$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/9a94ee8c-7029-4ffb-af7f-435e161333de.roa File: 9a94ee8c-7029-4ffb-af7f-435e161333de.roa (raw, json) Hash identifier: bi9G36LVQmxo/WJUDdn2syo4KWluhP5t5S1jN+lUgwA= Subject key identifier: C4:80:6F:20:D2:C2:43:3D:8A:77:09:EC:C7:81:43:28:B9:D8:1F:BE Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 06BA5857A61827771276D82DB41701FE7C3D8072 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/9a94ee8c-7029-4ffb-af7f-435e161333de.roa Signing time: Tue 04 Aug 2026 00:00:13 +0000 ROA not before: Tue 04 Aug 2026 00:00:13 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8000:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ba:58:57:a6:18:27:77:12:76:d8:2d:b4:17:01:fe:7c:3d:80:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:13 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=b34e3e64ba3583259a78e6d53191f42aa191e9c2373e648e8275e945a584158b, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a6:1e:a2:f0:01:73:73:7c:42:3e:2f:3e:95: c2:36:72:07:b5:9b:ea:13:5e:63:87:bb:98:a1:1a: e3:46:a3:9c:31:47:0b:a7:50:72:dd:3a:bb:92:63: 4d:76:85:9d:aa:bb:70:26:46:d1:ea:16:3c:9d:1f: 07:9e:62:8f:6a:14:3b:a3:06:f7:cf:52:55:ef:88: 16:11:e3:c7:e5:6e:9a:cd:ad:db:a3:a6:76:ba:f7: 7e:07:6b:c7:70:60:2d:bc:9c:99:d9:11:1e:4b:db: df:20:58:b8:03:84:3e:06:14:37:49:23:3b:9c:76: 99:da:7a:05:0e:77:6b:7f:40:6a:d7:ca:7f:a3:09: 9e:83:27:48:86:78:da:cf:59:12:dc:df:da:f0:13: 20:7c:d4:38:c1:ed:0a:0e:3a:ac:9f:12:25:fc:e1: a9:f2:07:ea:48:c0:01:ee:02:3e:c2:91:d1:7e:75: 0f:72:71:96:e9:98:eb:4d:90:08:b6:9b:8a:0c:2c: 01:c4:41:77:6d:07:5e:9e:d1:cd:8d:4e:59:a6:f5: 8b:1b:ff:e2:c1:11:de:fa:e0:6f:77:fc:d7:7c:cc: ef:e8:c6:5d:32:1b:99:e0:18:d5:20:8f:3e:96:92: 55:05:fd:be:72:c9:56:8d:d9:06:5c:12:f6:9b:e7: 30:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:80:6F:20:D2:C2:43:3D:8A:77:09:EC:C7:81:43:28:B9:D8:1F:BE X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/9a94ee8c-7029-4ffb-af7f-435e161333de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8000:8000::/40 Signature Algorithm: sha256WithRSAEncryption 7b:05:a4:ed:55:ee:1e:9a:a2:bb:b3:f0:2d:78:b5:ce:b6:17: f5:7f:7a:4c:71:52:f7:ff:e6:cb:b0:24:8a:85:6f:70:83:9e: c7:d6:ef:9b:f1:95:e9:95:1d:1c:a8:c9:27:ee:25:17:a9:34: d4:17:86:eb:ba:9f:32:ac:4d:98:16:44:12:5c:42:01:c9:2b: 79:e3:ef:12:54:c2:b6:25:a1:7c:f6:1a:9c:f5:34:a7:be:6f: 2b:f0:97:98:0d:57:c9:da:48:ca:c8:4f:b1:9a:2b:89:23:31: 25:30:95:45:1c:51:eb:da:74:03:0f:76:64:9f:b3:17:86:e1: 77:f9:3a:7a:ab:e8:9f:8d:d1:0b:58:b2:63:13:39:8d:0d:90: 89:de:73:cf:11:5e:18:cc:ab:d0:9c:ba:63:c3:14:31:fa:79: 54:02:2b:76:03:d6:32:61:61:52:71:a0:5c:af:16:04:21:00: d4:d8:dd:5f:06:9f:ed:0a:74:a5:85:a5:81:be:1e:25:da:c2: d4:1a:23:32:6e:c6:0e:2d:68:3c:9b:7c:a2:be:53:05:75:c6: 82:6d:57:05:17:91:64:97:bc:39:fa:c8:bb:21:ec:7d:13:62: 52:95:04:5d:22:d4:b6:3a:fa:5e:c7:83:10:bb:db:c8:d9:62: 97:1a:da:9c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBrpYV6YYJ3cSdtgttBcB/nw9gHIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAxM1oX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAYjM0ZTNlNjRiYTM1ODMyNTlhNzhl NmQ1MzE5MWY0MmFhMTkxZTljMjM3M2U2NDhlODI3NWU5NDVhNTg0MTU4YjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86YeovABc3N8Qj4vPpXCNnIHtZvq E15jh7uYoRrjRqOcMUcLp1By3Tq7kmNNdoWdqrtwJkbR6hY8nR8HnmKPahQ7owb3 z1JV74gWEePH5W6aza3bo6Z2uvd+B2vHcGAtvJyZ2REeS9vfIFi4A4Q+BhQ3SSM7 nHaZ2noFDndrf0Bq18p/owmegydIhnjaz1kS3N/a8BMgfNQ4we0KDjqsnxIl/OGp 8gfqSMAB7gI+wpHRfnUPcnGW6ZjrTZAItpuKDCwBxEF3bQdentHNjU5ZpvWLG//i wRHe+uBvd/zXfMzv6MZdMhuZ4BjVII8+lpJVBf2+cslWjdkGXBL2m+cwDwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMSAbyDSwkM9incJ7MeBQyi52B++MB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzlhOTRlZThjLTcwMjktNGZmYi1hZjdmLTQzNWUxNjEzMzNkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+AAIAwDQYJKoZIhvcNAQELBQADggEBAHsFpO1V7h6aoruz8C14 tc62F/V/ekxxUvf/5suwJIqFb3CDnsfW75vxlemVHRyoySfuJRepNNQXhuu6nzKs TZgWRBJcQgHJK3nj7xJUwrYloXz2Gpz1NKe+byvwl5gNV8naSMrIT7GaK4kjMSUw lUUcUevadAMPdmSfsxeG4Xf5Onqr6J+N0QtYsmMTOY0NkInec88RXhjMq9CcumPD FDH6eVQCK3YD1jJhYVJxoFyvFgQhANTY3V8Gn+0KdKWFpYG+HiXawtQaIzJuxg4t aDybfKK+UwV1xoJtVwUXkWSXvDn6yLsh7H0TYlKVBF0i1LY6+l7HgxC728jZYpca 2pw= -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:10 2026 by rpki-client