$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97ecd44-7856-4171-b02c-67f43a4b316a.roa File: c97ecd44-7856-4171-b02c-67f43a4b316a.roa (raw, json) Hash identifier: YuJ5r7sAQrkiPQ+1TKmwfHfCu2gYxNokNcV5fW1Yj5o= Subject key identifier: 8E:91:BE:ED:32:67:2C:97:C8:95:E7:D6:BB:20:FA:08:FB:1A:84:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 06180D6C829D9377A70014152664540DCF3DB777 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97ecd44-7856-4171-b02c-67f43a4b316a.roa Signing time: Fri 09 Oct 2026 00:10:46 +0000 ROA not before: Fri 09 Oct 2026 00:10:46 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:18:0d:6c:82:9d:93:77:a7:00:14:15:26:64:54:0d:cf:3d:b7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:10:46 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=45deb8dd9701be414f591d09636ff346f3d0eba411fc5bb621c1090c00adb837, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:17:20:ce:32:9f:b8:26:60:1f:85:82:f3: 82:05:3a:7a:14:c5:e3:9f:37:a1:05:c5:23:a8:59: 2b:bc:d7:6a:2d:4e:4e:3b:35:3f:da:52:69:6d:47: 4a:4b:85:46:84:20:41:11:7b:36:07:6d:eb:d8:75: f5:54:06:ce:12:cd:70:93:1e:96:d2:2c:0c:ad:32: 42:a2:2a:51:30:dd:3e:ae:14:44:12:33:f8:43:f2: 21:6e:87:1a:5f:6d:1e:98:fa:22:f4:29:a5:df:7c: 62:1c:a5:f8:82:17:7c:44:fb:04:01:7f:f9:2d:e0: 6d:96:ef:21:6c:9a:e1:c7:92:65:89:81:3d:01:b8: 89:17:4b:c6:dc:21:46:f0:15:38:53:69:30:6b:1d: 41:df:03:76:f2:21:27:54:ba:84:f9:0e:65:47:5c: e1:36:d4:b2:4c:36:57:ca:f7:1b:18:99:21:c0:30: f2:c1:43:49:82:1f:89:32:03:93:b2:fd:c6:fe:e5: f3:fe:d4:6f:2e:e9:4f:53:fe:e8:ca:8a:c9:1f:4d: b3:f2:77:3b:cf:65:85:d2:df:ec:11:0a:be:dc:16: 15:74:10:1a:66:72:fa:99:07:c9:c7:f0:ae:a0:cf: 85:a4:70:76:ad:84:39:11:02:8b:79:b6:fc:93:45: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:91:BE:ED:32:67:2C:97:C8:95:E7:D6:BB:20:FA:08:FB:1A:84:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97ecd44-7856-4171-b02c-67f43a4b316a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c040::/46 Signature Algorithm: sha256WithRSAEncryption 76:bc:78:63:92:2e:3a:23:b1:3f:d9:04:a6:d5:b9:fc:e9:80: 8f:e5:6d:b2:77:46:4f:7b:0c:95:96:50:2f:ef:15:4b:81:91: 33:55:56:6e:7c:07:cb:b6:8a:a8:bc:bf:8d:46:81:3c:fb:9a: 23:d8:2f:b0:eb:f5:70:6c:b6:3f:e0:32:d1:99:a4:14:44:bc: 44:73:19:07:52:d1:df:44:41:78:ec:17:45:0c:ab:65:1e:b3: 4c:40:9a:0b:32:c4:3f:9f:29:60:ae:df:b1:e3:2d:2a:23:8e: 79:4a:4b:7c:66:38:2a:67:a0:02:28:b0:b8:6f:f3:e3:ce:81: 1b:d2:83:14:a7:b7:21:db:06:34:bd:76:4b:4d:b4:11:88:14: de:bf:8d:3d:4b:5b:b1:6b:82:62:ac:cc:d2:ac:3f:b5:ae:28: e1:f7:d7:68:80:df:53:16:7a:e1:3b:a9:0d:00:ba:c0:7c:be: 99:5a:23:0f:19:41:0e:c3:8b:5b:49:28:8a:46:3a:46:82:6a: 25:91:2d:b9:30:4e:dc:b4:af:85:65:26:ba:75:83:23:de:b6: 03:a6:ab:35:8f:30:eb:63:f1:e9:2e:67:1a:19:43:a1:bb:74: 49:98:87:95:ea:d6:af:1d:c7:a1:cb:7f:31:9f:09:6f:55:bb: 3d:6e:4f:5e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBhgNbIKdk3enABQVJmRUDc89t3cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMTA0NloX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNANDVkZWI4ZGQ5NzAxYmU0MTRmNTkx ZDA5NjM2ZmYzNDZmM2QwZWJhNDExZmM1YmI2MjFjMTA5MGMwMGFkYjgzNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq4XIM4yn7gmYB+FgvOCBTp6FMXj nzehBcUjqFkrvNdqLU5OOzU/2lJpbUdKS4VGhCBBEXs2B23r2HX1VAbOEs1wkx6W 0iwMrTJCoipRMN0+rhREEjP4Q/IhbocaX20emPoi9Cml33xiHKX4ghd8RPsEAX/5 LeBtlu8hbJrhx5JliYE9AbiJF0vG3CFG8BU4U2kwax1B3wN28iEnVLqE+Q5lR1zh NtSyTDZXyvcbGJkhwDDywUNJgh+JMgOTsv3G/uXz/tRvLulPU/7oyorJH02z8nc7 z2WF0t/sEQq+3BYVdBAaZnL6mQfJx/CuoM+FpHB2rYQ5EQKLebb8k0Vy9wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI6Rvu0yZyyXyJXn1rsg+gj7GoR7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5N2VjZDQ0LTc4NTYtNDE3MS1iMDJjLTY3ZjQzYTRiMzE2YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88BAMA0GCSqGSIb3DQEBCwUAA4IBAQB2vHhjki46I7E/2QSm 1bn86YCP5W2yd0ZPewyVllAv7xVLgZEzVVZufAfLtoqovL+NRoE8+5oj2C+w6/Vw bLY/4DLRmaQURLxEcxkHUtHfREF47BdFDKtlHrNMQJoLMsQ/nylgrt+x4y0qI455 Skt8ZjgqZ6ACKLC4b/PjzoEb0oMUp7ch2wY0vXZLTbQRiBTev409S1uxa4JirMzS rD+1rijh99dogN9TFnrhO6kNALrAfL6ZWiMPGUEOw4tbSSiKRjpGgmolkS25ME7c tK+FZSa6dYMj3rYDpqs1jzDrY/HpLmcaGUOhu3RJmIeV6tavHcehy38xnwlvVbs9 bk9e -----END CERTIFICATE-----Generated at Mon Oct 12 00:48:01 2026 by rpki-client