$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c886fdcc-d9c4-485a-a941-7aa2c7d093e3.roa File: c886fdcc-d9c4-485a-a941-7aa2c7d093e3.roa (raw, json) Hash identifier: C6rx4L+zuwcLdPJowGNCTLbxoc/tte+M+P8u8+D3RT8= Subject key identifier: 69:8A:23:E1:ED:A9:4A:40:8A:7D:73:24:73:D0:C8:89:4D:1F:0F:4B Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 56A90D6FF0D62EAD44E3FB0FBC084E9FB204D9C4 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c886fdcc-d9c4-485a-a941-7aa2c7d093e3.roa Signing time: Mon 03 Aug 2026 00:10:16 +0000 ROA not before: Mon 03 Aug 2026 00:10:16 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fe:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a9:0d:6f:f0:d6:2e:ad:44:e3:fb:0f:bc:08:4e:9f:b2:04:d9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 3 00:10:16 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=53ca54cd9b7e74d67783ab005ee2900b868a677dcc5a583b5ca8873ef608b7ab, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:fa:a6:27:5b:b7:30:b9:3a:c6:d5:29:97: 28:7c:77:2c:2e:69:af:ce:5e:45:8f:dd:0c:e2:13: 02:80:14:8f:6b:66:5f:70:fd:0d:92:75:d5:47:aa: 07:fe:52:68:ab:7b:7e:09:20:97:5a:52:03:bb:5b: 1e:be:6a:bc:81:aa:51:c8:e2:8f:8f:68:ad:8b:94: 76:94:00:2a:0e:a0:fb:52:7e:47:44:a8:59:0c:4f: cc:ab:ee:62:6a:ab:6e:a7:19:ab:c5:a3:c2:9c:8f: 0d:53:6c:d6:0b:e4:e9:a1:df:81:b5:b9:fb:91:43: 40:d3:84:1f:78:87:17:76:f0:bc:9a:35:3d:d4:ca: fa:54:35:09:a9:33:07:cb:6b:48:43:61:ba:10:a0: 5e:58:5f:e7:18:fc:3c:38:92:6e:54:70:bf:62:da: 88:6f:41:85:14:96:a1:94:71:07:64:5a:28:3d:6f: 3f:da:9d:6b:04:96:68:5e:a3:35:22:30:3b:4d:72: 94:f9:12:7b:15:e2:d1:59:62:87:52:fa:bc:5d:29: b2:6d:4f:67:cc:0e:ab:a6:c2:02:b1:7f:f6:3f:77: da:3d:fb:c7:cd:cc:0b:e5:7d:d8:19:43:a9:6b:07: 39:9a:e5:e3:ee:f4:ad:d0:45:70:9d:7e:8d:42:f0: b2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8A:23:E1:ED:A9:4A:40:8A:7D:73:24:73:D0:C8:89:4D:1F:0F:4B X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c886fdcc-d9c4-485a-a941-7aa2c7d093e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fe:4000::/40 Signature Algorithm: sha256WithRSAEncryption 91:b5:75:53:96:a1:11:a7:f6:11:ab:c3:10:1d:25:b4:89:3a: 25:80:7d:f1:b3:dd:b4:a4:f5:8e:89:ec:a6:42:5d:8a:61:9c: e0:6f:be:6c:29:75:4c:ce:0d:c3:bb:c6:8c:3b:21:cb:23:0d: ef:7e:1e:46:b2:a6:02:f6:4e:7d:c6:1a:d0:a3:fe:c6:17:77: 2d:e5:b1:3d:9c:9d:c5:57:d0:54:1a:e7:c8:a5:cf:05:56:53: 09:fd:03:44:c1:dd:37:23:c4:0a:e5:8a:ec:86:26:3e:90:3d: d1:0e:73:b0:fb:4a:4a:2d:a2:56:22:37:74:6b:99:fd:96:d8: 73:e7:43:9a:fb:d7:30:5c:66:0e:1f:2b:c3:f7:4b:c6:ac:49: 2f:7a:ad:29:fe:d6:cd:bb:b1:8d:74:4b:f6:2e:a0:10:07:59: 5d:a1:f9:ce:24:ce:89:c3:ad:44:27:57:7b:16:33:1d:00:6e: 6d:86:04:bc:de:37:3b:85:aa:29:7c:e0:2e:6b:42:7d:60:59: 32:73:c5:27:c7:ba:86:db:3c:11:2e:89:1b:b8:74:eb:3a:c4: 54:e2:76:7b:a5:8a:c8:e4:77:ad:40:f6:99:b4:22:f4:7b:48: ee:40:87:df:7e:86:39:f5:0c:4d:f7:b1:28:7d:f3:cc:ce:c0: 98:ff:7b:d6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVqkNb/DWLq1E4/sPvAhOn7IE2cQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwMzAwMTAxNloX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNANTNjYTU0Y2Q5YjdlNzRkNjc3ODNh YjAwNWVlMjkwMGI4NjhhNjc3ZGNjNWE1ODNiNWNhODg3M2VmNjA4YjdhYjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLX6pidbtzC5OsbVKZcofHcsLmmv zl5Fj90M4hMCgBSPa2ZfcP0NknXVR6oH/lJoq3t+CSCXWlIDu1sevmq8gapRyOKP j2iti5R2lAAqDqD7Un5HRKhZDE/Mq+5iaqtupxmrxaPCnI8NU2zWC+Tpod+Btbn7 kUNA04QfeIcXdvC8mjU91Mr6VDUJqTMHy2tIQ2G6EKBeWF/nGPw8OJJuVHC/YtqI b0GFFJahlHEHZFooPW8/2p1rBJZoXqM1IjA7TXKU+RJ7FeLRWWKHUvq8XSmybU9n zA6rpsICsX/2P3faPfvHzcwL5X3YGUOpawc5muXj7vSt0EVwnX6NQvCyiQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGmKI+HtqUpAin1zJHPQyIlNHw9LMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2M4ODZmZGNjLWQ5YzQtNDg1YS1hOTQxLTdhYTJjN2QwOTNlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A/kAwDQYJKoZIhvcNAQELBQADggEBAJG1dVOWoRGn9hGrwxAd JbSJOiWAffGz3bSk9Y6J7KZCXYphnOBvvmwpdUzODcO7xow7IcsjDe9+HkaypgL2 Tn3GGtCj/sYXdy3lsT2cncVX0FQa58ilzwVWUwn9A0TB3TcjxArliuyGJj6QPdEO c7D7SkotolYiN3Rrmf2W2HPnQ5r71zBcZg4fK8P3S8asSS96rSn+1s27sY10S/Yu oBAHWV2h+c4kzonDrUQnV3sWMx0Abm2GBLzeNzuFqil84C5rQn1gWTJzxSfHuobb PBEuiRu4dOs6xFTidnulisjkd61A9pm0IvR7SO5Ah99+hjn1DE33sSh988zOwJj/ e9Y= -----END CERTIFICATE-----Generated at Sat Aug 15 08:27:26 2026 by rpki-client