$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3e86592-230b-4598-a8f5-ce588abe191c.roa File: e3e86592-230b-4598-a8f5-ce588abe191c.roa (raw, json) Hash identifier: km4aDnT2aY9BqBSUx9USj28t5XlVzvL2XvaKaT0CMvg= Subject key identifier: 65:CC:6A:44:2A:52:27:3A:C4:69:0F:74:5D:AD:B5:71:10:F7:BB:D2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C12AD316A538C53294D1E2208EF19440E41EB1A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3e86592-230b-4598-a8f5-ce588abe191c.roa Signing time: Sun 04 Oct 2026 00:00:09 +0000 ROA not before: Sun 04 Oct 2026 00:00:09 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:12:ad:31:6a:53:8c:53:29:4d:1e:22:08:ef:19:44:0e:41:eb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:09 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=a8d4d6cbfff59101175584b7eaf33e9b362b244eff24418f7f06f256541d0ef9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:a3:2a:83:f5:f6:4e:f5:2d:bf:71:bd:75: 39:36:37:3d:d6:cd:e9:d6:c6:11:6f:5a:64:da:d8: f7:d7:01:bf:e8:8f:e2:b7:fd:71:6a:ff:e6:7b:a2: 58:6d:b6:27:31:80:b9:5f:ad:29:c7:41:0f:ea:22: 60:bc:6c:64:c4:95:93:f2:67:0c:ab:0e:f9:ab:d0: 3c:d3:af:3e:d5:ee:47:d6:26:39:50:d8:d6:78:b5: 71:53:3c:6b:ac:65:23:69:d9:d2:01:0e:e6:c0:52: 1a:3c:ff:26:e7:c0:8c:77:3c:11:40:7c:c9:52:4d: 08:81:76:1a:53:ce:50:85:5b:16:d9:8b:cb:78:74: 44:e7:d9:50:fd:fe:c1:9a:80:05:cd:b5:f7:76:69: 5a:9d:94:2f:a4:be:c8:cb:68:10:f2:96:35:c6:13: 6d:50:60:ae:38:7c:6e:b2:d6:22:f4:88:d3:d0:26: ea:26:52:24:76:b8:0e:bb:40:1e:ac:5e:40:a1:53: f0:bd:05:4a:81:02:e0:b8:c1:4b:3d:cd:4a:d8:db: ae:7b:16:79:f1:55:69:92:8a:b6:b5:83:86:8a:b1: 84:9f:66:18:96:2a:06:ec:6b:a3:d0:23:a2:03:8c: 67:ac:5f:b0:f4:9b:0b:6c:b1:59:ce:b1:17:0f:8f: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CC:6A:44:2A:52:27:3A:C4:69:0F:74:5D:AD:B5:71:10:F7:BB:D2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3e86592-230b-4598-a8f5-ce588abe191c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:a080::/48 Signature Algorithm: sha256WithRSAEncryption 1b:05:21:d7:e9:ff:e4:84:ea:82:c5:42:56:46:1d:fd:e1:25: e5:cb:60:4a:98:92:6d:69:4e:5b:86:fb:d0:e2:19:9e:65:07: eb:d9:06:9c:f2:17:7d:f4:44:8f:d4:a4:b2:57:06:be:a7:3d: 9a:1f:5f:c7:a6:d1:06:07:d3:99:68:f1:b7:d7:62:ae:b3:c3: c8:22:60:a4:2a:cd:0d:d4:30:6d:2d:c5:94:45:44:3d:bc:f5: 38:89:5e:31:bb:82:57:f9:c6:8f:75:d7:10:13:11:7a:7d:c6: b1:04:47:90:9f:d5:6a:c6:2f:d8:a9:13:2c:99:11:8e:ce:fe: 02:3a:e4:1d:d6:74:4d:90:cc:b7:d6:2c:85:09:28:67:19:cc: 59:c8:08:d1:ed:9b:85:95:8f:1f:4f:70:cd:71:08:23:19:b1: 0c:3f:b6:68:18:f8:07:e9:f2:63:70:fc:17:19:50:99:40:0f: d9:39:81:8c:84:8a:c7:f4:ca:bb:2f:5c:23:f6:6b:e1:f7:e0: 19:ae:03:da:98:da:49:57:0d:b0:9e:16:ed:e5:79:bc:4f:2f: 65:38:be:9f:24:3f:3e:ce:23:b6:bf:a0:96:2f:c2:69:3f:e7: fb:a2:1c:d3:38:e3:21:19:74:44:af:72:b1:b1:18:d8:c1:8c: 5c:65:a3:25 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTBKtMWpTjFMpTR4iCO8ZRA5B6xowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwNDAwMDAwOVoX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNAYThkNGQ2Y2JmZmY1OTEwMTE3NTU4 NGI3ZWFmMzNlOWIzNjJiMjQ0ZWZmMjQ0MThmN2YwNmYyNTY1NDFkMGVmOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J2jKoP19k71Lb9xvXU5Njc91s3p 1sYRb1pk2tj31wG/6I/it/1xav/me6JYbbYnMYC5X60px0EP6iJgvGxkxJWT8mcM qw75q9A8068+1e5H1iY5UNjWeLVxUzxrrGUjadnSAQ7mwFIaPP8m58CMdzwRQHzJ Uk0IgXYaU85QhVsW2YvLeHRE59lQ/f7BmoAFzbX3dmlanZQvpL7Iy2gQ8pY1xhNt UGCuOHxustYi9IjT0CbqJlIkdrgOu0AerF5AoVPwvQVKgQLguMFLPc1K2NuuexZ5 8VVpkoq2tYOGirGEn2YYlioG7Guj0COiA4xnrF+w9JsLbLFZzrEXD4/xxQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGXMakQqUic6xGkPdF2ttXEQ97vSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzZTg2NTkyLTIzMGItNDU5OC1hOGY1LWNlNTg4YWJlMTkxYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7aCAMA0GCSqGSIb3DQEBCwUAA4IBAQAbBSHX6f/khOqCxUJW Rh394SXly2BKmJJtaU5bhvvQ4hmeZQfr2Qac8hd99ESP1KSyVwa+pz2aH1/HptEG B9OZaPG312Kus8PIImCkKs0N1DBtLcWURUQ9vPU4iV4xu4JX+caPddcQExF6fcax BEeQn9Vqxi/YqRMsmRGOzv4COuQd1nRNkMy31iyFCShnGcxZyAjR7ZuFlY8fT3DN cQgjGbEMP7ZoGPgH6fJjcPwXGVCZQA/ZOYGMhIrH9Mq7L1wj9mvh9+AZrgPamNpJ Vw2wnhbt5Xm8Ty9lOL6fJD8+ziO2v6CWL8JpP+f7ohzTOOMhGXREr3KxsRjYwYxc ZaMl -----END CERTIFICATE-----Generated at Sun Oct 11 22:17:18 2026 by rpki-client