$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa File: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (raw, json) Hash identifier: AuAujhXdgm5mBGRTRbp9PUBSto8ttdqG3SjYXkZJhNU= Subject key identifier: 06:29:23:C6:2B:84:4B:08:EA:DF:54:9F:54:4C:E8:CB:9B:26:13:D1 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 3DA2E3EC4CA116736D2266965FE8F84EC69C99EE Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa Signing time: Thu 22 Oct 2026 00:07:25 +0000 ROA not before: Thu 22 Oct 2026 00:07:25 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a2:e3:ec:4c:a1:16:73:6d:22:66:96:5f:e8:f8:4e:c6:9c:99:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 22 00:07:25 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=59cfb3b1c6ab1ad46fa133ad4b45424c1df0e2f9d9807dfcc1aa87bc5d25a7f3, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:d7:fe:f1:0c:57:e8:e3:97:f8:7b:98:f4: 1e:29:be:3a:49:09:a9:32:47:f2:51:57:82:32:c7: 2d:32:50:15:23:c0:cc:e1:e1:ed:83:7b:9d:24:28: 14:16:7a:e7:b0:bb:82:78:0d:27:60:cb:1d:b8:40: 00:c4:cb:58:07:7c:12:6d:09:44:3d:7e:e1:32:9b: 53:fa:5c:fc:eb:2d:bc:2a:2a:2a:81:3d:ba:7e:1b: c4:6e:18:cf:b7:8a:e3:5c:43:52:37:65:7c:ac:f3: 6c:c9:82:23:d1:05:c0:1d:17:60:9c:c7:92:85:1d: d7:f6:6a:85:5f:87:a1:b1:81:b3:3d:86:39:df:79: 27:8f:61:88:61:74:09:4b:53:e5:39:62:7e:16:9c: c2:83:a4:22:f3:7e:47:b4:80:87:6f:a4:fb:d4:44: c8:04:11:74:f7:35:28:2c:d2:12:85:4b:6a:b1:97: a8:a3:39:a0:67:4f:05:9a:3d:b0:82:4b:1b:00:18: 4f:b6:7c:97:94:dc:c8:32:96:11:96:dd:8d:33:02: 5a:9d:42:46:77:84:6d:50:23:0a:51:ee:fa:ec:1b: 2f:4a:d2:c6:be:ed:04:e4:48:de:8d:d4:48:bb:74: 7a:bc:66:31:87:3e:f7:b6:4d:3e:ab:79:1e:31:8b: d6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:29:23:C6:2B:84:4B:08:EA:DF:54:9F:54:4C:E8:CB:9B:26:13:D1 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.238.0/23 Signature Algorithm: sha256WithRSAEncryption a3:12:3b:92:c0:99:e7:91:ba:6d:d5:94:08:44:64:b1:0a:28: 2f:d3:52:d4:a1:5f:e3:f7:9a:b7:b5:03:ea:50:7c:bb:e0:49: c2:92:de:41:68:4b:48:a9:b9:42:22:3f:54:f7:22:de:a7:c0: 56:08:c8:18:0c:3f:23:31:4f:50:37:c0:4d:af:6a:69:f6:51: ac:74:12:ee:6b:45:2e:d7:da:c7:44:02:83:04:6f:f4:d1:44: da:c1:ad:c4:a7:b5:db:2b:5a:8c:19:34:42:af:6f:f2:cf:ec: 73:f9:70:c1:f9:aa:b0:47:be:ab:78:3b:8a:56:5e:2f:1a:e3: 8b:bc:91:96:2f:18:4a:8c:5f:21:14:2e:d4:c5:2b:7f:62:58: 90:95:d0:e6:51:a1:ec:bc:a4:37:a1:01:d4:9f:56:4d:26:ab: 52:1a:02:e2:bc:f6:07:8d:70:03:f1:25:cf:49:20:6c:31:ff: cc:92:e8:66:12:a9:79:5a:bf:2f:08:3b:87:d8:9b:e1:2c:be: 93:91:ae:b8:73:ac:b3:b9:ad:6a:60:3d:19:b8:e1:48:b9:ea: 66:0f:19:01:a4:f8:a4:0a:5a:d0:ae:d7:a8:5d:80:6f:fa:8e: 5f:ba:3f:8c:90:1a:76:c3:9c:20:0e:f4:6a:06:09:26:2c:10: 5c:47:e3:2d -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUPaLj7EyhFnNtImaWX+j4Tsacme4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAyMjAwMDcyNVoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNANTljZmIzYjFjNmFiMWFkNDZmYTEz M2FkNGI0NTQyNGMxZGYwZTJmOWQ5ODA3ZGZjYzFhYTg3YmM1ZDI1YTdmMzEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuHX/vEMV+jjl/h7mPQeKb46SQmp MkfyUVeCMsctMlAVI8DM4eHtg3udJCgUFnrnsLuCeA0nYMsduEAAxMtYB3wSbQlE PX7hMptT+lz86y28KioqgT26fhvEbhjPt4rjXENSN2V8rPNsyYIj0QXAHRdgnMeS hR3X9mqFX4ehsYGzPYY533knj2GIYXQJS1PlOWJ+FpzCg6Qi835HtICHb6T71ETI BBF09zUoLNIShUtqsZeoozmgZ08Fmj2wgksbABhPtnyXlNzIMpYRlt2NMwJanUJG d4RtUCMKUe767BsvStLGvu0E5EjejdRIu3R6vGYxhz73tk0+q3keMYvWMwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFAYpI8YrhEsI6t9Un1RM6MubJhPRMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzQ4YTY3MTU2LTEyMmUtNDFkNC1hMmE4LTgwNDZjYzVlY2M0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBrynuMA0GCSqGSIb3DQEBCwUAA4IBAQCjEjuSwJnnkbpt1ZQIRGSx Cigv01LUoV/j95q3tQPqUHy74EnCkt5BaEtIqblCIj9U9yLep8BWCMgYDD8jMU9Q N8BNr2pp9lGsdBLua0Uu19rHRAKDBG/00UTawa3Ep7XbK1qMGTRCr2/yz+xz+XDB +aqwR76reDuKVl4vGuOLvJGWLxhKjF8hFC7UxSt/YliQldDmUaHsvKQ3oQHUn1ZN JqtSGgLivPYHjXAD8SXPSSBsMf/MkuhmEql5Wr8vCDuH2JvhLL6Tka64c6yzua1q YD0ZuOFIuepmDxkBpPikClrQrteoXYBv+o5fuj+MkBp2w5wgDvRqBgkmLBBcR+Mt -----END CERTIFICATE-----Generated at Sat Oct 24 12:48:29 2026 by rpki-client