$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa File: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (raw, json) Hash identifier: U7qwuCrz1VnCc4jL9xa+4gQpFF8nN1gLyrdZ/L63EFo= Subject key identifier: BB:18:01:C4:D7:42:1F:66:46:61:D0:BA:1A:D0:E0:2B:D3:50:95:EB Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 70FCA2E56A48C6C9EB4E2ECE938183DB5929A86D Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa Signing time: Thu 22 Oct 2026 00:07:29 +0000 ROA not before: Thu 22 Oct 2026 00:07:29 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fc:a2:e5:6a:48:c6:c9:eb:4e:2e:ce:93:81:83:db:59:29:a8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 22 00:07:29 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=b826564cffa4a733262ba2d9bd30b1efa975dc2274ead3e588d1bd8b21426082, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:66:a1:f0:2e:dd:70:af:26:16:62:ee:a0: 16:3d:6f:c9:17:64:23:af:2f:7b:e3:51:54:14:f8: 27:c5:4b:8a:73:1f:1e:d8:c9:49:1d:62:d4:a9:c5: ee:ef:27:3c:20:bd:18:fe:0a:2b:4a:99:5f:cb:29: d5:06:9d:bc:5c:b2:82:c8:3e:83:45:13:42:26:37: 13:8c:7a:a2:79:02:6b:bf:4b:b1:87:30:ef:01:f0: 73:25:c5:4b:99:83:9a:65:16:89:dc:f4:fa:89:b1: 3e:ff:bd:85:80:9a:e1:4d:15:26:d2:a4:b2:5c:e8: f0:63:e7:42:54:e6:ea:c9:d7:d2:fe:40:4c:9d:de: 6a:dc:7e:44:b4:4a:ff:1d:f3:03:b7:e2:49:75:33: 19:1e:e9:7e:c0:bb:40:78:eb:4c:18:af:90:88:51: a5:b0:19:26:a3:7c:38:da:a8:83:06:17:90:bd:71: 14:6c:74:9e:c3:1e:0e:67:3c:14:e5:c1:0a:b9:03: d1:da:e2:aa:77:4e:bc:01:ff:d1:8f:fe:2c:53:36: 40:88:1b:37:2f:b2:64:be:e1:2c:f9:eb:1d:34:c1: 35:9e:ee:3e:0f:09:55:06:fe:4a:39:69:02:91:57: 89:94:fb:55:ed:44:28:bb:79:81:ce:7b:b0:fa:5c: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:18:01:C4:D7:42:1F:66:46:61:D0:BA:1A:D0:E0:2B:D3:50:95:EB X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.224.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:45:2d:f5:e3:37:54:eb:ea:1d:d3:76:99:36:c7:49:9f:87: bf:d9:36:44:ec:19:a2:2d:05:70:5d:1c:d3:6f:21:36:a7:7e: b5:b1:61:57:8d:22:a7:92:dd:6b:ca:59:74:59:b3:f4:d7:6d: bd:25:3d:1f:5c:9b:4e:56:99:f9:14:86:d4:7a:c1:dd:7d:79: f7:5b:f6:47:6a:32:4e:b2:f2:01:e7:c4:ec:88:2e:d3:cc:bd: 99:10:dd:10:5e:1c:3a:e3:a9:12:6a:75:f6:71:ba:92:a7:5a: ee:6f:3b:a0:40:17:28:d8:b9:1e:9a:ae:9b:24:2b:92:2c:b6: 8a:3a:a4:e6:f3:d2:a0:e2:8e:69:e9:d5:c3:a6:e9:54:78:44: c6:14:06:96:af:af:ba:b8:bd:2a:59:ec:fa:d4:59:a2:5d:8e: 25:24:05:98:0c:7c:16:cc:08:0c:bc:7e:17:ff:79:79:0b:a8: fb:ee:51:da:bc:3b:30:54:c8:d2:74:e1:7d:95:79:30:0c:0e: bb:fb:3f:4d:1a:38:0c:85:64:94:7f:f0:26:42:7b:b4:e3:9a: 8b:54:88:ad:ff:76:1d:0d:5f:b2:3d:6e:04:88:e5:08:0e:20: 87:3d:25:ed:b9:ff:3e:38:1e:f4:66:5b:23:1d:d3:21:3e:b4: e3:c9:85:c8 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUcPyi5WpIxsnrTi7Ok4GD21kpqG0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAyMjAwMDcyOVoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAYjgyNjU2NGNmZmE0YTczMzI2MmJh MmQ5YmQzMGIxZWZhOTc1ZGMyMjc0ZWFkM2U1ODhkMWJkOGIyMTQyNjA4MjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlupmofAu3XCvJhZi7qAWPW/JF2Qj ry9741FUFPgnxUuKcx8e2MlJHWLUqcXu7yc8IL0Y/gorSplfyynVBp28XLKCyD6D RRNCJjcTjHqieQJrv0uxhzDvAfBzJcVLmYOaZRaJ3PT6ibE+/72FgJrhTRUm0qSy XOjwY+dCVObqydfS/kBMnd5q3H5EtEr/HfMDt+JJdTMZHul+wLtAeOtMGK+QiFGl sBkmo3w42qiDBheQvXEUbHSewx4OZzwU5cEKuQPR2uKqd068Af/Rj/4sUzZAiBs3 L7JkvuEs+esdNME1nu4+DwlVBv5KOWkCkVeJlPtV7UQou3mBznuw+lyibwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFLsYAcTXQh9mRmHQuhrQ4CvTUJXrMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzNiOTQwZDE0LWI4YzQtNGMzZC05NzhmLWExYTNiN2EwYTgyYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDryngMA0GCSqGSIb3DQEBCwUAA4IBAQBMRS314zdU6+od03aZNsdJ n4e/2TZE7BmiLQVwXRzTbyE2p361sWFXjSKnkt1ryll0WbP01229JT0fXJtOVpn5 FIbUesHdfXn3W/ZHajJOsvIB58TsiC7TzL2ZEN0QXhw646kSanX2cbqSp1rubzug QBco2Lkemq6bJCuSLLaKOqTm89Kg4o5p6dXDpulUeETGFAaWr6+6uL0qWez61Fmi XY4lJAWYDHwWzAgMvH4X/3l5C6j77lHavDswVMjSdOF9lXkwDA67+z9NGjgMhWSU f/AmQnu045qLVIit/3YdDV+yPW4EiOUIDiCHPSXtuf8+OB70ZlsjHdMhPrTjyYXI -----END CERTIFICATE-----Generated at Sat Oct 24 10:36:58 2026 by rpki-client