$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/8bf311e9-d27f-46fa-8f05-2ed6b176b5b9.roa File: 8bf311e9-d27f-46fa-8f05-2ed6b176b5b9.roa (raw, json) Hash identifier: 6CIyXxJZNYufzRLPxkd1hW1m/aYejWybU07xqKn7bWM= Subject key identifier: 21:47:CF:8D:70:DB:C6:51:4E:52:F7:07:E6:22:AE:D6:81:F1:5C:22 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 2DD7B469AAD7B812B0D03B0B09907E24AA34F7AB Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/8bf311e9-d27f-46fa-8f05-2ed6b176b5b9.roa Signing time: Tue 04 Aug 2026 00:00:31 +0000 ROA not before: Tue 04 Aug 2026 00:00:31 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8014:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d7:b4:69:aa:d7:b8:12:b0:d0:3b:0b:09:90:7e:24:aa:34:f7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:31 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=c27ea6fcb59ef2a89c49e404530f2a4abc5abedbef02d7a12f295cead418ebc1, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:54:04:93:fa:b3:8d:5a:5d:7e:33:4a:99:50: 8e:2e:f6:0b:d1:02:64:0b:18:f8:8c:02:00:48:e0: 0d:6b:3d:cf:4d:9a:6d:67:9d:85:ba:e5:94:18:e1: e6:78:12:85:89:b8:a2:35:f8:e9:ba:f8:1d:3d:2e: fe:f1:37:a8:72:9c:6d:27:63:53:0e:fb:66:21:c0: 85:51:8b:08:00:0c:17:9d:da:b5:7f:a5:26:3f:de: de:29:cb:06:c5:07:d9:0e:fc:1e:22:26:d6:09:30: 0e:3f:89:a8:98:58:2b:5c:b1:30:5b:39:43:39:7a: 9c:9e:0e:76:af:73:14:80:ed:26:9e:9c:bb:e8:b8: 69:a5:70:e1:81:7b:ac:fc:ac:0c:0b:60:65:20:14: bd:58:2e:1f:8f:13:03:a4:bf:f6:1f:91:eb:fe:71: f8:c0:1c:1e:6a:e6:39:a9:da:0e:71:e9:e9:9f:73: 64:36:a5:50:5b:d0:82:4c:bb:fd:c2:cd:28:2e:a5: d3:2b:47:a1:c0:f8:58:c1:44:77:04:00:53:52:bd: 3a:31:0a:ef:5d:06:71:5a:ad:c2:c9:10:46:85:d8: bf:3f:a9:4f:77:4c:b7:ad:92:dc:00:b1:10:1f:22: 42:b8:43:74:55:88:62:6f:94:94:e9:3f:36:2e:12: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:47:CF:8D:70:DB:C6:51:4E:52:F7:07:E6:22:AE:D6:81:F1:5C:22 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/8bf311e9-d27f-46fa-8f05-2ed6b176b5b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8014:400::/38 Signature Algorithm: sha256WithRSAEncryption 6c:bc:ce:ad:6e:c6:e7:87:fe:48:05:0d:5e:8d:5a:be:4d:1a: d0:5c:cf:cc:e4:2b:8b:ae:4b:a7:18:e7:0d:c2:8a:38:1b:38: f5:2c:24:38:6c:fd:ee:21:e5:bf:9f:3d:4e:a5:4c:36:dc:d6: 4d:ab:fc:f6:93:94:81:55:22:32:c2:e7:8e:61:31:4e:ce:bf: 6f:62:cb:be:72:2e:4d:91:85:d1:f0:07:46:31:79:5b:3c:f1: 09:09:3a:9e:6b:a2:be:71:9f:d0:2b:3f:37:06:8e:a4:64:7e: 44:a7:97:c2:4d:30:15:db:80:8a:36:17:26:e4:db:d2:a1:47: 25:53:c5:75:2b:e9:24:ba:1a:33:ff:67:a7:5a:75:31:8a:3c: 41:7f:da:85:59:81:b0:9a:d4:11:ed:3d:bd:a8:bf:b8:ee:bf: 9d:9b:f6:e7:0b:e6:92:5e:91:a7:d1:d1:54:75:a8:3c:6e:b5: 9e:30:4b:60:2b:cf:f3:e6:11:d9:0a:c9:87:78:6e:aa:0f:91: 37:f8:62:37:13:27:9f:49:12:e5:93:a9:d2:a5:11:c0:e2:e6: 0b:56:49:34:40:5e:0c:45:d1:e9:dd:99:53:06:2f:2f:4a:e6: c5:f4:a3:a5:51:7a:0e:a7:04:50:f1:5a:37:66:9e:88:1b:2b: 69:9d:5f:c8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULde0aarXuBKw0DsLCZB+JKo096swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAzMVoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAYzI3ZWE2ZmNiNTllZjJhODljNDll NDA0NTMwZjJhNGFiYzVhYmVkYmVmMDJkN2ExMmYyOTVjZWFkNDE4ZWJjMTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FQEk/qzjVpdfjNKmVCOLvYL0QJk Cxj4jAIASOANaz3PTZptZ52FuuWUGOHmeBKFibiiNfjpuvgdPS7+8TeocpxtJ2NT DvtmIcCFUYsIAAwXndq1f6UmP97eKcsGxQfZDvweIibWCTAOP4momFgrXLEwWzlD OXqcng52r3MUgO0mnpy76LhppXDhgXus/KwMC2BlIBS9WC4fjxMDpL/2H5Hr/nH4 wBweauY5qdoOcenpn3NkNqVQW9CCTLv9ws0oLqXTK0ehwPhYwUR3BABTUr06MQrv XQZxWq3CyRBGhdi/P6lPd0y3rZLcALEQHyJCuEN0VYhib5SU6T82LhIcKwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCFHz41w28ZRTlL3B+YirtaB8VwiMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzhiZjMxMWU5LWQyN2YtNDZmYS04ZjA1LTJlZDZiMTc2YjViOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AFAQwDQYJKoZIhvcNAQELBQADggEBAGy8zq1uxueH/kgFDV6N Wr5NGtBcz8zkK4uuS6cY5w3CijgbOPUsJDhs/e4h5b+fPU6lTDbc1k2r/PaTlIFV IjLC545hMU7Ov29iy75yLk2RhdHwB0YxeVs88QkJOp5ror5xn9ArPzcGjqRkfkSn l8JNMBXbgIo2Fybk29KhRyVTxXUr6SS6GjP/Z6dadTGKPEF/2oVZgbCa1BHtPb2o v7juv52b9ucL5pJekafR0VR1qDxutZ4wS2Arz/PmEdkKyYd4bqoPkTf4YjcTJ59J EuWTqdKlEcDi5gtWSTRAXgxF0endmVMGLy9K5sX0o6VReg6nBFDxWjdmnogbK2md X8g= -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:10 2026 by rpki-client