$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cba22a5-dc61-4413-aed2-8fb4cc8e3a49.roa File: 7cba22a5-dc61-4413-aed2-8fb4cc8e3a49.roa (raw, json) Hash identifier: YaN2kiACdTE9+hsx4v7eHBFrfUdryHMCCtZOirBkKw4= Subject key identifier: 20:A0:D9:4F:16:EE:C3:21:3F:6D:9F:76:23:2B:B9:D0:24:B3:3F:9D Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 4378D6CB7579F45E9EDBA246C06220C5A78F005B Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cba22a5-dc61-4413-aed2-8fb4cc8e3a49.roa Signing time: Tue 04 Aug 2026 00:00:15 +0000 ROA not before: Tue 04 Aug 2026 00:00:15 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:78:d6:cb:75:79:f4:5e:9e:db:a2:46:c0:62:20:c5:a7:8f:00:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:15 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=38d7587b8c5b2f2b978a7a7e25707b051a86c176cf50931b3b46b398b7ab584d, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:1b:a0:08:e7:18:1e:5f:33:19:9c:49:05: ce:90:cc:ef:40:e3:50:7a:24:39:bb:73:fd:c1:b7: f7:5e:84:35:39:95:1a:1d:90:c0:ef:8a:15:40:0e: 8b:9f:69:bf:a6:e4:8a:52:a6:e7:90:a7:c9:dd:83: c6:8e:5f:aa:4d:69:a1:7c:36:9c:48:17:0e:f8:77: 7f:60:d8:31:67:c9:dc:5b:da:8b:c1:5c:4a:ff:f0: e0:c8:22:67:df:5c:a5:b5:2f:57:0f:44:9e:2d:81: 49:64:d5:c3:ca:d2:d1:05:c9:b2:39:41:84:51:13: 45:91:c4:0b:61:f4:2c:c7:bb:6d:c3:16:5a:72:f8: be:54:02:11:1c:30:4d:ee:4c:e0:82:78:a9:94:bc: 75:df:82:ae:bb:de:eb:9a:fb:3a:46:ca:1b:2d:56: 5f:ae:bc:5f:3c:c9:2c:0d:56:f0:4b:b1:1e:3f:fa: 48:b8:f0:ec:59:b7:b7:60:42:66:36:33:9a:d5:d7: c3:ad:9c:77:ba:0e:9a:24:d9:ee:cb:fb:24:13:25: b0:50:bd:2f:96:68:6c:c5:61:38:b1:b8:69:45:cc: e4:b3:70:04:fe:c2:34:c4:67:83:dc:94:1f:f5:11: 15:63:b8:36:b3:80:62:0d:1b:ce:4f:26:7a:df:a7: 44:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A0:D9:4F:16:EE:C3:21:3F:6D:9F:76:23:2B:B9:D0:24:B3:3F:9D X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cba22a5-dc61-4413-aed2-8fb4cc8e3a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:8000::/40 Signature Algorithm: sha256WithRSAEncryption 20:a0:46:4d:a8:b1:d9:2a:82:34:2a:1b:2f:47:4c:f5:cc:a7: cc:d8:b0:f0:9c:f3:7e:94:a7:87:e8:ef:2d:e7:33:a0:45:d1: 0b:3e:68:da:34:4c:8e:84:32:b6:b9:2e:f8:13:72:bd:ef:f8: e1:87:7e:93:c7:45:b4:81:1e:da:d5:b3:67:fe:5d:8e:3e:61: e4:00:20:55:54:3d:21:51:0e:19:1f:fd:d9:ce:b1:48:ef:9e: a6:96:fb:f8:a8:10:54:b0:12:37:06:fe:90:90:58:c6:b9:9c: 67:e6:81:c4:bc:58:5e:ad:6a:e7:7d:11:34:c8:6c:d4:b0:93: ad:b1:c0:fd:0c:53:e2:56:06:b0:f0:8d:ef:54:36:41:18:1e: 12:cf:a1:89:1c:23:68:77:6b:aa:40:83:3c:1c:ac:21:82:3c: af:93:54:06:d3:f2:7f:49:a7:77:5f:b2:15:12:9b:ee:21:8f: 64:23:6e:55:36:58:20:3d:00:9d:00:8e:2e:a6:db:e2:df:ea: 6f:96:7d:a7:27:87:3d:be:d7:3b:5a:a2:24:3c:c7:0d:5e:2a: 48:60:f7:ff:1a:4e:cd:f2:10:7b:2c:c1:f6:4d:04:4c:c2:1e: 26:51:ad:4d:c7:0f:b0:b9:1d:35:29:1f:55:e3:d5:5c:3f:89: 7e:7a:a7:de -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQ3jWy3V59F6e26JGwGIgxaePAFswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAxNVoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAMzhkNzU4N2I4YzViMmYyYjk3OGE3 YTdlMjU3MDdiMDUxYTg2YzE3NmNmNTA5MzFiM2I0NmIzOThiN2FiNTg0ZDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRsboAjnGB5fMxmcSQXOkMzvQONQ eiQ5u3P9wbf3XoQ1OZUaHZDA74oVQA6Ln2m/puSKUqbnkKfJ3YPGjl+qTWmhfDac SBcO+Hd/YNgxZ8ncW9qLwVxK//DgyCJn31yltS9XD0SeLYFJZNXDytLRBcmyOUGE URNFkcQLYfQsx7ttwxZacvi+VAIRHDBN7kzggniplLx134Kuu97rmvs6RsobLVZf rrxfPMksDVbwS7EeP/pIuPDsWbe3YEJmNjOa1dfDrZx3ug6aJNnuy/skEyWwUL0v lmhsxWE4sbhpRczks3AE/sI0xGeD3JQf9REVY7g2s4BiDRvOTyZ636dEdwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCCg2U8W7sMhP22fdiMrudAksz+dMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzdjYmEyMmE1LWRjNjEtNDQxMy1hZWQyLThmYjRjYzhlM2E0OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A/4AwDQYJKoZIhvcNAQELBQADggEBACCgRk2osdkqgjQqGy9H TPXMp8zYsPCc836Up4fo7y3nM6BF0Qs+aNo0TI6EMra5LvgTcr3v+OGHfpPHRbSB HtrVs2f+XY4+YeQAIFVUPSFRDhkf/dnOsUjvnqaW+/ioEFSwEjcG/pCQWMa5nGfm gcS8WF6taud9ETTIbNSwk62xwP0MU+JWBrDwje9UNkEYHhLPoYkcI2h3a6pAgzwc rCGCPK+TVAbT8n9Jp3dfshUSm+4hj2QjblU2WCA9AJ0Aji6m2+Lf6m+Wfacnhz2+ 1ztaoiQ8xw1eKkhg9/8aTs3yEHsswfZNBEzCHiZRrU3HD7C5HTUpH1Xj1Vw/iX56 p94= -----END CERTIFICATE-----Generated at Sat Aug 15 08:27:35 2026 by rpki-client