$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa File: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (raw, json) Hash identifier: uIskc2vZKE0TG6rZ7zU3gO/YBPvk63ePmcll0X+Q+Lc= Subject key identifier: B4:83:28:EE:38:46:D2:24:C6:69:C0:F5:98:88:D9:71:5A:02:A3:BA Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 5FA7E4FF0521DF9D990E310A7EA46E13F4D057CB Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa Signing time: Mon 03 Aug 2026 00:00:09 +0000 ROA not before: Mon 03 Aug 2026 00:00:09 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a7:e4:ff:05:21:df:9d:99:0e:31:0a:7e:a4:6e:13:f4:d0:57:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:09 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=53679e3b918c12a50e1d14475b8b225fb7cc7ee55cd501f6552d0bbe19c4ea1d, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:02:8f:37:86:7c:0e:55:f8:d9:47:c8:49: 5b:84:ba:08:f6:b5:96:3b:2a:e4:84:aa:7d:f3:07: 6c:51:c4:87:08:42:e8:bd:50:7e:a9:30:8c:ae:b1: 94:b7:6f:c8:8c:30:7e:04:9d:52:24:4b:41:38:6a: bb:c9:f1:98:23:2e:9c:d8:50:67:f6:9b:bf:a0:97: 3d:22:16:d4:a1:52:94:fd:d8:a7:f6:7d:db:d9:45: 5f:5e:b9:8c:d8:12:cb:bd:4b:50:49:1a:b2:90:5b: 24:a5:b7:73:c0:36:b7:7a:3c:ab:6b:78:74:0c:f6: 53:48:11:ac:8a:ae:ce:03:80:55:be:54:7e:14:21: bc:18:1e:6d:23:52:b5:25:29:ca:26:33:02:fb:af: f5:c0:eb:de:8d:36:81:9a:1b:8f:24:ed:ea:da:19: 02:eb:c6:ea:e0:df:a9:68:f7:b9:6c:fa:5d:ca:17: 73:7a:3b:6c:aa:62:f6:2b:34:9a:1a:88:12:12:69: 06:90:d2:ac:bc:15:63:52:de:32:f4:a5:e2:3a:40: 35:37:26:63:78:8f:30:bd:03:07:40:9f:2e:b0:04: 37:82:46:d8:1a:b9:ca:33:7a:c4:f2:57:c9:10:28: 4f:1d:82:b4:2b:cd:6a:4a:d4:fc:67:af:8c:ac:e4: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:83:28:EE:38:46:D2:24:C6:69:C0:F5:98:88:D9:71:5A:02:A3:BA X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.136.0/21 Signature Algorithm: sha256WithRSAEncryption 40:dc:3f:7a:31:45:72:e1:e8:3c:35:5a:74:f3:d0:ae:3f:3e: 00:80:6d:98:4d:fb:e0:13:65:7b:ac:17:41:c7:33:74:63:79: da:43:8b:73:da:d9:02:3f:3e:0d:98:d1:c5:ce:ed:af:6b:1e: 7c:95:4c:ab:ad:db:55:e0:81:e1:44:24:8b:c0:ee:a4:18:ee: 5d:a6:4c:02:09:9d:dc:d0:27:dc:d8:e8:78:59:07:df:1d:3f: 0d:52:9e:9e:63:88:43:cb:14:d7:6a:39:e3:ff:3f:17:58:2c: 4f:a4:81:c0:d7:de:37:29:7f:8b:47:78:7e:1d:b6:73:77:f2: 62:7f:3f:25:00:49:3d:84:74:c1:c1:37:16:fe:f9:4f:8b:df: bf:83:a5:6e:e4:5f:b0:8a:da:c6:6c:ef:05:cd:fe:37:1e:4e: 8b:c5:48:a4:74:27:4b:84:55:a2:f8:cc:0a:22:5c:be:5a:4d: f4:79:0f:93:33:78:17:0f:ae:6a:b6:d2:a5:24:c6:b2:78:ed: eb:a1:c2:59:6f:23:69:6e:7b:8f:05:d9:1c:86:2c:71:bb:1a: 32:fb:07:f8:43:37:d3:57:e9:c2:97:82:d1:b2:d3:d7:8c:b1: 66:38:2a:9e:8d:a0:6a:46:f1:f4:bd:e3:34:1b:9c:f3:9d:cc: fb:4e:3f:34 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUX6fk/wUh352ZDjEKfqRuE/TQV8swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAwOVoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNANTM2NzllM2I5MThjMTJhNTBlMWQx NDQ3NWI4YjIyNWZiN2NjN2VlNTVjZDUwMWY2NTUyZDBiYmUxOWM0ZWExZDEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJYCjzeGfA5V+NlHyElbhLoI9rWW OyrkhKp98wdsUcSHCELovVB+qTCMrrGUt2/IjDB+BJ1SJEtBOGq7yfGYIy6c2FBn 9pu/oJc9IhbUoVKU/din9n3b2UVfXrmM2BLLvUtQSRqykFskpbdzwDa3ejyra3h0 DPZTSBGsiq7OA4BVvlR+FCG8GB5tI1K1JSnKJjMC+6/1wOvejTaBmhuPJO3q2hkC 68bq4N+paPe5bPpdyhdzejtsqmL2KzSaGogSEmkGkNKsvBVjUt4y9KXiOkA1NyZj eI8wvQMHQJ8usAQ3gkbYGrnKM3rE8lfJEChPHYK0K81qStT8Z6+MrOTeFwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFLSDKO44RtIkxmnA9ZiI2XFaAqO6MB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzNiODU1N2MwLWQ1ZWUtNGY5ZC04MGFjLWU0MWEzN2ZmZmYyNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDrymIMA0GCSqGSIb3DQEBCwUAA4IBAQBA3D96MUVy4eg8NVp089Cu Pz4AgG2YTfvgE2V7rBdBxzN0Y3naQ4tz2tkCPz4NmNHFzu2vax58lUyrrdtV4IHh RCSLwO6kGO5dpkwCCZ3c0Cfc2Oh4WQffHT8NUp6eY4hDyxTXajnj/z8XWCxPpIHA 1943KX+LR3h+HbZzd/Jifz8lAEk9hHTBwTcW/vlPi9+/g6Vu5F+witrGbO8Fzf43 Hk6LxUikdCdLhFWi+MwKIly+Wk30eQ+TM3gXD65qttKlJMayeO3rocJZbyNpbnuP Bdkchixxuxoy+wf4QzfTV+nCl4LRstPXjLFmOCqejaBqRvH0veM0G5zzncz7Tj80 -----END CERTIFICATE-----Generated at Mon Aug 10 16:32:08 2026 by rpki-client