$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/977f90e2-d257-4dde-9740-b0391458d8ed.roa File: 977f90e2-d257-4dde-9740-b0391458d8ed.roa (raw, json) Hash identifier: nmH5fF0XBWNjgtDVGlss3DMsik8HIdWTO8/L5KliKj8= Subject key identifier: 1C:B0:BB:BD:DC:16:94:A0:ED:80:03:B2:D0:04:97:6D:2A:B5:5E:D3 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 3F5DA10CDCCE4059941F285992118F6B0BF6D3E8 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/977f90e2-d257-4dde-9740-b0391458d8ed.roa Signing time: Thu 22 Oct 2026 00:10:11 +0000 ROA not before: Thu 22 Oct 2026 00:10:11 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8000::/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5d:a1:0c:dc:ce:40:59:94:1f:28:59:92:11:8f:6b:0b:f6:d3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 22 00:10:11 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=a6b4df23d39f7c9078712fcf607c4bc1101ccfbf2160bb8e0f31d52cbcd1a19b, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:d8:89:17:63:8c:e7:55:f3:f8:8a:54:fb: 8d:85:74:0d:1f:e6:e4:e6:e4:e0:ab:32:ba:15:c1: c3:05:c0:72:c4:6a:fd:37:da:95:78:1a:e0:ae:0e: dd:0d:09:0e:37:a6:d5:fe:8a:9c:a2:40:c6:b3:27: c6:11:91:9c:c6:fa:d9:93:55:61:0a:8d:cb:a0:92: 0a:46:e6:72:bd:63:5f:85:8c:38:48:9b:88:c8:cd: e6:99:be:66:b5:d6:ed:58:65:0d:3f:c4:2a:0e:75: ce:74:07:8a:a7:ac:b7:e9:c9:1d:08:02:c7:f6:49: f0:c4:25:6b:2a:9f:31:48:3e:07:11:10:df:27:7f: a7:63:3e:52:b2:1e:8f:21:79:52:91:51:8c:f7:19: 37:e1:f3:1d:ae:96:79:91:e4:08:e6:bc:1f:04:38: 26:41:1d:4a:b1:59:63:58:b3:59:9c:d1:15:c9:0e: db:c5:53:e0:85:b5:7c:af:f3:4a:f5:34:67:c3:91: 7f:50:1b:2a:ea:36:d0:50:39:2f:fc:86:02:55:16: 37:cb:71:05:e2:2d:e0:e4:79:c7:d9:be:ac:23:07: 58:2d:38:16:eb:33:24:cc:88:1d:c6:bf:0a:ac:15: 31:44:fb:c7:e0:84:70:dc:ef:a1:55:95:70:2a:6a: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B0:BB:BD:DC:16:94:A0:ED:80:03:B2:D0:04:97:6D:2A:B5:5E:D3 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/977f90e2-d257-4dde-9740-b0391458d8ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8000::/24 Signature Algorithm: sha256WithRSAEncryption 8c:f3:3a:56:b5:fc:76:7e:3d:a6:52:6c:e6:10:07:d1:97:f3: d3:1a:e3:ed:02:e2:81:46:27:db:07:0e:2c:75:b7:f0:0f:8c: 9d:64:f0:36:5b:40:57:97:0b:4f:a9:f7:50:96:58:c3:59:e8: 67:13:a8:22:b6:97:9f:fa:45:61:7f:ed:ec:77:b1:24:81:94: 20:f7:ba:cf:e6:05:0b:5c:a1:0b:e2:dc:ad:03:aa:a6:57:12: 7a:b7:5e:2b:de:88:80:03:19:3e:6b:cc:81:66:d7:c9:ec:f3: f9:af:98:d3:98:75:14:bb:15:5d:ba:33:b6:c8:7b:22:60:59: 69:54:42:d4:f8:94:10:94:b5:65:cc:ed:b7:dd:50:91:31:cb: 87:5d:2e:08:3f:05:4f:79:7d:75:c3:76:a0:a8:78:9a:8c:ea: ae:c7:85:4f:27:ca:7c:bc:18:d7:cb:cd:0a:f7:a6:d1:fa:45: ee:30:ea:82:46:ed:f2:52:fd:66:73:c3:90:a3:b1:4b:8c:ae: a0:0d:79:88:7a:23:38:4b:fb:47:32:68:21:1b:c4:d0:6f:2d: 9c:01:9e:5e:a4:6e:cf:34:e8:80:3f:11:1c:cd:41:f9:6f:ff: b2:0a:4b:3c:ae:aa:2a:36:35:21:a4:3f:f4:3a:64:d8:a2:7e: 64:a3:1d:7e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUP12hDNzOQFmUHyhZkhGPawv20+gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMjAwMTAxMVoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAYTZiNGRmMjNkMzlmN2M5MDc4NzEy ZmNmNjA3YzRiYzExMDFjY2ZiZjIxNjBiYjhlMGYzMWQ1MmNiY2QxYTE5YjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/zYiRdjjOdV8/iKVPuNhXQNH+bk 5uTgqzK6FcHDBcByxGr9N9qVeBrgrg7dDQkON6bV/oqcokDGsyfGEZGcxvrZk1Vh Co3LoJIKRuZyvWNfhYw4SJuIyM3mmb5mtdbtWGUNP8QqDnXOdAeKp6y36ckdCALH 9knwxCVrKp8xSD4HERDfJ3+nYz5Ssh6PIXlSkVGM9xk34fMdrpZ5keQI5rwfBDgm QR1KsVljWLNZnNEVyQ7bxVPghbV8r/NK9TRnw5F/UBsq6jbQUDkv/IYCVRY3y3EF 4i3g5HnH2b6sIwdYLTgW6zMkzIgdxr8KrBUxRPvH4IRw3O+hVZVwKmqAXQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFBywu73cFpSg7YADstAEl20qtV7TMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 Lzk3N2Y5MGUyLWQyNTctNGRkZS05NzQwLWIwMzkxNDU4ZDhlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAAjAGAwQAJA+AMA0GCSqGSIb3DQEBCwUAA4IBAQCM8zpWtfx2fj2mUmzmEAfR l/PTGuPtAuKBRifbBw4sdbfwD4ydZPA2W0BXlwtPqfdQlljDWehnE6gitpef+kVh f+3sd7EkgZQg97rP5gULXKEL4tytA6qmVxJ6t14r3oiAAxk+a8yBZtfJ7PP5r5jT mHUUuxVdujO2yHsiYFlpVELU+JQQlLVlzO233VCRMcuHXS4IPwVPeX11w3agqHia jOqux4VPJ8p8vBjXy80K96bR+kXuMOqCRu3yUv1mc8OQo7FLjK6gDXmIeiM4S/tH MmghG8TQby2cAZ5epG7PNOiAPxEczUH5b/+yCks8rqoqNjUhpD/0OmTYon5kox1+ -----END CERTIFICATE-----Generated at Wed Nov 11 12:01:07 2026 by rpki-client