$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/a3080b31-8684-4ce8-b4e6-33db63d13627.roa File: a3080b31-8684-4ce8-b4e6-33db63d13627.roa (raw, json) Hash identifier: JmRQpy2UBg6WWVeFyO3j15p+2Cw/Ehr737DNFigmub0= Subject key identifier: B4:50:10:F7:D2:68:13:6C:79:D3:BE:1E:C5:09:4C:23:FE:C6:CE:D1 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 33A2485589672FC4BC80411EF12DC2A90ED099F6 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/a3080b31-8684-4ce8-b4e6-33db63d13627.roa Signing time: Tue 04 Aug 2026 00:00:23 +0000 ROA not before: Tue 04 Aug 2026 00:00:23 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8060::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a2:48:55:89:67:2f:c4:bc:80:41:1e:f1:2d:c2:a9:0e:d0:99:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:23 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=7c134bd1db4a01bef37ef008c158fe7b2b990bab411dd3c851126b890f6e3883, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:38:eb:57:ad:9e:87:68:a0:55:9f:07:45: 3f:18:bd:f3:c4:9e:ec:2b:10:5c:64:e4:3e:15:26: ae:71:38:c4:74:5f:af:53:15:a9:1f:69:bb:bc:e4: ef:ff:38:50:7d:3f:e2:87:b1:2d:a1:ef:e0:fa:2b: 9d:f4:e0:a5:bb:90:8d:e0:e9:6e:d0:ef:aa:e2:a9: bd:cc:02:10:89:cd:d5:4a:4a:76:3f:a1:d2:7f:45: 35:df:a3:c5:78:79:a9:d6:79:56:d0:99:34:e2:a8: 25:1e:5e:eb:7c:2b:36:ac:eb:95:3d:5b:d3:9d:63: 03:7d:78:66:89:57:e7:14:cc:18:e9:ca:6b:49:6c: 95:9e:6f:96:8a:19:90:52:e7:e8:02:d2:4a:7e:43: 52:4b:b9:55:e4:90:2c:7d:60:db:34:9f:b8:80:b9: c5:97:b4:f7:1a:f5:11:38:31:6e:f4:ef:d5:19:f4: ba:77:12:20:81:4d:f7:d2:15:42:46:93:82:1c:8c: d8:65:db:be:29:42:d7:b1:6d:dd:b8:e0:14:5d:ee: 82:16:62:e2:f7:5c:be:99:75:39:a9:d8:05:5f:c8: 3e:22:d6:69:b7:ed:8d:f8:42:fd:bb:12:c5:dc:2b: 70:8b:e8:1b:17:a0:49:49:54:40:ac:4b:5b:4d:f9: 84:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:50:10:F7:D2:68:13:6C:79:D3:BE:1E:C5:09:4C:23:FE:C6:CE:D1 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/a3080b31-8684-4ce8-b4e6-33db63d13627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8060::/32 Signature Algorithm: sha256WithRSAEncryption b3:c8:6b:fe:62:fa:30:92:b9:a4:7f:d8:b3:9e:bd:5e:0c:a1: 03:c4:0c:6f:9f:a9:35:ae:f4:0e:13:f6:de:82:a3:f2:11:e5: db:2c:0f:2f:41:38:10:eb:c8:c9:97:9b:99:24:1c:14:00:b5: 6d:55:f3:be:dc:3c:24:55:e2:61:7c:0a:34:7e:66:f3:7a:f7: 6d:3f:4e:9f:97:c4:51:f3:d8:df:54:a4:08:6e:df:d0:9c:59: 3e:e6:12:b5:74:00:3a:4a:5f:cf:43:82:ff:b2:4c:32:ad:c3: e1:60:e7:ef:34:c8:a9:87:e8:d0:60:cd:77:d4:3f:e1:fe:bc: 7e:cd:87:ee:53:40:f4:04:13:bc:e5:5b:dd:cb:7e:c8:aa:cb: 21:2b:0d:87:1e:fa:4b:b0:cc:a6:57:59:32:ab:4f:39:57:91: 5e:48:9a:c6:2d:3d:e1:40:9a:58:a5:83:9b:38:29:b2:97:24: 6a:f5:1e:87:da:fc:74:fc:73:9e:dc:1a:44:de:94:67:89:e5: ce:53:49:1f:83:e1:e2:55:81:9b:47:0b:39:0f:ec:47:e2:43: a7:b3:1c:ca:bf:a6:80:92:97:dd:b3:4c:e0:e2:df:26:bc:ac: c8:de:c1:39:ad:ab:07:0e:39:58:1a:98:3f:67:47:84:dc:c2: 03:e4:f4:07 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUM6JIVYlnL8S8gEEe8S3CqQ7QmfYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAyM1oX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAN2MxMzRiZDFkYjRhMDFiZWYzN2Vm MDA4YzE1OGZlN2IyYjk5MGJhYjQxMWRkM2M4NTExMjZiODkwZjZlMzg4MzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvME461etnodooFWfB0U/GL3zxJ7s KxBcZOQ+FSaucTjEdF+vUxWpH2m7vOTv/zhQfT/ih7Etoe/g+iud9OClu5CN4Olu 0O+q4qm9zAIQic3VSkp2P6HSf0U136PFeHmp1nlW0Jk04qglHl7rfCs2rOuVPVvT nWMDfXhmiVfnFMwY6cprSWyVnm+WihmQUufoAtJKfkNSS7lV5JAsfWDbNJ+4gLnF l7T3GvURODFu9O/VGfS6dxIggU330hVCRpOCHIzYZdu+KULXsW3duOAUXe6CFmLi 91y+mXU5qdgFX8g+ItZpt+2N+EL9uxLF3Ctwi+gbF6BJSVRArEtbTfmE/wIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFLRQEPfSaBNsedO+HsUJTCP+xs7RMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2EzMDgwYjMxLTg2ODQtNGNlOC1iNGU2LTMzZGI2M2QxMzYyNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJA+AYDANBgkqhkiG9w0BAQsFAAOCAQEAs8hr/mL6MJK5pH/Ys569 XgyhA8QMb5+pNa70DhP23oKj8hHl2ywPL0E4EOvIyZebmSQcFAC1bVXzvtw8JFXi YXwKNH5m83r3bT9On5fEUfPY31SkCG7f0JxZPuYStXQAOkpfz0OC/7JMMq3D4WDn 7zTIqYfo0GDNd9Q/4f68fs2H7lNA9AQTvOVb3ct+yKrLISsNhx76S7DMpldZMqtP OVeRXkiaxi094UCaWKWDmzgpspckavUeh9r8dPxzntwaRN6UZ4nlzlNJH4Ph4lWB m0cLOQ/sR+JDp7Mcyr+mgJKX3bNM4OLfJrysyN7BOa2rBw45WBqYP2dHhNzCA+T0 Bw== -----END CERTIFICATE-----Generated at Sat Aug 15 08:27:29 2026 by rpki-client