$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/31d36ece-9039-43a2-82a2-03e7d8e7f563.roa File: 31d36ece-9039-43a2-82a2-03e7d8e7f563.roa (raw, json) Hash identifier: koxqd8qz6YMBNSIGZ7YuTB4hrar9m1YTc4cNagYBLk8= Subject key identifier: 56:7D:C1:C6:65:1C:8A:66:D0:2F:2C:5D:B5:95:9B:18:60:07:54:D3 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 4D3C72926423CE64888DF4869E2CAEFE944EAB11 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/31d36ece-9039-43a2-82a2-03e7d8e7f563.roa Signing time: Fri 23 Oct 2026 00:02:52 +0000 ROA not before: Fri 23 Oct 2026 00:02:52 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3c:72:92:64:23:ce:64:88:8d:f4:86:9e:2c:ae:fe:94:4e:ab:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:02:52 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=da8f7ae3dba6381bb77318f610a610cd2dd8cedb9dfbe081c3faac998f2f56de, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:b1:c4:e0:43:5e:48:30:9a:0d:0a:da:58: 2c:95:b9:70:e3:af:79:47:ea:9d:bb:46:8b:98:af: fe:67:91:3e:f6:71:60:42:bd:7f:bd:ec:68:33:bb: d0:5a:8a:6f:5b:6f:32:f0:38:62:49:bd:6c:bd:48: 26:59:8f:57:95:24:4d:6b:fd:2b:9a:ed:fa:20:b6: 7e:de:1a:52:d5:46:d3:82:4b:10:2a:6b:3b:ba:11: dc:a1:02:cb:e2:05:cb:43:73:a6:49:d0:f0:44:7b: 6f:26:b8:b0:50:71:b5:a9:c9:d1:4d:d5:97:5e:88: 6f:bf:a1:a0:55:41:3f:11:b5:e7:39:88:09:48:09: e2:47:ba:a9:28:28:62:78:c1:0b:a1:8f:ba:a9:42: 9e:e1:8f:2b:57:c7:89:d1:0f:2c:d8:82:a7:7b:9e: da:27:2a:82:9e:54:af:03:f1:60:9a:0a:f8:53:0b: fa:6e:d7:bb:b9:c8:04:bf:34:f3:9f:a6:40:49:de: 6e:3b:d2:82:44:dc:c2:06:3f:be:a9:d0:c9:81:9a: d3:80:68:9a:ee:1b:b4:7e:ae:aa:13:61:7c:8f:26: 96:f1:4d:2c:a7:cd:0e:63:cb:36:e1:88:72:b1:f4: 1a:82:cb:30:3d:a1:f2:82:a8:b9:25:fc:5f:e2:51: a2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7D:C1:C6:65:1C:8A:66:D0:2F:2C:5D:B5:95:9B:18:60:07:54:D3 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/31d36ece-9039-43a2-82a2-03e7d8e7f563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fc::/32 Signature Algorithm: sha256WithRSAEncryption b4:1e:9d:e9:69:56:08:c4:5d:9b:1b:f0:6c:21:24:55:77:c5: f4:24:6f:8c:45:76:b2:2d:80:e1:da:ef:80:0e:1d:2c:df:c2: f7:f9:1d:29:d0:30:ba:89:24:e8:e0:6c:e7:dc:51:3f:15:ba: da:1b:20:5d:26:1f:dc:12:c3:18:0f:f5:d5:b1:da:cf:68:43: 46:a7:13:03:7a:de:c2:b8:55:b0:b1:e1:a1:c0:56:eb:a2:34: 92:54:e1:9e:64:c1:3c:4d:08:91:97:69:7f:44:e1:38:44:4f: 2e:a0:69:28:74:90:db:61:b0:3f:a3:96:7d:42:ae:71:6a:75: e2:68:94:f4:8c:2e:cb:aa:28:18:75:8b:9f:ee:ed:0b:54:d2: c5:c6:e5:9c:8c:e2:8a:7e:47:e7:64:06:8c:b3:02:38:6f:f0: 22:6f:b8:d2:24:ed:36:47:27:18:3e:19:73:0d:99:e8:5c:08: 7c:03:c0:38:b5:99:95:bd:5e:12:a4:2c:7e:f2:40:64:cc:a6: b2:af:b5:48:99:7e:dd:0d:95:b8:13:fa:fe:e2:30:67:87:bf: 47:5a:11:37:60:a5:6d:ba:88:34:f4:03:e5:7f:e0:55:4e:88: c8:d2:e2:44:22:d3:c8:cc:e7:d9:53:22:30:9a:77:4c:f0:dd: 03:51:67:07 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUTTxykmQjzmSIjfSGniyu/pROqxEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDI1MloX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAZGE4ZjdhZTNkYmE2MzgxYmI3NzMx OGY2MTBhNjEwY2QyZGQ4Y2VkYjlkZmJlMDgxYzNmYWFjOTk4ZjJmNTZkZTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkqxxOBDXkgwmg0K2lgslblw4695 R+qdu0aLmK/+Z5E+9nFgQr1/vexoM7vQWopvW28y8DhiSb1svUgmWY9XlSRNa/0r mu36ILZ+3hpS1UbTgksQKms7uhHcoQLL4gXLQ3OmSdDwRHtvJriwUHG1qcnRTdWX Xohvv6GgVUE/EbXnOYgJSAniR7qpKChieMELoY+6qUKe4Y8rV8eJ0Q8s2IKne57a JyqCnlSvA/Fgmgr4Uwv6bte7ucgEvzTzn6ZASd5uO9KCRNzCBj++qdDJgZrTgGia 7hu0fq6qE2F8jyaW8U0sp80OY8s24YhysfQagsswPaHygqi5Jfxf4lGiawIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFFZ9wcZlHIpm0C8sXbWVmxhgB1TTMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzMxZDM2ZWNlLTkwMzktNDNhMi04MmEyLTAzZTdkOGU3ZjU2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJA+A/DANBgkqhkiG9w0BAQsFAAOCAQEAtB6d6WlWCMRdmxvwbCEk VXfF9CRvjEV2si2A4drvgA4dLN/C9/kdKdAwuokk6OBs59xRPxW62hsgXSYf3BLD GA/11bHaz2hDRqcTA3rewrhVsLHhocBW66I0klThnmTBPE0IkZdpf0ThOERPLqBp KHSQ22GwP6OWfUKucWp14miU9Iwuy6ooGHWLn+7tC1TSxcblnIziin5H52QGjLMC OG/wIm+40iTtNkcnGD4Zcw2Z6FwIfAPAOLWZlb1eEqQsfvJAZMymsq+1SJl+3Q2V uBP6/uIwZ4e/R1oRN2ClbbqINPQD5X/gVU6IyNLiRCLTyMzn2VMiMJp3TPDdA1Fn Bw== -----END CERTIFICATE-----Generated at Wed Nov 11 11:31:15 2026 by rpki-client