$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/f54cd21d-ebef-4509-8295-1f7547d0d717.roa File: f54cd21d-ebef-4509-8295-1f7547d0d717.roa (raw, json) Hash identifier: N7bV+pgJqDdbwMVyEKeMxXfo8vSLZq8MO9oOrN5nWSc= Subject key identifier: 05:AE:F8:EA:E0:31:2D:1D:4D:69:E0:E5:50:9E:CA:B1:E8:FA:C8:BD Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 49752B6A9A2E9E4BCBE3F357569D2D113A570E4E Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/f54cd21d-ebef-4509-8295-1f7547d0d717.roa Signing time: Tue 04 Aug 2026 00:00:29 +0000 ROA not before: Tue 04 Aug 2026 00:00:29 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 00:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:75:2b:6a:9a:2e:9e:4b:cb:e3:f3:57:56:9d:2d:11:3a:57:0e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:29 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=6472a4b7ed9f3a0f0547062f24d609dc6db214bb156980b1ed99412ef777e05f, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c9:6d:6a:44:83:41:d7:1b:db:67:ff:83:f0: 8d:24:47:37:24:93:b6:81:9c:20:36:b2:5c:de:d3: 18:73:2c:e0:a0:58:09:21:ff:c0:b6:4a:dd:ca:4b: 22:6e:6d:c8:a5:38:2c:9c:e5:ef:cb:42:93:63:e2: c0:fe:80:fe:b7:4b:73:4b:eb:c8:48:18:cd:d0:ad: f6:81:81:f2:34:9d:e8:e4:b4:8c:63:5d:73:45:b4: 63:c0:62:4d:c4:09:54:c2:ca:91:92:9e:38:57:f4: db:75:20:14:61:62:75:9a:d6:f8:2d:1f:1c:9e:32: ac:51:ab:39:af:3b:c6:a0:5a:6a:ca:e1:d3:c1:5c: 11:d3:4d:77:26:37:e9:b3:a7:11:f3:a3:68:af:0d: b8:8b:cf:37:93:c1:bf:ae:1c:49:ad:28:2c:2e:6f: a0:52:7b:51:83:68:28:bc:39:ac:c0:57:11:b9:40: 15:9c:9b:c3:d4:68:85:1c:c8:a6:e9:2e:39:32:bb: 19:d4:22:4f:07:5a:48:01:72:d3:3a:e6:7d:28:ef: b9:6e:95:91:f6:96:17:f1:76:78:f0:a9:98:ef:26: 1e:2a:f1:e9:b9:7c:25:b9:09:56:6c:6a:b0:17:82: 72:43:6f:e6:d6:27:10:5d:45:16:f6:08:b4:ba:b2: ab:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AE:F8:EA:E0:31:2D:1D:4D:69:E0:E5:50:9E:CA:B1:E8:FA:C8:BD X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/f54cd21d-ebef-4509-8295-1f7547d0d717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018:400::/38 Signature Algorithm: sha256WithRSAEncryption 25:26:9c:dd:f4:93:24:e8:b4:6b:a7:c4:35:51:3b:06:98:bc: 0f:6c:bf:0e:cb:0d:c2:ac:d3:1a:fe:62:9a:8c:36:7d:0f:dd: 97:03:e4:c2:fc:a4:62:1f:48:91:f6:c3:47:2d:97:7e:f8:9b: ae:f6:bd:42:a3:05:b7:ef:14:ea:bb:d9:05:d2:b5:e3:7d:24: 72:0e:da:d0:3a:71:9c:0d:c4:be:00:80:4f:3d:e1:63:45:03: 85:f0:5d:50:63:c9:8a:5b:da:31:27:49:ae:f8:ad:af:87:29: 2c:d7:5f:d7:7c:94:a3:b5:9f:79:c6:53:ce:7c:b2:4f:4b:e9: 0a:b9:8c:0c:65:38:72:ff:60:c9:27:32:76:d8:be:b5:32:84: 6c:6d:45:d0:5b:8b:f2:52:e3:1c:ec:24:70:58:69:9d:55:3c: 2d:9e:18:3f:c8:bd:45:23:8f:3e:bb:9c:a0:b0:72:29:a5:99: c8:1a:7d:3d:46:4b:d9:85:38:30:7e:b0:c1:11:7a:97:ad:e0: 52:4c:78:1e:70:9b:c3:57:15:87:15:1b:3b:97:53:3f:97:99: 9d:ec:21:cd:63:56:7f:96:58:aa:a3:26:82:e6:3f:27:f4:f5: 7b:04:5e:76:58:01:2d:b2:cc:3f:b1:b3:16:8e:83:5e:0f:22: 59:26:63:a5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSXUrapounkvL4/NXVp0tETpXDk4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAyOVoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNANjQ3MmE0YjdlZDlmM2EwZjA1NDcw NjJmMjRkNjA5ZGM2ZGIyMTRiYjE1Njk4MGIxZWQ5OTQxMmVmNzc3ZTA1ZjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MltakSDQdcb22f/g/CNJEc3JJO2 gZwgNrJc3tMYcyzgoFgJIf/Atkrdyksibm3IpTgsnOXvy0KTY+LA/oD+t0tzS+vI SBjN0K32gYHyNJ3o5LSMY11zRbRjwGJNxAlUwsqRkp44V/TbdSAUYWJ1mtb4LR8c njKsUas5rzvGoFpqyuHTwVwR0013Jjfps6cR86Norw24i883k8G/rhxJrSgsLm+g UntRg2govDmswFcRuUAVnJvD1GiFHMim6S45MrsZ1CJPB1pIAXLTOuZ9KO+5bpWR 9pYX8XZ48KmY7yYeKvHpuXwluQlWbGqwF4JyQ2/m1icQXUUW9gi0urKrYQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAWu+OrgMS0dTWng5VCeyrHo+si9MB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2Y1NGNkMjFkLWViZWYtNDUwOS04Mjk1LTFmNzU0N2QwZDcxNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AGAQwDQYJKoZIhvcNAQELBQADggEBACUmnN30kyTotGunxDVR OwaYvA9svw7LDcKs0xr+YpqMNn0P3ZcD5ML8pGIfSJH2w0ctl374m672vUKjBbfv FOq72QXSteN9JHIO2tA6cZwNxL4AgE894WNFA4XwXVBjyYpb2jEnSa74ra+HKSzX X9d8lKO1n3nGU858sk9L6Qq5jAxlOHL/YMknMnbYvrUyhGxtRdBbi/JS4xzsJHBY aZ1VPC2eGD/IvUUjjz67nKCwcimlmcgafT1GS9mFODB+sMERepet4FJMeB5wm8NX FYcVGzuXUz+XmZ3sIc1jVn+WWKqjJoLmPyf09XsEXnZYAS2yzD+xsxaOg14PIlkm Y6U= -----END CERTIFICATE-----Generated at Tue Aug 11 09:27:10 2026 by rpki-client