$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/453c01e0-c333-4283-987c-be2c8b71798c.roa File: 453c01e0-c333-4283-987c-be2c8b71798c.roa (raw, json) Hash identifier: OnBAto0TdCWCcKjMuIWvRy3EMeJs4vgEoxe7pPmAsYg= Subject key identifier: CB:5D:5E:E1:4A:EF:6F:E2:35:7D:29:B9:E7:87:C0:03:E3:51:D3:AC Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 4D6101E4255DBD078EF4E8882C389FD405A72B3F Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/453c01e0-c333-4283-987c-be2c8b71798c.roa Signing time: Tue 04 Aug 2026 00:00:25 +0000 ROA not before: Tue 04 Aug 2026 00:00:25 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:61:01:e4:25:5d:bd:07:8e:f4:e8:88:2c:38:9f:d4:05:a7:2b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:25 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=6534226327b1ee1828ac48076d5ed66c6eaebe929486f8b1c53e8b742f14ac74, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:61:51:98:b0:90:c0:b8:2e:b1:54:dd:6e: b3:1b:13:ff:d5:89:71:c0:cd:bf:fc:cc:b4:43:36: fe:7e:de:f5:a9:6f:ac:76:f2:ee:2e:ca:1a:09:34: 4b:a6:f1:07:85:e3:21:5e:e2:13:06:82:1c:38:f6: 20:36:fb:e6:77:13:52:3c:4a:90:95:75:ec:48:39: de:cb:c7:8a:b1:03:af:61:08:2a:e6:a8:99:ab:c6: 7a:25:b8:5e:12:19:68:aa:df:41:c3:bc:42:99:57: ea:d3:36:b3:ff:27:f8:61:ac:c7:d8:ef:55:e1:71: 74:f2:4f:dd:c2:d5:ed:bc:bf:2e:26:04:ff:88:7e: 81:ef:2f:03:53:9d:9d:3d:65:68:a5:e6:0b:23:61: 1d:a9:e3:a0:aa:fb:b4:16:12:7e:1a:5e:e4:67:58: cd:6c:9c:e4:22:4d:98:da:92:01:ab:81:61:a1:bf: 34:63:02:f4:51:08:a5:48:f9:fa:8b:73:c3:13:f2: 4c:a1:76:2b:07:37:51:00:e2:e3:f7:45:71:1b:df: 4f:c4:89:8b:c9:32:6c:0f:cc:f6:18:3a:44:c1:4c: c7:20:5d:c2:95:74:5c:87:e5:8c:fc:aa:ca:99:15: 37:99:69:95:5c:42:96:3f:67:8e:4d:f4:6a:96:91: 11:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5D:5E:E1:4A:EF:6F:E2:35:7D:29:B9:E7:87:C0:03:E3:51:D3:AC X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/453c01e0-c333-4283-987c-be2c8b71798c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 69:57:14:a9:df:c2:0d:67:35:46:54:bd:61:97:b2:b3:ed:2a: f1:17:63:1d:b2:61:8f:ab:27:7e:5e:25:ad:e2:ca:3a:b5:e9: 87:5e:d1:83:16:ae:7e:03:35:86:bb:b7:33:0b:8f:9c:34:b2: 55:33:e2:40:9d:8b:85:e3:15:15:af:e4:db:c5:eb:1e:10:4e: c4:97:3a:f3:25:d2:58:72:ce:17:5c:1b:19:56:5e:7e:4d:4c: 7b:85:a9:df:c5:6e:d9:e9:11:38:6b:60:ac:0f:42:91:da:70: 96:10:6c:00:f5:d9:0c:e5:a6:72:b8:ad:cf:d3:93:55:2d:00: 82:9e:41:3c:1f:61:27:b2:0a:aa:e9:18:cf:bd:15:ce:16:49: 47:7d:f9:1e:b1:dc:45:e1:bd:bf:b2:4c:fc:3c:81:da:de:77: 52:ea:4f:2a:d6:96:66:cf:98:04:5f:6c:2c:8c:59:d6:29:6f: 3e:ff:99:ab:37:ef:4b:0a:c0:db:de:a9:05:d5:99:f9:e5:93: d2:02:29:fd:fb:34:16:2a:a0:a8:f6:68:48:25:9c:04:4e:e8: 1b:35:57:2d:be:8f:7d:60:37:9a:65:64:18:50:b8:c3:bd:d0: 3a:f6:01:0e:f8:7c:2c:b9:dd:25:9a:14:b8:a6:e5:98:e2:c2: 84:1d:1e:4d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTWEB5CVdvQeO9OiILDif1AWnKz8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAyNVoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNANjUzNDIyNjMyN2IxZWUxODI4YWM0 ODA3NmQ1ZWQ2NmM2ZWFlYmU5Mjk0ODZmOGIxYzUzZThiNzQyZjE0YWM3NDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrZhUZiwkMC4LrFU3W6zGxP/1Ylx wM2//My0Qzb+ft71qW+sdvLuLsoaCTRLpvEHheMhXuITBoIcOPYgNvvmdxNSPEqQ lXXsSDney8eKsQOvYQgq5qiZq8Z6JbheEhloqt9Bw7xCmVfq0zaz/yf4YazH2O9V 4XF08k/dwtXtvL8uJgT/iH6B7y8DU52dPWVopeYLI2EdqeOgqvu0FhJ+Gl7kZ1jN bJzkIk2Y2pIBq4Fhob80YwL0UQilSPn6i3PDE/JMoXYrBzdRAOLj90VxG99PxImL yTJsD8z2GDpEwUzHIF3ClXRch+WM/KrKmRU3mWmVXEKWP2eOTfRqlpERLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMtdXuFK72/iNX0pueeHwAPjUdOsMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzQ1M2MwMWUwLWMzMzMtNDI4My05ODdjLWJlMmM4YjcxNzk4Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJA+A/4DAMA0GCSqGSIb3DQEBCwUAA4IBAQBpVxSp38INZzVGVL1h l7Kz7SrxF2MdsmGPqyd+XiWt4so6temHXtGDFq5+AzWGu7czC4+cNLJVM+JAnYuF 4xUVr+TbxeseEE7ElzrzJdJYcs4XXBsZVl5+TUx7hanfxW7Z6RE4a2CsD0KR2nCW EGwA9dkM5aZyuK3P05NVLQCCnkE8H2Ensgqq6RjPvRXOFklHffkesdxF4b2/skz8 PIHa3ndS6k8q1pZmz5gEX2wsjFnWKW8+/5mrN+9LCsDb3qkF1Zn55ZPSAin9+zQW KqCo9mhIJZwETugbNVctvo99YDeaZWQYULjDvdA69gEO+Hwsud0lmhS4puWY4sKE HR5N -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:07 2026 by rpki-client