$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa File: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (raw, json) Hash identifier: NV3yneSLI5yJGt7cnV3Ta6BrskfYvxCuGX94eQwyA2M= Subject key identifier: 09:68:5D:C8:99:64:53:46:8A:C0:5E:05:88:04:1C:57:39:C9:72:39 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 521E364ECA3BAF5397CE38CD63ADC66851896E89 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa Signing time: Mon 03 Aug 2026 00:00:21 +0000 ROA not before: Mon 03 Aug 2026 00:00:21 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:1e:36:4e:ca:3b:af:53:97:ce:38:cd:63:ad:c6:68:51:89:6e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:21 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=c45e28aca83b0decb767893f1ed7af67f776d4f36c8f107f8fd4fa372bb3af98, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ef:61:bb:f8:da:92:6d:d1:c6:3f:bb:63:49: 24:b1:d9:84:ce:c1:21:b6:b4:d6:6a:2f:d6:fe:37: a8:f6:fd:5a:48:9e:15:00:e7:e6:0e:31:70:68:e0: 8b:55:95:88:76:f0:19:74:08:ab:30:83:d9:e1:aa: fd:18:11:51:80:c9:91:49:60:26:99:3a:41:b4:c9: 65:7c:d3:4b:ab:3a:52:cd:5c:ef:8d:9e:0e:ac:e8: 70:59:1a:67:4b:33:da:b0:a9:1c:de:1a:5c:6e:0f: a7:41:38:5e:d7:0c:9d:b8:30:d7:4d:1a:46:0d:55: c0:98:ca:57:d0:df:46:98:87:3e:ae:f9:70:71:e1: d5:60:56:04:1d:22:d0:ed:f9:cb:67:5b:8b:9f:7a: fe:0e:5b:f7:8f:fb:59:d2:5b:ca:a3:0d:ec:bb:9a: c9:45:b5:ca:6f:35:cc:db:7b:21:b4:95:de:c9:c2: 96:4e:7c:17:df:b5:69:a5:aa:20:b5:cf:f2:50:c8: 5b:f4:52:aa:c0:e9:70:a8:af:88:71:11:eb:3f:c9: 7c:ec:d0:d1:ac:ef:ca:60:f5:f0:35:11:66:67:b6: 45:eb:94:cc:44:1f:24:0c:74:dc:f7:6d:70:c3:c2: f2:81:fd:51:ca:26:8c:72:f0:d8:12:27:61:d3:c9: 14:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:68:5D:C8:99:64:53:46:8A:C0:5E:05:88:04:1C:57:39:C9:72:39 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.194.0/23 Signature Algorithm: sha256WithRSAEncryption 10:88:cc:59:5d:9a:56:50:84:ba:a0:bc:a9:e5:9a:82:7e:82: 84:87:d4:96:21:cd:91:ad:53:5f:8d:ac:f2:f4:98:d7:33:bf: 4a:2c:2d:14:3c:41:f9:1b:39:bd:1b:5e:a3:c3:b1:c4:fb:ac: a4:8c:28:84:31:25:ab:d9:87:37:5f:1f:f7:ab:e2:a7:55:6f: d3:88:37:65:d7:86:4e:f0:81:fd:bc:4e:2e:48:65:56:5e:f9: 64:04:67:d6:79:75:ca:0a:28:26:da:8c:19:41:b0:65:5e:e2: 4a:39:d1:55:3e:52:81:8c:f6:ff:d4:5c:7e:97:97:d4:cd:97: 9e:98:b4:04:be:8e:33:fa:78:1f:7d:d6:57:3c:56:6a:15:8d: f5:79:50:89:e8:0d:22:48:d0:99:7e:a2:9b:e8:45:eb:10:eb: 9e:9c:bd:32:98:9f:c1:61:56:51:94:1d:f7:68:3c:6e:85:d4: 90:ba:82:e7:49:74:d3:7a:ac:50:4a:7d:b6:0f:f5:01:da:0b: 18:68:cc:42:1e:2f:f7:c9:33:60:ca:7c:35:61:13:5d:bf:fa: 9a:51:5d:12:39:94:9f:bf:b8:5a:41:90:14:3a:f7:fc:c0:6a: 50:89:27:18:27:1b:ee:41:d9:52:25:ed:31:d1:93:98:ae:0e: 47:a9:39:59 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUUh42Tso7r1OXzjjNY63GaFGJbokwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyMVoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAYzQ1ZTI4YWNhODNiMGRlY2I3Njc4 OTNmMWVkN2FmNjdmNzc2ZDRmMzZjOGYxMDdmOGZkNGZhMzcyYmIzYWY5ODEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6e9hu/jakm3Rxj+7Y0kksdmEzsEh trTWai/W/jeo9v1aSJ4VAOfmDjFwaOCLVZWIdvAZdAirMIPZ4ar9GBFRgMmRSWAm mTpBtMllfNNLqzpSzVzvjZ4OrOhwWRpnSzPasKkc3hpcbg+nQThe1wyduDDXTRpG DVXAmMpX0N9GmIc+rvlwceHVYFYEHSLQ7fnLZ1uLn3r+Dlv3j/tZ0lvKow3su5rJ RbXKbzXM23shtJXeycKWTnwX37Vppaogtc/yUMhb9FKqwOlwqK+IcRHrP8l87NDR rO/KYPXwNRFmZ7ZF65TMRB8kDHTc921ww8Lygf1RyiaMcvDYEidh08kUlQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFAloXciZZFNGisBeBYgEHFc5yXI5MB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzZjZjU3YWE2LTZiYTMtNDNhZi1iYmQ1LTQ0NDg1ZTNiOWY2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBrynCMA0GCSqGSIb3DQEBCwUAA4IBAQAQiMxZXZpWUIS6oLyp5ZqC foKEh9SWIc2RrVNfjazy9JjXM79KLC0UPEH5Gzm9G16jw7HE+6ykjCiEMSWr2Yc3 Xx/3q+KnVW/TiDdl14ZO8IH9vE4uSGVWXvlkBGfWeXXKCigm2owZQbBlXuJKOdFV PlKBjPb/1Fx+l5fUzZeemLQEvo4z+ngffdZXPFZqFY31eVCJ6A0iSNCZfqKb6EXr EOuenL0ymJ/BYVZRlB33aDxuhdSQuoLnSXTTeqxQSn22D/UB2gsYaMxCHi/3yTNg ynw1YRNdv/qaUV0SOZSfv7haQZAUOvf8wGpQiScYJxvuQdlSJe0x0ZOYrg5HqTlZ -----END CERTIFICATE-----Generated at Sat Sep 5 08:43:55 2026 by rpki-client