$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cf17e61-b049-438c-8aaf-2d4714b51857.roa File: 7cf17e61-b049-438c-8aaf-2d4714b51857.roa (raw, json) Hash identifier: b/RA3izV0ejOW3txEWM2ejkrlbfKV5voqFRvIPNlXhg= Subject key identifier: 36:86:6D:CE:56:F5:22:A3:E0:48:91:09:FA:14:64:5C:5D:D9:D7:70 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 507F6119F5587443D9CB5CF650FFF3E4B1381E Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cf17e61-b049-438c-8aaf-2d4714b51857.roa Signing time: Thu 22 Oct 2026 00:10:09 +0000 ROA not before: Thu 22 Oct 2026 00:10:09 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fa:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 00:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:7f:61:19:f5:58:74:43:d9:cb:5c:f6:50:ff:f3:e4:b1:38:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 22 00:10:09 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=3929d45f51345da8b10630a9dfe184eb41b7f5a27cb71b5a185b2cba93b8f627, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:43:6b:a5:d2:3d:63:41:9a:97:33:a4:9d: 90:b9:52:a5:d1:37:72:57:2f:d6:7c:f6:1e:ea:22: fc:52:38:ea:5d:cc:a4:fe:99:ef:1d:68:90:47:67: b7:95:6b:af:be:2c:5e:0a:40:ca:f5:de:7a:44:b1: ab:7c:b3:ca:0d:fb:93:67:82:3f:12:ad:fc:2a:c9: 37:d1:71:f6:04:59:c3:58:d7:d9:c4:1f:34:c1:df: a7:37:e6:8a:65:18:9e:25:cd:d1:05:74:5a:f7:09: a0:ce:db:c1:e2:2f:14:ff:8d:2f:30:72:55:91:8b: 27:f3:0e:70:55:01:58:74:73:1e:30:8f:5a:42:dc: 26:57:55:ff:3d:7b:8e:8a:97:45:5d:a6:27:61:18: 8c:82:99:e6:15:b0:fa:23:5d:75:b6:dc:96:41:c0: a6:ad:21:20:98:ce:4e:af:40:ca:29:07:03:00:68: 74:07:88:db:c6:0c:c3:c5:df:28:89:c3:41:1c:87: 10:c3:b1:d4:19:8c:53:46:12:02:90:81:e9:a4:0a: 9e:8a:e4:05:20:e0:7e:84:8a:ae:7d:83:ec:bd:6e: d3:66:de:b3:ca:90:cc:ea:e2:13:27:06:5b:5d:fd: 8f:04:f2:5c:96:ca:83:8a:5c:21:dd:99:9e:cd:0f: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:86:6D:CE:56:F5:22:A3:E0:48:91:09:FA:14:64:5C:5D:D9:D7:70 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cf17e61-b049-438c-8aaf-2d4714b51857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fa:4000::/40 Signature Algorithm: sha256WithRSAEncryption 3a:00:04:a2:d3:14:15:cc:5c:35:5c:28:8b:93:5f:60:29:e4: 9c:b1:74:a5:02:9f:80:f9:f0:7a:eb:f2:f4:42:f3:55:10:a4: c7:03:09:b9:38:29:23:3b:d4:52:45:e7:44:b7:38:ed:ec:9f: f7:e4:49:56:4d:f6:18:43:16:d8:16:e0:26:cf:31:f8:eb:cd: 89:b1:80:df:d9:64:fd:86:55:c6:38:4c:8f:8a:78:c8:a4:48: a6:5f:46:e2:c6:5e:b4:8c:cf:0d:1e:28:06:21:ca:ab:f9:d9: 60:f7:8d:bf:96:ac:2d:03:77:e5:1c:6f:2e:c7:d8:d1:4f:60: 25:be:c0:0e:48:9d:ff:1d:1e:f6:32:cf:20:f3:83:49:2f:ff: 7e:73:1e:82:59:26:30:b6:8c:1d:a5:d4:76:fc:f7:53:9d:84: 4d:56:d8:5f:13:e2:ec:78:cf:20:44:3d:98:8d:86:41:1e:92: 00:2a:b2:20:ab:57:d1:32:e8:48:99:6c:38:16:36:a2:ca:ac: 8d:ca:0e:95:d1:41:6b:5e:db:87:ec:84:20:89:87:1d:14:57: 0b:ff:4a:fe:91:67:49:e8:60:0a:5c:16:e7:25:2c:49:eb:b5: d6:a5:cd:60:b7:b9:20:91:ce:22:22:d1:bc:42:96:28:51:01: 7f:c3:67:f9 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITUH9hGfVYdEPZy1z2UP/z5LE4HjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFDRDI4QTAwMDAxMTAvBgNVBAUTKDk3RUJGMzQ4RjM3 NkI4NjdGQzc2QjJCMkI5MTA3OEMzREQ0OTQ4ODMwHhcNMjYxMDIyMDAxMDA5WhcN MjcwMTIwMjM1OTU5WjB6MUkwRwYDVQQFE0AzOTI5ZDQ1ZjUxMzQ1ZGE4YjEwNjMw YTlkZmUxODRlYjQxYjdmNWEyN2NiNzFiNWExODViMmNiYTkzYjhmNjI3MS0wKwYD VQQDEyQ0MjU3ZTkyNS03MTVmLTQ3YTItODkzZS0wZTNmOTdlYzdlMjIwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxP0NrpdI9Y0GalzOknZC5UqXRN3JX L9Z89h7qIvxSOOpdzKT+me8daJBHZ7eVa6++LF4KQMr13npEsat8s8oN+5Nngj8S rfwqyTfRcfYEWcNY19nEHzTB36c35oplGJ4lzdEFdFr3CaDO28HiLxT/jS8wclWR iyfzDnBVAVh0cx4wj1pC3CZXVf89e46Kl0VdpidhGIyCmeYVsPojXXW23JZBwKat ISCYzk6vQMopBwMAaHQHiNvGDMPF3yiJw0EchxDDsdQZjFNGEgKQgemkCp6K5AUg 4H6Eiq59g+y9btNm3rPKkMzq4hMnBltd/Y8E8lyWyoOKXCHdmZ7ND9YXAgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQUNoZtzlb1IqPgSJEJ+hRkXF3Z13AwHwYDVR0jBBgw FoAUl+vzSPN2uGf8drKyuRB4w91JSIMwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL2wtdnpTUE4y dUdmOGRyS3l1UkI0dzkxSlNJTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJiY2JiODVhZTYv N2NmMTdlNjEtYjA0OS00MzhjLThhYWYtMmQ0NzE0YjUxODU3LnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lL2MzY2Q3YzI0LTEyY2ItNGFiYy04ZmQyLTVlMmJj YmI4NWFlNi85MGNhOTBhOS1hMTBhLTQ0ZTctODJiOS0xMzY1NzQ2YmE1NWUuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkD4D6QDANBgkqhkiG9w0BAQsFAAOCAQEAOgAEotMUFcxcNVwoi5Nf YCnknLF0pQKfgPnweuvy9ELzVRCkxwMJuTgpIzvUUkXnRLc47eyf9+RJVk32GEMW 2BbgJs8x+OvNibGA39lk/YZVxjhMj4p4yKRIpl9G4sZetIzPDR4oBiHKq/nZYPeN v5asLQN35RxvLsfY0U9gJb7ADkid/x0e9jLPIPODSS//fnMeglkmMLaMHaXUdvz3 U52ETVbYXxPi7HjPIEQ9mI2GQR6SACqyIKtX0TLoSJlsOBY2osqsjcoOldFBa17b h+yEIImHHRRXC/9K/pFnSehgClwW5yUsSeu11qXNYLe5IJHOIiLRvEKWKFEBf8Nn +Q== -----END CERTIFICATE-----Generated at Sun Oct 25 08:02:03 2026 by rpki-client