1a:ce:a7:dc:69:47:70:bf:31:fc:7a:be: 54:b5:25:aa:7d:5a:8f:63:cf:c1:3f:9b:d2:27:95:63:69:7d: 68:bf:67:fa:5a:48:ea:40:63:53:8c:1a:11:cf:12:a3:74:16: 04:36:78:b6:fa:39:ac:43:42:46:2f:5f:03:d5:f0:2b:2a:58: d5:b7:2e:31:2f:ed:d0:5b:82:23:06:b2:cb:df:5e:d6:ca:b3: 33:23:45:1e:67:63:88:39:bc:33:a8:de:54:45:26:b3:8d:8b: e1:59:48:0b:1e:11:c2:3a:ae:b5:f8:96:a1:e5:94:eb:74:9b: 93:75:6f:72:1e:ee:34:e2:2d:2a:5b:3e:9e:e4:18:44:8f:96: d2:96:bb:40:bc:94:05:9e:95:8d:e1:5e:ec:fd:3b:3d:12:23: dd:e1:27:05:82:63:1b:df:4b:15:93:aa:d6:15:63:0a:e8:b9: 39:b8:6b:c4:fc:61:1d:c1:89:d7:e6:e7:fd:fc:5f:de:46:74: 64:68:d2:a4:33:15:2a:6b:00:2f:a1:3f:2a:1f:ac:cc:40:d9: 9a:1f:67:d7:0f:6c:d3:52:aa:b1:63:06:b1:98:e5:42:68:de: a3:05:bc:a0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOuYglXas0Kho7rzLAtbWlyQ6mRwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMTAzMVoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNANzViYWI3MjVhMTAxNjUwZGFjYjY2 YmJmYjlkNmE4ZjE0Zjk0ZGNmNjkwZDdiYmM0NjEzMTA1MTJiMWY3MzdkZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghXF2fX1mEjg0nEZBcxCvFqEUqw/ 7RdH5priN/iwY2BF+2ATuM3ECjcnI0lamSeObw+NV+4SvGsErjLBQavxpDtnA/i/ ScBXrN641L8Xp3KpbJ27tkbfNgRGy+n+h0rUrbsKl3L1JWBbRedFMDJdmrJX0C79 yxgELEiUaBXz3WNcneT5886JCdBX50OFhyCNW7MjoGy8qCrE4JyM3f/Gx01key/B ms715KSquUg35WRqKeMQDd68Sbg3Ff50ypAzOtzoUdI/OSZzNxTOIGHa4I2gwW1F 5SO0tmpgXyhi79Mou/8K4ZhfgPA8lG00LVZpWieKoDpTIH8z8ipcppwqDQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJ39o6rXeiYka26UR1dLoqNmf5qxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JjZjA3NDkxLTQxNDgtNGFkNS04MmUxLTU4ZGY4YjJlMjI2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6kDAMA0GCSqGSIb3DQEBCwUAA4IBAQANIg2oLfcetf0TbhKB Iwtinn30WFdEs8AazqfcaUdwvzH8er5UtSWqfVqPY8/BP5vSJ5VjaX1ov2f6Wkjq QGNTjBoRzxKjdBYENni2+jmsQ0JGL18D1fArKljVty4xL+3QW4IjBrLL317WyrMz I0UeZ2OIObwzqN5URSazjYvhWUgLHhHCOq61+Jah5ZTrdJuTdW9yHu404i0qWz6e 5BhEj5bSlrtAvJQFnpWN4V7s/Ts9EiPd4ScFgmMb30sVk6rWFWMK6Lk5uGvE/GEd wYnX5uf9/F/eRnRkaNKkMxUqawAvoT8qH6zMQNmaH2fXD2zTUqqxYwaxmOVCaN6j Bbyg -----END CERTIFICATE-----Generated at Sun Oct 11 18:54:45 2026 by rpki-client