$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c6c8c2c8-2610-4b46-9e55-67c12ceccbbe.roa File: c6c8c2c8-2610-4b46-9e55-67c12ceccbbe.roa (raw, json) Hash identifier: +URWAjG1sEvWHUO11GGpC746fOMmaDux+giYrvL7XG8= Subject key identifier: FC:A6:18:7A:12:01:67:52:2C:72:A7:71:47:9F:56:50:C3:02:FA:A8 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 71B67B02340091EDDA6C463C9DFCCEB19457F403 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c6c8c2c8-2610-4b46-9e55-67c12ceccbbe.roa Signing time: Thu 22 Oct 2026 00:10:10 +0000 ROA not before: Thu 22 Oct 2026 00:10:10 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fe:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 00:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b6:7b:02:34:00:91:ed:da:6c:46:3c:9d:fc:ce:b1:94:57:f4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 22 00:10:10 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=bdb47d4aadc90c4d868ae9725a1a7e53b2a25922e402c90932561df756ed1476, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:1a:22:e1:9a:e3:c2:a6:9d:bb:0a:7a:71: df:a4:51:c0:d7:cf:40:b3:45:98:e3:6e:aa:0a:14: 18:29:63:28:b6:d5:8e:b9:74:0f:8b:3e:87:e3:52: 35:2b:24:37:3a:f8:da:cd:ae:e2:d5:c0:fd:b9:93: 6f:a9:85:64:87:5a:c7:c0:12:fe:e8:da:d4:bd:ea: 1e:1e:37:b2:ac:7c:4e:89:cb:16:0e:14:4b:6b:4c: 11:24:93:a1:eb:36:11:6c:0d:cc:af:40:4c:09:cc: e7:9f:33:85:fa:16:ae:90:67:6f:5a:6d:5a:8c:f0: 74:a9:db:db:93:e4:2e:b0:b6:9f:a5:d8:22:7c:fd: 25:d5:0f:68:49:80:07:e3:d1:0f:2e:bf:93:9c:a2: 82:96:84:7a:66:e7:42:f7:50:36:fa:c9:bf:6c:08: 12:8b:cc:ae:01:28:d4:2f:d1:b9:d6:1e:83:e8:2d: e4:c0:7d:f4:eb:6b:64:cd:74:79:03:45:3b:e3:66: 6c:92:d0:0d:08:43:3f:41:35:7c:2d:78:5a:10:3c: 2f:2c:9c:18:50:3a:4d:48:11:ec:56:e3:8b:6f:5a: b2:ec:19:6c:19:c8:9f:23:76:87:1b:4e:26:98:66: bb:42:f5:cf:de:77:82:1a:64:73:ad:4b:3e:af:1f: e3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A6:18:7A:12:01:67:52:2C:72:A7:71:47:9F:56:50:C3:02:FA:A8 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c6c8c2c8-2610-4b46-9e55-67c12ceccbbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fe:8000::/40 Signature Algorithm: sha256WithRSAEncryption 73:26:e7:92:42:6b:e2:47:1f:a6:73:c8:36:64:5f:d6:5b:54: a5:c3:b8:a2:3d:57:b7:d0:f1:66:48:5b:03:46:7e:7d:9d:87: ca:9e:c1:82:59:c1:97:11:b8:72:24:ce:22:5e:9a:60:bf:9f: f4:7a:c4:71:fd:7a:c0:e5:6d:1c:b1:af:9f:2e:01:87:12:f4: f3:0f:17:72:c6:2e:7b:b8:f4:b8:cd:48:23:c1:23:71:d5:00: 20:9d:26:93:40:37:32:92:60:31:12:a5:f0:24:fd:0c:6e:3d: 44:ef:fc:a2:a1:6b:58:31:17:be:4e:13:83:ab:c8:90:e1:00: 66:cc:e9:67:1a:d7:27:4d:06:76:53:e9:52:b2:37:2f:4a:62: f5:fd:c3:64:9b:35:8f:b5:4e:1f:a7:8a:5f:e4:55:30:ab:d4: d2:93:f1:15:c9:b9:6b:85:51:73:a9:4e:aa:ad:42:09:13:d8: 63:f4:e7:b7:d6:35:09:f1:98:4b:eb:d2:04:14:ac:ec:6b:59: 01:6f:2e:9e:8d:20:4c:48:55:e0:2d:be:26:24:69:fd:8d:b1: f4:37:bd:d2:00:a2:64:89:0d:08:39:88:f3:29:12:ff:c2:69: 54:5c:4c:7e:0e:60:b3:db:da:b2:b7:81:dc:fc:3d:f8:9b:df: da:a9:af:a4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcbZ7AjQAke3abEY8nfzOsZRX9AMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMjAwMTAxMFoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAYmRiNDdkNGFhZGM5MGM0ZDg2OGFl OTcyNWExYTdlNTNiMmEyNTkyMmU0MDJjOTA5MzI1NjFkZjc1NmVkMTQ3NjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsysaIuGa48KmnbsKenHfpFHA189A s0WY426qChQYKWMottWOuXQPiz6H41I1KyQ3Ovjaza7i1cD9uZNvqYVkh1rHwBL+ 6NrUveoeHjeyrHxOicsWDhRLa0wRJJOh6zYRbA3Mr0BMCcznnzOF+haukGdvWm1a jPB0qdvbk+QusLafpdgifP0l1Q9oSYAH49EPLr+TnKKCloR6ZudC91A2+sm/bAgS i8yuASjUL9G51h6D6C3kwH3062tkzXR5A0U742ZsktANCEM/QTV8LXhaEDwvLJwY UDpNSBHsVuOLb1qy7BlsGcifI3aHG04mmGa7QvXP3neCGmRzrUs+rx/jzwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPymGHoSAWdSLHKncUefVlDDAvqoMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2M2YzhjMmM4LTI2MTAtNGI0Ni05ZTU1LTY3YzEyY2VjY2JiZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A/oAwDQYJKoZIhvcNAQELBQADggEBAHMm55JCa+JHH6ZzyDZk X9ZbVKXDuKI9V7fQ8WZIWwNGfn2dh8qewYJZwZcRuHIkziJemmC/n/R6xHH9esDl bRyxr58uAYcS9PMPF3LGLnu49LjNSCPBI3HVACCdJpNANzKSYDESpfAk/QxuPUTv /KKha1gxF75OE4OryJDhAGbM6Wca1ydNBnZT6VKyNy9KYvX9w2SbNY+1Th+nil/k VTCr1NKT8RXJuWuFUXOpTqqtQgkT2GP057fWNQnxmEvr0gQUrOxrWQFvLp6NIExI VeAtviYkaf2NsfQ3vdIAomSJDQg5iPMpEv/CaVRcTH4OYLPb2rK3gdz8Pfib39qp r6Q= -----END CERTIFICATE-----Generated at Tue Oct 27 22:23:38 2026 by rpki-client