$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa File: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (raw, json) Hash identifier: xsqkUQbSEtoGJnJJHboYNK9BHlm0sU29tHhaJi9mmSE= Subject key identifier: 2C:CB:4A:30:5E:9E:E0:3E:64:16:1C:25:2A:3F:B6:D4:9E:C5:8F:DF Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 6EA577AFF0091F5D5A247E787CC01375E7BCEFB6 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa Signing time: Mon 03 Aug 2026 00:00:07 +0000 ROA not before: Mon 03 Aug 2026 00:00:07 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a5:77:af:f0:09:1f:5d:5a:24:7e:78:7c:c0:13:75:e7:bc:ef:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:07 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=dbb93191627f5f97cecb06bdcfbe8719e2303c117eb8eb62ac1954ddba951979, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:b2:80:1b:10:be:42:0c:9b:c0:06:c3:4e: 97:f3:1d:46:b2:80:8f:e1:c6:fa:fe:ec:13:46:68: 05:4e:57:32:6c:6a:f8:63:3a:15:68:7a:5e:66:e1: 07:00:83:17:a0:59:86:da:71:38:6f:03:c2:4d:7c: a0:bf:67:51:8b:a7:9a:89:b3:de:1d:e6:ca:f2:12: 61:19:19:fb:5a:cd:a0:32:16:1c:fe:da:f7:42:e3: cf:0c:ba:03:e6:1d:c8:05:d2:f5:a9:34:3b:be:1d: 0d:be:5b:8f:b9:21:f2:b8:61:ce:86:14:54:d4:ff: a9:e0:54:25:2a:c8:b8:79:bf:d5:71:76:dc:c5:ed: 20:ad:69:5b:cd:cb:1f:19:41:c2:8c:e7:68:4f:93: 11:11:ed:b7:7c:21:24:d6:5b:29:17:39:50:36:ca: 09:b0:df:2e:ab:28:7c:dd:10:50:3c:cc:06:9c:99: 20:3c:a2:4c:bc:22:3c:7d:11:80:9a:dd:74:cd:bd: c2:0a:03:dd:af:01:3a:7f:46:a0:85:aa:7c:8b:4b: 80:36:e4:81:bc:55:7c:d7:ac:b9:1c:2b:59:f3:fc: 89:83:a8:30:ee:1f:c4:6b:16:47:89:81:71:05:14: 9b:ea:07:9a:e0:35:08:36:e4:95:6a:ab:58:83:3b: d4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CB:4A:30:5E:9E:E0:3E:64:16:1C:25:2A:3F:B6:D4:9E:C5:8F:DF X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.128.0/18 Signature Algorithm: sha256WithRSAEncryption 82:4d:56:a3:f6:c3:26:bc:de:13:c1:36:a7:1c:db:dd:17:60: 3d:6e:3d:52:8c:73:58:6d:cb:fc:96:76:ad:91:70:2e:d3:5b: f7:83:7b:44:20:05:3d:07:e9:54:0c:52:7e:61:26:13:2c:00: f7:56:66:28:5f:87:7a:64:73:5a:02:2b:b4:62:46:8c:3a:e8: 82:7b:be:46:0a:6f:60:b9:93:60:ee:d9:d3:a4:71:4f:55:a0: dc:95:91:0f:ef:f6:b2:e8:1b:19:82:99:ea:d3:66:1e:cf:08: cd:89:37:bb:a2:f5:b6:bb:17:2d:a8:5a:91:6b:da:e0:18:21: ad:b4:80:fd:18:e1:d9:3c:9d:01:82:36:e9:d9:3a:9f:c6:14: 19:85:98:50:28:d3:93:96:70:bf:d4:5b:44:7c:ae:9f:e2:5f: 03:84:9d:82:75:a2:90:bd:22:2d:74:93:41:df:03:7f:ba:b7: 0b:28:67:a7:dd:09:2c:12:b4:ea:5d:cb:ab:41:f7:87:a1:be: 3c:c2:f1:4e:78:1e:64:b2:09:d0:dd:ae:38:e2:d5:1c:0d:87: 5a:f1:01:1f:91:47:89:92:2c:f5:19:10:32:04:e9:f6:5c:ce: b5:99:2d:e3:89:e5:b8:c4:f8:18:eb:63:2f:ac:90:db:a9:da: 50:f8:15:fa -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUbqV3r/AJH11aJH54fMATdee877YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAwN1oX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAZGJiOTMxOTE2MjdmNWY5N2NlY2Iw NmJkY2ZiZTg3MTllMjMwM2MxMTdlYjhlYjYyYWMxOTU0ZGRiYTk1MTk3OTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza+ygBsQvkIMm8AGw06X8x1GsoCP 4cb6/uwTRmgFTlcybGr4YzoVaHpeZuEHAIMXoFmG2nE4bwPCTXygv2dRi6eaibPe HebK8hJhGRn7Ws2gMhYc/tr3QuPPDLoD5h3IBdL1qTQ7vh0NvluPuSHyuGHOhhRU 1P+p4FQlKsi4eb/VcXbcxe0grWlbzcsfGUHCjOdoT5MREe23fCEk1lspFzlQNsoJ sN8uqyh83RBQPMwGnJkgPKJMvCI8fRGAmt10zb3CCgPdrwE6f0aghap8i0uANuSB vFV816y5HCtZ8/yJg6gw7h/EaxZHiYFxBRSb6gea4DUINuSVaqtYgzvUkQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFCzLSjBenuA+ZBYcJSo/ttSexY/fMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzllMzdmODU1LTQ4YmYtNDIwYS1hODZjLTVlZWI0ZmMxZjc5MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGrymAMA0GCSqGSIb3DQEBCwUAA4IBAQCCTVaj9sMmvN4TwTanHNvd F2A9bj1SjHNYbcv8lnatkXAu01v3g3tEIAU9B+lUDFJ+YSYTLAD3VmYoX4d6ZHNa Aiu0YkaMOuiCe75GCm9guZNg7tnTpHFPVaDclZEP7/ay6BsZgpnq02YezwjNiTe7 ovW2uxctqFqRa9rgGCGttID9GOHZPJ0Bgjbp2TqfxhQZhZhQKNOTlnC/1FtEfK6f 4l8DhJ2CdaKQvSItdJNB3wN/urcLKGen3QksErTqXcurQfeHob48wvFOeB5ksgnQ 3a444tUcDYda8QEfkUeJkiz1GRAyBOn2XM61mS3jieW4xPgY62MvrJDbqdpQ+BX6 -----END CERTIFICATE-----Generated at Mon Aug 10 16:33:00 2026 by rpki-client