$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa File: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (raw, json) Hash identifier: 4pmbz7g4O/Ukb8CdhdoUCeEMb4qdXTEeuhLOtcehxcA= Subject key identifier: 24:FD:B0:D0:6D:5F:13:DC:2E:85:8C:CA:41:9E:F0:81:99:5D:26:1A Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 08930544FFB1B4313230242654897B25EE729D40 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa Signing time: Tue 04 Aug 2026 00:00:40 +0000 ROA not before: Tue 04 Aug 2026 00:00:40 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:93:05:44:ff:b1:b4:31:32:30:24:26:54:89:7b:25:ee:72:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Aug 4 00:00:40 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=439bb6d809b9f3b65d1b3fe182223f51265ea991662f2cbee785bac84d637306, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:cb:a7:24:c4:fa:66:9a:bd:eb:5f:a2:27: e3:45:3d:ab:1a:23:b8:81:a8:b4:52:16:d4:77:1e: f0:2c:1b:39:c7:86:8a:2b:d2:d5:77:39:4c:1e:4f: 12:84:45:b5:c2:2e:0e:f2:90:16:ac:6d:df:19:96: 44:0b:29:5f:76:0a:79:a9:10:57:9d:02:c8:2e:4d: 42:d2:fb:a0:ea:cf:c3:99:a6:cf:8f:f5:a7:85:d9: 2e:b5:89:81:57:22:d6:2a:00:fb:66:89:10:d2:8c: 04:3c:75:95:d0:94:29:0a:99:6e:2d:08:5d:e2:56: 0c:a7:b3:fe:b4:c4:31:23:84:c2:cd:bf:d5:2e:97: a2:66:2f:50:ef:ba:8f:da:93:25:48:72:55:18:f0: ed:e1:12:a5:d6:b0:99:11:f7:a9:ef:c4:12:7f:26: 28:f8:81:c9:22:29:84:bf:23:86:35:b2:a6:fa:49: 5a:1d:1d:81:c1:ee:08:39:30:b9:42:dd:d9:36:be: dd:41:0d:46:c7:a2:4e:7c:0b:9b:1a:60:ac:25:72: 59:38:f8:f5:15:d2:05:e6:fd:0c:51:90:a8:be:b5: 81:da:b1:4b:6b:ad:80:8b:2b:d5:d7:bd:d5:25:71: bc:a2:68:90:dd:e4:29:7a:d0:31:26:8f:f8:fc:82: 0c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FD:B0:D0:6D:5F:13:DC:2E:85:8C:CA:41:9E:F0:81:99:5D:26:1A X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.216.0/21 Signature Algorithm: sha256WithRSAEncryption 52:5f:52:68:43:bc:92:a5:2c:24:21:d5:e6:48:fd:ee:b1:b2: f1:ba:78:d6:68:e2:40:f7:bf:22:26:5d:0f:a4:ca:32:36:6c: 36:ff:b4:54:b4:26:6d:0d:ec:d2:c4:9e:ca:12:9a:b3:9b:f9: 64:b5:f2:bb:24:5d:04:3b:f0:94:ac:37:a2:b9:6e:2d:88:49: 80:cb:e2:a2:f0:f6:df:42:b5:54:32:fa:f8:a4:77:11:c1:c0: 42:5b:15:fd:d0:c3:58:b2:a2:bb:c4:bf:74:8e:2b:47:c7:48: 9d:94:d6:01:ca:e5:c1:d5:a2:65:85:29:a7:d2:b6:fb:00:bc: f9:aa:5e:f0:78:5f:a1:8d:5a:90:11:3d:38:f5:46:c7:58:a3: 4d:da:62:a3:1e:0b:77:90:0d:a2:49:28:f1:a2:89:f7:94:7f: ac:15:57:93:d7:32:c7:41:5d:f8:14:28:c8:70:72:51:4a:f7: a3:e4:bf:57:ae:87:0f:e0:fc:8b:68:32:d1:f8:c7:b0:a5:72: f5:e1:4e:14:92:2c:83:4e:52:8b:74:bc:97:07:aa:b2:d6:3c: b9:7e:4e:38:bf:96:97:e6:c6:ac:64:f3:a5:21:7e:08:9a:42: 81:8d:2f:fc:52:05:df:34:ad:40:ac:35:e8:5c:a5:d7:b3:47: 5f:a2:5d:3c -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUCJMFRP+xtDEyMCQmVIl7Je5ynUAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MDgwNDAwMDA0MFoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNANDM5YmI2ZDgwOWI5ZjNiNjVkMWIz ZmUxODIyMjNmNTEyNjVlYTk5MTY2MmYyY2JlZTc4NWJhYzg0ZDYzNzMwNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLrLpyTE+maavetfoifjRT2rGiO4 gai0UhbUdx7wLBs5x4aKK9LVdzlMHk8ShEW1wi4O8pAWrG3fGZZECylfdgp5qRBX nQLILk1C0vug6s/DmabPj/WnhdkutYmBVyLWKgD7ZokQ0owEPHWV0JQpCpluLQhd 4lYMp7P+tMQxI4TCzb/VLpeiZi9Q77qP2pMlSHJVGPDt4RKl1rCZEfep78QSfyYo +IHJIimEvyOGNbKm+klaHR2Bwe4IOTC5Qt3ZNr7dQQ1Gx6JOfAubGmCsJXJZOPj1 FdIF5v0MUZCovrWB2rFLa62AiyvV173VJXG8omiQ3eQpetAxJo/4/IIM3QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFCT9sNBtXxPcLoWMykGe8IGZXSYaMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1ZDZjYmFlLThiN2YtNDVhOS04ZDliLTQ1OGQxMGE5YjFjYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDn/jYMA0GCSqGSIb3DQEBCwUAA4IBAQBSX1JoQ7ySpSwkIdXmSP3u sbLxunjWaOJA978iJl0PpMoyNmw2/7RUtCZtDezSxJ7KEpqzm/lktfK7JF0EO/CU rDeiuW4tiEmAy+Ki8PbfQrVUMvr4pHcRwcBCWxX90MNYsqK7xL90jitHx0idlNYB yuXB1aJlhSmn0rb7ALz5ql7weF+hjVqQET049UbHWKNN2mKjHgt3kA2iSSjxoon3 lH+sFVeT1zLHQV34FCjIcHJRSvej5L9XrocP4PyLaDLR+MewpXL14U4UkiyDTlKL dLyXB6qy1jy5fk44v5aX5sasZPOlIX4ImkKBjS/8UgXfNK1ArDXoXKXXs0dfol08 -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:24 2026 by rpki-client