$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e40ee0b-9aa9-4919-a079-9712212e127c.roa File: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (raw, json) Hash identifier: 2JAUl5dvPo0JU5nyFTpYQFvxxO8PYAc7+mlwQ6PJ1Pg= Subject key identifier: D3:B1:EB:68:73:E1:45:3F:1B:2C:A2:3F:3E:1C:75:43:B9:89:4D:20 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 18B53F69C8FD99E4E0435502C86282911690207A Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e40ee0b-9aa9-4919-a079-9712212e127c.roa Signing time: Fri 23 Oct 2026 00:03:10 +0000 ROA not before: Fri 23 Oct 2026 00:03:10 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b5:3f:69:c8:fd:99:e4:e0:43:55:02:c8:62:82:91:16:90:20:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Oct 23 00:03:10 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=fae73571b4565e1e2d6fb463c456047bf92f205902b984b2b3b8d4025331026e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:4d:49:00:44:96:5d:fd:5e:56:a1:e0:49: f9:f9:b5:7e:de:18:66:82:4b:02:c4:be:0a:4b:d1: 41:e4:1a:d4:26:ca:ba:c6:91:f1:43:c0:d8:b8:80: d7:f1:be:30:73:79:04:87:cb:00:a2:00:3d:ab:89: b7:f7:c4:07:e0:62:05:7c:8f:8e:19:e0:0e:21:a1: 45:78:9a:bb:37:4a:83:3a:fa:a9:2d:f3:bc:f8:83: 88:6b:f1:03:bc:91:bb:e7:63:40:de:0e:7c:8f:be: 13:7e:51:b8:4b:56:7a:d5:8a:c6:89:00:04:11:aa: bc:76:9a:6c:2d:14:0f:1e:5a:c3:f9:48:e1:77:50: f6:95:46:b5:3d:5f:a6:92:8f:b5:d7:a1:be:4a:f0: ad:21:be:75:50:38:1c:1d:ae:5d:b4:03:e2:78:e3: 83:49:6e:6d:35:d8:c7:f6:fb:51:0c:3f:28:75:4f: 5a:b3:eb:bf:8e:07:c4:8f:d8:db:19:54:8c:cc:73: 23:23:a4:81:ee:2b:e0:2a:a5:3a:c9:a5:00:07:33: 0e:de:d6:da:b0:b9:95:6d:75:94:09:45:1f:6a:38: 59:4f:8c:ea:ff:08:a2:3c:76:5d:74:de:39:7b:ea: 35:40:71:6b:49:31:7a:e4:dc:ef:cf:77:9b:af:5f: 42:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B1:EB:68:73:E1:45:3F:1B:2C:A2:3F:3E:1C:75:43:B9:89:4D:20 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e40ee0b-9aa9-4919-a079-9712212e127c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.232.0/21 Signature Algorithm: sha256WithRSAEncryption 97:fb:96:a5:5a:07:68:80:8d:42:22:ac:19:16:96:d6:22:4b: 4a:ef:93:49:79:7e:a6:40:5b:4c:90:42:f4:81:7e:07:86:18: 6d:c0:80:06:bd:92:8f:52:63:e6:54:c8:7f:cb:e2:82:79:da: de:a0:02:36:ef:19:9f:73:4d:df:f8:ea:85:18:cf:e0:30:1f: 88:aa:66:1d:5c:3c:ac:be:49:d3:ba:a9:03:7b:98:1a:f1:4a: f4:48:97:ef:76:c2:2d:14:c4:c9:eb:a9:14:0c:82:56:94:b6: a9:f0:91:b9:e4:20:fc:aa:5d:86:37:b2:7b:5e:e5:d9:d7:af: c9:41:09:83:37:fd:99:e9:c2:0d:b8:a9:8b:54:fa:d3:10:24: 2c:ff:7a:4b:79:35:c6:d4:17:79:b4:e9:57:27:87:77:b8:61: 0b:75:84:25:15:6f:8c:a4:dd:cd:a7:bc:9b:ec:46:26:11:cc: 07:29:4b:6e:1b:65:fe:ce:59:2c:d3:6d:27:e9:36:73:af:ca: 53:ac:eb:b2:c4:a2:e5:bc:6f:9d:f5:5d:81:91:9e:7e:c3:aa: 1e:f4:ed:0f:2c:ef:28:a6:e6:27:7c:0a:b6:d5:f4:42:e4:57: a2:f1:76:91:a5:1d:3f:2c:d1:35:db:5c:89:0f:1e:e3:bd:ab: a1:68:83:62 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUGLU/acj9meTgQ1UCyGKCkRaQIHowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MTAyMzAwMDMxMFoX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAZmFlNzM1NzFiNDU2NWUxZTJkNmZi NDYzYzQ1NjA0N2JmOTJmMjA1OTAyYjk4NGIyYjNiOGQ0MDI1MzMxMDI2ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquZNSQBEll39Xlah4En5+bV+3hhm gksCxL4KS9FB5BrUJsq6xpHxQ8DYuIDX8b4wc3kEh8sAogA9q4m398QH4GIFfI+O GeAOIaFFeJq7N0qDOvqpLfO8+IOIa/EDvJG752NA3g58j74TflG4S1Z61YrGiQAE Eaq8dppsLRQPHlrD+Ujhd1D2lUa1PV+mko+116G+SvCtIb51UDgcHa5dtAPieOOD SW5tNdjH9vtRDD8odU9as+u/jgfEj9jbGVSMzHMjI6SB7ivgKqU6yaUABzMO3tba sLmVbXWUCUUfajhZT4zq/wiiPHZddN45e+o1QHFrSTF65Nzvz3ebr19CwwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNOx62hz4UU/GyyiPz4cdUO5iU0gMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlNDBlZTBiLTlhYTktNDkxOS1hMDc5LTk3MTIyMTJlMTI3Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDn/joMA0GCSqGSIb3DQEBCwUAA4IBAQCX+5alWgdogI1CIqwZFpbW IktK75NJeX6mQFtMkEL0gX4HhhhtwIAGvZKPUmPmVMh/y+KCedreoAI27xmfc03f +OqFGM/gMB+IqmYdXDysvknTuqkDe5ga8Ur0SJfvdsItFMTJ66kUDIJWlLap8JG5 5CD8ql2GN7J7XuXZ16/JQQmDN/2Z6cINuKmLVPrTECQs/3pLeTXG1Bd5tOlXJ4d3 uGELdYQlFW+MpN3Np7yb7EYmEcwHKUtuG2X+zlks020n6TZzr8pTrOuyxKLlvG+d 9V2BkZ5+w6oe9O0PLO8opuYnfAq21fRC5Fei8XaRpR0/LNE121yJDx7jvauhaINi -----END CERTIFICATE-----Generated at Thu Nov 5 07:49:23 2026 by rpki-client