$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa File: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (raw, json) Hash identifier: +ugoeW2aHUE1wrHqoRYbCRE9DM5hBHnRChNFGKznhmo= Subject key identifier: 39:37:CA:C9:C2:0C:C3:7F:06:F6:DD:0F:93:DD:59:46:59:E9:BA:91 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 4C67EA9780724218554E9B4AD59ADAB12D221BFB Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa Signing time: Sun 04 Oct 2026 00:00:09 +0000 ROA not before: Sun 04 Oct 2026 00:00:09 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:67:ea:97:80:72:42:18:55:4e:9b:4a:d5:9a:da:b1:2d:22:1b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Oct 4 00:00:09 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=5a5c7422beaa7f16df5e52710f0175701cc45cdf1cada8a6498804da215018df, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7d:06:a7:af:cf:59:61:82:03:fb:91:83:9c: da:27:d3:b7:e8:fc:5d:e8:39:32:2e:18:cf:0c:a6: f4:b3:2c:06:8a:16:e9:09:74:ea:85:fe:b1:b6:09: 65:ef:75:c2:c6:8e:49:12:95:7f:8e:1c:d0:06:72: be:49:8d:de:80:cc:5f:32:dd:17:6c:db:bb:a4:bb: 89:50:84:d6:7a:9d:fe:45:ce:97:3b:14:95:da:82: c2:67:a7:6e:e3:8f:89:c6:c3:17:49:ac:44:2a:07: d1:7f:d7:b1:4d:0e:3a:74:84:6a:63:b4:26:25:f9: d7:22:5f:dc:6a:fa:e2:b4:2e:25:a2:33:eb:96:d6: 7d:1b:f3:ce:58:0e:09:fb:c4:ec:dd:c6:b7:19:9d: 3a:1c:de:52:03:40:ce:cd:9a:de:87:53:7d:9d:a6: 39:b6:e6:cc:35:6a:5d:59:13:68:7e:06:d1:f5:95: 4b:46:b1:a3:7b:b0:3d:e5:f1:7b:63:ea:36:64:56: 8f:ef:d2:79:b7:10:61:26:3f:7b:aa:c1:08:a3:6c: 4b:76:a5:80:72:25:8e:61:01:10:f5:99:b5:98:7e: ba:92:ec:ee:50:bf:7a:5d:aa:ca:00:e3:c6:0d:0c: 67:67:d5:d5:3a:08:63:cd:6d:9a:4e:86:a1:cf:cc: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:37:CA:C9:C2:0C:C3:7F:06:F6:DD:0F:93:DD:59:46:59:E9:BA:91 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6500::/32 Signature Algorithm: sha256WithRSAEncryption 6d:99:69:52:39:08:76:09:a6:a8:2e:5c:b8:7c:27:ef:73:c6: 9f:60:98:b7:42:dc:a1:96:0a:ca:ff:a6:25:23:bd:f6:51:64: ce:f9:56:a8:11:6e:c3:35:45:ac:7e:e0:f7:20:de:2d:e7:8d: 85:52:c4:57:af:9a:52:55:cd:79:71:5d:26:78:d5:94:81:5e: 83:98:a9:4e:0c:7b:f4:ae:e1:9c:a7:1c:eb:9e:2c:ad:2b:4d: 8e:2e:68:93:c1:9f:7b:28:60:e9:36:8c:fa:f9:aa:7b:07:7b: 4f:32:c4:77:8c:1a:43:69:35:f2:3c:53:1e:9d:3a:de:fd:5e: 52:d9:8c:56:a3:36:60:99:06:b4:09:bc:5c:1e:96:af:56:a0: 06:a7:ed:b4:87:02:f8:a7:94:6c:ca:35:b4:32:b4:2f:f2:ab: c6:d6:74:19:49:4e:78:f1:8a:b6:e7:19:66:e2:2c:8f:f5:c1: 8c:6b:bc:fd:30:35:12:ee:c1:5b:9d:14:21:c0:21:83:ed:1f: 07:be:83:19:fe:38:19:48:fc:11:e5:46:03:58:2c:8a:b6:75: cd:4e:1b:73:b1:53:d8:36:80:24:94:6f:5a:66:a8:2e:16:b5: cf:e9:75:ba:4f:e8:fe:69:68:05:d7:bb:73:41:4f:3a:5b:e1: 82:29:0d:72 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUTGfql4ByQhhVTptK1ZrasS0iG/swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MTAwNDAwMDAwOVoX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNANWE1Yzc0MjJiZWFhN2YxNmRmNWU1 MjcxMGYwMTc1NzAxY2M0NWNkZjFjYWRhOGE2NDk4ODA0ZGEyMTUwMThkZjEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn0Gp6/PWWGCA/uRg5zaJ9O36Pxd 6DkyLhjPDKb0sywGihbpCXTqhf6xtgll73XCxo5JEpV/jhzQBnK+SY3egMxfMt0X bNu7pLuJUITWep3+Rc6XOxSV2oLCZ6du44+JxsMXSaxEKgfRf9exTQ46dIRqY7Qm JfnXIl/cavritC4lojPrltZ9G/POWA4J+8Ts3ca3GZ06HN5SA0DOzZreh1N9naY5 tubMNWpdWRNofgbR9ZVLRrGje7A95fF7Y+o2ZFaP79J5txBhJj97qsEIo2xLdqWA ciWOYQEQ9Zm1mH66kuzuUL96XarKAOPGDQxnZ9XVOghjzW2aToahz8yTmQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFDk3ysnCDMN/BvbdD5PdWUZZ6bqRMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 L2NlYmVmMzIyLTQ2MGMtNGY2ZS04YThhLTJmNGI0MWRlYmQ5Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJABlADANBgkqhkiG9w0BAQsFAAOCAQEAbZlpUjkIdgmmqC5cuHwn 73PGn2CYt0LcoZYKyv+mJSO99lFkzvlWqBFuwzVFrH7g9yDeLeeNhVLEV6+aUlXN eXFdJnjVlIFeg5ipTgx79K7hnKcc654srStNji5ok8Gfeyhg6TaM+vmqewd7TzLE d4waQ2k18jxTHp063v1eUtmMVqM2YJkGtAm8XB6Wr1agBqfttIcC+KeUbMo1tDK0 L/KrxtZ0GUlOePGKtucZZuIsj/XBjGu8/TA1Eu7BW50UIcAhg+0fB76DGf44GUj8 EeVGA1gsirZ1zU4bc7FT2DaAJJRvWmaoLha1z+l1uk/o/mloBde7c0FPOlvhgikN cg== -----END CERTIFICATE-----Generated at Thu Oct 8 01:21:32 2026 by rpki-client