$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa File: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (raw, json) Hash identifier: 3M5GPnkDVr0pjV/UiDgyA9bTvROP2Tab1ml8qK9SSWA= Subject key identifier: A8:F4:D0:07:2F:2D:BB:20:E8:B4:FC:86:D3:36:C8:BF:49:F1:69:EB Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 27175396EA5344887D73A6173193E4552FBF770C Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa Signing time: Sat 24 Oct 2026 00:03:08 +0000 ROA not before: Sat 24 Oct 2026 00:03:08 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 160.235.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:17:53:96:ea:53:44:88:7d:73:a6:17:31:93:e4:55:2f:bf:77:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Oct 24 00:03:08 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=6961b2b7496a9592d9d0177d85b814cb47e64908af1c7f77438a1ab7796ed98b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:65:91:c5:ae:55:e3:53:ea:17:ff:f6:28:fa: ef:ae:73:d9:5a:c0:8d:b3:a5:d7:b9:d3:e8:28:dc: 2f:63:6c:e1:a4:bc:c7:1b:fb:8f:ba:87:c4:38:b9: 03:8a:30:76:d2:17:1a:08:1d:2d:bf:a8:1a:7b:ac: a0:00:21:0f:74:8c:05:35:b3:2a:68:54:81:32:fc: d4:ea:3e:36:77:dc:e2:cc:71:94:14:a4:27:88:4e: ed:60:a5:d5:b0:0f:d1:47:c9:1c:77:c1:7e:25:77: a8:04:c1:f3:26:6d:50:6b:3f:06:e2:37:40:a1:85: 21:0c:08:72:28:60:ca:e6:56:f3:28:77:ea:25:c2: 17:54:90:fe:52:7d:3f:f3:6f:6c:21:a7:a5:dc:bc: 5c:40:66:ae:14:e9:0c:0e:f3:98:79:08:b6:2c:7f: a1:da:18:b6:d1:2f:b5:7a:82:26:c4:7f:4e:7b:61: bc:12:0a:9d:df:0e:2b:aa:ac:ca:a6:55:48:83:73: d3:79:c0:ae:19:49:4f:cb:fc:70:f0:6f:9e:32:4c: 13:a7:d7:57:80:f8:27:f6:3a:c1:c2:c2:8f:6d:a0: e5:e8:5e:72:26:68:b4:4e:7f:07:0f:a5:3b:1b:6e: e4:6b:86:22:3d:7b:25:63:d7:ab:42:7b:ee:82:6d: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F4:D0:07:2F:2D:BB:20:E8:B4:FC:86:D3:36:C8:BF:49:F1:69:EB X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.235.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:c6:a0:55:18:04:0f:4f:0c:88:db:88:dd:cd:bf:27:bc:6e: ff:27:6c:c6:86:91:27:98:e8:81:87:18:e5:01:f2:e5:85:e5: f6:d4:37:73:9f:e9:b6:6b:42:89:60:2e:d8:f7:fc:28:b1:14: b4:e6:f1:1b:3a:a8:78:71:89:7f:d2:eb:f7:f4:8d:b6:76:ea: a0:0f:9f:9a:0c:4a:68:53:c5:9f:6b:40:70:0d:41:19:3c:49: 79:96:ea:84:ef:e3:5e:2d:8d:a8:50:af:84:42:d4:d9:b7:67: d7:37:ac:a1:93:c9:3a:82:f3:98:1a:bc:b5:28:0e:1b:08:b7: 17:55:6c:ad:a7:6a:7a:e1:8d:97:35:b2:7a:d0:79:6c:32:0c: f2:04:6b:dc:01:ed:09:6e:e9:33:94:80:e4:4b:2e:c5:d2:23: ab:ec:76:cc:09:a2:bc:d3:35:ab:d2:aa:8f:72:c7:b6:60:f7: 79:2a:4e:d1:a6:7d:ae:92:b7:9a:8a:35:e5:38:7a:27:d0:0c: 74:44:5d:10:8a:53:31:33:7b:57:38:d5:bc:0f:4a:34:83:aa: ae:f7:94:b4:0e:c2:77:55:e0:2f:4a:12:70:59:4c:69:d4:79: f7:df:02:97:e7:2d:7e:5c:76:4e:13:eb:cb:a0:73:f6:85:08: 92:2f:48:73 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUJxdTlupTRIh9c6YXMZPkVS+/dwwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MTAyNDAwMDMwOFoX DTI3MDEyMjIzNTk1OVowejFJMEcGA1UEBRNANjk2MWIyYjc0OTZhOTU5MmQ5ZDAx NzdkODViODE0Y2I0N2U2NDkwOGFmMWM3Zjc3NDM4YTFhYjc3OTZlZDk4YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32WRxa5V41PqF//2KPrvrnPZWsCN s6XXudPoKNwvY2zhpLzHG/uPuofEOLkDijB20hcaCB0tv6gae6ygACEPdIwFNbMq aFSBMvzU6j42d9zizHGUFKQniE7tYKXVsA/RR8kcd8F+JXeoBMHzJm1Qaz8G4jdA oYUhDAhyKGDK5lbzKHfqJcIXVJD+Un0/829sIael3LxcQGauFOkMDvOYeQi2LH+h 2hi20S+1eoImxH9Oe2G8Egqd3w4rqqzKplVIg3PTecCuGUlPy/xw8G+eMkwTp9dX gPgn9jrBwsKPbaDl6F5yJmi0Tn8HD6U7G27ka4YiPXslY9erQnvugm1z3QIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFKj00AcvLbsg6LT8htM2yL9J8WnrMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNkMWZiMWM3LTYxNDAtNGM1Ny05MjhmLTFhNTk1ODZmOWUyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAoOswDQYJKoZIhvcNAQELBQADggEBADPGoFUYBA9PDIjbiN3Nvye8 bv8nbMaGkSeY6IGHGOUB8uWF5fbUN3Of6bZrQolgLtj3/CixFLTm8Rs6qHhxiX/S 6/f0jbZ26qAPn5oMSmhTxZ9rQHANQRk8SXmW6oTv414tjahQr4RC1Nm3Z9c3rKGT yTqC85gavLUoDhsItxdVbK2nanrhjZc1snrQeWwyDPIEa9wB7Qlu6TOUgORLLsXS I6vsdswJorzTNavSqo9yx7Zg93kqTtGmfa6St5qKNeU4eifQDHREXRCKUzEze1c4 1bwPSjSDqq73lLQOwndV4C9KEnBZTGnUefffApfnLX5cdk4T68ugc/aFCJIvSHM= -----END CERTIFICATE-----Generated at Thu Nov 5 17:15:28 2026 by rpki-client