$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/7b26d410-17d7-4310-bb58-41c465f8eef2.roa File: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (raw, json) Hash identifier: 7g5YFvc9Ja+LNtF/CNyVYlMGrIybgUTURYvwekeTQEA= Subject key identifier: 44:34:AD:86:02:92:E5:C8:9D:D8:E5:4A:84:C7:93:BD:2A:EA:C4:3D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: C7A6B2822146A57B6B6C241FA179B18B5B8C92 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/7b26d410-17d7-4310-bb58-41c465f8eef2.roa Signing time: Mon 03 Aug 2026 00:00:13 +0000 ROA not before: Mon 03 Aug 2026 00:00:13 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c7:a6:b2:82:21:46:a5:7b:6b:6c:24:1f:a1:79:b1:8b:5b:8c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:13 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=68faed01f34a71a64e33feea9f870c0a4914d6444c4ef57145bd090aad5e5ca2, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:a4:c1:05:22:c3:fe:af:e1:8f:c1:e4:9b: 77:ee:f9:23:5b:aa:c6:6c:d1:29:52:17:26:2e:e0: db:8c:b9:08:e1:b7:58:af:77:66:4e:d3:36:ae:58: fc:dc:59:97:ec:46:f6:56:0a:59:7f:0b:2f:6a:7f: 64:98:eb:20:7a:08:f0:61:51:58:25:c5:14:8f:f1: 69:e7:dd:d8:11:6a:2f:06:56:73:bd:08:09:04:c6: 11:3c:d7:2c:80:58:35:f2:59:56:8f:4b:b3:5c:2b: 97:31:5a:13:d5:d1:d2:f4:55:36:40:c2:09:82:e6: 3a:17:cb:e7:c5:32:1a:40:74:b2:5d:c6:93:49:7c: 1d:c2:b6:23:90:72:c8:72:16:0c:92:c8:52:a1:33: 4a:3f:c3:86:4a:ae:38:87:4b:0b:7b:fe:83:92:89: 20:18:83:1b:84:1d:cd:fa:91:9d:d4:56:88:36:91: d2:e6:0c:d3:16:eb:17:e6:18:65:76:08:d1:b2:c2: fa:59:88:fa:69:0f:48:b8:e9:6d:9b:54:f1:63:e2: d1:c3:a1:27:25:4f:e2:7b:6b:b8:4c:7f:86:12:b2: a2:16:2c:c8:58:07:2b:33:6b:bd:b1:36:b2:95:c4: ea:5c:85:4f:37:2c:6b:5f:12:e9:0d:ac:f3:6d:1b: 3b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:34:AD:86:02:92:E5:C8:9D:D8:E5:4A:84:C7:93:BD:2A:EA:C4:3D X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/7b26d410-17d7-4310-bb58-41c465f8eef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.148.0/23 Signature Algorithm: sha256WithRSAEncryption 80:ad:c6:d9:59:53:75:b5:11:d3:48:bd:53:f2:10:30:7d:85: 5f:44:15:25:ce:86:77:41:e8:d0:56:15:fb:b4:bf:fe:7a:19: 68:70:2d:b6:dd:78:64:c2:a5:cc:37:81:69:81:28:90:7a:ab: 95:0e:1b:c6:5d:e5:d1:df:ae:b2:93:5a:d6:ef:b9:6f:87:59: 4f:4d:11:33:44:af:a0:c3:cb:df:e1:90:63:45:4a:08:00:eb: 3d:59:1c:8a:e8:0b:bc:89:60:83:28:05:a1:1f:c8:b8:5c:ec: 50:44:69:db:ef:e9:a9:19:f5:76:76:84:e6:71:66:99:ea:8b: 6e:29:fa:e0:9c:d9:fb:5b:b8:31:9a:e0:4b:e6:50:c7:7a:d6: fc:e0:10:a1:ab:50:84:aa:ec:cc:6d:3c:ff:9c:e5:36:50:45: 6e:e2:e7:02:83:cb:33:34:b7:13:b1:94:c6:46:ae:2c:b4:8f: 07:01:0b:24:4c:63:2a:e5:d2:d2:c4:1f:74:00:17:1c:89:f1: 43:99:b0:ae:32:b3:e8:01:c5:9a:4b:ee:2c:f3:f8:ac:0a:b5: 98:55:0b:07:c9:41:5b:bd:9f:04:1c:30:5e:c6:10:98:c1:b8: 69:21:73:17:2b:14:52:39:80:0b:01:ee:8c:0f:99:f6:fb:22: 1b:93:c7:20 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUAMemsoIhRqV7a2wkH6F5sYtbjJIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAxM1oX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNANjhmYWVkMDFmMzRhNzFhNjRlMzNm ZWVhOWY4NzBjMGE0OTE0ZDY0NDRjNGVmNTcxNDViZDA5MGFhZDVlNWNhMjEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm6kwQUiw/6v4Y/B5Jt37vkjW6rG bNEpUhcmLuDbjLkI4bdYr3dmTtM2rlj83FmX7Eb2VgpZfwsvan9kmOsgegjwYVFY JcUUj/Fp593YEWovBlZzvQgJBMYRPNcsgFg18llWj0uzXCuXMVoT1dHS9FU2QMIJ guY6F8vnxTIaQHSyXcaTSXwdwrYjkHLIchYMkshSoTNKP8OGSq44h0sLe/6Dkokg GIMbhB3N+pGd1FaINpHS5gzTFusX5hhldgjRssL6WYj6aQ9IuOltm1TxY+LRw6En JU/ie2u4TH+GErKiFizIWAcrM2u9sTaylcTqXIVPNyxrXxLpDazzbRs7BwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFEQ0rYYCkuXIndjlSoTHk70q6sQ9MB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzdiMjZkNDEwLTE3ZDctNDMxMC1iYjU4LTQxYzQ2NWY4ZWVmMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBrymUMA0GCSqGSIb3DQEBCwUAA4IBAQCArcbZWVN1tRHTSL1T8hAw fYVfRBUlzoZ3QejQVhX7tL/+ehlocC223XhkwqXMN4FpgSiQequVDhvGXeXR366y k1rW77lvh1lPTREzRK+gw8vf4ZBjRUoIAOs9WRyK6Au8iWCDKAWhH8i4XOxQRGnb 7+mpGfV2doTmcWaZ6otuKfrgnNn7W7gxmuBL5lDHetb84BChq1CEquzMbTz/nOU2 UEVu4ucCg8szNLcTsZTGRq4stI8HAQskTGMq5dLSxB90ABccifFDmbCuMrPoAcWa S+4s8/isCrWYVQsHyUFbvZ8EHDBexhCYwbhpIXMXKxRSOYALAe6MD5n2+yIbk8cg -----END CERTIFICATE-----Generated at Mon Aug 10 16:33:29 2026 by rpki-client