$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa File: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (raw, json) Hash identifier: 7DQ1BBqI+YGQodqSp/9cow4A6cRx6MURcx/z2L1uszc= Subject key identifier: D7:32:C0:5E:95:EE:16:A3:51:11:77:57:62:40:55:6E:DA:0A:DB:62 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 38D0C312137A496D96442173123494F1DE00D6AB Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa Signing time: Mon 03 Aug 2026 00:00:25 +0000 ROA not before: Mon 03 Aug 2026 00:00:25 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d0:c3:12:13:7a:49:6d:96:44:21:73:12:34:94:f1:de:00:d6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:25 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=1fd3ff8cb6af3daf3f0ce0cbbb1e66058fd4dd5e5b7aa747d64dc21fc2631734, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:76:b2:69:c6:f2:8f:31:2e:47:fe:58:7a:6c: 74:c3:59:fc:37:21:15:d9:13:3c:e4:e6:49:e9:42: 1a:f9:9d:44:d2:84:2b:5f:d5:d8:56:b2:70:bb:ad: 69:79:44:70:bb:b0:78:2c:51:21:39:3b:e7:61:eb: c3:52:fd:23:67:a0:c3:17:5a:1f:a0:b8:cc:bf:d5: de:16:1d:70:5d:14:11:8c:83:37:73:f1:75:f0:71: e7:fa:a3:a8:e6:af:bd:7c:d1:fc:4b:d6:73:bc:b6: b8:86:58:ac:6c:e7:66:b5:16:04:b1:b3:9a:c8:38: 9a:b6:0b:bf:11:9a:16:1c:d7:b9:58:ac:9b:76:1f: 3c:0c:ca:5c:46:d1:4d:54:a8:25:93:cd:3a:4a:40: 7e:0a:96:ca:d5:be:90:40:8d:dc:b4:d2:fe:43:59: b8:24:3b:e8:97:14:57:94:90:68:5f:25:4e:36:09: 5f:85:7e:60:21:1a:34:91:8e:15:ed:af:de:5c:91: 77:7b:3c:09:cd:b5:77:83:91:bc:8d:b0:0c:aa:98: 50:21:8e:82:69:d2:e2:98:23:4f:c8:6f:67:9d:83: ae:22:e6:f2:79:43:22:11:a5:6f:5b:4d:49:97:9f: 43:0c:a8:0c:72:73:22:db:b7:70:57:f0:5a:f3:94: a7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:32:C0:5E:95:EE:16:A3:51:11:77:57:62:40:55:6E:DA:0A:DB:62 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.224.0/21 Signature Algorithm: sha256WithRSAEncryption 74:e4:61:c6:ad:ae:96:e0:86:9a:05:ff:98:a0:90:54:7a:c8: ab:9c:ac:32:9a:97:f3:2d:9e:16:b0:ef:f2:f9:e9:97:c9:dc: de:77:21:73:e6:3a:a7:3a:1c:05:99:c6:90:a6:44:22:51:84: 62:23:9f:c6:ca:e6:f2:61:88:0e:f9:3a:de:38:56:49:c0:89: 7b:c1:52:cb:12:85:c9:d7:e2:9b:bd:ae:10:f4:ed:f2:2c:58: 30:35:07:03:de:1b:5c:81:61:83:4f:6c:bb:aa:cf:38:5d:84: d3:fe:f6:51:27:fc:a8:93:9d:62:bc:e3:26:2d:73:d9:98:3d: d9:78:cc:32:7a:52:2e:b2:36:6c:c6:29:39:07:2b:cc:df:d9: 10:95:54:0c:73:d9:a9:92:c3:01:cc:03:36:48:df:71:f1:05: 3e:ba:bb:fb:30:60:69:64:7d:45:80:e7:a9:af:06:ad:12:00: 2f:cc:61:eb:6d:50:f7:e3:96:cc:cb:37:98:0d:8b:24:d9:29: 70:cf:5d:d2:0b:55:cb:37:12:a1:03:84:86:3c:ff:76:db:ec: dd:9c:cf:69:48:25:a8:67:72:4a:17:50:90:07:ff:af:d3:a2: 99:a1:15:aa:14:75:35:dc:74:4b:5c:b1:28:40:bd:5e:41:fc: da:5b:d2:45 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUONDDEhN6SW2WRCFzEjSU8d4A1qswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyNVoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAMWZkM2ZmOGNiNmFmM2RhZjNmMGNl MGNiYmIxZTY2MDU4ZmQ0ZGQ1ZTViN2FhNzQ3ZDY0ZGMyMWZjMjYzMTczNDEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XayacbyjzEuR/5Yemx0w1n8NyEV 2RM85OZJ6UIa+Z1E0oQrX9XYVrJwu61peURwu7B4LFEhOTvnYevDUv0jZ6DDF1of oLjMv9XeFh1wXRQRjIM3c/F18HHn+qOo5q+9fNH8S9ZzvLa4hlisbOdmtRYEsbOa yDiatgu/EZoWHNe5WKybdh88DMpcRtFNVKglk806SkB+CpbK1b6QQI3ctNL+Q1m4 JDvolxRXlJBoXyVONglfhX5gIRo0kY4V7a/eXJF3ezwJzbV3g5G8jbAMqphQIY6C adLimCNPyG9nnYOuIubyeUMiEaVvW01Jl59DDKgMcnMi27dwV/Ba85SnzwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNcywF6V7hajURF3V2JAVW7aCttiMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzNiOTQwZDE0LWI4YzQtNGMzZC05NzhmLWExYTNiN2EwYTgyYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDryngMA0GCSqGSIb3DQEBCwUAA4IBAQB05GHGra6W4IaaBf+YoJBU esirnKwympfzLZ4WsO/y+emXydzedyFz5jqnOhwFmcaQpkQiUYRiI5/GyubyYYgO +TreOFZJwIl7wVLLEoXJ1+Kbva4Q9O3yLFgwNQcD3htcgWGDT2y7qs84XYTT/vZR J/yok51ivOMmLXPZmD3ZeMwyelIusjZsxik5ByvM39kQlVQMc9mpksMBzAM2SN9x 8QU+urv7MGBpZH1FgOeprwatEgAvzGHrbVD345bMyzeYDYsk2Slwz13SC1XLNxKh A4SGPP922+zdnM9pSCWoZ3JKF1CQB/+v06KZoRWqFHU13HRLXLEoQL1eQfzaW9JF -----END CERTIFICATE-----Generated at Sat Sep 5 08:43:54 2026 by rpki-client