$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c21db1e2-4057-478d-a690-5baf74d3b413.roa File: c21db1e2-4057-478d-a690-5baf74d3b413.roa (raw, json) Hash identifier: rHw0eFMorBhbxUMcyqDnIgaeIZBJW/2SgcPH7MoH2ps= Subject key identifier: 3E:AB:F2:E8:03:E3:B6:AC:B0:E8:74:F7:10:53:55:B1:F5:D1:6C:4B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74D398E22DB106DB3E1D5B6BEA1BC3962D9A078C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c21db1e2-4057-478d-a690-5baf74d3b413.roa Signing time: Fri 09 Oct 2026 00:10:31 +0000 ROA not before: Fri 09 Oct 2026 00:10:31 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:f040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d3:98:e2:2d:b1:06:db:3e:1d:5b:6b:ea:1b:c3:96:2d:9a:07:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:10:31 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=1bb17e030c112c29669e8e5edfe3b38b93204ba722da4dc0e8a917e399ac6048, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:f1:fb:2b:b9:ef:a9:46:38:1d:5c:3f:ce: 32:ae:b6:da:f0:cb:e9:e8:bd:65:12:56:64:db:02: 1e:12:d2:24:ba:38:7a:54:7d:4d:9a:df:dc:2c:63: 1f:cc:34:2c:7a:34:65:74:34:86:15:2e:27:1f:06: fe:eb:1d:08:c2:e6:0e:55:89:0c:e1:82:ce:b9:09: 32:b4:5b:2a:67:41:71:52:ba:c0:c0:3d:35:21:82: 45:b3:e9:7f:f6:17:4c:67:94:8e:30:5a:0d:b9:22: 9d:aa:fc:19:e3:69:15:ce:70:ad:54:62:dd:e8:f3: 47:77:d0:8c:69:93:34:f5:a7:ef:a6:5e:e0:72:3a: 23:ef:55:c5:26:3c:be:88:51:3a:22:99:ec:40:cb: 2f:21:eb:fd:8c:9d:96:22:8c:85:85:e9:f8:48:8d: bc:38:ea:45:e6:b0:98:b8:ab:74:70:0d:42:c6:40: 3b:16:c4:1b:d6:e2:f7:a7:fb:53:88:ac:53:1a:41: af:92:4a:9e:a5:d8:a7:f2:00:8a:ac:35:78:f2:96: 95:13:6f:62:6d:8d:55:78:21:d6:2f:65:67:fa:c2: 7a:77:a0:5b:0e:49:ef:2b:88:83:cc:e4:e5:19:79: cc:f7:72:ec:6a:64:da:b9:d1:52:8f:73:df:63:19: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AB:F2:E8:03:E3:B6:AC:B0:E8:74:F7:10:53:55:B1:F5:D1:6C:4B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c21db1e2-4057-478d-a690-5baf74d3b413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:f040::/48 Signature Algorithm: sha256WithRSAEncryption 63:78:88:43:7b:71:19:3a:36:a8:a9:32:96:83:e3:76:3c:8a: e2:de:e6:ad:2e:ea:a1:da:e5:92:0b:4a:ba:9f:38:99:0c:f7: 5d:d0:de:ed:6a:63:fc:16:b6:e5:45:ae:94:7e:08:c6:05:9f: f2:1e:02:57:ff:97:b7:8b:70:ea:46:42:7a:5c:cc:56:6f:e3: d1:56:27:ef:8c:d6:b6:c8:16:7c:d4:65:5d:e3:7a:c2:15:23: 26:ee:7d:68:64:15:37:fa:b3:92:3c:ce:fe:9b:4b:0e:9d:4b: 2a:18:c3:89:ce:f6:e5:08:94:c4:38:48:d4:26:64:b0:53:b3: 9b:c4:8f:90:fb:3e:3f:7f:73:ec:98:35:e4:b8:bd:42:a1:1a: 82:d5:6a:e5:7d:4c:c0:cd:18:a6:21:9e:71:a6:63:60:ee:80: dc:75:9a:a1:1a:37:4e:ff:00:e0:98:75:74:3f:7d:e9:43:d9: 95:e1:1c:a1:a2:e2:73:42:90:6a:9a:e7:d2:57:b1:1a:d9:65: 53:5c:b9:d5:60:44:4c:f6:39:66:bf:6d:4a:95:2f:57:dc:37: 53:ca:fa:3d:44:63:6e:47:f2:8c:50:ad:8a:f4:32:41:27:41: 3c:e1:c5:c6:c2:1b:ac:9a:e8:76:c8:1f:29:04:88:a2:1f:2d: 29:4c:4d:fc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdNOY4i2xBts+HVtr6hvDli2aB4wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMTAzMVoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAMWJiMTdlMDMwYzExMmMyOTY2OWU4 ZTVlZGZlM2IzOGI5MzIwNGJhNzIyZGE0ZGMwZThhOTE3ZTM5OWFjNjA0ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql3x+yu576lGOB1cP84yrrba8Mvp 6L1lElZk2wIeEtIkujh6VH1Nmt/cLGMfzDQsejRldDSGFS4nHwb+6x0IwuYOVYkM 4YLOuQkytFsqZ0FxUrrAwD01IYJFs+l/9hdMZ5SOMFoNuSKdqvwZ42kVznCtVGLd 6PNHd9CMaZM09afvpl7gcjoj71XFJjy+iFE6IpnsQMsvIev9jJ2WIoyFhen4SI28 OOpF5rCYuKt0cA1CxkA7FsQb1uL3p/tTiKxTGkGvkkqepdin8gCKrDV48paVE29i bY1VeCHWL2Vn+sJ6d6BbDknvK4iDzOTlGXnM93LsamTaudFSj3PfYxl2DwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFD6r8ugD47assOh09xBTVbH10WxLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyMWRiMWUyLTQwNTctNDc4ZC1hNjkwLTViYWY3NGQzYjQxMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6vBAMA0GCSqGSIb3DQEBCwUAA4IBAQBjeIhDe3EZOjaoqTKW g+N2PIri3uatLuqh2uWSC0q6nziZDPdd0N7tamP8FrblRa6UfgjGBZ/yHgJX/5e3 i3DqRkJ6XMxWb+PRVifvjNa2yBZ81GVd43rCFSMm7n1oZBU3+rOSPM7+m0sOnUsq GMOJzvblCJTEOEjUJmSwU7ObxI+Q+z4/f3PsmDXkuL1CoRqC1WrlfUzAzRimIZ5x pmNg7oDcdZqhGjdO/wDgmHV0P33pQ9mV4RyhouJzQpBqmufSV7Ea2WVTXLnVYERM 9jlmv21KlS9X3DdTyvo9RGNuR/KMUK2K9DJBJ0E84cXGwhusmuh2yB8pBIiiHy0p TE38 -----END CERTIFICATE-----Generated at Sun Oct 11 18:55:19 2026 by rpki-client