$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c886fdcc-d9c4-485a-a941-7aa2c7d093e3.roa File: c886fdcc-d9c4-485a-a941-7aa2c7d093e3.roa (raw, json) Hash identifier: L1L/jQjXAdvn3YGhd4pQaIzIa1BKLK8GAkYZkFRaN04= Subject key identifier: 7D:93:51:4B:7D:BA:6D:D5:45:E8:C5:60:99:28:B4:7E:3F:29:D4:66 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 3EFD4062BE254EB7E7A0F9EA3B3E279659DEF5CC Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c886fdcc-d9c4-485a-a941-7aa2c7d093e3.roa Signing time: Thu 22 Oct 2026 00:10:08 +0000 ROA not before: Thu 22 Oct 2026 00:10:08 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fe:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:fd:40:62:be:25:4e:b7:e7:a0:f9:ea:3b:3e:27:96:59:de:f5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 22 00:10:08 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=7bdc7e81c97bd928b9f1e274813f4116f92f1f946e217608e649691334b949fc, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:eb:f7:e1:58:84:1d:f2:6f:09:7c:66:7e:25: 9e:4b:a5:44:fe:eb:77:79:47:7f:d0:4c:a6:b7:ce: 9b:ac:a3:c3:78:e9:85:f5:d9:d4:ed:9b:f5:56:7c: 69:5d:31:3f:e3:9a:8a:1a:3f:c0:b9:35:8f:7e:d8: 07:1f:34:37:98:3a:d3:c6:a9:be:ff:31:50:b2:fd: 4a:3f:fd:c9:49:23:00:ea:8c:f6:07:f3:93:eb:bc: 4c:35:cd:f9:87:fa:19:9d:9a:bd:8c:2a:a1:1f:e0: 0f:b4:38:b0:63:a0:7a:53:a9:df:82:67:6b:cf:32: c9:a6:56:7a:5e:bf:9e:18:c6:cc:7c:ce:d4:78:05: 14:c8:bf:cc:fe:a8:9b:aa:87:19:ca:f2:00:80:40: d7:b3:5e:e1:1b:87:6c:f2:be:1b:71:9c:cd:e7:c2: d0:c5:6b:0c:0f:e1:a5:5d:3a:9b:4b:66:d0:5d:fb: e9:c5:85:df:2b:71:65:6a:c2:74:f2:b4:21:9e:cc: 9f:03:8c:dd:f9:27:47:c1:4b:3a:8c:79:70:f9:28: 94:1d:cd:46:51:06:3f:b7:4d:3e:a7:6d:49:d4:ff: 30:a3:51:97:bd:c9:bd:95:68:11:a6:71:c5:81:74: 34:f1:f2:ad:f3:bb:e6:29:89:2b:5b:93:45:9e:f7: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:93:51:4B:7D:BA:6D:D5:45:E8:C5:60:99:28:B4:7E:3F:29:D4:66 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c886fdcc-d9c4-485a-a941-7aa2c7d093e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fe:4000::/40 Signature Algorithm: sha256WithRSAEncryption 96:8b:57:63:ff:b5:4b:f7:bf:77:3e:65:7d:6e:95:49:96:dc: 00:91:1b:47:7a:76:d6:82:76:af:64:8f:e6:8a:8b:28:fd:eb: 25:6c:56:9e:1d:2d:b8:8a:c1:fb:c6:1d:5a:15:fc:ad:37:70: d8:18:dc:e4:a3:e9:b9:51:be:f0:8d:ee:0b:0a:6d:fe:8f:56: 1a:0a:a4:35:45:7b:10:5d:4d:70:9f:f4:b4:ce:22:f3:1c:11: 1d:a2:a5:e0:37:65:f2:3a:f6:24:e6:c5:a9:9c:f1:ff:ff:fb: a9:ca:6f:71:3f:74:e9:3e:86:02:08:b6:12:ae:2e:3d:5c:b7: 5b:b0:3f:ee:c1:6e:5f:79:65:47:10:a0:43:a8:62:d9:c6:06: 1f:c5:8d:c9:0b:fc:7b:cf:35:f6:3d:45:e0:08:8f:0c:d2:d5: 12:19:c9:53:be:09:b6:a4:32:ae:42:5a:81:fb:fa:51:3b:84: 05:a6:99:4a:98:d6:3e:f7:43:36:ec:c8:64:ce:1e:a8:1f:98: 4e:26:96:a7:fd:84:5d:aa:5e:f1:b9:31:fc:c3:72:51:09:fa: fc:94:18:35:ad:b3:e1:a4:4c:77:eb:6a:59:dd:5c:f0:79:43: 99:15:ad:72:05:a0:db:d0:63:19:77:a7:fb:11:8d:4f:0f:51: 2e:94:f3:32 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPv1AYr4lTrfnoPnqOz4nllne9cwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMjAwMTAwOFoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAN2JkYzdlODFjOTdiZDkyOGI5ZjFl Mjc0ODEzZjQxMTZmOTJmMWY5NDZlMjE3NjA4ZTY0OTY5MTMzNGI5NDlmYzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Ov34ViEHfJvCXxmfiWeS6VE/ut3 eUd/0Eymt86brKPDeOmF9dnU7Zv1VnxpXTE/45qKGj/AuTWPftgHHzQ3mDrTxqm+ /zFQsv1KP/3JSSMA6oz2B/OT67xMNc35h/oZnZq9jCqhH+APtDiwY6B6U6nfgmdr zzLJplZ6Xr+eGMbMfM7UeAUUyL/M/qibqocZyvIAgEDXs17hG4ds8r4bcZzN58LQ xWsMD+GlXTqbS2bQXfvpxYXfK3FlasJ08rQhnsyfA4zd+SdHwUs6jHlw+SiUHc1G UQY/t00+p21J1P8wo1GXvcm9lWgRpnHFgXQ08fKt87vmKYkrW5NFnvddGQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH2TUUt9um3VRejFYJkotH4/KdRmMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2M4ODZmZGNjLWQ5YzQtNDg1YS1hOTQxLTdhYTJjN2QwOTNlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A/kAwDQYJKoZIhvcNAQELBQADggEBAJaLV2P/tUv3v3c+ZX1u lUmW3ACRG0d6dtaCdq9kj+aKiyj96yVsVp4dLbiKwfvGHVoV/K03cNgY3OSj6blR vvCN7gsKbf6PVhoKpDVFexBdTXCf9LTOIvMcER2ipeA3ZfI69iTmxamc8f//+6nK b3E/dOk+hgIIthKuLj1ct1uwP+7Bbl95ZUcQoEOoYtnGBh/FjckL/HvPNfY9ReAI jwzS1RIZyVO+CbakMq5CWoH7+lE7hAWmmUqY1j73QzbsyGTOHqgfmE4mlqf9hF2q XvG5MfzDclEJ+vyUGDWts+GkTHfralndXPB5Q5kVrXIFoNvQYxl3p/sRjU8PUS6U 8zI= -----END CERTIFICATE-----Generated at Wed Nov 11 11:37:30 2026 by rpki-client