$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/ab4ad185-2bfb-4281-9e23-00a2ab4b6e8f.roa File: ab4ad185-2bfb-4281-9e23-00a2ab4b6e8f.roa (raw, json) Hash identifier: /GswgkIqf/qVqzZA1r7Qzh4rgmd2QV9Ax9/MlsLGsQM= Subject key identifier: 6B:3B:E5:F8:83:62:CC:FC:27:A8:A6:95:8F:EE:D3:65:24:19:26:F5 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 7F6A89A90209D22FC018F2F5F17DED349A615FDA Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/ab4ad185-2bfb-4281-9e23-00a2ab4b6e8f.roa Signing time: Tue 04 Aug 2026 00:00:27 +0000 ROA not before: Tue 04 Aug 2026 00:00:27 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6a:89:a9:02:09:d2:2f:c0:18:f2:f5:f1:7d:ed:34:9a:61:5f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:27 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=58b53433ee5f2ecf0a0ed4de9eb2c4bb01680130db7b69a170997496f5b77f7f, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:07:48:c4:a0:41:f2:ca:70:92:98:79:e4: 6a:1d:d7:6f:63:78:36:c1:3a:e5:7a:92:a2:e9:0e: 0f:cc:95:38:19:ee:11:97:c6:c3:7b:72:4c:67:d2: 36:5f:de:bf:84:86:b9:f5:1d:b8:9d:84:87:1a:71: e0:78:ea:05:ee:68:5c:d4:9e:1e:28:7d:d5:44:77: 29:17:de:db:11:21:03:06:8b:7d:0a:12:50:fb:da: f2:2c:70:a4:c8:e8:19:db:7c:7b:4e:53:8c:d7:06: cf:66:20:6c:63:67:3b:6d:17:f8:60:11:e6:f1:4b: 22:9e:d8:ff:ef:b8:d9:0b:2f:20:b8:6f:be:e0:2c: 3b:8a:29:a3:ab:95:1b:1c:92:39:24:f1:35:ce:64: e2:f2:21:5c:52:01:ce:25:84:da:59:e9:db:f7:6c: 57:bb:db:95:94:03:e8:b3:e4:2b:47:d1:10:8a:15: 63:3d:5d:55:17:84:0c:f9:8b:a5:91:b2:00:22:71: 94:54:d7:d8:25:e3:3e:30:38:3c:21:77:0e:9a:a8: 33:38:9e:b0:b8:5c:de:62:3d:ae:88:f8:59:5e:91: 13:a1:bf:2b:a4:5b:fc:7b:12:21:a9:2c:2f:cb:ae: 4c:83:fd:0d:5e:b9:1e:ec:60:c9:ea:e2:5b:93:de: 79:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3B:E5:F8:83:62:CC:FC:27:A8:A6:95:8F:EE:D3:65:24:19:26:F5 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/ab4ad185-2bfb-4281-9e23-00a2ab4b6e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:8020::/48 Signature Algorithm: sha256WithRSAEncryption 2d:44:a2:ce:00:99:83:96:e3:ca:2d:e3:8c:72:02:f1:27:9b: d6:b9:24:1c:5f:19:f3:95:99:01:e2:35:9c:9f:b1:47:6b:bd: e3:cf:05:24:f6:94:3f:86:52:93:57:16:08:89:68:d9:4e:8e: a0:6f:65:cb:16:a1:29:d4:f9:0b:28:c9:61:da:0a:36:c0:2b: a0:8a:1e:2e:36:c3:a3:da:15:86:d8:46:b7:00:6d:d1:68:02: a3:da:85:a6:b0:94:56:69:a7:4d:a3:15:29:c1:08:9f:84:f7: 62:65:1d:65:48:bd:68:0e:19:8e:5b:48:94:e3:34:62:20:ae: ac:ec:68:f8:c4:41:3c:80:39:ba:f1:86:e7:a0:5e:4b:49:df: ae:31:77:b6:fb:24:62:29:31:01:69:5c:b1:ca:52:e0:f1:62: ee:f6:3e:42:01:ab:e8:c8:9e:ed:97:2a:81:e4:fc:39:4d:24: b5:57:07:3b:12:6b:2f:80:24:81:2e:54:26:67:f2:b0:dd:5b: 35:91:11:bb:8f:96:a1:6b:4e:18:e4:18:c4:5b:1f:f0:ca:85: 80:b9:4f:4a:bb:66:0c:6b:83:f4:ef:07:22:27:f8:e6:47:f8: f0:9e:41:be:28:c0:bf:7e:54:8a:93:5d:5f:32:f9:34:04:1f: 44:af:c2:d0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUf2qJqQIJ0i/AGPL18X3tNJphX9owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAyN1oX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNANThiNTM0MzNlZTVmMmVjZjBhMGVk NGRlOWViMmM0YmIwMTY4MDEzMGRiN2I2OWExNzA5OTc0OTZmNWI3N2Y3ZjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod0HSMSgQfLKcJKYeeRqHddvY3g2 wTrlepKi6Q4PzJU4Ge4Rl8bDe3JMZ9I2X96/hIa59R24nYSHGnHgeOoF7mhc1J4e KH3VRHcpF97bESEDBot9ChJQ+9ryLHCkyOgZ23x7TlOM1wbPZiBsY2c7bRf4YBHm 8Usintj/77jZCy8guG++4Cw7iimjq5UbHJI5JPE1zmTi8iFcUgHOJYTaWenb92xX u9uVlAPos+QrR9EQihVjPV1VF4QM+YulkbIAInGUVNfYJeM+MDg8IXcOmqgzOJ6w uFzeYj2uiPhZXpETob8rpFv8exIhqSwvy65Mg/0NXrke7GDJ6uJbk955ZwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGs75fiDYsz8J6imlY/u02UkGSb1MB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2FiNGFkMTg1LTJiZmItNDI4MS05ZTIzLTAwYTJhYjRiNmU4Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJA+A/4AgMA0GCSqGSIb3DQEBCwUAA4IBAQAtRKLOAJmDluPKLeOM cgLxJ5vWuSQcXxnzlZkB4jWcn7FHa73jzwUk9pQ/hlKTVxYIiWjZTo6gb2XLFqEp 1PkLKMlh2go2wCugih4uNsOj2hWG2Ea3AG3RaAKj2oWmsJRWaadNoxUpwQifhPdi ZR1lSL1oDhmOW0iU4zRiIK6s7Gj4xEE8gDm68YbnoF5LSd+uMXe2+yRiKTEBaVyx ylLg8WLu9j5CAavoyJ7tlyqB5Pw5TSS1Vwc7EmsvgCSBLlQmZ/Kw3Vs1kRG7j5ah a04Y5BjEWx/wyoWAuU9Ku2YMa4P07wciJ/jmR/jwnkG+KMC/flSKk11fMvk0BB9E r8LQ -----END CERTIFICATE-----Generated at Sat Aug 15 08:27:20 2026 by rpki-client