$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2247f34f-e5b1-423c-ac0f-7142ad86bd9b.roa File: 2247f34f-e5b1-423c-ac0f-7142ad86bd9b.roa (raw, json) Hash identifier: F6Sn391h7qKpRIBxBJwmtlvruWumMVPR54lSGlStar8= Subject key identifier: C8:AC:0E:67:35:08:64:B8:28:84:12:03:05:4A:F0:88:63:81:07:07 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 1AD0A052A7BC9FE624845BCE3D767CBCE78CFCFC Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2247f34f-e5b1-423c-ac0f-7142ad86bd9b.roa Signing time: Mon 03 Aug 2026 00:10:16 +0000 ROA not before: Mon 03 Aug 2026 00:10:16 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80f9:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d0:a0:52:a7:bc:9f:e6:24:84:5b:ce:3d:76:7c:bc:e7:8c:fc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 3 00:10:16 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=0e2d4e9f4684a5e44b3abc9a8650f5a058f83769699b7c3ded630bc0ca1e348f, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:03:81:8a:6f:9f:79:60:c3:cf:64:74:fe: 9a:7d:49:8a:03:da:7d:fb:89:14:8d:4b:52:2c:94: 09:b2:f2:70:14:49:83:08:1b:f8:a0:f7:13:3a:45: c0:ae:5f:7a:35:56:40:66:09:b3:61:53:c1:2d:c6: c5:6b:ff:80:7d:d8:a4:e0:89:8c:c8:20:f8:02:bd: 0a:52:5a:ff:3c:0b:01:d5:ac:8c:80:b8:ae:61:51: a6:be:73:ec:9f:c2:04:04:82:62:3a:1b:c9:f6:cb: cd:a8:ab:de:8d:b5:03:3f:fd:e8:08:8a:0d:1a:50: f6:55:9e:d1:83:ab:8a:ac:70:91:99:3f:d5:ee:f3: 5c:78:f5:c7:e2:9b:0e:aa:0a:27:a9:de:f7:e2:cf: 9a:5e:65:a2:c8:de:0a:fe:22:b9:be:75:3f:a0:50: 2c:3f:b9:06:22:e2:ea:a6:3f:2e:1f:a6:6b:36:74: 8e:93:53:1f:4b:33:56:f4:f1:93:bd:07:d8:20:d0: 00:35:3e:19:62:58:e3:dc:7b:a7:b3:c5:94:73:31: 5f:eb:29:50:25:a8:00:30:d7:d8:79:a6:fb:1e:9a: de:5d:14:81:5c:87:4c:53:39:9f:99:b3:98:4a:be: e5:35:ed:cd:4a:da:35:0f:26:70:5b:99:a8:09:5d: 89:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AC:0E:67:35:08:64:B8:28:84:12:03:05:4A:F0:88:63:81:07:07 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2247f34f-e5b1-423c-ac0f-7142ad86bd9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80f9:8000::/40 Signature Algorithm: sha256WithRSAEncryption 39:a2:62:a8:62:23:1e:40:01:2f:0c:b6:7c:da:6c:4a:e1:64: d6:02:72:8e:5c:c8:77:33:36:2c:6b:55:79:e0:9b:b5:4a:2c: 65:c0:26:1c:e6:6d:9a:78:3b:87:2d:9a:7a:98:4d:6c:e6:d2: bc:cd:ba:64:ca:cb:3a:c6:01:8d:36:53:33:8b:0d:2a:6e:fd: 80:a6:e1:b5:df:fa:65:4e:82:9e:fe:63:0b:89:ac:4d:84:e9: 59:01:cb:1e:08:e2:c6:73:f5:bb:10:8c:f3:17:a7:5b:bb:22: 51:91:96:7d:2e:ef:d5:52:1c:30:11:fe:29:42:71:78:ee:c4: a6:03:e1:36:aa:ea:6d:1b:cd:62:cd:0e:31:3e:cb:01:ff:7e: 7c:a0:62:9d:4d:49:40:38:32:83:cd:e0:8f:19:d5:8d:e3:b7: 97:8c:b9:8c:f7:8b:c6:ae:49:37:eb:93:cd:27:4c:ad:f5:e9: 27:a8:21:af:ca:33:2d:71:aa:fe:d1:00:50:ce:b7:0b:e5:bd: e9:76:92:68:53:1e:82:d0:0d:c1:b8:e3:20:d5:29:95:fb:e8: cb:69:71:f0:24:42:56:7d:8b:d8:30:38:00:6b:57:bf:53:5b: 35:50:0f:93:bf:70:a9:14:a4:d0:05:a3:05:6b:8d:97:17:09: 31:52:b3:9c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGtCgUqe8n+YkhFvOPXZ8vOeM/PwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwMzAwMTAxNloX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAMGUyZDRlOWY0Njg0YTVlNDRiM2Fi YzlhODY1MGY1YTA1OGY4Mzc2OTY5OWI3YzNkZWQ2MzBiYzBjYTFlMzQ4ZjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHoDgYpvn3lgw89kdP6afUmKA9p9 +4kUjUtSLJQJsvJwFEmDCBv4oPcTOkXArl96NVZAZgmzYVPBLcbFa/+Afdik4ImM yCD4Ar0KUlr/PAsB1ayMgLiuYVGmvnPsn8IEBIJiOhvJ9svNqKvejbUDP/3oCIoN GlD2VZ7Rg6uKrHCRmT/V7vNcePXH4psOqgonqd734s+aXmWiyN4K/iK5vnU/oFAs P7kGIuLqpj8uH6ZrNnSOk1MfSzNW9PGTvQfYINAANT4ZYljj3Huns8WUczFf6ylQ JagAMNfYeab7HpreXRSBXIdMUzmfmbOYSr7lNe3NSto1DyZwW5moCV2JpQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMisDmc1CGS4KIQSAwVK8IhjgQcHMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzIyNDdmMzRmLWU1YjEtNDIzYy1hYzBmLTcxNDJhZDg2YmQ5Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A+YAwDQYJKoZIhvcNAQELBQADggEBADmiYqhiIx5AAS8Mtnza bErhZNYCco5cyHczNixrVXngm7VKLGXAJhzmbZp4O4ctmnqYTWzm0rzNumTKyzrG AY02UzOLDSpu/YCm4bXf+mVOgp7+YwuJrE2E6VkByx4I4sZz9bsQjPMXp1u7IlGR ln0u79VSHDAR/ilCcXjuxKYD4Taq6m0bzWLNDjE+ywH/fnygYp1NSUA4MoPN4I8Z 1Y3jt5eMuYz3i8auSTfrk80nTK316SeoIa/KMy1xqv7RAFDOtwvlvel2kmhTHoLQ DcG44yDVKZX76MtpcfAkQlZ9i9gwOABrV79TWzVQD5O/cKkUpNAFowVrjZcXCTFS s5w= -----END CERTIFICATE-----Generated at Sat Aug 15 08:27:28 2026 by rpki-client