$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cba22a5-dc61-4413-aed2-8fb4cc8e3a49.roa File: 7cba22a5-dc61-4413-aed2-8fb4cc8e3a49.roa (raw, json) Hash identifier: eseCLYFsGCPTnCarMbhTjhjz/W3Z71uFlXcHjOn3bJI= Subject key identifier: E2:B4:4C:CB:DC:9C:F0:17:05:90:D4:76:99:AD:F8:51:36:BC:FF:4F Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 01C4CE8DDF8777752B3E0C65951020F2D41544F3 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cba22a5-dc61-4413-aed2-8fb4cc8e3a49.roa Signing time: Fri 23 Oct 2026 00:02:53 +0000 ROA not before: Fri 23 Oct 2026 00:02:53 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c4:ce:8d:df:87:77:75:2b:3e:0c:65:95:10:20:f2:d4:15:44:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:02:53 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=05df8b883d8d569ff95b86c4f98ba5419c9508b914b851e8a17551d75cf2d8d6, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:b6:13:18:7d:7b:53:f2:b2:15:ee:5d:e4: aa:14:f1:c6:de:ba:08:45:d5:6f:e3:3d:96:8c:10: 6f:a8:d8:43:d9:1c:d4:ce:58:a3:93:0d:6d:1f:2e: 17:2e:b8:61:9a:c8:03:dc:57:c3:50:84:c2:90:7b: 8e:cd:45:13:d4:fd:9d:30:05:59:2a:14:52:0f:a8: 1c:bb:e8:d0:d1:bd:e4:ee:f0:4c:b2:55:d7:f8:0f: c4:0f:5a:32:37:13:b5:2b:e9:6a:ce:61:7d:99:98: 6f:24:7a:09:7a:c5:e9:65:fd:d8:38:49:3d:f7:e8: bc:76:db:88:15:07:29:c9:e7:f8:d0:5c:d1:b1:6a: e3:e8:48:31:c3:a1:40:e1:bf:37:a7:4a:3b:48:d7: 1d:fa:cb:f3:34:cd:8b:aa:74:95:e9:25:1b:25:5c: 17:a8:ce:68:98:b0:2b:fd:13:24:5a:c6:4e:4c:a2: 5f:e9:ba:00:5c:db:49:90:61:e8:37:c0:58:7d:48: bc:29:b3:a4:d2:a8:37:46:c3:df:4e:2e:c8:fe:95: 46:ea:ec:bf:59:a4:29:8a:06:2d:94:19:8c:c8:79: f5:e9:fd:5c:a3:1f:87:f6:c2:38:6e:79:e5:68:59: e9:34:a7:09:b3:13:53:97:4a:19:df:2e:2b:bd:cf: 88:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B4:4C:CB:DC:9C:F0:17:05:90:D4:76:99:AD:F8:51:36:BC:FF:4F X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cba22a5-dc61-4413-aed2-8fb4cc8e3a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:8000::/40 Signature Algorithm: sha256WithRSAEncryption 7e:5f:d8:27:45:65:ca:70:cf:db:70:9b:13:54:e4:c6:f2:ed: ff:6e:ae:2a:3e:23:87:51:40:81:3f:12:99:a7:71:fc:2c:7e: 81:3b:01:bd:f7:35:96:82:79:d6:f0:80:7c:ad:b7:0a:de:fc: 75:3b:b6:1b:f1:87:2a:97:da:4d:52:e5:6a:96:9a:9f:cc:0a: f0:ed:8c:5e:94:b0:55:69:f9:8d:d1:c0:d8:43:a7:6a:04:5d: fc:f6:59:f9:a6:1e:f5:eb:9e:4d:38:95:23:30:81:bc:75:ce: 7b:f2:7e:49:9d:70:a0:68:fd:4b:2d:4e:70:0d:b8:10:5b:97: d6:d5:10:2e:b4:1e:c8:df:1c:9c:52:d8:31:7e:2e:e4:55:1c: 8e:26:5f:7f:66:a5:dc:bb:cd:25:0a:7a:27:5a:39:af:66:98: 47:10:8b:92:9e:29:6f:62:b4:d0:33:93:04:9c:18:b3:65:44: eb:eb:54:de:c2:de:30:9b:8d:76:26:9e:57:1f:3a:84:73:19: 18:71:60:78:31:79:17:b0:9e:c9:ae:8c:8b:4c:43:c5:a4:4c: 80:98:e2:ae:5e:ae:69:00:e4:b2:e6:ee:92:b8:71:ea:da:f1: 98:38:3a:22:97:17:69:04:a9:37:45:b0:9e:4d:43:be:35:64: f7:ae:04:76 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAcTOjd+Hd3UrPgxllRAg8tQVRPMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDI1M1oX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAMDVkZjhiODgzZDhkNTY5ZmY5NWI4 NmM0Zjk4YmE1NDE5Yzk1MDhiOTE0Yjg1MWU4YTE3NTUxZDc1Y2YyZDhkNjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycC2Exh9e1PyshXuXeSqFPHG3roI RdVv4z2WjBBvqNhD2RzUzlijkw1tHy4XLrhhmsgD3FfDUITCkHuOzUUT1P2dMAVZ KhRSD6gcu+jQ0b3k7vBMslXX+A/ED1oyNxO1K+lqzmF9mZhvJHoJesXpZf3YOEk9 9+i8dtuIFQcpyef40FzRsWrj6Egxw6FA4b83p0o7SNcd+svzNM2LqnSV6SUbJVwX qM5omLAr/RMkWsZOTKJf6boAXNtJkGHoN8BYfUi8KbOk0qg3RsPfTi7I/pVG6uy/ WaQpigYtlBmMyHn16f1cox+H9sI4bnnlaFnpNKcJsxNTl0oZ3y4rvc+I4wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOK0TMvcnPAXBZDUdpmt+FE2vP9PMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzdjYmEyMmE1LWRjNjEtNDQxMy1hZWQyLThmYjRjYzhlM2E0OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A/4AwDQYJKoZIhvcNAQELBQADggEBAH5f2CdFZcpwz9twmxNU 5Mby7f9urio+I4dRQIE/EpmncfwsfoE7Ab33NZaCedbwgHyttwre/HU7thvxhyqX 2k1S5WqWmp/MCvDtjF6UsFVp+Y3RwNhDp2oEXfz2WfmmHvXrnk04lSMwgbx1znvy fkmdcKBo/UstTnANuBBbl9bVEC60HsjfHJxS2DF+LuRVHI4mX39mpdy7zSUKeida Oa9mmEcQi5KeKW9itNAzkwScGLNlROvrVN7C3jCbjXYmnlcfOoRzGRhxYHgxeRew nsmujItMQ8WkTICY4q5ermkA5LLm7pK4cera8Zg4OiKXF2kEqTdFsJ5NQ741ZPeu BHY= -----END CERTIFICATE-----Generated at Thu Nov 5 08:58:09 2026 by rpki-client