$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/018dea0d-42eb-4d58-8914-636d25ca3b3c.roa File: 018dea0d-42eb-4d58-8914-636d25ca3b3c.roa (raw, json) Hash identifier: brGnqUwam8tBiyf96QieAd/wvNV2CYr44s1OvpLUNWc= Subject key identifier: 1A:A4:96:45:5A:75:29:A5:2A:A3:90:BD:C2:AA:C6:88:3B:64:CD:53 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 4647F335EDD501CA5A895B5741A1106B3EF6FE5F Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/018dea0d-42eb-4d58-8914-636d25ca3b3c.roa Signing time: Tue 04 Aug 2026 00:00:26 +0000 ROA not before: Tue 04 Aug 2026 00:00:26 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:47:f3:35:ed:d5:01:ca:5a:89:5b:57:41:a1:10:6b:3e:f6:fe:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:26 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=3af23c0ca49dae239c33f182d4a973b5de9cbae1e35ffc78b64c62931f4050cf, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6f:79:08:35:2f:67:14:be:23:5b:ae:e5:c0: fa:f8:7a:0f:78:17:fd:be:ff:df:26:73:db:8e:fe: ae:76:5d:f5:cf:3a:2b:2a:b0:85:bc:59:d4:53:27: 33:de:c8:33:e0:a8:10:cd:47:e3:52:f6:14:08:98: ca:14:86:1f:c0:fe:27:27:ca:73:fb:0e:5a:6c:18: 1c:6e:37:80:b6:87:07:6e:4e:36:23:ba:df:c8:17: 6b:1a:7b:63:9e:0e:6f:e6:ec:14:77:1b:b0:51:73: cf:be:b9:3b:0e:24:7c:e6:68:35:cd:d1:9d:ed:90: a9:98:10:c7:a8:1a:91:93:b6:05:45:36:64:1a:91: 69:e2:ff:d7:65:c7:fb:cb:2f:d8:53:0d:d9:a9:6e: 6d:f2:5a:3c:4a:f3:be:fe:95:0a:68:47:e5:fd:eb: fa:3b:50:ad:64:fa:21:11:5f:43:67:ca:a5:5c:fd: 9a:d3:73:8b:b2:3c:5d:da:33:3b:90:78:0c:05:d3: e5:44:29:85:4e:82:4a:79:9b:00:e0:63:10:a3:9d: 30:32:58:83:bc:78:34:e0:1a:9d:61:f8:b3:ea:9b: 4d:9f:e4:ae:48:51:54:4a:d2:3f:19:8d:d9:32:45: f5:e9:e8:7e:2f:47:cb:34:d9:dc:87:26:53:81:42: 7d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A4:96:45:5A:75:29:A5:2A:A3:90:BD:C2:AA:C6:88:3B:64:CD:53 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/018dea0d-42eb-4d58-8914-636d25ca3b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018:800::/38 Signature Algorithm: sha256WithRSAEncryption 03:ba:d9:f3:ed:ff:60:1e:74:e5:63:c6:ad:11:82:42:e5:a7: ef:8b:de:bd:9e:34:16:06:18:c1:41:0e:34:51:6e:4e:f4:c4: aa:b7:53:1b:61:a2:88:89:8e:38:08:5b:0b:e7:81:2d:45:0f: 6e:7e:eb:dc:5c:58:f1:8e:77:32:cf:91:ba:5c:0f:d3:9a:cd: aa:ab:35:f3:23:71:fd:6e:38:3c:43:e2:69:9f:5d:9a:2e:f9: 7e:67:4c:37:e9:df:06:0f:37:af:f1:70:5f:2f:fd:bd:d5:2e: 1c:69:39:01:9f:8f:da:f9:8c:45:7c:45:ae:4b:4e:ca:98:60: ee:75:0e:ca:98:be:7e:38:72:c1:37:9e:2c:48:47:68:1b:17: cf:93:ca:72:8f:87:4c:fb:b0:93:61:b7:ae:84:bf:f7:15:00: 3c:e6:c9:1d:34:18:dd:ce:ef:bd:b8:bd:58:3c:b5:13:c5:ca: b3:5a:57:21:15:4c:c7:e0:ab:6a:6e:3e:d8:c6:29:64:f9:11: 9b:b8:62:2e:ac:27:25:07:37:b7:61:cb:c6:04:fb:02:85:04: dd:b2:0b:60:b1:de:0a:3b:4d:d9:ca:0f:2d:81:f4:ec:b2:d6: a8:cb:de:fc:f8:58:6b:b1:cb:25:54:03:a8:31:08:2a:3c:c7: 23:3d:1b:5a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURkfzNe3VAcpaiVtXQaEQaz72/l8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAyNloX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAM2FmMjNjMGNhNDlkYWUyMzljMzNm MTgyZDRhOTczYjVkZTljYmFlMWUzNWZmYzc4YjY0YzYyOTMxZjQwNTBjZjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G95CDUvZxS+I1uu5cD6+HoPeBf9 vv/fJnPbjv6udl31zzorKrCFvFnUUycz3sgz4KgQzUfjUvYUCJjKFIYfwP4nJ8pz +w5abBgcbjeAtocHbk42I7rfyBdrGntjng5v5uwUdxuwUXPPvrk7DiR85mg1zdGd 7ZCpmBDHqBqRk7YFRTZkGpFp4v/XZcf7yy/YUw3ZqW5t8lo8SvO+/pUKaEfl/ev6 O1CtZPohEV9DZ8qlXP2a03OLsjxd2jM7kHgMBdPlRCmFToJKeZsA4GMQo50wMliD vHg04BqdYfiz6ptNn+SuSFFUStI/GY3ZMkX16eh+L0fLNNnchyZTgUJ9WQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBqklkVadSmlKqOQvcKqxog7ZM1TMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzAxOGRlYTBkLTQyZWItNGQ1OC04OTE0LTYzNmQyNWNhM2IzYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AGAgwDQYJKoZIhvcNAQELBQADggEBAAO62fPt/2AedOVjxq0R gkLlp++L3r2eNBYGGMFBDjRRbk70xKq3UxthooiJjjgIWwvngS1FD25+69xcWPGO dzLPkbpcD9OazaqrNfMjcf1uODxD4mmfXZou+X5nTDfp3wYPN6/xcF8v/b3VLhxp OQGfj9r5jEV8Ra5LTsqYYO51DsqYvn44csE3nixIR2gbF8+TynKPh0z7sJNht66E v/cVADzmyR00GN3O7724vVg8tRPFyrNaVyEVTMfgq2puPtjGKWT5EZu4Yi6sJyUH N7dhy8YE+wKFBN2yC2Cx3go7TdnKDy2B9Oyy1qjL3vz4WGuxyyVUA6gxCCo8xyM9 G1o= -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:10 2026 by rpki-client