$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e40ee0b-9aa9-4919-a079-9712212e127c.roa File: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (raw, json) Hash identifier: lRaza4oTSv80s0nRvQVFd1GE4T+uuqE3c/56F8PmYq0= Subject key identifier: 82:32:20:11:24:ED:B0:65:C1:A3:64:34:85:14:5E:BC:34:C4:0A:94 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 4EF535C972B32705C6797C790958430D330C2E04 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e40ee0b-9aa9-4919-a079-9712212e127c.roa Signing time: Tue 04 Aug 2026 00:00:41 +0000 ROA not before: Tue 04 Aug 2026 00:00:41 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f5:35:c9:72:b3:27:05:c6:79:7c:79:09:58:43:0d:33:0c:2e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Aug 4 00:00:41 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=d095f5bc5f6a471a3ef0d95ad654c3f1ca091293f8a531a66d41182c3a6b0f39, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:59:c1:7f:6f:77:cb:36:f5:35:95:c1:9a:b2: 35:8c:e3:94:bb:27:b6:c8:73:01:63:d0:3a:a8:22: fc:54:3d:36:e4:28:b3:a9:7a:e0:6f:0b:84:f9:41: aa:22:ea:0a:ff:01:26:0c:bf:4e:ea:a6:0c:28:2a: 50:ea:ab:00:a5:44:24:8c:20:91:75:70:4d:f2:89: 43:47:0a:3f:2e:f6:64:eb:0d:07:dd:d3:68:ab:81: ac:5f:6d:90:65:fe:2e:cb:9c:24:09:c0:2e:9f:35: 95:74:28:eb:46:5b:6a:c9:7d:9e:0a:81:c2:eb:c6: 7e:41:87:ae:ba:eb:1c:3f:c4:1d:1d:b6:14:0e:75: 88:47:55:c8:2c:5d:ee:1e:c0:4c:b4:41:fc:19:9b: 43:b6:e9:6c:95:71:ab:79:2e:07:93:af:72:f4:30: 2a:6c:4f:6b:d5:b2:5d:67:38:97:65:a7:57:9d:a5: 60:53:b1:dc:bf:3b:d4:4e:ea:54:d9:39:08:83:33: 30:a5:3b:fb:9c:5e:bd:82:b9:22:4d:70:68:44:b4: ef:e1:12:20:2a:a5:e5:0a:c7:46:54:73:7c:2b:eb: 48:ec:75:f8:74:32:5b:cf:91:a3:f6:3d:4c:e0:a5: 12:f7:58:57:2e:89:93:39:e2:71:39:fc:e6:c8:8f: ff:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:32:20:11:24:ED:B0:65:C1:A3:64:34:85:14:5E:BC:34:C4:0A:94 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e40ee0b-9aa9-4919-a079-9712212e127c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.232.0/21 Signature Algorithm: sha256WithRSAEncryption 25:fc:29:52:47:d0:10:01:1d:45:60:8a:e8:50:61:1e:28:19: 7e:9a:ed:1a:65:7a:83:18:e2:f1:2e:be:21:04:0b:eb:79:ab: 61:67:51:cf:b4:92:ca:b9:e5:41:59:38:54:63:f5:e7:33:bd: 3e:1b:58:99:0f:4b:85:d9:a0:a6:55:0b:15:4f:5d:25:8b:8f: 13:c0:b1:ff:a1:0f:58:db:09:7a:89:bd:a6:91:a0:ca:51:d9: 4d:8c:3d:4a:a8:92:df:a0:9a:c5:18:06:d4:f9:ae:92:f4:43: cb:ea:26:96:f2:6d:5d:40:e2:28:ac:32:3c:41:77:b4:39:dd: d9:60:fa:27:9a:be:d5:2b:e9:68:8f:c1:eb:ad:27:f7:cc:b1: 7c:4d:83:46:b6:95:bd:79:f1:e0:f4:d5:23:ca:c4:f8:77:d6: a5:1b:46:fd:80:74:b3:f1:c9:63:3f:8e:a2:bb:58:ba:9a:74: 89:11:58:2c:20:18:b6:41:5e:00:56:56:5f:c4:3a:95:c6:be: 40:82:85:e5:3a:51:da:6b:27:92:70:dc:06:f2:ed:e9:62:82: d0:38:df:78:cd:33:79:ba:0b:ab:25:e0:82:d1:65:e6:2d:f9: c9:ed:b4:b8:6d:b1:ce:3d:57:73:74:77:73:0a:c1:77:3a:fe: 38:44:12:6b -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUTvU1yXKzJwXGeXx5CVhDDTMMLgQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MDgwNDAwMDA0MVoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAZDA5NWY1YmM1ZjZhNDcxYTNlZjBk OTVhZDY1NGMzZjFjYTA5MTI5M2Y4YTUzMWE2NmQ0MTE4MmMzYTZiMGYzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41nBf293yzb1NZXBmrI1jOOUuye2 yHMBY9A6qCL8VD025CizqXrgbwuE+UGqIuoK/wEmDL9O6qYMKCpQ6qsApUQkjCCR dXBN8olDRwo/LvZk6w0H3dNoq4GsX22QZf4uy5wkCcAunzWVdCjrRltqyX2eCoHC 68Z+QYeuuuscP8QdHbYUDnWIR1XILF3uHsBMtEH8GZtDtulslXGreS4Hk69y9DAq bE9r1bJdZziXZadXnaVgU7HcvzvUTupU2TkIgzMwpTv7nF69grkiTXBoRLTv4RIg KqXlCsdGVHN8K+tI7HX4dDJbz5Gj9j1M4KUS91hXLomTOeJxOfzmyI//lQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFIIyIBEk7bBlwaNkNIUUXrw0xAqUMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlNDBlZTBiLTlhYTktNDkxOS1hMDc5LTk3MTIyMTJlMTI3Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDn/joMA0GCSqGSIb3DQEBCwUAA4IBAQAl/ClSR9AQAR1FYIroUGEe KBl+mu0aZXqDGOLxLr4hBAvreathZ1HPtJLKueVBWThUY/XnM70+G1iZD0uF2aCm VQsVT10li48TwLH/oQ9Y2wl6ib2mkaDKUdlNjD1KqJLfoJrFGAbU+a6S9EPL6iaW 8m1dQOIorDI8QXe0Od3ZYPonmr7VK+loj8HrrSf3zLF8TYNGtpW9efHg9NUjysT4 d9alG0b9gHSz8cljP46iu1i6mnSJEVgsIBi2QV4AVlZfxDqVxr5AgoXlOlHaayeS cNwG8u3pYoLQON94zTN5ugurJeCC0WXmLfnJ7bS4bbHOPVdzdHdzCsF3Ov44RBJr -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:15 2026 by rpki-client