$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa File: 3537691c-1a10-4699-a8a0-4cec50a35534.roa (raw, json) Hash identifier: 3DqsKF2wIzAQbOWQ0MscBUhndo00g5vs7E9yfhyZW+s= Subject key identifier: C3:98:C9:51:45:B2:1D:2A:E6:76:27:26:57:5A:B2:61:1C:D0:06:FC Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 1F4F6ED62B0ABBE29CE2D075CA17898A9398C293 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa Signing time: Thu 22 Oct 2026 00:10:08 +0000 ROA not before: Thu 22 Oct 2026 00:10:08 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fa:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4f:6e:d6:2b:0a:bb:e2:9c:e2:d0:75:ca:17:89:8a:93:98:c2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 22 00:10:08 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=1ccdef1d25c3d7619e1c6c922bb58ca6d7220774a086549aad52d7a735b4e882, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:1b:65:b0:96:fc:2e:61:7c:11:56:1c:67: 97:b8:c6:be:a1:8a:d8:87:d4:4d:7f:14:0b:7d:67: 21:9c:08:60:2e:bb:2c:55:2e:3d:25:85:54:4a:2c: 28:8d:b4:14:99:09:59:34:d0:a4:43:ed:a6:f7:98: da:5b:3e:77:8a:3c:0a:b8:89:d0:96:95:ea:4a:9c: 7d:30:e6:d7:07:05:4a:11:02:78:63:1e:89:cd:45: 6a:67:21:6c:4a:39:e7:2a:6a:4a:80:03:22:f8:7b: 13:95:d3:72:48:c3:18:79:6c:01:94:80:96:b5:35: 92:33:41:77:0b:87:f4:7a:1e:f2:33:a5:a0:08:23: 76:10:68:fa:7c:2e:5c:2a:b4:cc:d5:7c:a7:b7:e7: 6e:de:be:17:73:ce:f8:21:69:27:b4:50:b3:26:97: f4:83:88:7e:b4:d6:34:f3:6c:6b:e3:91:2b:3a:c9: d4:fb:d1:3d:9e:68:f3:d9:9c:bb:c8:0c:54:bb:41: f4:28:f4:66:e4:2a:2a:9d:08:8c:e9:97:14:48:c6: 1f:0b:a6:85:83:38:ce:c7:9a:6b:ca:26:12:26:bd: 2d:f8:08:44:40:ce:94:a3:f6:ca:79:0e:91:cd:63: 78:79:c3:f8:a3:4c:5d:e8:cf:3b:e4:4e:fe:fb:98: 4d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:98:C9:51:45:B2:1D:2A:E6:76:27:26:57:5A:B2:61:1C:D0:06:FC X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fa:8000::/40 Signature Algorithm: sha256WithRSAEncryption 26:63:2d:f6:fa:52:0a:be:76:a5:d9:2a:b8:0a:19:16:f3:8d: 8b:d1:a0:20:1b:d3:ea:26:c5:ae:5f:06:1e:29:17:00:38:a1: d3:4c:99:85:53:b9:1b:58:4b:e9:2b:ed:64:98:57:2b:74:99: 3c:c8:12:68:08:13:bd:ec:c6:e4:d6:18:08:a6:8f:78:cb:e2: 08:ab:e2:f7:4f:0d:e6:e3:f2:e4:b4:93:3c:89:ba:23:e9:97: c6:f7:a5:39:41:c6:08:b1:42:6d:ac:66:7f:7a:45:ae:d4:43: 82:8b:a2:4e:c6:14:db:65:71:67:30:d7:4a:d7:63:4e:ef:ff: 53:5d:a1:c0:e8:dd:b6:86:23:43:59:31:1e:c8:66:a4:00:a8: ac:6d:d1:be:0e:29:73:d1:83:6b:7c:45:57:ea:02:09:06:1b: 7e:92:71:a1:ee:5b:71:84:c0:86:fd:2b:95:b9:47:81:20:ef: 00:66:68:52:6c:ad:5b:dc:80:38:8b:7c:c7:ed:c8:f1:ae:e8: ed:76:b9:7b:51:67:4d:11:41:7d:68:cf:28:d3:94:75:32:f0: 8e:00:ce:04:8a:e7:4b:01:2a:28:c5:a0:69:0a:d7:5c:bc:b2: c8:77:97:38:37:a2:ad:53:b9:23:ec:7b:45:f0:f1:32:b6:57: d4:67:be:82 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUH09u1isKu+Kc4tB1yheJipOYwpMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMjAwMTAwOFoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAMWNjZGVmMWQyNWMzZDc2MTllMWM2 YzkyMmJiNThjYTZkNzIyMDc3NGEwODY1NDlhYWQ1MmQ3YTczNWI0ZTg4MjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjMbZbCW/C5hfBFWHGeXuMa+oYrY h9RNfxQLfWchnAhgLrssVS49JYVUSiwojbQUmQlZNNCkQ+2m95jaWz53ijwKuInQ lpXqSpx9MObXBwVKEQJ4Yx6JzUVqZyFsSjnnKmpKgAMi+HsTldNySMMYeWwBlICW tTWSM0F3C4f0eh7yM6WgCCN2EGj6fC5cKrTM1Xynt+du3r4Xc874IWkntFCzJpf0 g4h+tNY082xr45ErOsnU+9E9nmjz2Zy7yAxUu0H0KPRm5CoqnQiM6ZcUSMYfC6aF gzjOx5pryiYSJr0t+AhEQM6Uo/bKeQ6RzWN4ecP4o0xd6M875E7++5hNSQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMOYyVFFsh0q5nYnJldasmEc0Ab8MB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzM1Mzc2OTFjLTFhMTAtNDY5OS1hOGEwLTRjZWM1MGEzNTUzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A+oAwDQYJKoZIhvcNAQELBQADggEBACZjLfb6Ugq+dqXZKrgK GRbzjYvRoCAb0+omxa5fBh4pFwA4odNMmYVTuRtYS+kr7WSYVyt0mTzIEmgIE73s xuTWGAimj3jL4gir4vdPDebj8uS0kzyJuiPpl8b3pTlBxgixQm2sZn96Ra7UQ4KL ok7GFNtlcWcw10rXY07v/1NdocDo3baGI0NZMR7IZqQAqKxt0b4OKXPRg2t8RVfq AgkGG36ScaHuW3GEwIb9K5W5R4Eg7wBmaFJsrVvcgDiLfMftyPGu6O12uXtRZ00R QX1ozyjTlHUy8I4AzgSK50sBKijFoGkK11y8ssh3lzg3oq1TuSPse0Xw8TK2V9Rn voI= -----END CERTIFICATE-----Generated at Thu Nov 5 12:12:19 2026 by rpki-client