$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa File: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (raw, json) Hash identifier: k7pzzb7UOogLzyI+ALFcZaO4Qks0yCOFh766YQdmoGM= Subject key identifier: E7:86:87:D7:5E:BF:93:63:3B:37:6E:4F:4B:B2:A2:F6:29:3D:28:57 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 28919DFBCB14B3C48F0A833B632F8FE11F6074E3 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa Signing time: Thu 22 Oct 2026 00:07:24 +0000 ROA not before: Thu 22 Oct 2026 00:07:24 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:91:9d:fb:cb:14:b3:c4:8f:0a:83:3b:63:2f:8f:e1:1f:60:74:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 22 00:07:24 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=512072f8e0e55616a8c94332f6a8ff20734afd24ced44ee296ba095351b7bc86, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:62:cc:37:27:e5:18:06:a7:4f:18:96:ae: 54:a8:77:6d:a9:e1:e3:69:66:7b:6b:17:d8:0e:5e: 3b:5c:b2:f0:e9:a4:b2:fd:73:c5:14:5d:27:38:e6: 0b:ae:a8:41:f1:66:73:b5:a7:6c:a4:1a:99:26:4f: c4:b8:0c:9e:74:c5:86:a6:1b:76:9e:68:30:a2:dc: 19:d2:cb:c1:7c:c2:7f:c6:21:65:eb:e0:92:0c:0b: e8:06:5a:c4:98:6c:d1:af:37:3b:29:c6:69:48:6a: 5c:90:de:c2:c9:31:ec:07:e6:c1:be:41:ed:22:5c: 0b:6a:13:ed:7b:0f:16:1c:4b:62:d8:48:4d:c6:64: 85:e3:c4:56:b2:83:8e:e6:68:df:40:08:79:99:88: 38:5e:d9:e0:05:73:f6:f9:d3:0f:59:96:03:a4:b8: be:0f:af:75:2d:1f:3c:0f:ad:fa:f1:b7:df:9c:60: d7:f3:a9:bc:d8:7f:31:95:9b:41:9b:f1:77:87:c1: 9f:56:dc:9d:83:44:c8:20:7e:e4:09:49:d7:4f:8d: 13:41:2c:f5:04:8c:41:e0:84:9c:39:5d:68:ed:a8: 92:3b:b8:41:e4:62:90:5d:c5:c7:2c:4f:ca:7b:5c: d0:45:9c:9d:5b:65:c7:5f:15:ff:db:bf:ac:a1:42: 2f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:86:87:D7:5E:BF:93:63:3B:37:6E:4F:4B:B2:A2:F6:29:3D:28:57 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.194.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:ff:48:0e:a7:83:1b:70:77:8b:c8:0f:1e:98:4c:27:0d:15: 1e:09:af:fb:e0:92:d7:7c:06:ce:27:cf:e3:7f:2e:cc:46:1b: bb:bf:69:98:b3:1d:07:57:4d:cb:d2:8b:25:60:c3:cf:6d:1d: 14:1b:b1:e2:03:d0:8e:e2:28:96:1c:e1:1c:bb:a6:8c:c4:72: fe:1b:3b:f5:b9:2b:61:87:c5:5b:a3:ed:86:68:2e:f8:23:f2: 73:61:32:ea:76:7e:59:d0:80:c2:38:78:e4:5a:21:ea:d2:be: 47:e0:11:e7:9e:7d:33:9e:72:77:ed:e9:82:20:ce:1b:72:fc: b3:04:ab:f0:d2:f4:08:0a:76:dd:9e:8f:3e:b9:76:9a:b6:06: f1:4e:8a:5b:1c:8d:d8:63:cd:42:b4:39:84:4e:56:4b:2e:b6: 12:49:84:d3:1d:62:9c:c8:db:12:19:74:6f:6a:93:4c:60:e5: 36:00:87:8f:ae:a0:93:0a:7d:92:e0:98:e2:b7:fa:d0:79:69: 06:cc:ad:60:c8:f5:c8:4b:db:1b:82:9f:54:80:e5:eb:6a:70: ea:4e:03:f7:d3:97:fd:48:73:10:61:b9:49:ff:7f:bf:70:ff: 66:66:cf:5a:50:37:a6:06:28:da:59:61:fd:1b:50:66:80:a0: 21:aa:8f:e8 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUKJGd+8sUs8SPCoM7Yy+P4R9gdOMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAyMjAwMDcyNFoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNANTEyMDcyZjhlMGU1NTYxNmE4Yzk0 MzMyZjZhOGZmMjA3MzRhZmQyNGNlZDQ0ZWUyOTZiYTA5NTM1MWI3YmM4NjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxlizDcn5RgGp08Ylq5UqHdtqeHj aWZ7axfYDl47XLLw6aSy/XPFFF0nOOYLrqhB8WZztadspBqZJk/EuAyedMWGpht2 nmgwotwZ0svBfMJ/xiFl6+CSDAvoBlrEmGzRrzc7KcZpSGpckN7CyTHsB+bBvkHt IlwLahPtew8WHEti2EhNxmSF48RWsoOO5mjfQAh5mYg4XtngBXP2+dMPWZYDpLi+ D691LR88D6368bffnGDX86m82H8xlZtBm/F3h8GfVtydg0TIIH7kCUnXT40TQSz1 BIxB4IScOV1o7aiSO7hB5GKQXcXHLE/Ke1zQRZydW2XHXxX/27+soUIvPQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOeGh9dev5NjOzduT0uyovYpPShXMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzZjZjU3YWE2LTZiYTMtNDNhZi1iYmQ1LTQ0NDg1ZTNiOWY2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBrynCMA0GCSqGSIb3DQEBCwUAA4IBAQBv/0gOp4MbcHeLyA8emEwn DRUeCa/74JLXfAbOJ8/jfy7MRhu7v2mYsx0HV03L0oslYMPPbR0UG7HiA9CO4iiW HOEcu6aMxHL+Gzv1uSthh8Vbo+2GaC74I/JzYTLqdn5Z0IDCOHjkWiHq0r5H4BHn nn0znnJ37emCIM4bcvyzBKvw0vQICnbdno8+uXaatgbxTopbHI3YY81CtDmETlZL LrYSSYTTHWKcyNsSGXRvapNMYOU2AIePrqCTCn2S4Jjit/rQeWkGzK1gyPXIS9sb gp9UgOXranDqTgP305f9SHMQYblJ/3+/cP9mZs9aUDemBijaWWH9G1BmgKAhqo/o -----END CERTIFICATE-----Generated at Sun Oct 25 01:27:37 2026 by rpki-client