$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/1dffeac8-b779-49ef-ba27-58bc19891e60.roa File: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (raw, json) Hash identifier: pG6f7ffIwTFwlDGXIOjWeq2pvtqQcYHjDsQBql/4Ln8= Subject key identifier: A0:C5:8E:56:BA:EF:DA:E4:03:A9:D5:4D:99:15:12:17:0D:AA:16:A4 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 5F291C39C519D59834ECD2462CE7D462DA5871AF Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/1dffeac8-b779-49ef-ba27-58bc19891e60.roa Signing time: Mon 03 Aug 2026 00:00:08 +0000 ROA not before: Mon 03 Aug 2026 00:00:08 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:29:1c:39:c5:19:d5:98:34:ec:d2:46:2c:e7:d4:62:da:58:71:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:08 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=8fc7eb8cb50979ac9cf0fd9df26489917fd273c0499d99a73e7838cdb4c09035, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1e:ae:db:5f:02:5b:f4:f8:a1:77:9c:74:d9: 60:67:d6:48:e1:8f:77:f7:63:84:65:ad:c9:e6:94: a0:1a:1d:9b:ed:a4:e9:e7:98:e7:b2:e1:d0:01:84: a0:d4:5a:ed:16:a8:14:b6:99:c7:bc:06:84:51:2a: 92:2b:0d:97:16:41:4c:5c:94:bf:a3:55:0d:92:59: b1:d0:d8:c5:50:66:c3:7e:2e:12:76:ea:22:66:04: aa:70:f6:2f:81:01:70:c7:a8:27:e0:ee:df:63:87: 0e:e9:81:7c:66:53:bc:62:26:06:90:11:8c:35:b3: a2:0a:e5:89:d6:77:46:68:a9:9d:8a:31:7b:6d:e0: 2b:a9:79:6f:a4:4e:9b:fa:4e:00:43:9b:c5:7f:23: 86:6f:af:5d:e7:7f:97:9f:b1:21:8a:dc:7b:28:6a: 3d:91:b8:7f:46:63:b2:22:c8:5b:15:a4:8c:fa:65: 85:b8:14:e0:e3:99:e7:48:02:c2:cf:fe:4c:89:24: 5e:68:14:43:09:6c:53:fa:2c:c8:3f:43:06:e0:0d: ef:b7:e9:78:22:22:ae:a2:81:8d:39:6a:2d:92:9a: 22:b7:3e:61:7e:dc:4c:45:21:a0:c0:fe:1c:07:0b: d2:e0:d6:67:18:45:ce:cb:c8:66:53:f1:32:0f:09: 88:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:8E:56:BA:EF:DA:E4:03:A9:D5:4D:99:15:12:17:0D:AA:16:A4 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/1dffeac8-b779-49ef-ba27-58bc19891e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.144.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:1c:9c:f7:c0:6c:2f:2a:d4:15:ad:29:f2:8d:d0:dd:e1:bf: 82:ae:15:20:5b:8b:24:a2:cc:61:ff:64:e6:ec:85:42:9f:65: 86:19:b6:c8:48:f2:46:d2:88:b9:3b:7e:5f:ed:86:a1:9a:51: 28:8c:cf:18:e6:40:e4:07:a1:3b:9b:90:b1:6e:e5:0d:c2:8c: 8d:4e:fe:33:32:36:35:76:b4:ab:e5:8c:ba:3f:af:72:d7:86: 3c:70:a3:30:0c:76:12:a8:dc:98:2f:4b:66:99:1c:9a:35:4f: e0:2e:84:d9:60:da:3d:81:1c:10:6d:59:03:9d:63:af:31:82: 64:cb:78:2c:b0:09:0f:63:d1:26:d2:87:52:c0:6b:55:24:21: b8:9f:7d:51:b3:82:8f:92:6c:a4:0f:63:e9:16:42:fa:25:02: 0e:3b:5a:a9:c7:8d:9e:45:a1:45:83:f1:32:b0:65:6a:c9:30: 62:ea:7e:fe:13:92:96:bf:4e:80:f1:0d:86:12:ca:00:0d:c4: a1:54:21:55:bb:17:ef:25:34:9d:75:17:5c:16:0a:cf:72:03: 2f:97:ce:ad:f1:fe:0e:fc:16:6d:a8:13:5a:c0:3e:d9:58:27: be:ec:98:a3:9a:db:28:87:86:94:25:7d:7d:73:d9:db:73:09: bf:21:53:44 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUXykcOcUZ1Zg07NJGLOfUYtpYca8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAwOFoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAOGZjN2ViOGNiNTA5NzlhYzljZjBm ZDlkZjI2NDg5OTE3ZmQyNzNjMDQ5OWQ5OWE3M2U3ODM4Y2RiNGMwOTAzNTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+R6u218CW/T4oXecdNlgZ9ZI4Y93 92OEZa3J5pSgGh2b7aTp55jnsuHQAYSg1FrtFqgUtpnHvAaEUSqSKw2XFkFMXJS/ o1UNklmx0NjFUGbDfi4SduoiZgSqcPYvgQFwx6gn4O7fY4cO6YF8ZlO8YiYGkBGM NbOiCuWJ1ndGaKmdijF7beArqXlvpE6b+k4AQ5vFfyOGb69d53+Xn7Ehitx7KGo9 kbh/RmOyIshbFaSM+mWFuBTg45nnSALCz/5MiSReaBRDCWxT+izIP0MG4A3vt+l4 IiKuooGNOWotkpoitz5hftxMRSGgwP4cBwvS4NZnGEXOy8hmU/EyDwmI4wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKDFjla679rkA6nVTZkVEhcNqhakMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzFkZmZlYWM4LWI3NzktNDllZi1iYTI3LTU4YmMxOTg5MWU2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCrymQMA0GCSqGSIb3DQEBCwUAA4IBAQB6HJz3wGwvKtQVrSnyjdDd 4b+CrhUgW4skosxh/2Tm7IVCn2WGGbbISPJG0oi5O35f7YahmlEojM8Y5kDkB6E7 m5CxbuUNwoyNTv4zMjY1drSr5Yy6P69y14Y8cKMwDHYSqNyYL0tmmRyaNU/gLoTZ YNo9gRwQbVkDnWOvMYJky3gssAkPY9Em0odSwGtVJCG4n31Rs4KPkmykD2PpFkL6 JQIOO1qpx42eRaFFg/EysGVqyTBi6n7+E5KWv06A8Q2GEsoADcShVCFVuxfvJTSd dRdcFgrPcgMvl86t8f4O/BZtqBNawD7ZWCe+7Jijmtsoh4aUJX19c9nbcwm/IVNE -----END CERTIFICATE-----Generated at Mon Aug 10 16:33:13 2026 by rpki-client