$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa File: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (raw, json) Hash identifier: mGCP92ndXqtbWgc35vK8fF+nQmakA/RqaYIANAYMDts= Subject key identifier: 67:44:48:3D:AA:D5:A0:AD:A1:3E:77:1C:5B:19:D5:0E:80:F0:D4:53 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 2EA958DA0DAE18718FCA4A9B0307FF6E779A8C17 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa Signing time: Mon 03 Aug 2026 00:00:21 +0000 ROA not before: Mon 03 Aug 2026 00:00:21 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a9:58:da:0d:ae:18:71:8f:ca:4a:9b:03:07:ff:6e:77:9a:8c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:21 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=eabdfee332a536cb9984958c92bb02645f6fb0418ae148913a78e28e5fa50c37, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:d3:06:4f:9f:1b:20:65:aa:85:30:9b:9e: 6e:85:81:79:5f:ee:70:2e:e3:11:07:63:b9:a5:5c: b7:15:23:ad:81:59:f5:f2:f3:55:37:c8:00:00:2d: 4d:d3:dd:4a:b1:6f:37:a9:31:2d:d1:c4:78:58:8b: 49:4c:79:bf:0a:a5:ac:c2:4d:30:4b:6d:34:33:ab: 91:f6:34:20:b7:b7:e3:d6:5b:c5:c5:bb:3f:ed:22: 32:5c:83:23:81:dc:03:1d:93:ad:59:19:82:55:be: 4d:09:0d:4c:b0:12:4a:51:da:1a:55:83:b0:b8:c8: 72:51:80:78:97:02:e6:bf:ad:c8:59:1f:f8:dd:22: db:99:4c:1e:0a:de:4b:30:14:5f:91:78:1c:c1:c1: 3b:53:29:bb:e6:92:61:02:a8:87:d8:8d:38:61:2f: 3f:80:b8:a3:9a:13:30:a3:2b:c8:08:d3:17:36:b3: 99:ce:c1:8d:a1:70:71:95:ed:cb:6d:7f:34:4d:2f: 46:85:74:20:7b:45:60:8d:bd:79:13:3b:65:f6:d9: 21:5a:f6:8b:a8:c9:0b:55:3c:d4:c2:45:cd:fc:8e: 92:bb:47:63:3e:33:4b:59:22:c9:db:b5:47:71:49: 3f:b3:50:77:16:87:2d:58:80:03:75:0f:7a:c0:41: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:44:48:3D:AA:D5:A0:AD:A1:3E:77:1C:5B:19:D5:0E:80:F0:D4:53 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.193.0/24 Signature Algorithm: sha256WithRSAEncryption b6:8e:89:ee:70:80:4a:21:42:69:b4:a8:06:d5:60:de:ac:dd: 18:61:f4:d2:ba:91:16:a0:76:96:48:e1:f9:90:40:24:f7:2a: 60:10:53:b7:ff:0f:9f:0c:a4:1a:fd:65:e6:4d:98:ba:9d:f8: e6:ed:52:1f:e0:36:ba:ba:06:b5:8e:75:c1:1d:f1:e8:4c:7e: 41:61:9f:c3:31:89:20:f4:1f:7a:af:c5:b5:e1:72:59:2e:9a: af:ab:ec:c9:40:95:f3:b6:f2:b2:ad:45:5b:ca:45:88:c3:38: 4f:be:7a:e3:b0:f0:ed:fd:a6:c3:22:f9:ca:20:35:69:1e:cb: 0e:8b:ca:cd:ed:10:8d:32:b0:ee:c7:f8:23:e0:ac:c7:f6:6b: e9:7e:f0:73:ac:ee:7a:fa:0b:dd:d9:8d:97:41:aa:a4:7a:79: cb:1c:0e:f7:4c:0a:ce:2a:bb:dc:7c:70:5a:ae:67:15:b5:98: 1f:5b:f1:ea:cc:b9:1f:4d:a6:8a:72:3a:5a:5c:3d:16:5e:75: 0b:29:a8:d7:d4:e7:d1:ba:68:ee:ca:32:ca:86:96:1d:9f:24: 99:25:f6:d3:7d:8f:07:65:c1:89:85:1f:5d:3f:c1:40:80:34: 60:5b:37:0d:d3:b8:16:71:64:de:84:63:d9:21:e4:4f:3e:12: 16:11:24:73 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIULqlY2g2uGHGPykqbAwf/bneajBcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyMVoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAZWFiZGZlZTMzMmE1MzZjYjk5ODQ5 NThjOTJiYjAyNjQ1ZjZmYjA0MThhZTE0ODkxM2E3OGUyOGU1ZmE1MGMzNzEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY3TBk+fGyBlqoUwm55uhYF5X+5w LuMRB2O5pVy3FSOtgVn18vNVN8gAAC1N091KsW83qTEt0cR4WItJTHm/CqWswk0w S200M6uR9jQgt7fj1lvFxbs/7SIyXIMjgdwDHZOtWRmCVb5NCQ1MsBJKUdoaVYOw uMhyUYB4lwLmv63IWR/43SLbmUweCt5LMBRfkXgcwcE7Uym75pJhAqiH2I04YS8/ gLijmhMwoyvICNMXNrOZzsGNoXBxle3LbX80TS9GhXQge0Vgjb15Eztl9tkhWvaL qMkLVTzUwkXN/I6Su0djPjNLWSLJ27VHcUk/s1B3FoctWIADdQ96wEH0qQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFGdESD2q1aCtoT53HFsZ1Q6A8NRTMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzJmNDdkY2RkLWMzODQtNGViMi1hZWZkLWY0YWQ2NGYyNmNjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQArynBMA0GCSqGSIb3DQEBCwUAA4IBAQC2jonucIBKIUJptKgG1WDe rN0YYfTSupEWoHaWSOH5kEAk9ypgEFO3/w+fDKQa/WXmTZi6nfjm7VIf4Da6uga1 jnXBHfHoTH5BYZ/DMYkg9B96r8W14XJZLpqvq+zJQJXztvKyrUVbykWIwzhPvnrj sPDt/abDIvnKIDVpHssOi8rN7RCNMrDux/gj4KzH9mvpfvBzrO56+gvd2Y2XQaqk ennLHA73TArOKrvcfHBarmcVtZgfW/HqzLkfTaaKcjpaXD0WXnULKajX1OfRumju yjLKhpYdnySZJfbTfY8HZcGJhR9dP8FAgDRgWzcN07gWcWTehGPZIeRPPhIWESRz -----END CERTIFICATE-----Generated at Sat Sep 5 08:43:51 2026 by rpki-client