$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/788c3900-e4d5-439b-b231-3a69b5354901.roa File: 788c3900-e4d5-439b-b231-3a69b5354901.roa (raw, json) Hash identifier: krxgCaOeSPNpxAvkdN1HUWjVctU8/q6AuR479XM8AW4= Subject key identifier: 7F:A2:A3:3C:C7:E3:50:96:1E:D9:A3:CC:5A:A6:36:EA:B9:16:9E:DA Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 77663F7942705B5812EC2C05CCBFE8DE8F0772CB Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/788c3900-e4d5-439b-b231-3a69b5354901.roa Signing time: Tue 04 Aug 2026 00:00:12 +0000 ROA not before: Tue 04 Aug 2026 00:00:12 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8014::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:66:3f:79:42:70:5b:58:12:ec:2c:05:cc:bf:e8:de:8f:07:72:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:12 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=b99bcde572708f76c610d6e2dc8604e091d6647c6e4fa0cfac82fbfb28a22f13, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:d8:e1:ce:6a:55:f2:7e:ce:da:2c:7c:1e: 6a:34:9e:da:c8:a6:ee:f4:ea:19:a1:17:c5:bb:08: 1f:c2:c6:9a:ec:4f:04:53:d7:02:39:7a:e6:66:e1: 68:e9:7b:20:04:6c:58:c5:93:bd:1d:fe:0d:20:ad: 96:74:1e:b3:6b:fb:02:1e:93:cd:46:3f:5b:61:23: 14:15:1c:e6:c3:9d:39:80:48:7a:0b:42:2c:e5:c5: 74:e4:6d:7e:04:4c:40:49:da:8f:60:58:63:69:4a: 7f:0c:33:8a:bd:3e:70:b8:7e:3d:27:07:e3:d6:af: d4:e1:c7:1f:05:e6:54:28:00:29:66:5b:49:0f:00: 46:09:e5:eb:1a:7d:82:38:de:ca:a1:3d:9f:93:4e: 86:24:85:e2:17:9b:4e:d6:fe:4a:51:64:29:c1:00: 43:ac:8c:93:e6:c8:8b:5f:19:09:25:d3:b6:8c:cd: 6d:af:4e:7e:f4:44:66:52:fc:90:aa:e4:5d:e5:86: f2:8a:09:4c:aa:c4:22:16:32:f3:6a:6c:c5:79:17: e1:94:14:71:f1:d1:c6:c2:9a:64:1f:2f:5c:d6:e4: a1:71:46:38:77:3b:66:f9:83:a4:d9:18:2f:f3:ff: a3:c7:70:de:bd:1a:dd:10:aa:c2:00:d1:7d:8d:a9: 62:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A2:A3:3C:C7:E3:50:96:1E:D9:A3:CC:5A:A6:36:EA:B9:16:9E:DA X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/788c3900-e4d5-439b-b231-3a69b5354901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8014::/38 Signature Algorithm: sha256WithRSAEncryption 90:e2:3d:06:92:64:47:a7:82:09:83:10:5c:67:46:69:08:6b: bd:0b:0d:d2:56:cb:c7:58:d5:e2:0b:ea:45:22:19:13:3e:11: b9:f3:01:a2:5c:34:13:4a:c1:c2:b9:05:b8:34:19:97:70:57: e6:02:65:c9:cb:5c:68:29:89:cd:00:14:c5:0d:5d:a8:3d:ec: 1b:de:df:a6:5d:94:05:a7:d1:51:ca:7b:13:6b:9f:6f:62:ec: d4:2e:0d:f1:e1:23:9c:a8:78:ab:de:8f:5f:e7:d9:9a:92:e7: a6:59:4c:10:cf:25:95:b1:98:de:da:5c:e5:67:a8:66:a0:2e: 24:93:10:41:8f:aa:7b:f9:ad:1a:64:92:17:9f:c0:9f:4a:c8: 4f:51:6f:e0:58:21:3d:b0:9b:ba:5f:c6:f2:11:39:a9:01:35: d4:8d:0f:73:e2:12:a4:ef:20:ae:3b:e5:d8:ef:56:b4:2b:c2: 2b:12:1c:9a:84:4e:28:df:e8:e9:f7:a5:4e:43:6c:9e:c0:4f: 9e:62:0f:0d:d0:b1:84:a6:d8:95:be:84:07:29:3a:13:a9:b3: a2:27:3d:e2:d9:4b:f7:cf:b4:91:df:b0:93:18:72:7d:75:18: cf:8a:a1:c0:d4:03:07:95:24:71:d7:c7:d8:0e:0d:00:de:be: 9f:60:47:01 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUd2Y/eUJwW1gS7CwFzL/o3o8HcsswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAxMloX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAYjk5YmNkZTU3MjcwOGY3NmM2MTBk NmUyZGM4NjA0ZTA5MWQ2NjQ3YzZlNGZhMGNmYWM4MmZiZmIyOGEyMmYxMzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUzY4c5qVfJ+ztosfB5qNJ7ayKbu 9OoZoRfFuwgfwsaa7E8EU9cCOXrmZuFo6XsgBGxYxZO9Hf4NIK2WdB6za/sCHpPN Rj9bYSMUFRzmw505gEh6C0Is5cV05G1+BExASdqPYFhjaUp/DDOKvT5wuH49Jwfj 1q/U4ccfBeZUKAApZltJDwBGCeXrGn2CON7KoT2fk06GJIXiF5tO1v5KUWQpwQBD rIyT5siLXxkJJdO2jM1tr05+9ERmUvyQquRd5YbyiglMqsQiFjLzamzFeRfhlBRx 8dHGwppkHy9c1uShcUY4dztm+YOk2Rgv8/+jx3DevRrdEKrCANF9jaliOwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH+iozzH41CWHtmjzFqmNuq5Fp7aMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 Lzc4OGMzOTAwLWU0ZDUtNDM5Yi1iMjMxLTNhNjliNTM1NDkwMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AFAAwDQYJKoZIhvcNAQELBQADggEBAJDiPQaSZEenggmDEFxn RmkIa70LDdJWy8dY1eIL6kUiGRM+EbnzAaJcNBNKwcK5Bbg0GZdwV+YCZcnLXGgp ic0AFMUNXag97Bve36ZdlAWn0VHKexNrn29i7NQuDfHhI5yoeKvej1/n2ZqS56ZZ TBDPJZWxmN7aXOVnqGagLiSTEEGPqnv5rRpkkhefwJ9KyE9Rb+BYIT2wm7pfxvIR OakBNdSND3PiEqTvIK475djvVrQrwisSHJqETijf6On3pU5DbJ7AT55iDw3QsYSm 2JW+hAcpOhOps6InPeLZS/fPtJHfsJMYcn11GM+KocDUAweVJHHXx9gODQDevp9g RwE= -----END CERTIFICATE-----Generated at Sat Aug 15 08:27:26 2026 by rpki-client