$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f872164c-416d-44ed-81ce-172f02efdfbf.roa File: f872164c-416d-44ed-81ce-172f02efdfbf.roa (raw, json) Hash identifier: vfqCZhDy161ND7FuCVKS8m5E9VoWeVPGQevOlrFIHsc= Subject key identifier: C0:06:6A:5A:30:F5:F2:7E:7B:76:86:62:1F:6B:29:8E:20:C8:80:2D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C7DD00FB9D0E68D261B104CE5C585E2B1D2C83C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f872164c-416d-44ed-81ce-172f02efdfbf.roa Signing time: Sun 11 Oct 2026 00:07:51 +0000 ROA not before: Sun 11 Oct 2026 00:07:51 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da26::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7d:d0:0f:b9:d0:e6:8d:26:1b:10:4c:e5:c5:85:e2:b1:d2:c8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 11 00:07:51 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=415e421f71043909bf4b43433b425b3c08a7ab82795e14354d9eb231134fa26c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:af:ea:f2:64:df:d1:0c:b2:fb:b3:bf:1f: 3c:0f:11:1d:85:b1:45:66:6c:16:98:c7:5a:1e:dc: 16:91:a0:9c:fc:ad:66:ab:79:22:40:d3:df:ff:4e: 3a:12:f3:74:86:68:87:d1:b8:38:d9:a0:5d:2f:c5: 90:4e:99:68:c1:cf:5b:a3:fa:30:53:7c:40:50:e6: 35:23:dd:32:b7:6e:e4:09:cf:e0:c2:82:6a:6b:0e: 5f:70:ed:1f:46:df:b4:c5:d0:27:b0:25:60:51:20: c9:70:da:ed:0c:cf:25:a0:cf:7b:97:0e:ed:ca:ac: e3:7d:2f:39:d6:4d:b8:92:4f:f0:ad:e5:32:9c:ed: d5:19:21:a6:4b:04:69:95:f1:cf:ab:40:40:ae:2c: 0e:cb:41:ed:65:4a:7d:e5:7e:0c:a9:b5:74:30:5b: 82:97:7b:b2:cc:25:ac:4a:13:a8:9d:7d:3e:fa:69: bf:9b:5e:af:b8:c5:33:5d:a3:d9:23:35:e8:e2:1f: 6e:c7:3d:8e:d9:f4:0c:2c:f0:c1:59:69:dd:9c:e7: 05:ad:bd:51:43:27:70:89:45:7d:a8:de:98:d1:5a: 33:c3:3f:e7:e0:04:d3:14:00:d5:e0:8e:8a:51:e7: b3:5d:47:bd:ea:cb:ea:35:c2:5f:83:bb:ac:6a:d5: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:06:6A:5A:30:F5:F2:7E:7B:76:86:62:1F:6B:29:8E:20:C8:80:2D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f872164c-416d-44ed-81ce-172f02efdfbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da26::/36 Signature Algorithm: sha256WithRSAEncryption 6c:f5:2b:4b:c3:ee:86:a6:d3:c3:15:2d:25:60:91:74:ab:45: f0:73:55:2a:a2:9d:6b:ab:2e:32:89:bb:2b:5c:65:6d:31:03: e6:0c:9c:54:4d:fd:b6:a2:25:10:88:89:f3:7c:f2:c2:e2:27: 27:9e:0c:69:46:02:f4:36:81:71:80:f1:94:c3:09:f8:2f:01: 32:57:71:9c:1d:2a:f0:17:cf:0a:6b:32:23:8c:3b:34:62:39: ef:a7:91:49:77:15:03:a0:14:e1:d4:ce:28:c8:0c:aa:7a:4c: 12:41:cf:f0:27:79:d5:66:79:0b:e5:3a:8a:70:93:e5:64:a1: 16:db:88:37:75:72:43:86:95:02:0f:e1:5b:9b:ae:14:e8:cc: d2:7b:d7:ea:f8:78:1a:c6:60:77:eb:18:19:89:ed:15:c1:67: 61:e9:66:6f:30:85:5e:8f:c8:72:03:64:5a:5a:36:4d:6c:88: e4:11:52:04:7f:8f:76:0d:cb:2a:80:83:15:b5:f8:85:53:d4: 47:a0:0d:c6:87:7c:1c:d8:4a:98:b2:df:fb:ef:2d:46:28:5a: d5:af:05:a2:2f:c4:ce:6b:cd:28:8b:5d:a2:cb:d5:ce:63:a4: f2:f3:f3:1b:d9:71:78:3b:c6:9a:8c:41:8d:70:bf:bd:af:e9: 8f:28:9d:c1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPH3QD7nQ5o0mGxBM5cWF4rHSyDwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxMTAwMDc1MVoX DTI3MDEwOTIzNTk1OVowejFJMEcGA1UEBRNANDE1ZTQyMWY3MTA0MzkwOWJmNGI0 MzQzM2I0MjViM2MwOGE3YWI4Mjc5NWUxNDM1NGQ5ZWIyMzExMzRmYTI2YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnumv6vJk39EMsvuzvx88DxEdhbFF ZmwWmMdaHtwWkaCc/K1mq3kiQNPf/046EvN0hmiH0bg42aBdL8WQTplowc9bo/ow U3xAUOY1I90yt27kCc/gwoJqaw5fcO0fRt+0xdAnsCVgUSDJcNrtDM8loM97lw7t yqzjfS851k24kk/wreUynO3VGSGmSwRplfHPq0BAriwOy0HtZUp95X4MqbV0MFuC l3uyzCWsShOonX0++mm/m16vuMUzXaPZIzXo4h9uxz2O2fQMLPDBWWndnOcFrb1R QydwiUV9qN6Y0Vozwz/n4ATTFADV4I6KUeezXUe96svqNcJfg7usatVyrwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMAGalow9fJ+e3aGYh9rKY4gyIAtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y4NzIxNjRjLTQxNmQtNDRlZC04MWNlLTE3MmYwMmVmZGZiZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaJgAwDQYJKoZIhvcNAQELBQADggEBAGz1K0vD7oam08MVLSVg kXSrRfBzVSqinWurLjKJuytcZW0xA+YMnFRN/baiJRCIifN88sLiJyeeDGlGAvQ2 gXGA8ZTDCfgvATJXcZwdKvAXzwprMiOMOzRiOe+nkUl3FQOgFOHUzijIDKp6TBJB z/AnedVmeQvlOopwk+VkoRbbiDd1ckOGlQIP4VubrhTozNJ71+r4eBrGYHfrGBmJ 7RXBZ2HpZm8whV6PyHIDZFpaNk1siOQRUgR/j3YNyyqAgxW1+IVT1EegDcaHfBzY Spiy3/vvLUYoWtWvBaIvxM5rzSiLXaLL1c5jpPLz8xvZcXg7xpqMQY1wv72v6Y8o ncE= -----END CERTIFICATE-----Generated at Sun Oct 11 18:57:31 2026 by rpki-client