$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/205af9d8-3799-4d38-b1fb-da840e362ff1.roa File: 205af9d8-3799-4d38-b1fb-da840e362ff1.roa (raw, json) Hash identifier: J0WU2cIsZWd1V3Ml25bhxnksJQ0PfRcGNSXQ6CRjJdQ= Subject key identifier: EC:19:40:13:C4:72:B4:8B:67:C1:97:45:79:50:08:CF:1A:77:95:53 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 3F2F7AD0DA9763E0A1AC01B89D385B91E169FFF6 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/205af9d8-3799-4d38-b1fb-da840e362ff1.roa Signing time: Tue 04 Aug 2026 00:00:13 +0000 ROA not before: Tue 04 Aug 2026 00:00:13 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:2f:7a:d0:da:97:63:e0:a1:ac:01:b8:9d:38:5b:91:e1:69:ff:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:13 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=7651e86421b728b5ae0da29303d7ab6105c272eb4915dd7f29b6047a30a2c4de, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:5a:c0:fe:ef:36:a0:4b:65:f9:ca:80:64: ce:8b:c6:1a:52:08:2a:92:bd:d2:c0:8d:c0:9a:a8: 16:6f:b5:23:34:5a:92:07:07:ec:b3:99:70:5e:fe: ea:cb:c2:c8:c4:6d:ae:b6:ad:20:a0:bd:fc:f1:33: 38:df:85:2a:69:55:41:55:15:00:26:6a:8a:3e:26: 53:c7:5b:98:60:d4:4e:df:d5:96:8a:e1:94:bd:37: 89:37:bb:1c:b5:ae:ac:0c:63:b9:7a:4c:ed:16:ae: aa:85:45:bd:11:d1:89:f9:44:a1:5f:02:94:90:38: 96:67:30:ec:75:a6:93:f2:eb:fc:2f:11:65:18:a9: ce:fb:8d:b9:ff:2f:7b:3d:db:5e:5f:ac:23:51:5d: f6:6b:7a:c1:79:d6:11:48:4f:f7:92:f7:cc:ac:e6: cc:da:5c:a2:b7:8e:5a:f0:f7:1e:ad:1f:5c:87:18: 04:07:e4:1f:32:fc:7d:e4:83:56:63:2a:d7:80:9a: 6f:56:87:94:e9:83:e5:1c:11:3d:37:c9:69:4e:4b: c4:87:ce:3c:72:c1:f6:6e:c1:14:0f:be:7c:68:d1: 06:f3:a9:5c:ce:1e:a7:95:3a:3e:b1:41:e6:73:78: 47:22:c1:e9:9d:00:c4:d8:ed:69:5a:86:58:46:70: 1f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:19:40:13:C4:72:B4:8B:67:C1:97:45:79:50:08:CF:1A:77:95:53 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/205af9d8-3799-4d38-b1fb-da840e362ff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018::/36 Signature Algorithm: sha256WithRSAEncryption 85:a1:fa:dd:cb:f8:b1:43:9c:5b:11:fe:bf:5b:67:7a:ec:8e: 85:b6:bb:ff:4c:15:0b:7a:00:6e:39:28:18:52:87:ab:2e:e1: 08:52:f2:2e:06:7d:3d:e5:44:f5:00:46:4e:d6:b0:6e:e9:0c: 7f:bc:2f:b2:91:3f:91:27:b8:51:7a:79:96:fa:ea:f1:21:62: f9:f5:ae:f9:8d:e3:69:d4:a7:36:d6:1b:a7:48:0f:60:9a:f7: d5:c8:62:c8:e4:08:50:f8:4e:4d:71:56:57:a7:f7:ed:58:1c: 24:21:d9:50:a1:59:d5:72:0f:c5:58:24:35:20:b4:ca:9d:1f: bb:6a:dc:60:17:6e:61:a0:5b:4d:82:d8:a9:4b:3c:62:4f:11: 0f:26:9a:1e:99:fd:7b:0b:b7:df:e4:aa:7a:bb:c0:da:13:12: b1:40:e7:b4:a0:fe:e5:69:53:1f:21:84:7e:d6:53:38:ab:15: 73:00:91:f7:99:ca:30:38:a2:03:ef:12:96:a0:3f:30:1d:23: 0d:39:91:9a:9c:66:98:14:9c:ea:0c:25:d7:6d:1d:c2:06:73: 4f:8e:df:88:5a:c9:c1:d4:b8:82:39:8e:e4:f5:68:ac:40:19: 9f:f1:50:3e:4c:5d:86:eb:ba:36:da:48:9f:69:c8:e3:2a:18: 0c:ce:46:3a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPy960NqXY+ChrAG4nThbkeFp//YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAxM1oX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNANzY1MWU4NjQyMWI3MjhiNWFlMGRh MjkzMDNkN2FiNjEwNWMyNzJlYjQ5MTVkZDdmMjliNjA0N2EzMGEyYzRkZTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc5awP7vNqBLZfnKgGTOi8YaUggq kr3SwI3AmqgWb7UjNFqSBwfss5lwXv7qy8LIxG2utq0goL388TM434UqaVVBVRUA JmqKPiZTx1uYYNRO39WWiuGUvTeJN7scta6sDGO5ekztFq6qhUW9EdGJ+UShXwKU kDiWZzDsdaaT8uv8LxFlGKnO+425/y97PdteX6wjUV32a3rBedYRSE/3kvfMrObM 2lyit45a8PcerR9chxgEB+QfMvx95INWYyrXgJpvVoeU6YPlHBE9N8lpTkvEh848 csH2bsEUD758aNEG86lczh6nlTo+sUHmc3hHIsHpnQDE2O1pWoZYRnAf3wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOwZQBPEcrSLZ8GXRXlQCM8ad5VTMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzIwNWFmOWQ4LTM3OTktNGQzOC1iMWZiLWRhODQwZTM2MmZmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJA+AGAAwDQYJKoZIhvcNAQELBQADggEBAIWh+t3L+LFDnFsR/r9b Z3rsjoW2u/9MFQt6AG45KBhSh6su4QhS8i4GfT3lRPUARk7WsG7pDH+8L7KRP5En uFF6eZb66vEhYvn1rvmN42nUpzbWG6dID2Ca99XIYsjkCFD4Tk1xVlen9+1YHCQh 2VChWdVyD8VYJDUgtMqdH7tq3GAXbmGgW02C2KlLPGJPEQ8mmh6Z/XsLt9/kqnq7 wNoTErFA57Sg/uVpUx8hhH7WUzirFXMAkfeZyjA4ogPvEpagPzAdIw05kZqcZpgU nOoMJddtHcIGc0+O34haycHUuII5juT1aKxAGZ/xUD5MXYbrujbaSJ9pyOMqGAzO Rjo= -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:11 2026 by rpki-client