$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/42932dd4-2720-47b3-a472-fc2c8a50a46c.roa File: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (raw, json) Hash identifier: 36zyXS5EhxOtNn4PX71OekuUj1IFeK9xcFYUIGS7uYo= Subject key identifier: 62:62:39:9E:8D:6F:AA:1A:10:44:A1:12:7E:F4:33:F9:98:F0:AB:24 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 2E06FA3B334F44A7F50C0DE61E29B9DB91ACCD28 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/42932dd4-2720-47b3-a472-fc2c8a50a46c.roa Signing time: Mon 03 Aug 2026 00:00:06 +0000 ROA not before: Mon 03 Aug 2026 00:00:06 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:06:fa:3b:33:4f:44:a7:f5:0c:0d:e6:1e:29:b9:db:91:ac:cd:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:06 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=e502507cf8a5eac9500c5c4f161e87fc7e959fb91339417f75ad41ca05e2d901, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:29:f3:ec:da:13:45:0e:8f:73:84:51:f8: fd:36:2a:75:23:99:4a:16:3a:a9:de:85:70:53:3b: c2:86:74:b3:39:63:2c:55:3e:99:71:7b:03:df:b5: b4:08:fc:dd:a4:82:0a:60:a6:04:4c:70:13:50:83: 6b:d1:ba:fd:83:e8:d6:e7:1d:6b:1c:4f:e9:5d:66: b5:e7:0a:8c:fa:89:16:8d:e3:f6:87:ae:bf:db:75: 6d:1a:88:8b:89:5c:80:6e:f9:a1:89:c5:30:7e:c1: d2:2b:db:03:04:72:cc:c6:b4:0b:3a:a2:d9:82:97: d8:c0:74:08:92:70:52:1b:8f:43:a1:84:f9:44:73: 82:30:f1:89:80:09:e9:41:ba:4f:32:96:38:f4:3d: dc:4f:f6:bd:15:b2:ba:7a:3d:83:51:83:37:26:87: aa:47:33:a5:63:76:57:4e:f0:7d:fb:5c:3f:5f:a6: 61:ae:75:3c:f7:54:72:41:14:bc:0a:e3:23:0e:20: a7:64:9e:94:9e:0f:ce:a7:93:0a:08:7d:c6:a3:88: 65:38:8a:d9:83:32:8d:4f:29:2b:51:1d:69:7a:6b: 68:22:47:5d:b1:06:00:c4:b2:fd:fa:c8:f1:bb:a4: 0f:53:c9:65:e2:4f:f3:8c:03:e1:e2:9a:56:57:c3: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:62:39:9E:8D:6F:AA:1A:10:44:A1:12:7E:F4:33:F9:98:F0:AB:24 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/42932dd4-2720-47b3-a472-fc2c8a50a46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.130.0/23 Signature Algorithm: sha256WithRSAEncryption 57:c6:a5:bf:3a:3f:2c:a2:d7:1d:81:93:61:55:de:e2:0a:9f: ce:bd:47:1b:2f:00:b0:84:aa:3c:92:ac:86:6d:b0:e3:7b:88: bc:ad:9e:0d:eb:d5:d2:0f:92:5e:de:83:cd:d8:08:f3:19:3c: b7:42:0e:30:29:e4:43:fd:27:4e:fb:a6:4a:4c:cd:71:dc:ef: 58:42:47:1b:c1:ee:f1:d3:25:85:31:62:b8:39:22:29:7a:72: aa:7a:be:37:6e:8b:e1:f6:a3:c9:9a:90:5b:8b:b3:6f:fb:e4: d1:eb:0a:28:fe:dc:b2:43:d9:c1:61:60:16:e8:2f:85:ac:0b: fb:2f:1f:49:55:bf:d8:7b:e7:bb:fd:c2:d2:66:0c:de:8c:a2: ba:58:c5:34:37:30:0a:80:26:75:80:23:84:7c:51:41:97:41: 44:3e:4a:e1:55:3e:73:4e:c4:3a:08:1f:df:d1:4f:50:e3:2a: 0b:0f:48:e6:06:2b:44:2c:5d:13:bf:1c:ed:21:54:27:59:21: 4e:ef:ab:24:84:8b:ce:f6:39:cf:1e:29:5f:0f:12:be:d3:99: 6d:e2:64:57:56:96:95:6f:2d:74:44:a5:6b:8f:58:3a:76:fc: 39:af:66:3d:cd:85:37:94:3e:9b:64:5c:9b:7e:c2:f3:c3:b1: 78:00:12:c7 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIULgb6OzNPRKf1DA3mHim525GszSgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAwNloX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAZTUwMjUwN2NmOGE1ZWFjOTUwMGM1 YzRmMTYxZTg3ZmM3ZTk1OWZiOTEzMzk0MTdmNzVhZDQxY2EwNWUyZDkwMTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0Yp8+zaE0UOj3OEUfj9Nip1I5lK Fjqp3oVwUzvChnSzOWMsVT6ZcXsD37W0CPzdpIIKYKYETHATUINr0br9g+jW5x1r HE/pXWa15wqM+okWjeP2h66/23VtGoiLiVyAbvmhicUwfsHSK9sDBHLMxrQLOqLZ gpfYwHQIknBSG49DoYT5RHOCMPGJgAnpQbpPMpY49D3cT/a9FbK6ej2DUYM3Joeq RzOlY3ZXTvB9+1w/X6ZhrnU891RyQRS8CuMjDiCnZJ6Ung/Op5MKCH3Go4hlOIrZ gzKNTykrUR1pemtoIkddsQYAxLL9+sjxu6QPU8ll4k/zjAPh4ppWV8PVVQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFGJiOZ6Nb6oaEEShEn70M/mY8KskMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzQyOTMyZGQ0LTI3MjAtNDdiMy1hNDcyLWZjMmM4YTUwYTQ2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBrymCMA0GCSqGSIb3DQEBCwUAA4IBAQBXxqW/Oj8sotcdgZNhVd7i Cp/OvUcbLwCwhKo8kqyGbbDje4i8rZ4N69XSD5Je3oPN2AjzGTy3Qg4wKeRD/SdO +6ZKTM1x3O9YQkcbwe7x0yWFMWK4OSIpenKqer43bovh9qPJmpBbi7Nv++TR6woo /tyyQ9nBYWAW6C+FrAv7Lx9JVb/Ye+e7/cLSZgzejKK6WMU0NzAKgCZ1gCOEfFFB l0FEPkrhVT5zTsQ6CB/f0U9Q4yoLD0jmBitELF0TvxztIVQnWSFO76skhIvO9jnP HilfDxK+05lt4mRXVpaVby10RKVrj1g6dvw5r2Y9zYU3lD6bZFybfsLzw7F4ABLH -----END CERTIFICATE-----Generated at Mon Aug 10 16:35:26 2026 by rpki-client