$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/64aa0337-4cf9-42c7-b236-4cd36e69005e.roa File: 64aa0337-4cf9-42c7-b236-4cd36e69005e.roa (raw, json) Hash identifier: K+rDOU9bG5DnHOjEos+1N35e9yUdAHdzaQw0wOqYW7Q= Subject key identifier: D2:F9:9D:5B:15:CA:64:EC:62:37:ED:55:DF:3F:DC:76:33:78:20:15 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 5A63E7F95945D62CF3DB6E8EC77AA48C3B506D80 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/64aa0337-4cf9-42c7-b236-4cd36e69005e.roa Signing time: Tue 04 Aug 2026 00:00:14 +0000 ROA not before: Tue 04 Aug 2026 00:00:14 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80f1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:63:e7:f9:59:45:d6:2c:f3:db:6e:8e:c7:7a:a4:8c:3b:50:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:14 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=42a9c669395bfb325a4e01b76db914f163e862639ec3eb3634b5e1145b72d19f, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:49:4e:f7:2c:20:40:99:50:9a:1f:28:ad: 41:ec:52:04:a7:8a:44:9d:bf:21:e3:8d:12:76:ec: 8e:a8:9b:b4:10:81:5c:77:5d:78:11:c2:a5:bc:8e: 2e:73:f2:f7:35:c1:dc:ef:68:f8:8c:96:82:ed:7c: 36:fc:1c:ab:2e:0f:6b:2e:f9:4b:40:7f:49:30:d6: e4:fe:1b:33:fc:2b:8d:1b:e3:5d:69:a8:ef:c5:13: 2e:e2:1d:f7:d4:a7:09:de:2d:d9:35:73:55:a0:30: 82:5c:d1:6e:54:a2:e0:e4:94:9f:04:29:d8:37:b0: 2b:46:21:5b:b2:1a:59:68:d0:ff:be:b5:75:43:64: ef:8a:a4:7e:a6:32:b4:40:f2:2e:b5:49:44:74:bf: c0:58:9d:88:31:88:76:2b:c8:9a:2e:b7:fc:90:73: d8:d1:cf:8d:13:f4:3c:83:6e:83:f5:ac:ce:fb:1e: 02:94:c7:4d:4c:e0:b4:b2:15:26:03:b7:02:13:ca: 42:90:fd:ee:48:b4:62:a8:64:c0:c3:e4:e3:e6:71: e6:65:d5:41:3d:0c:31:7b:8b:b8:62:60:f7:9b:67: 01:b2:72:8f:98:f8:cd:e6:8f:53:c9:50:70:a1:b8: fd:44:75:6d:1d:8c:f4:d0:4a:26:35:f8:38:45:97: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F9:9D:5B:15:CA:64:EC:62:37:ED:55:DF:3F:DC:76:33:78:20:15 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/64aa0337-4cf9-42c7-b236-4cd36e69005e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80f1::/32 Signature Algorithm: sha256WithRSAEncryption a0:88:e2:61:fa:3f:bd:bb:91:93:9d:fe:77:44:45:2c:7f:92: a7:89:3f:18:c1:36:12:ce:ac:20:f1:e7:e0:42:7e:b4:69:3d: 24:15:6a:39:c0:0d:88:d8:d8:41:69:f3:df:99:0f:6c:f9:69: 69:89:cf:8a:4f:e3:fd:dd:f5:0d:33:86:43:15:d6:0a:e8:f4: 51:a9:66:85:c6:12:c0:de:6a:2e:71:63:d8:c5:eb:ec:31:e2: 43:91:49:dc:6d:36:a8:ea:d4:96:fb:4a:3c:ce:3d:36:d1:97: 19:c0:f9:46:0d:9b:5c:fd:ec:37:c5:9c:2e:92:48:a2:25:1e: 5d:23:29:e3:2b:59:ad:28:2c:56:ae:20:ea:eb:b2:2e:87:d2: 12:f8:0e:3e:6a:40:74:e8:63:5e:b9:9d:e6:a4:23:51:b7:31: 6a:61:c0:c3:ef:a5:dc:ef:37:ed:1e:0f:e6:c1:0e:bd:22:99: dc:72:a8:0c:84:be:24:5b:d5:dd:d2:8c:ac:52:8d:a8:d5:ed: 67:7d:c3:3d:cf:5d:1b:54:2d:d8:6e:ee:d2:ff:40:c6:4c:f5: 87:f8:63:ed:d4:40:43:6c:8f:c4:3d:34:3b:39:3f:14:53:4f: ba:d2:32:6a:2f:1a:70:99:61:45:f2:22:67:5d:e7:10:56:8b: eb:f4:57:61 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUWmPn+VlF1izz226Ox3qkjDtQbYAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAxNFoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNANDJhOWM2NjkzOTViZmIzMjVhNGUw MWI3NmRiOTE0ZjE2M2U4NjI2MzllYzNlYjM2MzRiNWUxMTQ1YjcyZDE5ZjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFFJTvcsIECZUJofKK1B7FIEp4pE nb8h440SduyOqJu0EIFcd114EcKlvI4uc/L3NcHc72j4jJaC7Xw2/ByrLg9rLvlL QH9JMNbk/hsz/CuNG+NdaajvxRMu4h331KcJ3i3ZNXNVoDCCXNFuVKLg5JSfBCnY N7ArRiFbshpZaND/vrV1Q2TviqR+pjK0QPIutUlEdL/AWJ2IMYh2K8iaLrf8kHPY 0c+NE/Q8g26D9azO+x4ClMdNTOC0shUmA7cCE8pCkP3uSLRiqGTAw+Tj5nHmZdVB PQwxe4u4YmD3m2cBsnKPmPjN5o9TyVBwobj9RHVtHYz00EomNfg4RZf6TQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFNL5nVsVymTsYjftVd8/3HYzeCAVMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzY0YWEwMzM3LTRjZjktNDJjNy1iMjM2LTRjZDM2ZTY5MDA1ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJA+A8TANBgkqhkiG9w0BAQsFAAOCAQEAoIjiYfo/vbuRk53+d0RF LH+Sp4k/GME2Es6sIPHn4EJ+tGk9JBVqOcANiNjYQWnz35kPbPlpaYnPik/j/d31 DTOGQxXWCuj0UalmhcYSwN5qLnFj2MXr7DHiQ5FJ3G02qOrUlvtKPM49NtGXGcD5 Rg2bXP3sN8WcLpJIoiUeXSMp4ytZrSgsVq4g6uuyLofSEvgOPmpAdOhjXrmd5qQj UbcxamHAw++l3O837R4P5sEOvSKZ3HKoDIS+JFvV3dKMrFKNqNXtZ33DPc9dG1Qt 2G7u0v9Axkz1h/hj7dRAQ2yPxD00Ozk/FFNPutIyai8acJlhRfIiZ13nEFaL6/RX YQ== -----END CERTIFICATE-----Generated at Sat Aug 15 08:27:27 2026 by rpki-client