$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/5484d331-446c-4042-9500-dd3002e6a910.roa File: 5484d331-446c-4042-9500-dd3002e6a910.roa (raw, json) Hash identifier: 93Y4EjaGPR0xyU/sBrymk0GijDp+yQq4dIwzfANdJxg= Subject key identifier: BD:E2:B7:D5:1F:A8:94:62:E9:22:F7:36:C9:DC:99:D2:D7:C5:93:66 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 2EF38C9E628C3E585247C37C1CB843C081C14429 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/5484d331-446c-4042-9500-dd3002e6a910.roa Signing time: Fri 23 Oct 2026 00:03:07 +0000 ROA not before: Fri 23 Oct 2026 00:03:07 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8014:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f3:8c:9e:62:8c:3e:58:52:47:c3:7c:1c:b8:43:c0:81:c1:44:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:03:07 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=df5f9d52a1101612a5a74176cc6d21516bc8d3ea737c85c0b12d7bb0de524a36, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:b8:b9:1a:dc:35:f1:60:03:da:94:5c:d7: 55:a3:12:e5:ae:4a:68:a0:ae:ed:bd:23:a3:85:75: c5:5d:7b:91:a5:36:cc:2f:e5:2e:b6:fb:39:c9:ad: b8:05:ea:27:e0:9e:5b:ca:e5:28:c4:49:5e:15:fa: 9a:cf:6e:bd:5d:fa:f8:d4:c8:81:b0:3d:b6:70:73: 93:17:e8:10:0e:d6:9f:2f:63:da:6a:3c:1d:eb:16: b8:16:f9:66:08:59:d1:87:fe:8e:5a:e6:db:cd:d0: d0:0b:5f:1e:48:ad:8b:02:b6:11:71:64:44:24:eb: c7:28:39:77:04:85:8c:4a:95:91:0c:15:68:f0:ff: 80:b7:54:da:54:7a:12:41:ba:a4:f1:72:ae:e3:56: 85:29:31:34:23:c3:b1:2e:0e:b9:fc:f2:33:bd:32: d8:97:4b:9a:70:f1:08:db:e2:02:41:03:81:e2:f3: fc:71:a9:cd:62:33:8f:25:ea:08:e7:c5:53:c0:f1: c1:28:dd:ea:df:0d:bb:d4:f9:d5:49:4f:6e:37:23: 2c:e1:3d:cd:b2:4c:a1:8d:2c:5d:e7:60:e7:9c:d4: ea:96:4a:d0:f9:8b:44:85:55:ea:74:e9:d8:ba:84: d2:1d:06:fd:63:c1:33:33:26:d9:f7:86:38:a7:d9: 11:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E2:B7:D5:1F:A8:94:62:E9:22:F7:36:C9:DC:99:D2:D7:C5:93:66 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/5484d331-446c-4042-9500-dd3002e6a910.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8014:c00::/38 Signature Algorithm: sha256WithRSAEncryption 35:96:90:80:f9:63:d2:49:c4:01:11:9a:7a:3e:46:a1:06:84: 0c:1d:f8:40:1d:5b:38:31:e8:9e:25:30:7f:3b:a2:21:f4:79: 49:f4:0c:f1:82:be:d7:4b:4c:db:d0:70:ac:c4:da:3a:95:a7: 83:12:88:b8:fb:48:35:a9:f9:3b:a1:8e:f5:2a:bd:dc:cb:3e: 00:63:71:65:9c:96:13:29:21:93:b6:ad:6b:c6:5d:38:c0:00: 60:34:f3:c7:a1:23:70:c4:47:49:6f:d7:24:e0:6b:5d:18:06: 72:bb:54:4b:b7:9c:48:8c:c9:b4:0d:7b:fe:58:6c:11:d5:d1: c2:d9:fb:a8:3a:ae:22:d2:64:ea:a7:86:bc:ad:81:31:bf:62: 54:ff:3a:a2:ce:33:fd:33:0d:3c:30:ee:2e:16:8a:3e:4c:f0: 59:ca:bc:40:d7:c8:2b:fe:48:68:64:44:9c:64:7c:f3:75:4d: 56:97:e6:ef:41:84:3a:95:88:b2:99:42:c0:0e:10:f9:52:19: a1:f0:63:16:ac:0f:88:24:a7:53:9d:5b:f3:b3:02:a9:6d:b0: ed:41:9f:c2:42:5b:2d:e9:70:1f:f6:b5:2c:76:88:41:b5:8a: d7:38:bf:a2:12:fa:6f:9d:3b:70:8e:fc:64:41:68:e9:b6:08: b5:d4:af:47 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULvOMnmKMPlhSR8N8HLhDwIHBRCkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDMwN1oX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAZGY1ZjlkNTJhMTEwMTYxMmE1YTc0 MTc2Y2M2ZDIxNTE2YmM4ZDNlYTczN2M4NWMwYjEyZDdiYjBkZTUyNGEzNjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv24uRrcNfFgA9qUXNdVoxLlrkpo oK7tvSOjhXXFXXuRpTbML+Uutvs5ya24Beon4J5byuUoxEleFfqaz269Xfr41MiB sD22cHOTF+gQDtafL2Paajwd6xa4FvlmCFnRh/6OWubbzdDQC18eSK2LArYRcWRE JOvHKDl3BIWMSpWRDBVo8P+At1TaVHoSQbqk8XKu41aFKTE0I8OxLg65/PIzvTLY l0uacPEI2+ICQQOB4vP8canNYjOPJeoI58VTwPHBKN3q3w271PnVSU9uNyMs4T3N skyhjSxd52DnnNTqlkrQ+YtEhVXqdOnYuoTSHQb9Y8EzMybZ94Y4p9kRLQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL3it9UfqJRi6SL3NsncmdLXxZNmMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzU0ODRkMzMxLTQ0NmMtNDA0Mi05NTAwLWRkMzAwMmU2YTkxMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AFAwwDQYJKoZIhvcNAQELBQADggEBADWWkID5Y9JJxAERmno+ RqEGhAwd+EAdWzgx6J4lMH87oiH0eUn0DPGCvtdLTNvQcKzE2jqVp4MSiLj7SDWp +TuhjvUqvdzLPgBjcWWclhMpIZO2rWvGXTjAAGA088ehI3DER0lv1yTga10YBnK7 VEu3nEiMybQNe/5YbBHV0cLZ+6g6riLSZOqnhrytgTG/YlT/OqLOM/0zDTww7i4W ij5M8FnKvEDXyCv+SGhkRJxkfPN1TVaX5u9BhDqViLKZQsAOEPlSGaHwYxasD4gk p1OdW/OzAqltsO1Bn8JCWy3pcB/2tSx2iEG1itc4v6IS+m+dO3CO/GRBaOm2CLXU r0c= -----END CERTIFICATE-----Generated at Wed Nov 11 12:07:02 2026 by rpki-client