$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/788c3900-e4d5-439b-b231-3a69b5354901.roa File: 788c3900-e4d5-439b-b231-3a69b5354901.roa (raw, json) Hash identifier: 3asdZAYE5TxLTnKo+sY+zeCJF0t46Uv8eGzRY9yTjyU= Subject key identifier: A5:BC:7E:1C:D4:A9:AE:76:90:FC:6F:C3:F3:32:EA:E9:81:05:0A:A7 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 21F250BF87E073AB660E6D3A66A5543AC041FCA2 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/788c3900-e4d5-439b-b231-3a69b5354901.roa Signing time: Fri 23 Oct 2026 00:02:51 +0000 ROA not before: Fri 23 Oct 2026 00:02:51 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8014::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f2:50:bf:87:e0:73:ab:66:0e:6d:3a:66:a5:54:3a:c0:41:fc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:02:51 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=fc176a1bae005a8d0f0803d1c6f523b58a7fafa30f9c75a572830d52888eb0e1, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:22:88:59:86:ce:ce:0b:fc:4d:71:a8:79: df:72:26:94:e5:d9:b9:7c:96:be:a9:44:d2:b3:54: 06:ec:fc:9c:40:18:64:3d:f6:47:80:a2:b3:76:66: 45:ef:10:ce:0f:20:ad:f2:89:09:2c:18:17:11:af: d8:ee:fb:df:64:af:d9:06:75:47:da:00:bb:c7:82: bb:2b:7c:88:38:89:09:83:db:87:83:ca:6d:c3:4f: 3b:f7:4f:3a:54:56:83:68:87:b8:11:32:75:e9:5b: 7e:34:7e:11:11:5d:63:9b:1c:19:b6:a6:15:8e:3d: 55:e2:73:5b:db:ab:db:a2:6e:6f:87:98:8f:76:5d: b5:a7:57:5f:57:dc:dc:e8:5e:ef:35:9f:24:43:e0: 97:44:3e:32:ee:b5:fc:ed:f9:ad:b4:f6:fe:29:e2: 91:58:d5:22:b5:c5:dd:63:7d:0b:7e:68:5a:f8:3d: 68:bb:71:ba:07:89:e2:1e:40:53:e1:5e:6f:45:73: d4:f0:eb:85:bb:7e:9f:7f:34:de:f5:37:5a:92:01: b5:e0:26:b5:27:5c:fa:0a:b4:49:7d:93:83:19:4c: ea:51:e3:1f:2c:16:42:bc:90:3e:50:4f:8e:57:b0: d1:05:4e:49:0e:9b:1f:2a:aa:57:22:87:b7:d2:20: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BC:7E:1C:D4:A9:AE:76:90:FC:6F:C3:F3:32:EA:E9:81:05:0A:A7 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/788c3900-e4d5-439b-b231-3a69b5354901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8014::/38 Signature Algorithm: sha256WithRSAEncryption 9b:f5:2d:9f:96:15:27:b2:84:0f:87:28:7a:e4:4b:15:ef:c3: 11:a9:cb:c5:2f:79:a0:94:30:3c:2c:d1:75:25:7b:48:b7:3b: 25:b2:dc:1f:9a:43:e4:17:a0:e7:36:2b:8d:ef:84:08:6c:2b: 7d:f5:1c:c2:ad:af:bd:74:36:ef:de:2b:e9:89:6d:22:01:67: ef:36:63:da:fc:5c:3a:9a:2c:76:26:e2:77:9c:92:75:c8:1c: 15:fa:de:a8:06:f2:f2:98:a2:fe:78:29:de:01:b7:16:6f:b2: 7b:70:ec:56:3e:1c:d1:af:6e:7c:f9:0f:1c:8b:02:8f:2f:04: e4:5e:3f:4c:be:9c:5e:c5:bc:0d:e8:6c:f9:10:3f:5d:81:56: aa:7d:95:f9:76:de:95:50:a3:41:61:f7:4b:b3:8d:b3:c7:5c: ff:a2:94:67:35:11:e4:38:1e:3f:b1:7a:b9:b3:eb:3f:13:44: 0f:32:ef:c6:0c:94:c9:87:05:38:2f:4e:fb:44:5c:7c:fa:67: cf:77:c9:fd:45:73:ba:34:ea:02:b3:dd:63:eb:7e:45:09:83: 80:47:cb:88:1b:80:cf:2b:24:df:dc:01:8f:b0:5b:37:41:2b: fa:2a:a5:7e:32:4e:ac:0d:50:e5:54:08:61:cf:97:77:50:20: be:24:c7:30 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIfJQv4fgc6tmDm06ZqVUOsBB/KIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDI1MVoX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAZmMxNzZhMWJhZTAwNWE4ZDBmMDgw M2QxYzZmNTIzYjU4YTdmYWZhMzBmOWM3NWE1NzI4MzBkNTI4ODhlYjBlMTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIYiiFmGzs4L/E1xqHnfciaU5dm5 fJa+qUTSs1QG7PycQBhkPfZHgKKzdmZF7xDODyCt8okJLBgXEa/Y7vvfZK/ZBnVH 2gC7x4K7K3yIOIkJg9uHg8ptw0879086VFaDaIe4ETJ16Vt+NH4REV1jmxwZtqYV jj1V4nNb26vbom5vh5iPdl21p1dfV9zc6F7vNZ8kQ+CXRD4y7rX87fmttPb+KeKR WNUitcXdY30Lfmha+D1ou3G6B4niHkBT4V5vRXPU8OuFu36ffzTe9TdakgG14Ca1 J1z6CrRJfZODGUzqUeMfLBZCvJA+UE+OV7DRBU5JDpsfKqpXIoe30iAK6QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKW8fhzUqa52kPxvw/My6umBBQqnMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 Lzc4OGMzOTAwLWU0ZDUtNDM5Yi1iMjMxLTNhNjliNTM1NDkwMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AFAAwDQYJKoZIhvcNAQELBQADggEBAJv1LZ+WFSeyhA+HKHrk SxXvwxGpy8UveaCUMDws0XUle0i3OyWy3B+aQ+QXoOc2K43vhAhsK331HMKtr710 Nu/eK+mJbSIBZ+82Y9r8XDqaLHYm4necknXIHBX63qgG8vKYov54Kd4BtxZvsntw 7FY+HNGvbnz5DxyLAo8vBOReP0y+nF7FvA3obPkQP12BVqp9lfl23pVQo0Fh90uz jbPHXP+ilGc1EeQ4Hj+xermz6z8TRA8y78YMlMmHBTgvTvtEXHz6Z893yf1Fc7o0 6gKz3WPrfkUJg4BHy4gbgM8rJN/cAY+wWzdBK/oqpX4yTqwNUOVUCGHPl3dQIL4k xzA= -----END CERTIFICATE-----Generated at Thu Nov 5 07:20:34 2026 by rpki-client