$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa File: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (raw, json) Hash identifier: EYImvr29ra2F/O4KTQhRVqHeXq3TuWtI5rObt3hFbnA= Subject key identifier: 03:1C:6C:F3:17:56:38:AC:A1:0F:56:78:9D:A4:CD:57:72:AB:53:B4 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 4F453110F4C6AECEC39F8EA5FFC57463313ECF2E Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa Signing time: Mon 03 Aug 2026 00:00:23 +0000 ROA not before: Mon 03 Aug 2026 00:00:23 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:45:31:10:f4:c6:ae:ce:c3:9f:8e:a5:ff:c5:74:63:31:3e:cf:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:23 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=b25baafb9318d48c6dd17d9b624fb83d10f3b32d6181644df10bc03f27a8e671, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:c7:bb:ea:e6:55:a5:34:5f:6c:ba:a5:0c: 50:4d:68:59:f4:09:a9:48:ef:cc:c4:81:88:51:a1: 4d:1f:aa:c9:9a:f3:51:8b:fc:df:4b:54:ec:d3:d9: 32:ee:31:63:16:9b:02:d8:c8:d8:06:9d:3b:23:bb: aa:be:55:6f:c7:31:eb:29:f3:d0:5d:37:8b:61:93: af:25:b8:88:4f:ce:43:17:83:e9:9b:37:a3:ad:66: 06:3f:82:07:9e:6f:da:f5:62:22:6a:21:65:85:09: 45:9d:2e:22:de:98:ec:c2:0b:f3:e2:7b:de:bf:8f: 25:d9:4a:53:f5:95:eb:94:cc:41:70:c1:74:b9:47: 45:66:e5:82:b1:3a:18:20:dc:44:1f:ec:a8:1b:2a: 3f:de:c7:c9:e7:13:25:09:14:d2:ae:7e:04:7d:a0: a1:21:48:1f:ac:94:b9:b1:25:32:e6:39:8c:19:84: 88:ea:9a:84:a2:64:f0:c5:b1:b7:56:64:82:3e:53: 2a:c3:c3:e3:f0:93:a3:04:83:6a:63:67:e3:49:7a: b2:3a:24:98:b6:8d:fb:cd:43:9f:9b:c7:d5:e8:37: 66:88:da:10:9d:f0:56:12:c2:f2:27:37:44:39:1e: 75:ef:63:7c:71:30:e8:cc:b0:e7:d8:95:62:46:28: df:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1C:6C:F3:17:56:38:AC:A1:0F:56:78:9D:A4:CD:57:72:AB:53:B4 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.240.0/20 Signature Algorithm: sha256WithRSAEncryption 72:69:2a:5e:be:07:8f:8d:6b:76:25:94:ff:e1:65:63:36:2f: e9:d1:c2:1d:ee:80:b8:d0:ac:df:70:0f:b9:c4:07:25:9e:73: 65:8e:01:36:49:47:f2:d7:0f:be:3c:c7:6b:95:b6:07:9f:e1: 40:9b:9d:4d:86:f6:49:f7:90:9b:9c:07:96:dd:47:84:e1:e9: 3d:22:68:0b:ad:52:42:3f:5f:c1:fa:79:41:66:e8:ed:a7:71: 21:48:57:c6:f4:16:2f:71:53:78:a2:c6:e2:93:c0:91:35:9a: 3f:23:33:5c:c7:dd:a4:16:86:a8:1c:aa:5b:77:c7:8a:47:7d: f9:a6:f7:7d:8d:7e:70:8b:06:2a:a2:04:36:d8:2a:64:5b:65: de:33:2c:f6:b9:34:20:ad:70:24:c2:29:be:44:e0:96:ec:3d: 52:82:13:b6:7f:56:4f:7a:d6:fe:9b:21:7c:71:e9:ca:2a:7e: e9:d1:21:62:d6:61:a5:f6:79:c6:7b:6d:43:3f:9a:20:de:86: b9:f7:df:56:e6:43:33:0c:08:39:ba:99:b2:74:20:f4:09:15: 4f:c3:18:4d:1e:fc:d8:44:82:77:06:2b:93:32:70:6f:29:2d: 26:d9:2a:d1:3b:fb:c6:1c:31:fb:2a:4b:fc:78:96:3d:26:b4: 33:4f:3d:ea -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUT0UxEPTGrs7Dn46l/8V0YzE+zy4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyM1oX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAYjI1YmFhZmI5MzE4ZDQ4YzZkZDE3 ZDliNjI0ZmI4M2QxMGYzYjMyZDYxODE2NDRkZjEwYmMwM2YyN2E4ZTY3MTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZfHu+rmVaU0X2y6pQxQTWhZ9Amp SO/MxIGIUaFNH6rJmvNRi/zfS1Ts09ky7jFjFpsC2MjYBp07I7uqvlVvxzHrKfPQ XTeLYZOvJbiIT85DF4PpmzejrWYGP4IHnm/a9WIiaiFlhQlFnS4i3pjswgvz4nve v48l2UpT9ZXrlMxBcMF0uUdFZuWCsToYINxEH+yoGyo/3sfJ5xMlCRTSrn4EfaCh IUgfrJS5sSUy5jmMGYSI6pqEomTwxbG3VmSCPlMqw8Pj8JOjBINqY2fjSXqyOiSY to37zUOfm8fV6DdmiNoQnfBWEsLyJzdEOR5172N8cTDozLDn2JViRijfXQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFAMcbPMXVjisoQ9WeJ2kzVdyq1O0MB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 Lzc0ZWZlOGIzLWQzOWMtNGE4Yi05YjdiLTU5OTRhYTRjOGQ4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQErynwMA0GCSqGSIb3DQEBCwUAA4IBAQByaSpevgePjWt2JZT/4WVj Ni/p0cId7oC40KzfcA+5xAclnnNljgE2SUfy1w++PMdrlbYHn+FAm51NhvZJ95Cb nAeW3UeE4ek9ImgLrVJCP1/B+nlBZujtp3EhSFfG9BYvcVN4osbik8CRNZo/IzNc x92kFoaoHKpbd8eKR335pvd9jX5wiwYqogQ22CpkW2XeMyz2uTQgrXAkwim+ROCW 7D1SghO2f1ZPetb+myF8cenKKn7p0SFi1mGl9nnGe21DP5og3oa5999W5kMzDAg5 upmydCD0CRVPwxhNHvzYRIJ3BiuTMnBvKS0m2SrRO/vGHDH7Kkv8eJY9JrQzTz3q -----END CERTIFICATE-----Generated at Sat Sep 5 08:43:52 2026 by rpki-client