$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa File: 0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa (raw, json) Hash identifier: mqrg3P7xVPpK8XKbN/5FavjgLCcAxzQKBwMawo7J7QI= Subject key identifier: 36:BE:1E:00:9C:E6:4D:51:30:74:4E:14:40:77:D3:68:DB:53:EA:40 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 4DC8E062FDAE621B258FA9BC22EFFDC28EC515E3 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa Signing time: Tue 04 Aug 2026 00:00:32 +0000 ROA not before: Tue 04 Aug 2026 00:00:32 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8014:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c8:e0:62:fd:ae:62:1b:25:8f:a9:bc:22:ef:fd:c2:8e:c5:15:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:32 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=e85255789484bcc28ec6a853b6e76c7e79b6330bedf3dbf898dcea42c18bb6f7, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:78:00:41:c5:10:2c:6d:48:55:25:24:55: 91:28:e0:cc:4c:bc:6f:bb:00:cf:fa:d5:97:cc:be: 25:60:2a:d6:21:c8:40:27:3c:0d:9f:22:11:ac:99: fb:f8:83:b9:fe:62:79:5f:04:d8:6e:25:f3:fc:2f: cb:fa:65:6c:99:49:ac:b1:b8:67:09:65:99:62:bd: ed:2d:fb:c0:f9:de:14:d3:4e:70:b4:0c:6c:aa:0b: a5:9f:d2:48:cb:ec:e3:4f:27:2b:c5:b2:82:75:ae: 9c:02:8d:7d:0e:08:eb:9e:a4:e2:bf:7b:56:8e:09: a7:2e:cb:d5:f2:d7:b4:52:f7:7d:37:15:ef:f9:f8: c9:73:82:df:22:17:79:3f:45:6d:57:46:a4:85:b2: 03:9f:0e:c5:35:da:1a:df:31:94:4c:ff:c5:3e:bb: 7e:9e:22:2a:fd:98:a0:b2:fb:00:17:57:3c:d8:7b: b2:12:b8:f4:ae:16:e5:52:0b:29:b4:75:05:1a:10: a3:5b:9e:76:c1:db:36:37:fe:a6:a0:eb:38:e7:19: b7:45:7c:6f:18:4a:1f:34:c7:af:43:2e:6c:44:8f: 46:b4:1f:cf:32:f2:a0:1d:65:a2:c1:e9:79:96:82: 2f:7c:70:b3:fb:df:28:0b:13:12:b5:02:7d:99:0c: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BE:1E:00:9C:E6:4D:51:30:74:4E:14:40:77:D3:68:DB:53:EA:40 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8014:800::/38 Signature Algorithm: sha256WithRSAEncryption 69:df:be:d7:cc:84:10:a5:fe:3a:f5:57:13:30:28:93:75:73: a0:3f:d9:6e:bf:2d:ce:17:71:39:af:6f:7d:46:2d:02:ae:fa: 3a:68:c3:1c:94:50:35:c9:e8:f9:84:e9:27:75:29:33:83:66: 96:81:e1:84:5e:cb:e3:83:b9:6d:a1:fd:86:9b:b3:3f:9d:19: 2d:10:d1:f1:8a:ea:c6:66:7a:96:a9:1c:6f:23:de:20:c2:0d: f5:4d:fa:30:1d:57:6e:63:b0:af:e4:6b:a0:1e:28:ff:a5:b5: 68:37:e3:c9:5c:fe:87:93:e0:bd:ca:88:f3:3c:8d:9b:90:09: 20:8b:8c:a5:40:c0:57:9a:fb:f3:b4:fc:8c:d4:69:23:13:c3: 8e:8a:0d:33:84:cb:8d:8f:01:78:72:ff:22:de:a0:78:16:0e: b7:6e:4a:d9:cb:e1:02:83:06:9d:7f:9a:aa:e1:32:f7:59:c4: b0:86:21:be:08:9e:96:07:3d:5d:d5:34:b6:e8:2e:5c:97:e6: 42:c1:a6:d5:bb:b9:d1:6a:5f:16:58:8b:83:7a:c0:50:5b:52: 8f:c3:cc:f7:d2:90:1e:10:70:cf:05:4f:5d:4b:2b:88:19:7d: 75:d8:25:fa:0f:59:d7:ea:74:76:70:9c:3d:85:59:fa:83:5c: 59:1a:b6:85 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTcjgYv2uYhslj6m8Iu/9wo7FFeMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAzMloX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAZTg1MjU1Nzg5NDg0YmNjMjhlYzZh ODUzYjZlNzZjN2U3OWI2MzMwYmVkZjNkYmY4OThkY2VhNDJjMThiYjZmNzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtft4AEHFECxtSFUlJFWRKODMTLxv uwDP+tWXzL4lYCrWIchAJzwNnyIRrJn7+IO5/mJ5XwTYbiXz/C/L+mVsmUmssbhn CWWZYr3tLfvA+d4U005wtAxsqguln9JIy+zjTycrxbKCda6cAo19DgjrnqTiv3tW jgmnLsvV8te0Uvd9NxXv+fjJc4LfIhd5P0VtV0akhbIDnw7FNdoa3zGUTP/FPrt+ niIq/ZigsvsAF1c82HuyErj0rhblUgsptHUFGhCjW552wds2N/6moOs45xm3RXxv GEofNMevQy5sRI9GtB/PMvKgHWWiwel5loIvfHCz+98oCxMStQJ9mQxS5wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDa+HgCc5k1RMHROFEB302jbU+pAMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzBmZWVkZDE4LTJiNzEtNDhkNS1hMmVlLTA3Y2E5MGI0ZDIwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AFAgwDQYJKoZIhvcNAQELBQADggEBAGnfvtfMhBCl/jr1VxMw KJN1c6A/2W6/Lc4XcTmvb31GLQKu+jpowxyUUDXJ6PmE6Sd1KTODZpaB4YRey+OD uW2h/Yabsz+dGS0Q0fGK6sZmepapHG8j3iDCDfVN+jAdV25jsK/ka6AeKP+ltWg3 48lc/oeT4L3KiPM8jZuQCSCLjKVAwFea+/O0/IzUaSMTw46KDTOEy42PAXhy/yLe oHgWDrduStnL4QKDBp1/mqrhMvdZxLCGIb4InpYHPV3VNLboLlyX5kLBptW7udFq XxZYi4N6wFBbUo/DzPfSkB4QcM8FT11LK4gZfXXYJfoPWdfqdHZwnD2FWfqDXFka toU= -----END CERTIFICATE-----Generated at Sat Aug 15 08:27:28 2026 by rpki-client