$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa File: 29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa (raw, json) Hash identifier: WfHDadKJP4ulaWHT2y6eUPoVhLT0AkPSBTJjpjXeM4M= Subject key identifier: 51:FC:19:EB:FB:B0:53:EE:C5:8E:32:2C:0E:47:C7:CF:75:D4:9D:69 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 5BD06FF93DB0744B031922C1F2A3D1F54D490B1D Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa Signing time: Tue 04 Aug 2026 00:00:24 +0000 ROA not before: Tue 04 Aug 2026 00:00:24 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d0:6f:f9:3d:b0:74:4b:03:19:22:c1:f2:a3:d1:f5:4d:49:0b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:24 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=a36bb752e888992adeeeb999facf83c853eb6e9e3cbbacb38644aaf511e22e8d, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:30:ee:a7:65:14:0a:dd:a7:f4:52:ea:3c: 01:6a:b9:18:21:f5:58:c0:86:89:a9:8c:a7:06:9b: 38:fd:b1:01:20:6e:01:35:bd:ec:99:19:32:3f:ec: f7:76:3c:07:b6:1c:5c:69:bb:c3:cb:ee:75:b8:56: 59:f1:94:0a:aa:e3:98:cd:3b:cc:3b:44:f9:af:04: af:4b:92:5f:49:be:1b:1c:60:7e:d5:a6:10:9c:0e: f8:10:e4:ac:06:cb:dc:ee:d9:ec:e3:59:89:5f:bb: cd:93:1a:57:f3:82:f9:be:97:96:6f:3a:42:a4:30: 4f:77:54:f3:9c:a2:32:9a:61:d2:33:d3:ca:44:b8: 03:8c:36:4a:25:df:71:8f:9d:fe:81:28:c2:f7:14: d6:20:d2:c5:d3:1c:68:bc:a6:13:73:b6:2f:d2:4b: 78:f0:79:9c:53:78:ab:dc:2f:eb:e7:a0:71:68:6b: a8:f2:98:37:69:70:37:9b:eb:ab:eb:9c:db:8b:92: 34:e2:0b:cd:78:03:de:5b:15:d0:a9:22:64:0c:58: f2:c4:81:cc:e4:98:51:cb:26:42:d0:28:fb:1b:dd: b9:37:98:52:b3:7e:ab:5a:7e:86:9b:c7:fc:dc:86: 77:6c:3c:f3:f8:71:3d:8d:66:4e:8c:11:fb:6a:49: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FC:19:EB:FB:B0:53:EE:C5:8E:32:2C:0E:47:C7:CF:75:D4:9D:69 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018:c00::/38 Signature Algorithm: sha256WithRSAEncryption 46:44:93:93:a1:ca:78:71:3a:b0:6c:a3:c3:93:a8:05:83:6a: cd:c5:3e:10:a7:15:da:1b:72:11:a7:0a:0f:8b:19:ff:6b:a1: 39:8b:28:cc:0d:f3:cd:33:01:0f:ff:a7:34:c6:a4:5a:f5:8e: 92:81:94:52:28:c9:1f:34:67:c4:7f:cf:ab:1b:66:90:7d:e1: 76:08:c3:7a:eb:b9:4c:13:ea:31:23:82:09:49:de:5a:ed:3b: dc:8b:cd:8b:d3:49:81:04:e8:7a:4d:99:d5:54:2f:2e:2a:db: 6c:10:3a:79:53:9f:66:d1:8d:63:87:31:27:33:0c:77:0f:60: 6b:2d:29:af:94:8a:45:e4:60:89:b4:9f:22:de:e7:3e:86:b1: f2:41:d2:22:b9:5e:87:01:0e:23:d7:f8:16:c7:54:f3:ed:f6: 98:da:a3:4e:f7:f8:ee:63:49:de:c4:ef:cb:42:90:20:75:23: cd:dd:4a:4d:c0:76:89:bc:0d:cd:75:03:4b:cc:c1:99:dd:4b: 8e:59:bd:25:5b:fa:4b:2c:84:4f:7f:92:f0:11:09:5a:ef:56: 3d:a9:71:aa:65:dd:b4:92:46:d0:cd:d3:e2:6b:48:c6:3d:92: 94:e7:a9:5e:bc:f6:11:a1:54:35:86:ae:d1:51:f3:bc:3b:19: f1:30:4d:fa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUW9Bv+T2wdEsDGSLB8qPR9U1JCx0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAyNFoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAYTM2YmI3NTJlODg4OTkyYWRlZWVi OTk5ZmFjZjgzYzg1M2ViNmU5ZTNjYmJhY2IzODY0NGFhZjUxMWUyMmU4ZDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzww7qdlFArdp/RS6jwBarkYIfVY wIaJqYynBps4/bEBIG4BNb3smRkyP+z3djwHthxcabvDy+51uFZZ8ZQKquOYzTvM O0T5rwSvS5JfSb4bHGB+1aYQnA74EOSsBsvc7tns41mJX7vNkxpX84L5vpeWbzpC pDBPd1TznKIymmHSM9PKRLgDjDZKJd9xj53+gSjC9xTWINLF0xxovKYTc7Yv0kt4 8HmcU3ir3C/r56BxaGuo8pg3aXA3m+ur65zbi5I04gvNeAPeWxXQqSJkDFjyxIHM 5JhRyyZC0Cj7G925N5hSs36rWn6Gm8f83IZ3bDzz+HE9jWZOjBH7akmRDwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFH8Gev7sFPuxY4yLA5Hx8911J1pMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzI5ZmU0NDU0LWY3YTgtNDJmZC04YzM1LTc3YTZkNmY4ZTYwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AGAwwDQYJKoZIhvcNAQELBQADggEBAEZEk5OhynhxOrBso8OT qAWDas3FPhCnFdobchGnCg+LGf9roTmLKMwN880zAQ//pzTGpFr1jpKBlFIoyR80 Z8R/z6sbZpB94XYIw3rruUwT6jEjgglJ3lrtO9yLzYvTSYEE6HpNmdVULy4q22wQ OnlTn2bRjWOHMSczDHcPYGstKa+UikXkYIm0nyLe5z6GsfJB0iK5XocBDiPX+BbH VPPt9pjao073+O5jSd7E78tCkCB1I83dSk3Adom8Dc11A0vMwZndS45ZvSVb+kss hE9/kvARCVrvVj2pcapl3bSSRtDN0+JrSMY9kpTnqV689hGhVDWGrtFR87w7GfEw Tfo= -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:03 2026 by rpki-client