$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2247f34f-e5b1-423c-ac0f-7142ad86bd9b.roa File: 2247f34f-e5b1-423c-ac0f-7142ad86bd9b.roa (raw, json) Hash identifier: wfB6aVpLSrxG5vD9Q74jwvcRsC/6etMOI7NC0KKgABU= Subject key identifier: F5:4C:D8:42:7C:74:07:96:18:6A:3F:82:8F:19:D5:9B:54:30:80:3B Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 13EBCD7F12441AC594712C1BDB33675795AA7AA6 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2247f34f-e5b1-423c-ac0f-7142ad86bd9b.roa Signing time: Thu 22 Oct 2026 00:10:08 +0000 ROA not before: Thu 22 Oct 2026 00:10:08 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80f9:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:eb:cd:7f:12:44:1a:c5:94:71:2c:1b:db:33:67:57:95:aa:7a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 22 00:10:08 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=e44818cd7205fc13a60003db648e943da7fd47ca618aba934aaef287c1f880e2, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:c2:23:15:9e:ac:0c:6a:cd:a5:a0:51:30: d5:71:47:4a:38:41:13:d3:93:e4:26:76:06:63:1b: 7c:02:de:e7:20:56:7e:45:1c:97:da:ef:43:c7:28: 08:82:88:91:cf:ce:d4:dc:eb:fb:46:e2:c6:0d:9c: 2d:1b:8f:35:ba:85:71:68:74:f3:bf:bb:44:d7:aa: 67:35:e9:81:86:a8:3a:50:43:1c:fe:3a:ad:90:9a: 5c:09:dc:9f:ff:2b:59:a6:c8:fc:0a:c3:df:18:0c: c0:65:b0:45:5b:b1:ac:43:16:dd:c6:e0:3e:90:fb: 47:61:5c:77:77:18:85:ce:e0:9a:91:6e:08:68:3d: 50:9b:1f:dc:8d:55:be:d6:1b:ca:3f:4a:86:77:4e: 92:37:11:ac:10:74:f3:36:d1:d4:b3:aa:03:95:5b: c1:21:21:56:55:5c:da:34:35:e0:bb:76:04:0b:b1: a1:f1:1b:87:c2:32:36:f3:e0:05:6d:73:73:8e:a7: ae:6e:b4:22:32:01:48:f2:5c:34:6d:54:89:6e:1e: 07:0d:e0:36:b8:70:d9:90:ad:5d:18:c7:cd:28:59: ef:f2:e4:05:8d:09:a1:27:19:e1:05:0e:0b:50:60: 50:e6:fa:49:e7:2f:41:3b:1d:eb:83:cd:5d:12:7d: 2b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4C:D8:42:7C:74:07:96:18:6A:3F:82:8F:19:D5:9B:54:30:80:3B X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2247f34f-e5b1-423c-ac0f-7142ad86bd9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80f9:8000::/40 Signature Algorithm: sha256WithRSAEncryption 23:a5:2a:1c:20:b1:ed:e0:f1:51:74:3d:19:99:36:b4:58:7b: 50:3b:ae:d8:ab:37:01:1b:44:cd:12:96:b8:da:e4:73:b0:21: 18:5d:a5:63:fe:3a:a4:7c:05:69:c4:fd:ef:a5:de:c9:2e:c2: ed:49:82:92:72:e6:91:d0:15:d2:fe:17:f2:73:7d:3e:7e:e5: 07:6a:c9:ca:ec:c2:c1:94:51:2b:a2:20:1b:bb:d6:6f:0e:49: 09:59:0c:c9:46:08:c2:15:f8:cf:c8:af:2e:ff:ca:ec:9e:0c: 58:33:67:80:29:ff:e6:2b:b8:28:45:43:d0:6c:d5:cb:f4:25: 01:92:48:c1:be:df:9d:b4:93:d0:a3:cd:f0:6d:d7:55:fd:37: 0c:03:76:b1:1e:9d:bd:92:98:0a:4f:85:2e:3f:2a:9c:7b:fe: 92:e3:cc:8b:b2:83:2e:a0:d0:11:9f:0d:db:b2:e7:d0:86:5e: fd:09:e2:45:10:33:6a:65:06:f6:3a:bf:38:2c:8d:f5:f1:f4: 0c:09:6a:69:25:17:a2:45:68:f4:2c:3a:d6:65:dc:b3:b6:5f: da:50:12:be:2f:8e:b8:b2:65:eb:50:41:da:f0:33:9b:f2:35: 85:60:24:ee:b4:1c:4d:0e:8e:d8:63:80:a3:41:97:c5:b5:8d: df:ce:9e:e2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUE+vNfxJEGsWUcSwb2zNnV5WqeqYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMjAwMTAwOFoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAZTQ0ODE4Y2Q3MjA1ZmMxM2E2MDAw M2RiNjQ4ZTk0M2RhN2ZkNDdjYTYxOGFiYTkzNGFhZWYyODdjMWY4ODBlMjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufXCIxWerAxqzaWgUTDVcUdKOEET 05PkJnYGYxt8At7nIFZ+RRyX2u9DxygIgoiRz87U3Ov7RuLGDZwtG481uoVxaHTz v7tE16pnNemBhqg6UEMc/jqtkJpcCdyf/ytZpsj8CsPfGAzAZbBFW7GsQxbdxuA+ kPtHYVx3dxiFzuCakW4IaD1Qmx/cjVW+1hvKP0qGd06SNxGsEHTzNtHUs6oDlVvB ISFWVVzaNDXgu3YEC7Gh8RuHwjI28+AFbXNzjqeubrQiMgFI8lw0bVSJbh4HDeA2 uHDZkK1dGMfNKFnv8uQFjQmhJxnhBQ4LUGBQ5vpJ5y9BOx3rg81dEn0riwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPVM2EJ8dAeWGGo/go8Z1ZtUMIA7MB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzIyNDdmMzRmLWU1YjEtNDIzYy1hYzBmLTcxNDJhZDg2YmQ5Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A+YAwDQYJKoZIhvcNAQELBQADggEBACOlKhwgse3g8VF0PRmZ NrRYe1A7rtirNwEbRM0Slrja5HOwIRhdpWP+OqR8BWnE/e+l3skuwu1JgpJy5pHQ FdL+F/JzfT5+5QdqycrswsGUUSuiIBu71m8OSQlZDMlGCMIV+M/Iry7/yuyeDFgz Z4Ap/+YruChFQ9Bs1cv0JQGSSMG+3520k9CjzfBt11X9NwwDdrEenb2SmApPhS4/ Kpx7/pLjzIuygy6g0BGfDduy59CGXv0J4kUQM2plBvY6vzgsjfXx9AwJamklF6JF aPQsOtZl3LO2X9pQEr4vjriyZetQQdrwM5vyNYVgJO60HE0OjthjgKNBl8W1jd/O nuI= -----END CERTIFICATE-----Generated at Thu Nov 5 03:37:39 2026 by rpki-client