$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa File: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (raw, json) Hash identifier: LIfhw9Wha8vnR9Jm+6F9NuPWFr6q9jWgQ0Fsm+plzso= Subject key identifier: E1:7D:F9:6E:45:83:69:F5:3C:9F:53:D4:74:C5:D3:C7:C7:CA:68:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 2A92AF7750F5DC27DD06A9B28CCF294DE6330188 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa Signing time: Tue 04 Aug 2026 00:00:49 +0000 ROA not before: Tue 04 Aug 2026 00:00:49 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:92:af:77:50:f5:dc:27:dd:06:a9:b2:8c:cf:29:4d:e6:33:01:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Aug 4 00:00:49 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=9c12f121d2c6169df2b9f086a11c7c42b9a519071b64f13a8a5c4f26cc8451ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a1:e2:e1:b5:a1:9d:12:f6:ab:d6:bb:fa:e7: 9f:cd:89:e5:96:e1:c9:2c:d6:2f:97:1c:bb:04:18: 40:f0:5b:9c:87:b3:ce:80:60:fb:6e:92:f6:cc:2b: 12:46:11:d5:ea:97:c5:37:b6:13:ef:73:0d:dc:a1: 50:7d:ab:2d:83:4d:f2:41:4f:8d:9e:85:b2:55:d8: 0e:36:a4:b9:dd:f6:77:44:22:fa:66:24:51:7b:e8: 51:09:97:e3:8e:6e:52:34:f1:b7:5b:9d:2f:6d:1d: 15:9d:8f:55:10:f4:86:c0:db:22:fa:58:a3:d0:f8: 3e:fe:de:70:25:6f:5c:8f:de:b7:7d:d0:f7:9c:d0: ae:2c:51:38:e9:d7:a5:31:6f:e5:ea:af:a6:cb:07: 9d:7a:02:56:db:ad:2c:37:d3:14:58:2e:e4:32:eb: 3f:08:b7:c5:22:6a:f1:a4:e6:d3:01:45:1b:18:f1: df:c4:e1:c6:64:e0:b9:41:fb:13:e7:be:e0:54:4b: 5b:1c:5e:c0:5e:4f:d8:df:a6:81:25:13:25:c4:4f: 76:a6:05:15:f7:02:25:e7:dc:34:28:23:79:d2:78: 0f:4f:01:62:ef:c9:fd:5c:d4:9a:e2:6a:4b:de:22: 01:5b:dc:dd:4e:d8:9f:1a:31:58:9d:6f:77:17:ad: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7D:F9:6E:45:83:69:F5:3C:9F:53:D4:74:C5:D3:C7:C7:CA:68:E0 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.200.0/21 Signature Algorithm: sha256WithRSAEncryption 59:91:16:a7:92:27:ae:a5:50:05:b0:4d:74:d1:4e:19:b2:14: f2:1f:62:e6:29:40:be:43:67:17:0b:da:d6:7b:8a:45:cf:b4: 5e:fd:f3:cc:e6:fd:ef:02:10:e0:c0:57:fd:41:ef:4a:ef:50: 75:73:eb:8f:70:af:19:f1:70:ae:f4:32:1d:43:8f:b0:2f:9e: 20:2b:d9:42:c1:59:69:dd:a5:10:44:c6:ad:78:a7:c3:01:3e: d7:08:0f:ba:5c:56:a0:a4:99:4c:82:a3:33:d7:3d:8c:4a:c1: 8e:34:d4:c5:8e:f0:d4:db:b4:64:cc:18:bc:3c:25:2c:9c:71: 43:bd:71:f6:2a:60:12:07:2e:54:b8:94:16:48:c7:f3:d0:c9: 8e:d9:b2:f9:a3:30:7d:ad:9c:27:78:aa:dd:5f:5a:87:e0:71: 20:d2:5b:b7:36:38:dd:4e:47:b9:f7:7c:f5:65:11:25:2c:d1: 59:81:18:f6:83:b8:91:d0:78:fc:42:7e:3a:ba:42:d4:74:62: aa:fb:99:22:68:3a:87:1c:74:53:43:be:c7:5c:a9:50:e5:3f: 50:72:f4:ec:0d:bb:bf:2a:0b:31:43:af:21:b2:69:10:3f:f2: 2e:14:38:de:a2:58:2d:68:4b:6d:44:76:a4:dd:cb:09:31:6f: a2:41:8b:87 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUKpKvd1D13CfdBqmyjM8pTeYzAYgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MDgwNDAwMDA0OVoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAOWMxMmYxMjFkMmM2MTY5ZGYyYjlm MDg2YTExYzdjNDJiOWE1MTkwNzFiNjRmMTNhOGE1YzRmMjZjYzg0NTFmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6Hi4bWhnRL2q9a7+uefzYnlluHJ LNYvlxy7BBhA8Fuch7POgGD7bpL2zCsSRhHV6pfFN7YT73MN3KFQfastg03yQU+N noWyVdgONqS53fZ3RCL6ZiRRe+hRCZfjjm5SNPG3W50vbR0VnY9VEPSGwNsi+lij 0Pg+/t5wJW9cj963fdD3nNCuLFE46delMW/l6q+mywedegJW260sN9MUWC7kMus/ CLfFImrxpObTAUUbGPHfxOHGZOC5QfsT577gVEtbHF7AXk/Y36aBJRMlxE92pgUV 9wIl59w0KCN50ngPTwFi78n9XNSa4mpL3iIBW9zdTtifGjFYnW93F63LJwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOF9+W5Fg2n1PJ9T1HTF08fHymjgMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRjYjNlOWY5LTQ2YTItNDFlYi1hNGI3LTc1YjUzZDc5MWYzMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDn/jIMA0GCSqGSIb3DQEBCwUAA4IBAQBZkRankieupVAFsE100U4Z shTyH2LmKUC+Q2cXC9rWe4pFz7Re/fPM5v3vAhDgwFf9Qe9K71B1c+uPcK8Z8XCu 9DIdQ4+wL54gK9lCwVlp3aUQRMateKfDAT7XCA+6XFagpJlMgqMz1z2MSsGONNTF jvDU27RkzBi8PCUsnHFDvXH2KmASBy5UuJQWSMfz0MmO2bL5ozB9rZwneKrdX1qH 4HEg0lu3NjjdTke593z1ZRElLNFZgRj2g7iR0Hj8Qn46ukLUdGKq+5kiaDqHHHRT Q77HXKlQ5T9QcvTsDbu/KgsxQ68hsmkQP/IuFDjeolgtaEttRHak3csJMW+iQYuH -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:23 2026 by rpki-client