$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/9a94ee8c-7029-4ffb-af7f-435e161333de.roa File: 9a94ee8c-7029-4ffb-af7f-435e161333de.roa (raw, json) Hash identifier: XbwMg+S3dBjO9pjlPTeT7J+c0F8GeblOiCJhhLHA21s= Subject key identifier: 24:98:1B:EA:15:E2:DC:75:8A:B6:60:C8:01:D6:2D:0F:CD:21:00:58 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 48CAE46CB1A125D4CB74B965EE3C3BEF7C1B0123 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/9a94ee8c-7029-4ffb-af7f-435e161333de.roa Signing time: Fri 23 Oct 2026 00:02:51 +0000 ROA not before: Fri 23 Oct 2026 00:02:51 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8000:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ca:e4:6c:b1:a1:25:d4:cb:74:b9:65:ee:3c:3b:ef:7c:1b:01:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:02:51 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=c2cc80fa3875415163226e575cd8f5f4dd325be6d2e73b5675574f096d4f41f3, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c6:2a:8f:08:7a:a1:54:68:56:b9:69:a7:96: ad:3f:e8:c7:cb:9a:3f:63:12:8f:0a:85:b4:4e:e9: 89:d9:73:56:26:a3:1e:4a:b6:83:fc:d4:64:03:27: 95:e6:df:dc:e1:38:8f:a3:65:74:ad:b0:23:ea:c8: 17:17:a2:c3:ff:eb:75:b8:5c:5f:b2:37:e9:26:4e: d8:10:54:19:39:7d:9c:83:cf:66:c6:65:92:b9:8e: a4:0d:6e:e1:66:c5:e8:c9:8a:dd:52:15:12:72:4f: 7e:5f:f0:88:66:24:ee:30:1b:a9:61:c1:6c:94:dd: 3c:6a:2d:bd:0e:74:4a:1c:72:69:00:bb:fc:e1:36: 48:98:4c:83:86:e2:59:c3:78:ba:79:f4:5a:46:32: d7:b0:48:ff:87:4f:37:9a:c8:9c:ec:4e:ef:5a:64: fc:59:f3:b1:54:f3:0f:e7:42:2a:75:93:4b:8b:6e: 3c:bd:46:12:23:f8:53:d2:07:bd:ea:cc:73:56:18: 3b:1c:d5:b6:ae:eb:8e:3f:19:cf:ac:e3:7d:60:fd: 09:9b:e9:f0:2d:61:5a:6a:cc:87:73:e4:af:8d:84: 49:9a:91:29:fb:c5:5d:45:54:37:a4:40:0c:60:02: 16:14:23:67:e3:ac:b7:81:3d:2e:6b:d6:00:59:f9: 4d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:98:1B:EA:15:E2:DC:75:8A:B6:60:C8:01:D6:2D:0F:CD:21:00:58 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/9a94ee8c-7029-4ffb-af7f-435e161333de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8000:8000::/40 Signature Algorithm: sha256WithRSAEncryption 53:00:40:8c:ff:9c:8a:1e:32:d5:f4:b3:b7:ad:eb:94:0d:43: 77:0d:dd:b0:2c:c2:64:21:f0:fd:41:a7:9f:a3:e8:dd:47:74: fc:c4:77:28:94:45:c7:8e:db:42:9a:f3:8d:65:49:a9:bf:10: 2c:42:a5:06:d0:f3:d5:17:b1:11:7f:f4:4c:d0:4a:b8:f2:6f: e8:46:41:31:80:c6:4a:f7:07:e5:35:e3:2b:1e:55:94:23:30: f9:89:21:84:19:34:fd:14:f1:09:99:dd:01:c7:2a:9e:61:ed: e3:6d:21:b1:56:0b:88:be:c0:f4:ff:9f:ad:8b:54:5c:47:57: fe:52:25:f8:b2:e2:bc:e4:eb:54:d1:aa:28:96:66:37:a1:66: a8:2a:9f:91:5c:4b:56:a9:cb:a1:d8:10:ae:44:d9:2a:9b:3a: c8:e2:26:c0:94:23:88:4f:a0:44:0f:0a:06:e6:9d:f0:ee:de: ed:db:7c:3c:10:3a:0e:68:03:cf:31:29:d3:91:9a:46:4a:38: 0f:df:8d:fe:e0:b6:88:9e:cc:db:62:89:d1:63:74:a1:d4:75: bc:58:5d:1e:4f:50:64:e1:20:ab:15:d8:54:c2:20:dd:e9:0c: bd:82:a0:7d:9f:4b:72:40:9b:2f:53:d4:91:2d:69:1a:0f:3e: a1:40:f5:83 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSMrkbLGhJdTLdLll7jw773wbASMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDI1MVoX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAYzJjYzgwZmEzODc1NDE1MTYzMjI2 ZTU3NWNkOGY1ZjRkZDMyNWJlNmQyZTczYjU2NzU1NzRmMDk2ZDRmNDFmMzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48Yqjwh6oVRoVrlpp5atP+jHy5o/ YxKPCoW0TumJ2XNWJqMeSraD/NRkAyeV5t/c4TiPo2V0rbAj6sgXF6LD/+t1uFxf sjfpJk7YEFQZOX2cg89mxmWSuY6kDW7hZsXoyYrdUhUSck9+X/CIZiTuMBupYcFs lN08ai29DnRKHHJpALv84TZImEyDhuJZw3i6efRaRjLXsEj/h083msic7E7vWmT8 WfOxVPMP50IqdZNLi248vUYSI/hT0ge96sxzVhg7HNW2ruuOPxnPrON9YP0Jm+nw LWFaasyHc+SvjYRJmpEp+8VdRVQ3pEAMYAIWFCNn46y3gT0ua9YAWflNbwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCSYG+oV4tx1irZgyAHWLQ/NIQBYMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzlhOTRlZThjLTcwMjktNGZmYi1hZjdmLTQzNWUxNjEzMzNkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+AAIAwDQYJKoZIhvcNAQELBQADggEBAFMAQIz/nIoeMtX0s7et 65QNQ3cN3bAswmQh8P1Bp5+j6N1HdPzEdyiURceO20Ka841lSam/ECxCpQbQ89UX sRF/9EzQSrjyb+hGQTGAxkr3B+U14yseVZQjMPmJIYQZNP0U8QmZ3QHHKp5h7eNt IbFWC4i+wPT/n62LVFxHV/5SJfiy4rzk61TRqiiWZjehZqgqn5FcS1apy6HYEK5E 2SqbOsjiJsCUI4hPoEQPCgbmnfDu3u3bfDwQOg5oA88xKdORmkZKOA/fjf7gtoie zNtiidFjdKHUdbxYXR5PUGThIKsV2FTCIN3pDL2CoH2fS3JAmy9T1JEtaRoPPqFA 9YM= -----END CERTIFICATE-----Generated at Wed Nov 11 11:59:06 2026 by rpki-client