$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/33dd31e0-7039-4ff8-aafe-97f7b95b07d0.roa File: 33dd31e0-7039-4ff8-aafe-97f7b95b07d0.roa (raw, json) Hash identifier: mIbSkJuH4fhXhqH/cNZY2nw69+5vCh4tV8t2gp977Ac= Subject key identifier: 17:C9:B3:61:BA:08:FD:CC:D4:9C:14:26:71:E8:D6:B9:48:A6:05:3A Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 6CEF942E64AAFF1164BD82D7CD6BCCA66CC5D227 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/33dd31e0-7039-4ff8-aafe-97f7b95b07d0.roa Signing time: Tue 04 Aug 2026 00:00:15 +0000 ROA not before: Tue 04 Aug 2026 00:00:15 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 00:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ef:94:2e:64:aa:ff:11:64:bd:82:d7:cd:6b:cc:a6:6c:c5:d2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:15 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=ea78dc9e67f3e2ba01dbcf19bed13aefae06def16a872d7b9a12debdfad88b60, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:14:5d:cc:98:cd:44:78:6f:d4:72:4b:f2: 9b:2b:88:76:90:84:a0:b2:dc:f9:18:1e:b7:7c:e1: 26:c3:be:a4:d7:a2:3d:9f:17:76:59:42:ba:3b:6a: cb:e7:39:11:e3:78:a7:16:0c:7e:ab:88:98:c6:fa: f0:b6:49:76:6e:5b:a3:96:c1:65:4d:dd:d2:65:a0: 82:1b:f1:43:08:8d:9b:fd:18:36:55:ca:15:1f:20: 51:24:f6:c7:91:06:b4:00:b2:12:b8:10:85:b5:33: 27:77:f8:fb:6a:82:a5:b4:9a:3a:37:dc:de:8d:91: 00:19:01:f2:9f:4f:64:d0:96:d4:86:21:e6:43:19: 57:f3:66:52:d6:1d:98:4e:39:ed:f1:8a:d2:5c:7b: 9a:f5:1b:c9:f2:e4:20:d9:c3:78:7d:d6:ff:2c:38: 0a:a6:f3:62:c0:87:ab:71:79:4a:b6:70:58:1c:9d: 5b:82:e3:bb:cc:1a:41:50:bc:0b:d3:a4:2c:3c:d5: cb:26:a1:c0:88:06:43:1e:e7:27:a4:48:78:28:2a: ee:26:f1:84:c4:67:19:c1:72:76:95:5e:69:74:17: 37:85:a9:e9:fd:18:a3:6f:97:6c:5a:36:34:c9:3b: a3:db:d5:fa:b8:f2:93:1a:be:ad:d4:87:69:fd:dc: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C9:B3:61:BA:08:FD:CC:D4:9C:14:26:71:E8:D6:B9:48:A6:05:3A X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/33dd31e0-7039-4ff8-aafe-97f7b95b07d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:4080::/48 Signature Algorithm: sha256WithRSAEncryption 17:5d:5d:77:34:ab:30:a2:a2:e6:ea:77:31:58:ee:f8:87:35: f9:b7:a8:35:cb:38:27:8c:2a:24:cc:40:8d:43:27:3b:70:be: a9:ff:c8:18:d9:31:5a:77:b6:29:32:5e:24:56:67:50:bd:f1: 0e:6e:63:d3:27:00:99:8c:e7:88:88:69:c4:8a:79:74:3d:8e: da:0d:58:6d:e2:0f:58:45:85:3a:4c:68:72:19:8b:87:9d:45: 4c:0c:30:61:9f:60:5f:46:f2:1f:51:5c:fb:22:22:2d:46:49: e1:eb:6f:8d:3b:2d:aa:63:66:f6:0c:8c:fa:18:f2:9e:ac:af: d0:75:0a:fc:1b:13:e3:68:f4:11:16:be:0f:f9:1e:4a:0c:91: 7c:f2:14:8b:23:6b:d3:8d:ab:d0:7c:be:d6:ca:dc:3b:65:a7: c2:8a:ed:92:aa:c3:d5:a6:e4:7e:71:10:07:c1:fd:60:c5:4f: 26:3b:e3:b4:97:e3:c0:39:65:a5:6d:01:e8:ef:22:42:91:09: 96:c2:fb:c1:67:80:9d:7e:ea:87:ce:8e:37:c2:d5:af:df:de: 20:1e:14:91:cf:b3:f0:a9:20:65:24:37:8d:54:ad:05:1c:30: 9f:6e:d2:43:48:b1:8b:2a:7e:9b:8a:be:df:e1:ff:21:5a:72: f5:ad:82:37 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbO+ULmSq/xFkvYLXzWvMpmzF0icwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAxNVoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAZWE3OGRjOWU2N2YzZTJiYTAxZGJj ZjE5YmVkMTNhZWZhZTA2ZGVmMTZhODcyZDdiOWExMmRlYmRmYWQ4OGI2MDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshAUXcyYzUR4b9RyS/KbK4h2kISg stz5GB63fOEmw76k16I9nxd2WUK6O2rL5zkR43inFgx+q4iYxvrwtkl2blujlsFl Td3SZaCCG/FDCI2b/Rg2VcoVHyBRJPbHkQa0ALISuBCFtTMnd/j7aoKltJo6N9ze jZEAGQHyn09k0JbUhiHmQxlX82ZS1h2YTjnt8YrSXHua9RvJ8uQg2cN4fdb/LDgK pvNiwIercXlKtnBYHJ1bguO7zBpBULwL06QsPNXLJqHAiAZDHucnpEh4KCruJvGE xGcZwXJ2lV5pdBc3hanp/Rijb5dsWjY0yTuj29X6uPKTGr6t1Idp/dx4pwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBfJs2G6CP3M1JwUJnHo1rlIpgU6MB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzMzZGQzMWUwLTcwMzktNGZmOC1hYWZlLTk3ZjdiOTViMDdkMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJA+A/0CAMA0GCSqGSIb3DQEBCwUAA4IBAQAXXV13NKswoqLm6ncx WO74hzX5t6g1yzgnjCokzECNQyc7cL6p/8gY2TFad7YpMl4kVmdQvfEObmPTJwCZ jOeIiGnEinl0PY7aDVht4g9YRYU6TGhyGYuHnUVMDDBhn2BfRvIfUVz7IiItRknh 62+NOy2qY2b2DIz6GPKerK/QdQr8GxPjaPQRFr4P+R5KDJF88hSLI2vTjavQfL7W ytw7ZafCiu2SqsPVpuR+cRAHwf1gxU8mO+O0l+PAOWWlbQHo7yJCkQmWwvvBZ4Cd fuqHzo43wtWv394gHhSRz7PwqSBlJDeNVK0FHDCfbtJDSLGLKn6bir7f4f8hWnL1 rYI3 -----END CERTIFICATE-----Generated at Tue Aug 11 09:26:33 2026 by rpki-client