$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/62639af2-026a-4677-b13e-0aeb266620d5.roa File: 62639af2-026a-4677-b13e-0aeb266620d5.roa (raw, json) Hash identifier: dk95krLXNCUQlY2nlRCJdkWLWtYSNv0VgXs1dGZD8UQ= Subject key identifier: D8:CA:B2:78:0D:48:99:DD:15:44:3B:01:14:D3:48:BB:87:AA:22:1C Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 21B7F75474797BD51440787A6AB261893781B908 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/62639af2-026a-4677-b13e-0aeb266620d5.roa Signing time: Fri 23 Oct 2026 00:02:52 +0000 ROA not before: Fri 23 Oct 2026 00:02:52 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b7:f7:54:74:79:7b:d5:14:40:78:7a:6a:b2:61:89:37:81:b9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:02:52 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=197f1a46565617f55dc42413c107ffa46aa969e1d4b9c97f3574d64110fb4d12, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:03:2f:5f:b7:0a:c8:2e:8a:56:59:3e:9a:26: 8f:c6:b6:39:9b:4f:8f:41:c1:df:83:a7:42:54:29: c9:f0:fb:b7:3b:bd:b5:c5:f9:d5:14:ed:95:b7:2e: e1:aa:c4:d3:be:f5:99:26:7f:80:d1:b6:64:49:ff: 10:7f:a0:fa:6c:14:cb:d5:4e:58:25:c9:bf:df:bf: 8c:e3:82:8c:2d:6a:b8:bc:8a:90:f5:a1:24:21:6f: 42:f7:52:1f:e8:1f:5f:8e:4c:ca:cc:c0:c7:97:40: 70:bb:7b:bf:b0:bd:37:07:b3:20:db:68:9a:1a:44: c0:c7:d3:e9:b1:3c:d6:b8:d8:17:3a:f5:e3:84:01: e5:62:e8:3a:6a:6a:c1:83:1b:1a:f5:96:30:cc:32: cd:bc:1a:16:94:d7:2f:a1:9c:7a:73:32:42:ef:18: c5:73:50:af:cd:93:f7:85:f2:ac:85:ae:c5:03:f4: 65:49:fa:14:b9:52:6d:63:c8:51:7e:35:ef:32:a9: 46:32:62:87:a8:67:9d:46:99:44:a5:b5:63:b6:86: d5:68:f9:f0:6e:89:ae:de:38:bb:f2:4e:ae:45:7f: fc:bc:dc:93:d0:68:18:69:e8:ce:a0:77:f2:42:70: 9f:c6:5a:a5:c5:fc:18:6d:d9:a4:08:2d:27:a1:44: d2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CA:B2:78:0D:48:99:DD:15:44:3B:01:14:D3:48:BB:87:AA:22:1C X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/62639af2-026a-4677-b13e-0aeb266620d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:8040::/48 Signature Algorithm: sha256WithRSAEncryption 90:60:ec:92:aa:f0:aa:17:ae:9e:6f:7e:1d:25:a2:b9:8f:7d: 4e:40:50:19:77:87:b2:1a:4c:79:8f:84:27:8b:1c:65:61:92: 94:73:b5:3b:58:29:dd:80:43:17:7d:2b:a7:8a:07:7c:ff:1a: a4:63:38:2f:98:11:25:64:67:f0:95:9d:5e:c7:23:ea:2f:24: c3:17:8b:6b:24:71:3c:dc:c1:5a:ed:41:75:c6:59:3b:0d:ee: 57:3e:12:7e:5a:55:a5:ad:a3:83:51:a3:b7:39:d3:98:c7:fb: 8e:5d:63:84:81:61:5f:fb:a7:09:18:c6:36:b1:a1:d5:51:0e: ee:78:56:b1:90:d3:70:c7:c2:7f:87:ac:9a:4e:3e:42:5e:35: bf:47:de:57:ab:88:4f:62:0f:22:12:52:92:d7:f6:4a:6f:95: 60:74:8e:46:23:2a:b7:30:d0:ac:cc:25:bd:d7:e7:06:2a:a9: af:ed:d7:f0:76:86:c0:82:6e:17:4f:b3:17:63:16:e0:80:b6: f3:78:6a:74:76:43:5b:ae:9d:b1:20:08:e7:5a:85:b4:3a:5b: dc:16:b9:02:b2:67:ed:15:10:40:0e:47:8d:19:6c:1a:b3:d9: 43:e4:f3:de:d8:ac:f2:93:44:67:56:2a:f8:4b:ee:02:6e:5b: 94:64:27:78 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIbf3VHR5e9UUQHh6arJhiTeBuQgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDI1MloX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAMTk3ZjFhNDY1NjU2MTdmNTVkYzQy NDEzYzEwN2ZmYTQ2YWE5NjllMWQ0YjljOTdmMzU3NGQ2NDExMGZiNGQxMjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wMvX7cKyC6KVlk+miaPxrY5m0+P QcHfg6dCVCnJ8Pu3O721xfnVFO2Vty7hqsTTvvWZJn+A0bZkSf8Qf6D6bBTL1U5Y Jcm/37+M44KMLWq4vIqQ9aEkIW9C91If6B9fjkzKzMDHl0Bwu3u/sL03B7Mg22ia GkTAx9PpsTzWuNgXOvXjhAHlYug6amrBgxsa9ZYwzDLNvBoWlNcvoZx6czJC7xjF c1CvzZP3hfKsha7FA/RlSfoUuVJtY8hRfjXvMqlGMmKHqGedRplEpbVjtobVaPnw bomu3ji78k6uRX/8vNyT0GgYaejOoHfyQnCfxlqlxfwYbdmkCC0noUTSwwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNjKsngNSJndFUQ7ARTTSLuHqiIcMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzYyNjM5YWYyLTAyNmEtNDY3Ny1iMTNlLTBhZWIyNjY2MjBkNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJA+A/4BAMA0GCSqGSIb3DQEBCwUAA4IBAQCQYOySqvCqF66eb34d JaK5j31OQFAZd4eyGkx5j4QnixxlYZKUc7U7WCndgEMXfSunigd8/xqkYzgvmBEl ZGfwlZ1exyPqLyTDF4trJHE83MFa7UF1xlk7De5XPhJ+WlWlraODUaO3OdOYx/uO XWOEgWFf+6cJGMY2saHVUQ7ueFaxkNNwx8J/h6yaTj5CXjW/R95Xq4hPYg8iElKS 1/ZKb5VgdI5GIyq3MNCszCW91+cGKqmv7dfwdobAgm4XT7MXYxbggLbzeGp0dkNb rp2xIAjnWoW0OlvcFrkCsmftFRBADkeNGWwas9lD5PPe2Kzyk0RnVir4S+4CbluU ZCd4 -----END CERTIFICATE-----Generated at Thu Nov 5 04:22:57 2026 by rpki-client