$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa File: 3537691c-1a10-4699-a8a0-4cec50a35534.roa (raw, json) Hash identifier: +/q+vQXfKV6ql5Dg8uH82pM9ZmDH7t0whFHYZKlEu3g= Subject key identifier: E7:EC:F9:82:9D:63:7B:4A:B3:87:FF:09:A6:D2:FB:AE:14:DF:86:20 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 6057A33F5164F974A9DF60F0C561D09A8ABBA285 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa Signing time: Mon 03 Aug 2026 00:10:16 +0000 ROA not before: Mon 03 Aug 2026 00:10:16 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fa:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 17 Aug 2026 00:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:57:a3:3f:51:64:f9:74:a9:df:60:f0:c5:61:d0:9a:8a:bb:a2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 3 00:10:16 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=497da1ff83a7f20d6c6e0db5c2ca9597b9cf4dff9f3048e2f802d93c7f477f0b, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:c9:f0:3d:14:6b:2d:51:4a:32:6f:a7:4a: 8e:9b:90:d8:f6:65:ea:2f:fc:64:7e:f3:b4:c6:5a: 1f:45:32:b8:93:38:f8:da:26:d1:ea:58:a2:c5:a0: d0:a3:2b:00:ca:89:5e:eb:f6:7b:d6:54:13:02:f1: 48:c5:60:04:15:fa:30:7c:19:e9:79:bd:1b:df:29: db:d1:36:5a:be:cb:21:cc:e0:d1:d9:a5:63:27:68: 23:56:10:55:54:0b:fc:22:c7:83:11:f4:c2:57:cf: 87:5c:1d:6e:5b:1b:1c:95:eb:80:9a:83:5e:de:1e: 2d:bb:29:66:db:d2:c2:24:f1:37:84:3d:b4:de:8a: 53:6e:a4:ad:3a:7b:90:11:cd:95:c0:40:54:51:d3: ce:19:f1:07:91:90:6c:bf:70:47:de:43:71:4e:a3: 8b:33:6c:33:cc:0b:47:f5:cd:9d:e9:89:14:bd:bb: 50:b9:59:a0:01:36:a8:df:41:07:49:d8:68:88:ae: 34:54:5d:2f:bc:ce:90:19:44:ee:16:30:7f:6c:f5: 1c:18:27:a4:32:5f:1b:20:a9:6f:e7:34:74:c7:62: 73:b7:1b:52:cd:67:c8:63:84:27:c1:f4:64:b9:25: b3:ef:b9:62:33:b8:0d:fc:4d:92:5f:bb:89:5a:26: e8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EC:F9:82:9D:63:7B:4A:B3:87:FF:09:A6:D2:FB:AE:14:DF:86:20 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fa:8000::/40 Signature Algorithm: sha256WithRSAEncryption 0e:9c:cb:df:7b:8a:d0:4a:6b:50:ac:1b:50:0a:30:94:68:ff: 33:9b:bd:b4:23:06:0b:23:f4:8e:f9:8b:59:1d:c0:93:b1:f0: c1:77:d7:84:ea:11:3d:1d:e7:21:3e:bc:48:60:27:10:bb:0f: dd:1b:5e:db:f1:60:56:4f:ac:87:0f:22:3f:12:1f:34:68:de: 1a:d9:e9:b1:bc:5b:18:9a:33:39:d8:e2:cc:48:79:05:99:16: cd:bd:05:38:79:fb:64:8a:1e:5b:bf:44:db:b9:71:6b:54:60: ef:58:f6:a5:de:8d:62:b2:d5:ba:9a:86:b0:39:34:48:78:82: 5a:d0:c2:34:7c:8e:9a:28:36:4c:16:1a:aa:85:11:13:a0:c2: a9:82:d4:fb:a7:54:b8:6b:da:14:d7:32:f8:e6:80:a2:81:4a: ee:da:75:ce:00:31:d7:14:aa:a9:08:e6:7e:36:03:a7:a7:3f: 17:be:7b:37:71:0d:c1:2e:76:52:56:0b:83:05:5e:22:b3:7f: 23:a4:ae:6f:9b:a5:ca:42:b1:2b:f8:96:8b:19:1e:8d:16:72: 0a:47:9f:30:be:c5:a3:38:ac:39:e4:57:e0:31:90:f8:77:1f: f1:5b:7c:90:d2:5b:9e:97:b2:f5:84:e1:93:66:9c:41:6e:2c: f9:8a:12:0c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYFejP1Fk+XSp32DwxWHQmoq7ooUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwMzAwMTAxNloX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNANDk3ZGExZmY4M2E3ZjIwZDZjNmUw ZGI1YzJjYTk1OTdiOWNmNGRmZjlmMzA0OGUyZjgwMmQ5M2M3ZjQ3N2YwYjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRbJ8D0Uay1RSjJvp0qOm5DY9mXq L/xkfvO0xlofRTK4kzj42ibR6liixaDQoysAyole6/Z71lQTAvFIxWAEFfowfBnp eb0b3ynb0TZavsshzODR2aVjJ2gjVhBVVAv8IseDEfTCV8+HXB1uWxscleuAmoNe 3h4tuylm29LCJPE3hD203opTbqStOnuQEc2VwEBUUdPOGfEHkZBsv3BH3kNxTqOL M2wzzAtH9c2d6YkUvbtQuVmgATao30EHSdhoiK40VF0vvM6QGUTuFjB/bPUcGCek Ml8bIKlv5zR0x2JztxtSzWfIY4QnwfRkuSWz77liM7gN/E2SX7uJWibomQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOfs+YKdY3tKs4f/CabS+64U34YgMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzM1Mzc2OTFjLTFhMTAtNDY5OS1hOGEwLTRjZWM1MGEzNTUzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A+oAwDQYJKoZIhvcNAQELBQADggEBAA6cy997itBKa1CsG1AK MJRo/zObvbQjBgsj9I75i1kdwJOx8MF314TqET0d5yE+vEhgJxC7D90bXtvxYFZP rIcPIj8SHzRo3hrZ6bG8WxiaMznY4sxIeQWZFs29BTh5+2SKHlu/RNu5cWtUYO9Y 9qXejWKy1bqahrA5NEh4glrQwjR8jpooNkwWGqqFEROgwqmC1PunVLhr2hTXMvjm gKKBSu7adc4AMdcUqqkI5n42A6enPxe+ezdxDcEudlJWC4MFXiKzfyOkrm+bpcpC sSv4losZHo0WcgpHnzC+xaM4rDnkV+AxkPh3H/FbfJDSW56XsvWE4ZNmnEFuLPmK Egw= -----END CERTIFICATE-----Generated at Thu Aug 13 09:59:02 2026 by rpki-client