$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa File: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (raw, json) Hash identifier: ctv+s5liGUupTIOcwnKFBRlwhuBF5BgXDx/DcStRkH4= Subject key identifier: D4:AE:B3:BD:6E:44:0F:D2:47:DB:3C:34:89:D8:BD:23:0A:79:39:81 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 084A692BAB963F334A6A60F85C7BDD5920DDA449 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa Signing time: Sun 04 Oct 2026 00:00:09 +0000 ROA not before: Sun 04 Oct 2026 00:00:09 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4a:69:2b:ab:96:3f:33:4a:6a:60:f8:5c:7b:dd:59:20:dd:a4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 4 00:00:09 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=94e551607780465ff8ac838b2a85d4d775d3b028c37a8ed83fdc2512eaaaeb4b, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:99:a6:67:0b:6b:33:f9:c7:a7:f7:6c:8e: d3:07:67:b7:25:e6:1a:57:08:95:3c:b6:9d:74:cc: 1e:71:5d:3f:8b:09:9d:30:fa:8d:ec:34:5a:74:81: ec:dd:4c:c1:3a:fb:60:96:1b:e2:80:a6:a0:6c:cb: 90:a2:ee:31:a6:1a:c3:69:c4:63:14:6c:f8:e8:1a: 5e:7f:52:47:0a:32:f0:3e:94:6c:47:e2:ba:e5:30: a7:d5:fe:75:ab:1c:0e:b9:75:b8:bc:4b:e8:89:65: a8:04:1d:e2:92:b9:6a:bf:35:f2:fc:e3:e2:64:c6: fe:0b:2c:9f:71:56:47:b0:9a:6d:c0:ed:1c:e6:fa: c3:90:d8:71:7f:7d:de:84:d2:1c:9e:1d:31:cc:7b: 89:83:22:9d:65:7b:07:59:b3:3c:13:14:32:a6:ea: 56:3d:b1:31:97:8a:b9:5f:d7:a8:b8:39:01:7b:82: 14:81:69:2e:67:15:d4:77:d2:99:36:b0:62:41:7a: dd:f0:6c:56:65:da:d5:09:eb:e3:fd:25:de:ae:85: a0:50:4b:c2:42:ef:04:73:20:79:ab:45:96:00:ee: d7:b2:0a:ef:63:ac:23:04:92:44:9d:b6:98:a4:c1: 0f:d9:ee:79:4d:34:b9:e5:19:d2:7f:08:59:51:73: 02:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AE:B3:BD:6E:44:0F:D2:47:DB:3C:34:89:D8:BD:23:0A:79:39:81 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6700::/32 Signature Algorithm: sha256WithRSAEncryption 20:6c:8e:d6:82:88:9f:c9:e7:0b:a0:d3:eb:ee:ad:b2:50:0b: 95:54:5b:9d:0d:f6:12:4e:a8:46:99:85:dc:28:e2:f3:2c:e8: 0b:ad:10:84:9a:97:18:ca:fd:cd:4d:a2:f9:37:d4:31:95:99: 68:fc:13:24:06:11:70:d5:2e:a2:43:fd:6e:4a:5b:79:7e:2d: f6:18:84:5c:3e:b9:68:52:78:83:52:72:9b:1c:83:5d:1b:2d: c6:41:67:27:4d:16:59:b7:1b:1e:74:d0:45:16:d7:6d:a1:3c: 37:05:79:59:94:03:ac:83:a4:62:3a:b3:f4:bf:49:1e:0b:9b: 09:30:da:5f:ce:e8:81:3d:ac:9b:cc:86:76:07:7e:b8:ed:96: 92:30:b9:97:d3:74:ee:c2:83:bf:44:5e:bb:2d:e4:90:69:3a: 0c:ab:a0:ed:ec:e9:e5:cb:f1:fd:73:59:c8:a3:d8:88:b5:82: 11:05:ff:87:ad:9c:3c:1d:7c:51:ec:26:30:d9:bf:8b:d8:df: bf:25:7b:32:fe:e0:30:8f:5f:9b:bb:3f:d1:45:05:ab:cc:5d: da:14:eb:53:23:99:4f:ec:92:0a:4c:3e:51:4b:ac:ea:65:ed: fa:47:48:26:8a:b1:e4:64:97:2f:72:35:20:40:f6:5d:a0:a9: f4:dc:cb:98 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUCEppK6uWPzNKamD4XHvdWSDdpEkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAwNDAwMDAwOVoX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNAOTRlNTUxNjA3NzgwNDY1ZmY4YWM4 MzhiMmE4NWQ0ZDc3NWQzYjAyOGMzN2E4ZWQ4M2ZkYzI1MTJlYWFhZWI0YjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1aZpmcLazP5x6f3bI7TB2e3JeYa VwiVPLaddMwecV0/iwmdMPqN7DRadIHs3UzBOvtglhvigKagbMuQou4xphrDacRj FGz46Bpef1JHCjLwPpRsR+K65TCn1f51qxwOuXW4vEvoiWWoBB3ikrlqvzXy/OPi ZMb+CyyfcVZHsJptwO0c5vrDkNhxf33ehNIcnh0xzHuJgyKdZXsHWbM8ExQypupW PbExl4q5X9eouDkBe4IUgWkuZxXUd9KZNrBiQXrd8GxWZdrVCevj/SXeroWgUEvC Qu8EcyB5q0WWAO7XsgrvY6wjBJJEnbaYpMEP2e55TTS55RnSfwhZUXMC4QIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFNSus71uRA/SR9s8NInYvSMKeTmBMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzM0MDdlNWI2LWE4M2QtNDY2OC04OThmLWZkYmIyMzA5MjUwMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJABnADANBgkqhkiG9w0BAQsFAAOCAQEAIGyO1oKIn8nnC6DT6+6t slALlVRbnQ32Ek6oRpmF3Cji8yzoC60QhJqXGMr9zU2i+TfUMZWZaPwTJAYRcNUu okP9bkpbeX4t9hiEXD65aFJ4g1JymxyDXRstxkFnJ00WWbcbHnTQRRbXbaE8NwV5 WZQDrIOkYjqz9L9JHgubCTDaX87ogT2sm8yGdgd+uO2WkjC5l9N07sKDv0Reuy3k kGk6DKug7ezp5cvx/XNZyKPYiLWCEQX/h62cPB18UewmMNm/i9jfvyV7Mv7gMI9f m7s/0UUFq8xd2hTrUyOZT+ySCkw+UUus6mXt+kdIJoqx5GSXL3I1IED2XaCp9NzL mA== -----END CERTIFICATE-----Generated at Sat Oct 24 12:19:16 2026 by rpki-client