$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/efdcb43b-2f19-4107-a0a3-c55daccb2714.roa File: efdcb43b-2f19-4107-a0a3-c55daccb2714.roa (raw, json) Hash identifier: T9L6zRhID+25/Syqxoc1hGaYQzMaD2134nmpWFBJHWY= Subject key identifier: 25:62:15:CF:4C:DA:E8:E3:51:C7:60:60:8A:95:93:F8:D7:F3:0B:C0 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 214AC2CAE211DCE6F19866765BA440AE2E6671E6 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/efdcb43b-2f19-4107-a0a3-c55daccb2714.roa Signing time: Thu 22 Oct 2026 00:10:06 +0000 ROA not before: Thu 22 Oct 2026 00:10:06 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80a0:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4a:c2:ca:e2:11:dc:e6:f1:98:66:76:5b:a4:40:ae:2e:66:71:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 22 00:10:06 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=2c805ec84ca639197e80209d09b6c881b5297e76f43f0a4973ded9275618cd47, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:f2:99:7f:e3:03:59:c1:da:4d:f4:a1:4b: 3e:1d:6c:eb:21:e0:28:8a:f4:07:c3:f0:75:46:ab: ab:1a:6d:ae:c4:a5:73:b9:dd:20:3f:31:9d:cc:95: c1:8b:30:9b:43:7e:3e:73:65:47:bd:89:18:6d:d7: a5:1e:67:b6:7e:dc:6d:02:2d:4c:ac:20:84:9e:ed: 51:62:f4:47:e4:87:ce:0b:d9:aa:13:12:bb:da:50: 3a:0b:62:3b:71:fb:f2:e6:e0:d2:22:40:c4:ba:92: 7e:c3:bb:39:d5:6f:f4:a6:b0:ac:8e:d6:6f:04:28: 43:53:6a:8b:ef:fc:a4:9d:92:df:d4:26:32:f2:cb: 01:c4:ca:08:31:97:64:c5:50:89:6e:f9:eb:90:12: 9e:85:c2:92:3b:e9:49:07:4a:28:84:05:96:1b:26: 55:f0:e9:0e:41:d0:9d:50:c4:37:ca:8a:33:ae:9f: 36:5b:85:c8:b5:bf:18:f2:3e:ab:70:d1:f0:3a:3c: 10:a9:57:10:cf:bd:ac:3e:3d:4e:2b:33:57:e4:25: db:25:49:85:8a:f2:84:3f:35:1b:59:bc:1d:c6:e6: 6b:04:49:65:70:ba:df:6a:9c:56:7b:06:ae:e2:0f: 44:4a:11:55:b1:1b:90:9c:6a:2b:60:a9:3c:b0:e3: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:62:15:CF:4C:DA:E8:E3:51:C7:60:60:8A:95:93:F8:D7:F3:0B:C0 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/efdcb43b-2f19-4107-a0a3-c55daccb2714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80a0:4000::/40 Signature Algorithm: sha256WithRSAEncryption b6:85:1d:37:f4:c3:b1:93:11:1f:f2:82:74:b5:7a:dd:fe:0f: f2:28:99:bb:28:68:d2:08:08:7d:e4:0c:42:b1:3b:fd:30:1c: b3:84:42:92:52:7f:46:dc:85:f1:89:ce:63:7b:27:88:f7:13: c2:19:c5:82:30:4b:93:52:5f:83:c2:76:32:de:69:87:b4:4b: 35:18:75:68:68:04:14:84:3d:47:08:39:1a:c2:4a:dc:e2:fd: d1:73:de:5b:17:2a:70:32:61:77:4a:7c:b6:6d:11:71:d7:56: 83:ae:c1:df:92:88:18:f2:74:36:92:5f:83:3a:9f:cd:10:d6: fe:1d:af:cf:e1:87:ea:57:46:e1:92:84:7f:fa:53:25:10:b4: 04:8c:69:ce:30:9f:f8:d6:c3:51:b2:b4:ff:0f:45:8b:ba:f3: 19:5f:80:01:fc:a4:f7:5c:9d:30:07:62:95:6a:c3:b8:3f:3a: a1:6f:dc:2d:f4:e1:c7:07:d2:33:fb:1c:50:d3:a3:04:65:9f: 47:be:95:1c:e7:7a:84:6c:9f:54:f7:8d:a8:cd:37:ca:3d:4f: 48:33:0c:15:8a:7f:8c:9e:27:77:48:70:3c:f0:76:3a:c9:bc: 95:86:a5:07:79:60:e9:de:e7:34:4f:08:94:8e:3b:fb:22:4c: fd:c7:07:3e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIUrCyuIR3ObxmGZ2W6RAri5mceYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMjAwMTAwNloX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAMmM4MDVlYzg0Y2E2MzkxOTdlODAy MDlkMDliNmM4ODFiNTI5N2U3NmY0M2YwYTQ5NzNkZWQ5Mjc1NjE4Y2Q0NzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE/ymX/jA1nB2k30oUs+HWzrIeAo ivQHw/B1RqurGm2uxKVzud0gPzGdzJXBizCbQ34+c2VHvYkYbdelHme2ftxtAi1M rCCEnu1RYvRH5IfOC9mqExK72lA6C2I7cfvy5uDSIkDEupJ+w7s51W/0prCsjtZv BChDU2qL7/yknZLf1CYy8ssBxMoIMZdkxVCJbvnrkBKehcKSO+lJB0oohAWWGyZV 8OkOQdCdUMQ3yoozrp82W4XItb8Y8j6rcNHwOjwQqVcQz72sPj1OKzNX5CXbJUmF ivKEPzUbWbwdxuZrBEllcLrfapxWewau4g9EShFVsRuQnGorYKk8sOO1CQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCViFc9M2ujjUcdgYIqVk/jX8wvAMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2VmZGNiNDNiLTJmMTktNDEwNy1hMGEzLWM1NWRhY2NiMjcxNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+AoEAwDQYJKoZIhvcNAQELBQADggEBALaFHTf0w7GTER/ygnS1 et3+D/IombsoaNIICH3kDEKxO/0wHLOEQpJSf0bchfGJzmN7J4j3E8IZxYIwS5NS X4PCdjLeaYe0SzUYdWhoBBSEPUcIORrCStzi/dFz3lsXKnAyYXdKfLZtEXHXVoOu wd+SiBjydDaSX4M6n80Q1v4dr8/hh+pXRuGShH/6UyUQtASMac4wn/jWw1GytP8P RYu68xlfgAH8pPdcnTAHYpVqw7g/OqFv3C304ccH0jP7HFDTowRln0e+lRzneoRs n1T3jajNN8o9T0gzDBWKf4yeJ3dIcDzwdjrJvJWGpQd5YOne5zRPCJSOO/siTP3H Bz4= -----END CERTIFICATE-----Generated at Wed Nov 11 11:51:34 2026 by rpki-client