$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa File: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (raw, json) Hash identifier: 08q2O5O5oVmNxk4BNjhuMscxxtdmm3vZP0iC3ZndTbU= Subject key identifier: 8C:5D:46:70:38:D4:CA:0A:AA:13:FE:CB:6A:BD:9E:02:F9:E5:74:44 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 0FA1A2A496BAA569C0FFC3A2A9E50BA318D00AB4 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa Signing time: Mon 03 Aug 2026 00:00:22 +0000 ROA not before: Mon 03 Aug 2026 00:00:22 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a1:a2:a4:96:ba:a5:69:c0:ff:c3:a2:a9:e5:0b:a3:18:d0:0a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:22 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=75b825029afa31d7fbd45f018bcaeb077817ec03938834e9f74d6773e8eaf7cb, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:47:1a:4b:c3:d4:4d:8d:32:82:e6:d9:56: 43:9e:25:60:a8:4b:ea:97:b1:c9:29:d6:ab:08:8e: 6f:b5:87:2e:09:7c:ce:e3:ef:7f:f9:5d:6b:76:52: fa:7e:3a:8d:d3:93:4d:a8:a0:26:4b:e3:00:ae:4b: f2:cc:d0:bd:b9:c3:92:3a:6b:2d:d3:fe:3a:1a:f3: 1e:25:b0:0e:26:bb:53:49:ce:8d:6d:ed:4d:1d:f9: 1f:33:8d:5c:b3:73:09:fd:4a:c7:d3:f2:7f:01:cd: e1:df:22:93:3d:d5:6d:57:2a:78:b3:77:50:55:87: 95:0e:cd:39:8a:9d:cd:fc:bf:37:76:c6:30:49:91: bd:12:3b:99:53:f6:b0:68:5b:3d:78:f3:b2:24:f0: ff:14:d7:5e:1f:9a:01:db:06:28:61:20:69:26:db: 20:dd:10:62:a4:77:57:9c:31:fa:aa:58:b3:0b:3e: 0f:90:8b:e8:81:6d:cc:74:89:5d:60:ce:c7:2c:27: 7a:a7:c9:40:4e:09:c4:fa:98:39:56:a3:a3:95:29: f6:63:7b:dd:94:2f:ad:67:b4:7d:7c:94:43:58:c6: c8:d7:d9:d4:e8:43:cb:22:48:ec:03:df:4c:dc:04: 4b:50:d6:4b:3a:fb:1c:54:dd:a2:ff:2a:4a:d7:ec: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5D:46:70:38:D4:CA:0A:AA:13:FE:CB:6A:BD:9E:02:F9:E5:74:44 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.238.0/23 Signature Algorithm: sha256WithRSAEncryption 40:84:71:3f:85:a7:e5:41:dd:50:47:74:b4:17:c1:cc:68:0e: 71:2a:2b:70:e3:fe:24:50:b3:03:c3:06:69:16:95:03:cc:9a: 40:cd:f0:34:d5:63:b2:22:10:84:1c:d5:95:d8:ce:18:1a:0b: ae:f4:55:96:ba:de:36:8c:8a:dd:1c:92:a4:89:29:3a:a9:17: e8:30:bb:28:c9:07:d1:36:1b:ef:b8:3f:39:0f:6e:18:9a:cb: db:dd:b5:0c:5a:55:79:07:4f:d2:bd:7c:d3:82:44:5e:a5:79: 66:35:fc:05:33:96:f9:c8:86:5a:2d:96:19:3f:34:65:4b:fa: f1:1f:3b:7a:f3:e5:c2:59:63:8e:ef:e7:32:ce:96:61:52:42: f5:45:2b:3c:f7:7b:66:f8:e2:3d:e2:e2:8b:16:ef:75:6f:41: 82:f2:d7:9a:e9:20:9e:30:39:16:83:1d:ce:50:a2:5d:1c:99: d5:4b:ee:ff:2e:15:b5:79:24:4f:fb:50:8a:08:01:5b:97:16: 17:21:ad:50:27:df:88:f2:1a:61:86:49:04:d3:ac:28:55:fd: 62:22:9e:c6:d7:dc:e5:cc:14:ff:9c:67:eb:e3:e0:a2:c7:df: 2f:a5:8e:49:0e:6c:ad:30:d5:3b:2d:09:54:f4:a9:4b:1f:32: 26:07:a9:32 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUD6GipJa6pWnA/8OiqeULoxjQCrQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyMloX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNANzViODI1MDI5YWZhMzFkN2ZiZDQ1 ZjAxOGJjYWViMDc3ODE3ZWMwMzkzODgzNGU5Zjc0ZDY3NzNlOGVhZjdjYjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa5HGkvD1E2NMoLm2VZDniVgqEvq l7HJKdarCI5vtYcuCXzO4+9/+V1rdlL6fjqN05NNqKAmS+MArkvyzNC9ucOSOmst 0/46GvMeJbAOJrtTSc6Nbe1NHfkfM41cs3MJ/UrH0/J/Ac3h3yKTPdVtVyp4s3dQ VYeVDs05ip3N/L83dsYwSZG9EjuZU/awaFs9ePOyJPD/FNdeH5oB2wYoYSBpJtsg 3RBipHdXnDH6qlizCz4PkIvogW3MdIldYM7HLCd6p8lATgnE+pg5VqOjlSn2Y3vd lC+tZ7R9fJRDWMbI19nU6EPLIkjsA99M3ARLUNZLOvscVN2i/ypK1+xHzQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFIxdRnA41MoKqhP+y2q9ngL55XREMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzQ4YTY3MTU2LTEyMmUtNDFkNC1hMmE4LTgwNDZjYzVlY2M0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBrynuMA0GCSqGSIb3DQEBCwUAA4IBAQBAhHE/haflQd1QR3S0F8HM aA5xKitw4/4kULMDwwZpFpUDzJpAzfA01WOyIhCEHNWV2M4YGguu9FWWut42jIrd HJKkiSk6qRfoMLsoyQfRNhvvuD85D24Ymsvb3bUMWlV5B0/SvXzTgkRepXlmNfwF M5b5yIZaLZYZPzRlS/rxHzt68+XCWWOO7+cyzpZhUkL1RSs893tm+OI94uKLFu91 b0GC8tea6SCeMDkWgx3OUKJdHJnVS+7/LhW1eSRP+1CKCAFblxYXIa1QJ9+I8hph hkkE06woVf1iIp7G19zlzBT/nGfr4+Cix98vpY5JDmytMNU7LQlU9KlLHzImB6ky -----END CERTIFICATE-----Generated at Sat Sep 5 08:43:51 2026 by rpki-client