$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/40956690-3661-49f2-8ebc-2fa5a47a98ad.roa File: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (raw, json) Hash identifier: OamEyNs9Hu0JtYjz/T3HrIq6+zrYFAoh1XdRlDH9dpc= Subject key identifier: E1:DA:38:3D:D5:78:47:71:6E:BF:0B:5A:E3:A6:A9:04:CD:3B:1A:42 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 56C41A7E046BED45066129683A5F87A113C534EB Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/40956690-3661-49f2-8ebc-2fa5a47a98ad.roa Signing time: Tue 04 Aug 2026 00:00:39 +0000 ROA not before: Tue 04 Aug 2026 00:00:39 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c4:1a:7e:04:6b:ed:45:06:61:29:68:3a:5f:87:a1:13:c5:34:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Aug 4 00:00:39 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=67d44d27dd76048a38a4a825b8f6ddd1df6a0ae3525b6104b87336bae145d74b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:57:31:99:8b:78:78:89:31:5e:8d:0b:f9:83: 6e:70:cf:6f:59:c0:ec:80:ea:91:25:df:08:d3:43: e8:26:91:f0:0a:ee:76:d8:74:a8:30:4c:b9:3e:f8: fc:8a:49:00:b3:aa:ed:ed:2b:16:d9:32:58:56:14: 40:a3:07:98:d1:10:77:3e:48:f4:7c:12:5f:9d:3d: ea:3e:0d:02:f8:17:6d:cb:54:d3:b8:c1:06:34:07: 38:9f:32:20:6d:e1:46:b0:ba:33:11:84:30:ae:4b: 85:73:ba:2d:49:87:9e:5a:df:f2:21:ed:66:40:2c: dc:d5:e5:4a:f8:87:0b:e1:8a:ef:4c:5e:ce:1e:c6: b9:62:ff:d3:23:5b:88:31:50:86:67:54:df:9e:a4: 2e:3c:a1:25:d8:55:d0:e5:1c:46:b0:06:75:f4:f0: cc:24:85:5c:c8:a6:46:a6:24:f1:a4:72:4d:ea:b5: 0e:a4:25:ee:27:cb:2f:ff:99:35:d3:3d:7b:10:9d: a7:3a:f8:01:44:79:ad:e2:a0:d3:d1:bf:71:5b:0c: ea:89:74:e6:2b:d4:d4:56:0a:59:ca:51:9d:29:f1: 19:03:67:86:3d:70:6c:8d:fc:97:54:eb:a4:61:fc: bb:8b:27:db:8c:b5:7e:d3:3a:47:34:2d:13:76:ae: d5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DA:38:3D:D5:78:47:71:6E:BF:0B:5A:E3:A6:A9:04:CD:3B:1A:42 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/40956690-3661-49f2-8ebc-2fa5a47a98ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.240.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:46:fa:40:75:07:1d:95:48:47:d1:db:e7:b4:91:2c:ee:33: fb:5a:f9:81:8f:fe:26:1e:97:f5:9e:82:4a:a1:76:4f:88:7f: 15:30:8f:7f:8a:ee:31:20:85:6b:88:ad:07:ad:3d:79:83:74: 57:f0:6d:32:0e:62:83:e8:88:32:5b:07:f2:fe:66:ec:0e:20: 47:19:e8:2f:96:c8:c4:e2:6c:b5:20:fc:34:09:45:1f:53:71: b8:c0:a0:34:f7:f5:65:df:f8:4f:19:f0:b1:e8:38:3f:e4:27: a5:95:bb:cd:ba:48:9f:7f:42:8d:83:3d:62:cc:00:0a:66:0b: c2:7b:36:e8:1a:c5:6b:ce:df:2e:e9:4c:98:87:23:5a:8b:5c: 4f:88:38:bb:21:c5:40:38:0f:e2:2a:c2:f6:9d:95:d4:87:78: b9:cd:2f:fd:4e:44:49:76:fa:72:31:05:4c:1b:40:58:33:0f: 7a:1f:34:cf:01:53:e3:66:18:36:9a:d8:57:bd:6d:f5:9b:00: fe:03:88:d8:4a:68:5d:0b:11:b3:a5:4d:22:da:ed:96:ff:d7: 8f:3c:9b:f3:ab:6c:f3:5f:68:dd:1a:d2:e4:a6:f7:a9:84:c9: 11:25:2b:01:c1:73:71:85:e6:77:6c:93:69:ee:54:8c:89:08: b5:2f:58:ce -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUVsQafgRr7UUGYSloOl+HoRPFNOswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MDgwNDAwMDAzOVoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNANjdkNDRkMjdkZDc2MDQ4YTM4YTRh ODI1YjhmNmRkZDFkZjZhMGFlMzUyNWI2MTA0Yjg3MzM2YmFlMTQ1ZDc0YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFcxmYt4eIkxXo0L+YNucM9vWcDs gOqRJd8I00PoJpHwCu522HSoMEy5Pvj8ikkAs6rt7SsW2TJYVhRAoweY0RB3Pkj0 fBJfnT3qPg0C+Bdty1TTuMEGNAc4nzIgbeFGsLozEYQwrkuFc7otSYeeWt/yIe1m QCzc1eVK+IcL4YrvTF7OHsa5Yv/TI1uIMVCGZ1TfnqQuPKEl2FXQ5RxGsAZ19PDM JIVcyKZGpiTxpHJN6rUOpCXuJ8sv/5k10z17EJ2nOvgBRHmt4qDT0b9xWwzqiXTm K9TUVgpZylGdKfEZA2eGPXBsjfyXVOukYfy7iyfbjLV+0zpHNC0Tdq7VbQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOHaOD3VeEdxbr8LWuOmqQTNOxpCMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQwOTU2NjkwLTM2NjEtNDlmMi04ZWJjLTJmYTVhNDdhOThhZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDn/jwMA0GCSqGSIb3DQEBCwUAA4IBAQCKRvpAdQcdlUhH0dvntJEs 7jP7WvmBj/4mHpf1noJKoXZPiH8VMI9/iu4xIIVriK0HrT15g3RX8G0yDmKD6Igy Wwfy/mbsDiBHGegvlsjE4my1IPw0CUUfU3G4wKA09/Vl3/hPGfCx6Dg/5CellbvN ukiff0KNgz1izAAKZgvCezboGsVrzt8u6UyYhyNai1xPiDi7IcVAOA/iKsL2nZXU h3i5zS/9TkRJdvpyMQVMG0BYMw96HzTPAVPjZhg2mthXvW31mwD+A4jYSmhdCxGz pU0i2u2W/9ePPJvzq2zzX2jdGtLkpvephMkRJSsBwXNxheZ3bJNp7lSMiQi1L1jO -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:12 2026 by rpki-client