$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/453c01e0-c333-4283-987c-be2c8b71798c.roa File: 453c01e0-c333-4283-987c-be2c8b71798c.roa (raw, json) Hash identifier: WyyN5InEAdvXgnYbJNWvTHDXkEviINHBTMQOp3/R9bc= Subject key identifier: 88:96:0D:A5:2C:1B:CA:F4:EA:68:C3:E0:DE:6B:29:4E:72:9F:E0:89 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 5FF934A907D71AFD8D3AF0E78270EA7F4E5BB9B4 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/453c01e0-c333-4283-987c-be2c8b71798c.roa Signing time: Fri 23 Oct 2026 00:03:03 +0000 ROA not before: Fri 23 Oct 2026 00:03:03 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f9:34:a9:07:d7:1a:fd:8d:3a:f0:e7:82:70:ea:7f:4e:5b:b9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:03:03 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=880663639842187a379fed021f810deb4d02f957181962e5edb3ed122a048273, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:62:c8:d3:22:38:79:a4:f7:9a:11:43:c3: 15:ea:4a:d1:17:57:9e:4e:62:a7:53:0d:f3:7b:91: c9:45:87:a6:67:e1:a1:d1:8f:26:8f:6c:49:0b:8b: c8:5c:91:16:aa:ad:21:36:73:2c:46:c0:3e:39:9c: 31:f7:69:81:7a:50:fb:5f:df:e4:69:cc:e0:cb:a8: 1d:6a:58:5a:50:a9:93:0d:d7:0f:40:05:2e:93:1c: f1:4d:87:06:06:80:f1:5c:22:eb:fa:cd:2b:e5:ce: 92:75:6c:14:8e:fe:e5:2a:d2:83:77:2c:8e:54:69: 86:49:80:d6:91:1c:89:95:70:8c:0c:a4:fa:ba:36: aa:c1:0c:51:6f:4f:7f:46:e8:cc:c8:d8:2e:d8:b3: 92:23:8a:00:3f:e5:35:74:2e:93:15:7e:11:e9:ed: 4b:66:3a:35:d3:21:8d:6d:9e:7c:ad:20:c6:25:c1: d5:49:42:ee:25:c2:f2:63:11:b6:d5:92:25:dc:02: 54:5f:2e:a1:91:20:b1:09:25:c1:13:35:1a:23:02: 82:11:18:82:54:31:dc:e2:89:34:34:b6:7b:a5:6d: 39:1c:e3:7e:21:3d:d9:bb:6f:28:11:99:93:9c:dd: 88:48:de:9c:d5:4a:6e:b6:7c:5b:b0:87:43:3e:37: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:96:0D:A5:2C:1B:CA:F4:EA:68:C3:E0:DE:6B:29:4E:72:9F:E0:89 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/453c01e0-c333-4283-987c-be2c8b71798c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 71:53:82:2b:0b:0c:2b:15:be:b9:8f:e8:93:0a:31:7e:08:45: 8a:6a:28:2b:d0:c8:15:82:62:4c:da:33:0c:46:c4:0c:c2:c1: 3f:bc:3d:0b:f6:68:cc:8e:34:99:f4:6f:97:be:2f:f2:ac:a1: e6:42:a9:69:01:c7:fd:65:87:94:3c:e9:eb:79:23:81:9e:fb: 33:a5:72:a0:a0:3e:25:2b:ad:24:2a:cf:ce:04:ef:3a:f2:26: a9:c2:fd:81:e3:2c:62:da:fd:5d:fc:10:ac:79:c7:bb:52:34: ea:02:27:7c:08:71:52:4e:69:2c:60:2a:41:db:b4:19:9c:0d: c1:1b:83:75:ba:ae:a8:8d:74:8c:fa:4a:01:06:c7:9a:73:8a: 20:cd:76:94:ff:2f:b3:e7:e8:8a:68:17:92:2b:40:93:3d:06: bd:ea:05:80:4a:e8:d0:5e:7d:50:a5:67:9d:f9:d8:8d:59:d8: 92:c2:77:52:10:76:9c:fd:d5:ed:11:65:c6:bf:10:46:6a:6a: 6c:6f:25:c4:86:ae:01:2f:31:5d:3e:68:54:e3:bc:be:e1:84: b2:d4:9d:fd:4a:f5:0e:69:ec:0e:1a:ba:37:c3:67:8a:b7:4c: 47:aa:3e:66:e4:b8:5e:43:d0:c2:54:10:f6:b1:06:ce:29:fb: 84:0b:b9:84 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUX/k0qQfXGv2NOvDngnDqf05bubQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDMwM1oX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAODgwNjYzNjM5ODQyMTg3YTM3OWZl ZDAyMWY4MTBkZWI0ZDAyZjk1NzE4MTk2MmU1ZWRiM2VkMTIyYTA0ODI3MzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5diyNMiOHmk95oRQ8MV6krRF1ee TmKnUw3ze5HJRYemZ+Gh0Y8mj2xJC4vIXJEWqq0hNnMsRsA+OZwx92mBelD7X9/k aczgy6gdalhaUKmTDdcPQAUukxzxTYcGBoDxXCLr+s0r5c6SdWwUjv7lKtKDdyyO VGmGSYDWkRyJlXCMDKT6ujaqwQxRb09/RujMyNgu2LOSI4oAP+U1dC6TFX4R6e1L Zjo10yGNbZ58rSDGJcHVSULuJcLyYxG21ZIl3AJUXy6hkSCxCSXBEzUaIwKCERiC VDHc4ok0NLZ7pW05HON+IT3Zu28oEZmTnN2ISN6c1UputnxbsIdDPjfX5wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIiWDaUsG8r06mjD4N5rKU5yn+CJMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzQ1M2MwMWUwLWMzMzMtNDI4My05ODdjLWJlMmM4YjcxNzk4Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJA+A/4DAMA0GCSqGSIb3DQEBCwUAA4IBAQBxU4IrCwwrFb65j+iT CjF+CEWKaigr0MgVgmJM2jMMRsQMwsE/vD0L9mjMjjSZ9G+Xvi/yrKHmQqlpAcf9 ZYeUPOnreSOBnvszpXKgoD4lK60kKs/OBO868iapwv2B4yxi2v1d/BCsece7UjTq Aid8CHFSTmksYCpB27QZnA3BG4N1uq6ojXSM+koBBseac4ogzXaU/y+z5+iKaBeS K0CTPQa96gWASujQXn1QpWed+diNWdiSwndSEHac/dXtEWXGvxBGampsbyXEhq4B LzFdPmhU47y+4YSy1J39SvUOaewOGro3w2eKt0xHqj5m5LheQ9DCVBD2sQbOKfuE C7mE -----END CERTIFICATE-----Generated at Wed Nov 11 12:37:18 2026 by rpki-client