$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce69eb4f-756d-483a-bdf3-9ba3d77f137a.roa File: ce69eb4f-756d-483a-bdf3-9ba3d77f137a.roa (raw, json) Hash identifier: hSYzzbsk2UZ6v42kgH5pfPPjCS4y/zuesaBbGpaQBRM= Subject key identifier: E0:2A:22:2C:9D:A3:A9:F1:88:30:B5:F2:53:4C:36:F5:10:C7:11:5D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4AECD336A2745A178A4A5DC7A4C1618605EE93CE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce69eb4f-756d-483a-bdf3-9ba3d77f137a.roa Signing time: Sun 04 Oct 2026 00:00:34 +0000 ROA not before: Sun 04 Oct 2026 00:00:34 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da28:8800::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ec:d3:36:a2:74:5a:17:8a:4a:5d:c7:a4:c1:61:86:05:ee:93:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:34 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=8f1e3b6e6533a9924a3c8e419d05bbe6cf27210f839fb8fb6c6113595c00e9ed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:02:b2:bd:80:d2:74:94:97:1e:5c:c4:cd: 80:18:86:bb:a5:d5:e5:8d:51:a2:92:a9:30:4a:08: 49:4b:04:24:e6:21:ae:31:7a:57:70:5e:69:75:73: 5d:5a:15:31:e3:0a:d2:59:2c:59:a9:e3:fd:d9:9d: 4a:d7:b3:7a:7a:6b:cf:fc:42:9e:09:01:4e:b2:f0: bb:50:be:f8:52:4c:45:b8:e3:64:aa:82:e1:da:9e: 63:cc:f6:30:0f:8c:b0:d9:eb:06:ab:de:a8:a2:77: 46:50:9c:2b:cd:b2:4e:a9:1d:7a:3a:23:e3:0b:72: 28:3e:22:a2:7d:3c:43:3f:d0:c8:4e:bc:5a:c6:bf: 9a:43:f0:61:96:36:65:6b:a0:4d:3f:e3:c7:40:4b: 03:24:0f:45:54:5d:01:ba:a2:c7:24:b3:4f:2c:e0: 86:e3:75:44:15:99:b2:31:12:21:f1:11:83:35:b2: 0f:35:5a:1f:32:46:f8:36:54:42:b0:e2:11:ce:4c: 20:38:4e:d4:e1:34:89:10:16:f8:fb:00:f6:89:95: 05:8d:fb:f4:78:14:49:2d:7d:8e:12:5c:25:1b:73: c0:72:fb:9d:25:e4:34:c6:c5:4a:04:f2:02:74:f7: 1b:9d:bd:24:9c:00:04:db:d5:4c:a2:a8:30:74:f1: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2A:22:2C:9D:A3:A9:F1:88:30:B5:F2:53:4C:36:F5:10:C7:11:5D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce69eb4f-756d-483a-bdf3-9ba3d77f137a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da28:8800::/37 Signature Algorithm: sha256WithRSAEncryption 4d:62:81:44:ab:6b:7f:48:15:11:07:96:e8:be:7a:45:0f:28: f1:7a:b9:cb:98:4d:be:f2:59:69:b9:5c:22:a2:72:c7:2e:a7: 2a:64:5b:02:89:cd:43:83:70:ac:b2:b2:44:26:40:e4:01:0f: 91:49:a3:ed:e5:30:86:2d:d3:27:d7:12:aa:24:4d:63:cb:dc: 8b:7c:cd:36:b3:1e:14:0e:d9:03:a2:29:31:df:bb:a6:5c:2f: 1f:de:94:56:f6:92:0a:fa:97:72:82:91:38:eb:c8:fc:91:3e: 55:dc:e9:e7:60:ed:c3:cb:95:96:3a:b9:62:c7:37:54:46:f9: e4:f9:7f:12:e3:0c:f2:e5:ce:7d:82:aa:ac:f9:2f:f5:47:8d: 7f:d5:b8:c8:f7:d4:88:30:53:16:2f:68:4c:c1:fa:94:f6:aa: 41:19:51:3c:f3:ab:a4:fe:72:d9:03:de:25:d8:c6:10:41:1c: ce:72:de:41:f6:2c:30:6e:e4:b4:e5:fd:b5:08:ee:fd:c0:fb: e4:00:8a:60:bf:b8:2d:56:06:90:9e:1d:06:ee:bd:87:43:91: bd:e2:e5:17:c6:7c:ce:38:32:63:60:ac:af:11:2d:5d:bc:74: 1e:6b:23:bb:52:ec:a9:c1:9b:1e:ed:bd:fb:f8:c4:ff:c0:9f: 77:05:b8:4d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSuzTNqJ0WheKSl3HpMFhhgXuk84wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwNDAwMDAzNFoX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNAOGYxZTNiNmU2NTMzYTk5MjRhM2M4 ZTQxOWQwNWJiZTZjZjI3MjEwZjgzOWZiOGZiNmM2MTEzNTk1YzAwZTllZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpkCsr2A0nSUlx5cxM2AGIa7pdXl jVGikqkwSghJSwQk5iGuMXpXcF5pdXNdWhUx4wrSWSxZqeP92Z1K17N6emvP/EKe CQFOsvC7UL74UkxFuONkqoLh2p5jzPYwD4yw2esGq96oondGUJwrzbJOqR16OiPj C3IoPiKifTxDP9DITrxaxr+aQ/BhljZla6BNP+PHQEsDJA9FVF0BuqLHJLNPLOCG 43VEFZmyMRIh8RGDNbIPNVofMkb4NlRCsOIRzkwgOE7U4TSJEBb4+wD2iZUFjfv0 eBRJLX2OElwlG3PAcvudJeQ0xsVKBPICdPcbnb0knAAE29VMoqgwdPFdqQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOAqIiydo6nxiDC18lNMNvUQxxFdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NlNjllYjRmLTc1NmQtNDgzYS1iZGYzLTliYTNkNzdmMTM3YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYDJAbaKIgwDQYJKoZIhvcNAQELBQADggEBAE1igUSra39IFREHlui+ ekUPKPF6ucuYTb7yWWm5XCKicscupypkWwKJzUODcKyyskQmQOQBD5FJo+3lMIYt 0yfXEqokTWPL3It8zTazHhQO2QOiKTHfu6ZcLx/elFb2kgr6l3KCkTjryPyRPlXc 6edg7cPLlZY6uWLHN1RG+eT5fxLjDPLlzn2Cqqz5L/VHjX/VuMj31IgwUxYvaEzB +pT2qkEZUTzzq6T+ctkD3iXYxhBBHM5y3kH2LDBu5LTl/bUI7v3A++QAimC/uC1W BpCeHQbuvYdDkb3i5RfGfM44MmNgrK8RLV28dB5rI7tS7KnBmx7tvfv4xP/An3cF uE0= -----END CERTIFICATE-----Generated at Sun Oct 11 22:17:28 2026 by rpki-client