$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c6c8c2c8-2610-4b46-9e55-67c12ceccbbe.roa File: c6c8c2c8-2610-4b46-9e55-67c12ceccbbe.roa (raw, json) Hash identifier: BZZj23VcA7jbb1QXAZfRbwkwWhC9y+0eYD0AU+CHoBE= Subject key identifier: 85:12:AD:24:F8:A1:45:B7:72:CB:07:83:DC:A4:4D:07:32:37:E0:22 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 52C5D677DB61CB5AE9B2CC32515AAFA4F1612BD3 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c6c8c2c8-2610-4b46-9e55-67c12ceccbbe.roa Signing time: Mon 03 Aug 2026 00:10:19 +0000 ROA not before: Mon 03 Aug 2026 00:10:19 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fe:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 00:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c5:d6:77:db:61:cb:5a:e9:b2:cc:32:51:5a:af:a4:f1:61:2b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 3 00:10:19 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=38dadf0dafb979b4bbb31ff07d2c4e10298b6c3b0042514706870307778245a3, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:36:a1:96:e7:00:8b:7b:93:5b:ec:fd:55: bb:e6:cc:d7:f8:5f:e6:e8:81:ac:91:28:d2:be:8b: c3:f1:91:0a:08:14:c0:8f:bd:e9:75:c8:91:5a:db: aa:e9:07:f4:0f:f1:b6:0c:b4:32:29:0e:2c:b2:3d: 84:15:50:3b:3f:24:5d:af:f1:54:c4:b5:66:1c:0e: d3:01:b6:bd:9f:d6:bc:fa:4f:4d:a8:1d:8c:c5:4b: 9f:2c:6f:9a:cf:71:eb:39:59:65:28:42:69:1f:b1: 8a:3e:89:2d:f9:27:b6:57:c8:cc:04:aa:71:d9:4a: 2b:3f:3e:26:0b:c8:8a:83:75:c7:ad:4c:62:94:de: 1c:02:e0:6f:c0:e3:68:ce:83:90:63:14:af:54:5f: 3a:b7:5e:79:fa:da:14:e1:03:f6:fe:61:ec:6c:c7: a9:6c:7b:a3:7e:b0:d6:70:87:cc:bc:57:6e:97:73: 92:36:8c:15:ac:9d:d0:6e:7a:e7:14:78:53:e0:0b: 6d:69:ac:d4:60:4b:c1:cd:ad:f4:db:7e:34:22:33: 9d:f5:ee:44:be:c0:f4:b2:56:54:ac:91:df:7c:ea: 5d:cf:96:ef:47:2b:b2:ff:84:11:ce:79:16:72:fb: 98:95:2c:ac:0b:4e:6f:5d:ee:9a:00:ee:0e:9a:f6: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:12:AD:24:F8:A1:45:B7:72:CB:07:83:DC:A4:4D:07:32:37:E0:22 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c6c8c2c8-2610-4b46-9e55-67c12ceccbbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fe:8000::/40 Signature Algorithm: sha256WithRSAEncryption 35:a2:3e:10:f7:b5:04:90:c1:9a:2d:1f:d4:d4:f0:86:a2:97: 76:c8:73:3f:f4:6d:bf:20:46:9d:bf:a6:18:7c:c3:02:47:8d: f6:8d:8a:ec:3c:db:a8:3e:37:9d:74:ae:8e:1f:16:64:a1:10: 49:b1:ec:26:7d:72:fb:b3:e8:c6:65:d1:5e:ec:84:9f:94:6d: c9:7b:de:35:f8:99:4f:eb:09:ba:c1:02:e3:85:a4:39:e6:fc: ac:76:2d:d7:f7:a9:11:17:1a:72:9a:74:27:9f:2f:83:f6:02: bc:92:27:a7:db:25:69:14:9d:5c:77:47:34:fb:86:6c:de:72: db:c3:93:5a:24:1c:bb:20:2c:17:d1:86:3b:9d:46:5d:ef:99: d6:98:d6:a4:e5:37:7d:b9:de:b4:2b:36:ff:64:c1:6a:88:ed: 6d:0b:91:73:b4:c0:3b:ad:e9:68:d9:44:5d:c7:ae:4b:0d:ca: 27:f1:df:7b:ea:09:24:50:72:3b:01:08:a8:1a:12:0c:c6:fb: 19:90:48:93:fb:69:38:c7:49:11:da:f6:18:06:02:ca:3d:b3: 66:6d:e0:65:8d:d6:9c:6a:f7:f2:33:2a:c9:f1:00:4c:23:04: 05:37:02:6c:59:7f:06:60:dd:e5:86:55:08:00:d1:2c:bc:62: 3b:53:63:2b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUsXWd9thy1rpsswyUVqvpPFhK9MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwMzAwMTAxOVoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAMzhkYWRmMGRhZmI5NzliNGJiYjMx ZmYwN2QyYzRlMTAyOThiNmMzYjAwNDI1MTQ3MDY4NzAzMDc3NzgyNDVhMzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseQ2oZbnAIt7k1vs/VW75szX+F/m 6IGskSjSvovD8ZEKCBTAj73pdciRWtuq6Qf0D/G2DLQyKQ4ssj2EFVA7PyRdr/FU xLVmHA7TAba9n9a8+k9NqB2MxUufLG+az3HrOVllKEJpH7GKPokt+Se2V8jMBKpx 2UorPz4mC8iKg3XHrUxilN4cAuBvwONozoOQYxSvVF86t155+toU4QP2/mHsbMep bHujfrDWcIfMvFdul3OSNowVrJ3QbnrnFHhT4AttaazUYEvBza302340IjOd9e5E vsD0slZUrJHffOpdz5bvRyuy/4QRznkWcvuYlSysC05vXe6aAO4OmvbOfQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIUSrST4oUW3cssHg9ykTQcyN+AiMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2M2YzhjMmM4LTI2MTAtNGI0Ni05ZTU1LTY3YzEyY2VjY2JiZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A/oAwDQYJKoZIhvcNAQELBQADggEBADWiPhD3tQSQwZotH9TU 8Iail3bIcz/0bb8gRp2/phh8wwJHjfaNiuw826g+N510ro4fFmShEEmx7CZ9cvuz 6MZl0V7shJ+Ubcl73jX4mU/rCbrBAuOFpDnm/Kx2Ldf3qREXGnKadCefL4P2AryS J6fbJWkUnVx3RzT7hmzectvDk1okHLsgLBfRhjudRl3vmdaY1qTlN3253rQrNv9k wWqI7W0LkXO0wDut6WjZRF3HrksNyifx33vqCSRQcjsBCKgaEgzG+xmQSJP7aTjH SRHa9hgGAso9s2Zt4GWN1pxq9/IzKsnxAEwjBAU3AmxZfwZg3eWGVQgA0Sy8YjtT Yys= -----END CERTIFICATE-----Generated at Sat Sep 12 06:22:05 2026 by rpki-client