$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa File: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (raw, json) Hash identifier: e1DBvmMaPGpJSh8i8g0PuQJn1YYGKeTyLpjn4SuF59M= Subject key identifier: 26:D8:A5:B1:77:0A:BD:21:B4:78:18:C4:83:AD:E2:AF:9B:7F:46:DC Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 6FCB9789ADE3EAEBE32A1A6ED0BF51A80AC8A134 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa Signing time: Thu 22 Oct 2026 00:07:26 +0000 ROA not before: Thu 22 Oct 2026 00:07:26 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 00:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cb:97:89:ad:e3:ea:eb:e3:2a:1a:6e:d0:bf:51:a8:0a:c8:a1:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 22 00:07:26 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=dccad5a82609d24a0378f0fccee6a5ffd57f83e0e2024498b034ca525c9aaf20, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:30:3e:32:06:ee:e1:23:85:c5:db:37:22:42: 00:a5:f2:fb:d5:1d:25:2c:fc:58:1d:bf:d3:6c:29: 6d:4a:24:0f:d5:58:9f:b4:c0:49:8f:4a:16:07:7b: 50:90:f5:a4:03:c1:a2:63:c4:d1:16:00:f8:49:96: de:10:23:f7:de:d4:73:9b:6e:52:60:40:0f:15:3d: 5f:0a:74:87:d0:e4:d7:b4:e3:25:cf:0f:46:06:25: 47:be:c5:ec:cd:de:5f:28:97:1c:b1:6f:5d:51:71: 61:81:de:e5:63:c3:fd:24:4a:54:7b:31:9c:40:17: 47:d8:15:22:47:20:73:41:82:3b:51:b5:5d:f7:f7: b1:37:d9:2f:a4:a2:3b:a2:aa:7a:18:39:17:75:b8: db:ac:ef:f2:49:8b:fd:71:20:e2:8e:5d:fb:4c:bd: cc:a9:66:8e:83:ea:65:74:de:f3:d2:28:ef:c7:b9: c8:cc:3e:ee:a5:75:5b:cc:7a:61:e7:8d:60:c2:c0: fd:f0:cd:46:8e:d0:c8:0f:ba:37:25:33:d9:ee:4e: f6:76:4e:60:40:5a:f3:0d:f4:94:5e:d9:db:b1:9d: d8:60:0e:e6:e3:28:f2:21:60:0a:0a:bc:b0:b2:52: d7:32:b2:91:4c:65:c1:cd:99:52:38:eb:b0:10:bc: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D8:A5:B1:77:0A:BD:21:B4:78:18:C4:83:AD:E2:AF:9B:7F:46:DC X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.240.0/20 Signature Algorithm: sha256WithRSAEncryption 37:9b:38:16:f2:be:3f:15:f8:29:73:1c:cc:18:11:80:ff:dd: d0:7b:a6:da:e4:7e:83:a7:b4:69:7a:d8:81:02:5f:8d:b1:a8: be:bc:b1:39:4e:41:95:b7:22:08:7d:90:18:10:84:03:b5:9e: d7:2a:c0:dc:9b:31:fe:8f:69:05:23:fd:62:e0:6a:ed:e9:14: 77:a0:3b:c7:cd:da:8e:68:09:bf:62:59:5f:00:45:ad:a2:ed: b6:2d:24:b6:1f:37:6e:ef:8c:a6:a4:60:fc:65:3b:5d:41:3f: 9a:aa:f3:e0:78:d9:45:9d:4b:b5:46:12:f5:38:00:51:74:95: 43:fa:3e:e2:76:66:58:7b:1e:ed:44:59:b8:b4:8e:de:38:5c: 62:8e:ea:8f:26:95:fa:46:87:54:7c:cc:b2:79:9a:20:c1:40: 93:df:93:4f:66:97:98:8f:ea:59:26:67:5c:c8:02:89:70:dd: 7d:aa:66:fc:6e:94:bf:76:f8:5d:79:f4:5b:ee:71:7c:d9:6b: 8f:d3:49:6b:7b:a0:ff:b7:19:4c:34:d9:f4:87:5f:52:0f:fc: 4b:0c:e0:3d:60:a0:87:1a:bf:92:03:f0:56:81:14:d6:41:33: 07:99:2f:f2:34:e4:42:f3:54:a5:e1:8e:56:52:83:35:8d:e3: b6:10:70:62 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUb8uXia3j6uvjKhpu0L9RqArIoTQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAyMjAwMDcyNloX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAZGNjYWQ1YTgyNjA5ZDI0YTAzNzhm MGZjY2VlNmE1ZmZkNTdmODNlMGUyMDI0NDk4YjAzNGNhNTI1YzlhYWYyMDEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TA+Mgbu4SOFxds3IkIApfL71R0l LPxYHb/TbCltSiQP1ViftMBJj0oWB3tQkPWkA8GiY8TRFgD4SZbeECP33tRzm25S YEAPFT1fCnSH0OTXtOMlzw9GBiVHvsXszd5fKJccsW9dUXFhgd7lY8P9JEpUezGc QBdH2BUiRyBzQYI7UbVd9/exN9kvpKI7oqp6GDkXdbjbrO/ySYv9cSDijl37TL3M qWaOg+pldN7z0ijvx7nIzD7upXVbzHph541gwsD98M1GjtDID7o3JTPZ7k72dk5g QFrzDfSUXtnbsZ3YYA7m4yjyIWAKCrywslLXMrKRTGXBzZlSOOuwELyq8QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFCbYpbF3Cr0htHgYxIOt4q+bf0bcMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 Lzc0ZWZlOGIzLWQzOWMtNGE4Yi05YjdiLTU5OTRhYTRjOGQ4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQErynwMA0GCSqGSIb3DQEBCwUAA4IBAQA3mzgW8r4/FfgpcxzMGBGA /93Qe6ba5H6Dp7RpetiBAl+Nsai+vLE5TkGVtyIIfZAYEIQDtZ7XKsDcmzH+j2kF I/1i4Grt6RR3oDvHzdqOaAm/YllfAEWtou22LSS2Hzdu74ympGD8ZTtdQT+aqvPg eNlFnUu1RhL1OABRdJVD+j7idmZYex7tRFm4tI7eOFxijuqPJpX6RodUfMyyeZog wUCT35NPZpeYj+pZJmdcyAKJcN19qmb8bpS/dvhdefRb7nF82WuP00lre6D/txlM NNn0h19SD/xLDOA9YKCHGr+SA/BWgRTWQTMHmS/yNORC81Sl4Y5WUoM1jeO2EHBi -----END CERTIFICATE-----Generated at Sun Oct 25 06:46:42 2026 by rpki-client