$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/a3080b31-8684-4ce8-b4e6-33db63d13627.roa File: a3080b31-8684-4ce8-b4e6-33db63d13627.roa (raw, json) Hash identifier: 4hNkS5rVGTTAkcQqGbyT+05NIj458gTeJqyCYDvTn+c= Subject key identifier: 77:35:2F:0C:6A:1B:9C:4F:0A:6C:AE:E2:07:30:4A:8D:59:E8:44:02 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 5660ACACC5E290FC4462E4E18DCC9378E9559D53 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/a3080b31-8684-4ce8-b4e6-33db63d13627.roa Signing time: Fri 23 Oct 2026 00:03:02 +0000 ROA not before: Fri 23 Oct 2026 00:03:02 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8060::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:60:ac:ac:c5:e2:90:fc:44:62:e4:e1:8d:cc:93:78:e9:55:9d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:03:02 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=da74f3b43e36d898124ccdcea32b187279530d1fcd536749a8d67e31c6ae8b2a, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:70:d4:6c:d7:94:ad:3e:93:75:1e:2f:05:07: 52:ab:3c:6a:73:49:0e:8b:d9:57:ce:be:f9:40:ef: 5b:c6:a9:6a:aa:a3:d8:1c:d3:2f:9f:eb:85:45:1e: 5e:74:af:c6:96:ea:e6:90:65:00:db:54:f7:71:36: 5c:00:b6:6d:61:44:11:3f:e9:1c:a6:ff:9b:e8:9e: 02:98:48:17:32:2c:51:11:37:ef:82:b4:d9:db:69: 55:e8:54:dd:06:f9:d7:64:0c:d2:38:b2:e2:75:ec: 2d:4c:47:18:82:66:01:a1:84:bb:83:25:30:62:21: 5c:03:05:7a:76:6e:f2:1a:de:ff:29:e6:75:c8:4a: 31:0f:ea:65:85:6e:83:1a:fe:c4:a7:39:22:31:a2: ca:56:fc:bc:91:6d:37:e9:fc:d6:8e:28:20:14:27: bd:49:c5:68:5c:20:94:6a:e8:05:f7:64:3a:35:47: 0a:f1:16:79:75:8d:6a:bd:ed:c8:e0:a0:62:b3:d8: 7a:31:a1:b4:b1:db:c3:7f:5e:58:16:07:2c:32:f8: 6b:b8:43:28:86:e0:d0:3e:79:11:3b:c5:f6:bd:6a: 8c:dc:d8:cb:c5:e0:8e:3d:28:f4:e4:ff:e0:31:e0: 8e:3a:2b:f0:2a:2e:25:fe:84:d2:2f:ee:1b:4e:68: 9f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:35:2F:0C:6A:1B:9C:4F:0A:6C:AE:E2:07:30:4A:8D:59:E8:44:02 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/a3080b31-8684-4ce8-b4e6-33db63d13627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8060::/32 Signature Algorithm: sha256WithRSAEncryption 84:44:a4:1e:38:75:ba:07:41:a8:e8:2e:b5:d5:45:94:4b:85: 25:b4:8f:32:33:c0:11:34:26:e2:74:32:c8:39:a1:62:66:9b: 5b:da:80:75:7c:bf:3e:11:29:5d:9a:49:6d:24:8e:0e:94:ff: 68:12:3e:7c:c8:8f:c9:ee:5a:c0:4b:a1:79:71:01:11:18:03: 5f:9f:25:08:73:19:c2:61:31:ae:85:bd:e4:a1:58:ea:f9:69: 26:d7:db:da:6f:55:b6:f8:b0:fc:77:35:28:0c:0d:bb:0c:e3: aa:d5:c6:25:59:2f:67:32:c2:70:2a:77:f8:77:34:84:c6:c4: 2c:a8:81:8e:c9:7b:f5:28:c5:2e:79:00:cc:4f:ff:f3:2e:16: 24:bf:ad:dc:b0:6e:ec:e7:3e:81:8f:a8:ee:67:32:f0:20:87: d3:2f:24:99:91:f7:da:2a:bb:5a:c6:d0:4e:39:92:1d:2a:a6: 05:de:44:c5:16:03:f3:12:56:5c:74:e7:d9:8e:63:32:88:fb: 93:0d:c6:55:b3:51:ec:1c:b3:ba:f8:07:cd:5a:be:01:19:6a: 63:c4:5e:f0:a7:79:50:27:78:3a:65:cd:85:d3:e6:27:e0:3c: 94:a5:f9:69:2a:bc:68:20:a9:3a:ee:a3:d1:74:3e:e2:15:39: 76:70:2b:07 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUVmCsrMXikPxEYuThjcyTeOlVnVMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDMwMloX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAZGE3NGYzYjQzZTM2ZDg5ODEyNGNj ZGNlYTMyYjE4NzI3OTUzMGQxZmNkNTM2NzQ5YThkNjdlMzFjNmFlOGIyYTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3DUbNeUrT6TdR4vBQdSqzxqc0kO i9lXzr75QO9bxqlqqqPYHNMvn+uFRR5edK/GlurmkGUA21T3cTZcALZtYUQRP+kc pv+b6J4CmEgXMixRETfvgrTZ22lV6FTdBvnXZAzSOLLidewtTEcYgmYBoYS7gyUw YiFcAwV6dm7yGt7/KeZ1yEoxD+plhW6DGv7EpzkiMaLKVvy8kW036fzWjiggFCe9 ScVoXCCUaugF92Q6NUcK8RZ5dY1qve3I4KBis9h6MaG0sdvDf15YFgcsMvhruEMo huDQPnkRO8X2vWqM3NjLxeCOPSj05P/gMeCOOivwKi4l/oTSL+4bTmifUQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFHc1LwxqG5xPCmyu4gcwSo1Z6EQCMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2EzMDgwYjMxLTg2ODQtNGNlOC1iNGU2LTMzZGI2M2QxMzYyNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJA+AYDANBgkqhkiG9w0BAQsFAAOCAQEAhESkHjh1ugdBqOgutdVF lEuFJbSPMjPAETQm4nQyyDmhYmabW9qAdXy/PhEpXZpJbSSODpT/aBI+fMiPye5a wEuheXEBERgDX58lCHMZwmExroW95KFY6vlpJtfb2m9Vtviw/Hc1KAwNuwzjqtXG JVkvZzLCcCp3+Hc0hMbELKiBjsl79SjFLnkAzE//8y4WJL+t3LBu7Oc+gY+o7mcy 8CCH0y8kmZH32iq7WsbQTjmSHSqmBd5ExRYD8xJWXHTn2Y5jMoj7kw3GVbNR7Byz uvgHzVq+ARlqY8Re8Kd5UCd4OmXNhdPmJ+A8lKX5aSq8aCCpOu6j0XQ+4hU5dnAr Bw== -----END CERTIFICATE-----Generated at Thu Nov 5 05:04:07 2026 by rpki-client