$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca2987e0-54d6-4246-8dd5-4284e82f8d14.roa File: ca2987e0-54d6-4246-8dd5-4284e82f8d14.roa (raw, json) Hash identifier: 33Gc/7tcaQ7pZ4AYyx/+8d8WMf8YFRMfiVaJBwvkovc= Subject key identifier: 26:F3:A5:DF:E8:8E:C8:E8:D7:61:AD:24:0F:46:AA:92:8A:3D:50:3F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F0DDCA9ED5EAA1BB49EF3C88FDE6F2071BD5948 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca2987e0-54d6-4246-8dd5-4284e82f8d14.roa Signing time: Fri 09 Oct 2026 00:06:49 +0000 ROA not before: Fri 09 Oct 2026 00:06:49 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:a0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 00:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0d:dc:a9:ed:5e:aa:1b:b4:9e:f3:c8:8f:de:6f:20:71:bd:59:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:06:49 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=d9329f9f8dda9df731f2af9de5e1861d9bfc31ea1982582eaf53a4178d603e86, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:8d:89:44:c6:dd:20:56:31:ac:27:0f:68: de:81:33:07:84:5a:c7:f8:09:27:6b:6c:65:d4:24: a7:6e:d1:85:c2:fa:87:66:43:e0:ac:1b:95:4e:fd: b1:26:24:3e:f5:5d:27:37:ec:3a:0e:e4:37:29:87: b8:5c:38:7e:8d:02:b9:3f:e9:e2:89:70:04:10:92: 12:35:18:16:4c:7e:fa:a5:0c:30:92:76:ad:ff:21: 88:cc:32:2b:f4:bb:cd:16:db:3e:f8:41:16:58:1e: 51:99:b4:3a:c2:31:64:5d:65:68:ba:6b:48:20:bc: 37:ee:68:b2:c4:4f:06:bd:18:2c:8c:01:74:a7:77: bf:14:f2:05:bc:aa:51:8c:78:f5:1e:ab:92:70:56: c1:eb:8f:4b:7d:b3:5d:09:c7:f2:02:3a:8b:d1:1c: 77:54:ca:48:e3:5e:1c:ed:fe:77:ed:7e:0c:c4:12: f7:a8:9d:85:03:08:45:e2:a5:98:73:12:47:72:53: 15:af:ba:01:8f:0b:57:03:c3:27:c5:5d:17:0c:da: 8a:77:68:e4:55:fa:46:ee:ce:c8:a6:09:3b:15:cd: 8f:45:da:fa:d7:c3:1d:f0:aa:0d:1d:35:e8:4e:a4: 8a:0d:ae:e0:d1:4b:87:93:9c:b1:d2:34:65:af:44: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F3:A5:DF:E8:8E:C8:E8:D7:61:AD:24:0F:46:AA:92:8A:3D:50:3F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca2987e0-54d6-4246-8dd5-4284e82f8d14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:a0c0::/46 Signature Algorithm: sha256WithRSAEncryption 97:1d:78:e1:8a:fb:19:d8:90:e7:6e:ed:3a:08:9e:78:69:fc: 92:fe:a5:c1:6c:f9:02:fd:8d:cc:fb:01:3f:0c:89:53:b7:00: 86:d2:6b:92:38:69:f0:de:4c:c5:75:e6:39:81:c1:ef:c0:63: 85:0e:01:86:39:8f:0a:ed:04:6f:62:da:79:47:59:27:51:24: 78:13:af:cc:79:bf:29:4a:da:ba:74:79:d0:56:ae:86:c9:a0: e4:c5:cf:e8:2e:c6:bf:0e:bc:5d:4f:5d:cb:9d:80:74:11:93: a6:f1:6d:ca:fd:2d:ca:12:cd:ab:f0:a3:9c:b9:00:7e:5f:f1: 59:ca:b2:bb:2f:63:d7:96:a4:f0:2b:28:c0:c1:17:26:0e:f3: 9f:95:9d:cb:e8:14:b2:fc:2d:94:f4:1b:07:13:21:32:83:09: ef:e5:db:9d:c7:20:a9:0d:18:ad:3f:cc:2c:9f:a5:3d:90:36: 88:11:66:0d:de:30:94:fc:83:42:a8:ee:d8:0c:5b:6c:00:ac: 12:a2:24:15:95:3c:41:8e:05:66:c5:cc:d4:d0:64:22:31:c9: 43:a9:f8:ca:d8:2d:19:0d:69:97:6c:f1:7a:41:5a:28:e0:92: 87:23:53:48:e3:74:e3:6d:04:ed:4f:9a:02:c7:b1:a3:95:11: d3:2e:8e:5f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULw3cqe1eqhu0nvPIj95vIHG9WUgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDY0OVoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAZDkzMjlmOWY4ZGRhOWRmNzMxZjJh ZjlkZTVlMTg2MWQ5YmZjMzFlYTE5ODI1ODJlYWY1M2E0MTc4ZDYwM2U4NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCCNiUTG3SBWMawnD2jegTMHhFrH +Akna2xl1CSnbtGFwvqHZkPgrBuVTv2xJiQ+9V0nN+w6DuQ3KYe4XDh+jQK5P+ni iXAEEJISNRgWTH76pQwwknat/yGIzDIr9LvNFts++EEWWB5RmbQ6wjFkXWVoumtI ILw37miyxE8GvRgsjAF0p3e/FPIFvKpRjHj1HquScFbB649LfbNdCcfyAjqL0Rx3 VMpI414c7f537X4MxBL3qJ2FAwhF4qWYcxJHclMVr7oBjwtXA8MnxV0XDNqKd2jk VfpG7s7Ipgk7Fc2PRdr618Md8KoNHTXoTqSKDa7g0UuHk5yx0jRlr0SFZwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCbzpd/ojsjo12GtJA9GqpKKPVA/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NhMjk4N2UwLTU0ZDYtNDI0Ni04ZGQ1LTQyODRlODJmOGQxNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba86DAMA0GCSqGSIb3DQEBCwUAA4IBAQCXHXjhivsZ2JDnbu06 CJ54afyS/qXBbPkC/Y3M+wE/DIlTtwCG0muSOGnw3kzFdeY5gcHvwGOFDgGGOY8K 7QRvYtp5R1knUSR4E6/Meb8pStq6dHnQVq6GyaDkxc/oLsa/DrxdT13LnYB0EZOm 8W3K/S3KEs2r8KOcuQB+X/FZyrK7L2PXlqTwKyjAwRcmDvOflZ3L6BSy/C2U9BsH EyEygwnv5dudxyCpDRitP8wsn6U9kDaIEWYN3jCU/INCqO7YDFtsAKwSoiQVlTxB jgVmxczU0GQiMclDqfjK2C0ZDWmXbPF6QVoo4JKHI1NI43TjbQTtT5oCx7GjlRHT Lo5f -----END CERTIFICATE-----Generated at Thu Oct 15 02:03:20 2026 by rpki-client