$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa File: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (raw, json) Hash identifier: Q826nO8V91uH1JkWDv8cfHhS+jZDK8fx34H9LEGu0ug= Subject key identifier: F5:98:F0:81:C7:39:89:F8:DF:08:A9:4A:9F:50:93:3E:07:26:90:54 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 5D1A542541B79B4623C890DC8325BCD1847A55CB Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa Signing time: Mon 03 Aug 2026 00:00:22 +0000 ROA not before: Mon 03 Aug 2026 00:00:22 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:1a:54:25:41:b7:9b:46:23:c8:90:dc:83:25:bc:d1:84:7a:55:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:22 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=0d8449b5ef02b364b8eec7e8c03a3bf8da19b263d5bef2600fa77f05cf395ef6, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:c6:8c:1d:92:ff:b2:33:42:ba:91:53:10: 15:6a:51:60:e8:80:8c:3f:5c:b5:be:39:01:2a:c1: b6:d1:79:66:66:02:13:3c:39:c8:9a:38:57:74:a6: 49:43:28:f7:b8:57:24:48:32:f0:ab:f4:85:ec:62: c9:0b:98:5b:af:7a:f7:73:92:74:e6:15:58:31:ed: 32:b3:a8:a1:7d:ad:46:3d:b0:ef:d2:f1:ea:cf:b2: 19:c8:72:4d:97:76:c0:db:48:0f:4b:d0:3d:de:4a: 79:a0:f3:97:5e:46:5d:cb:3a:fd:d6:4d:e3:f3:07: 5e:83:79:62:f7:26:c4:ec:50:5f:fc:eb:47:32:35: a4:34:30:63:f9:bf:99:79:37:7a:bc:1f:a0:75:6a: 31:bc:92:33:f7:9b:c7:ad:5f:97:99:bb:3b:3c:2b: c1:11:91:8b:21:eb:4b:c2:95:7a:1c:ad:43:b3:cb: 39:49:df:ad:f5:8c:12:08:1c:9c:b2:84:1a:ca:6d: 41:83:e3:29:7a:e3:ba:b0:d5:69:00:c3:8b:06:73: b7:0d:d3:52:cb:76:5f:31:c7:7a:e5:0b:3b:d8:8f: 41:aa:f3:03:ed:a1:50:b0:68:1c:c9:d3:fa:28:bb: be:8e:1e:e0:45:e5:a1:1e:cd:75:0c:b7:94:25:a4: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:98:F0:81:C7:39:89:F8:DF:08:A9:4A:9F:50:93:3E:07:26:90:54 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.196.0/22 Signature Algorithm: sha256WithRSAEncryption 25:0d:32:3e:97:a8:99:a6:78:04:24:b3:ff:c6:a8:55:63:09: 49:3c:b3:f5:15:1e:fa:55:df:81:f7:2e:1f:ed:51:b5:6a:40: e1:6e:21:e5:26:13:77:0c:43:69:db:15:41:24:2d:b1:6b:eb: 1a:4c:da:07:da:f1:7f:b7:8b:b1:24:5e:c7:c6:e8:b1:af:1c: f3:00:36:d1:a5:21:d6:83:e1:72:68:a1:16:67:3b:c7:7f:ac: ba:54:c2:c0:7a:a0:36:af:f2:45:83:21:15:46:f6:74:00:98: cf:58:bb:de:4f:dc:13:4c:66:64:12:c7:00:f1:22:25:b9:92: e3:27:c3:52:7f:6a:5d:bb:7d:2d:47:3a:fb:72:c3:e5:9c:08: 53:8f:76:47:8f:a4:59:fc:f9:01:79:9b:4a:ae:1f:ff:a3:47: 1e:f9:5c:29:c9:3d:1e:21:f3:b2:6c:a6:24:5e:0a:c8:60:93: 18:7e:ad:0e:4c:51:c4:87:d9:2d:fc:bf:aa:74:e2:75:de:78: a3:c4:d0:0f:38:bf:a0:d1:45:0f:ca:50:33:e8:db:97:01:3b: 62:b6:d8:2d:5e:a8:0a:75:59:8e:4c:5c:4c:7b:0c:61:a1:15: 14:18:32:9f:72:2b:49:36:79:f5:6e:d9:80:ae:ca:3d:31:8e: 54:83:ae:69 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUXRpUJUG3m0YjyJDcgyW80YR6VcswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyMloX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAMGQ4NDQ5YjVlZjAyYjM2NGI4ZWVj N2U4YzAzYTNiZjhkYTE5YjI2M2Q1YmVmMjYwMGZhNzdmMDVjZjM5NWVmNjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPnGjB2S/7IzQrqRUxAValFg6ICM P1y1vjkBKsG20XlmZgITPDnImjhXdKZJQyj3uFckSDLwq/SF7GLJC5hbr3r3c5J0 5hVYMe0ys6ihfa1GPbDv0vHqz7IZyHJNl3bA20gPS9A93kp5oPOXXkZdyzr91k3j 8wdeg3li9ybE7FBf/OtHMjWkNDBj+b+ZeTd6vB+gdWoxvJIz95vHrV+Xmbs7PCvB EZGLIetLwpV6HK1Ds8s5Sd+t9YwSCBycsoQaym1Bg+MpeuO6sNVpAMOLBnO3DdNS y3ZfMcd65Qs72I9BqvMD7aFQsGgcydP6KLu+jh7gReWhHs11DLeUJaT+bwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPWY8IHHOYn43wipSp9Qkz4HJpBUMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzgyNDU2ZmYyLWY4YzQtNGM1YS05NDU4LTgyZDkwOWY4M2Y3ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCrynEMA0GCSqGSIb3DQEBCwUAA4IBAQAlDTI+l6iZpngEJLP/xqhV YwlJPLP1FR76Vd+B9y4f7VG1akDhbiHlJhN3DENp2xVBJC2xa+saTNoH2vF/t4ux JF7HxuixrxzzADbRpSHWg+FyaKEWZzvHf6y6VMLAeqA2r/JFgyEVRvZ0AJjPWLve T9wTTGZkEscA8SIluZLjJ8NSf2pdu30tRzr7csPlnAhTj3ZHj6RZ/PkBeZtKrh// o0ce+VwpyT0eIfOybKYkXgrIYJMYfq0OTFHEh9kt/L+qdOJ13nijxNAPOL+g0UUP ylAz6NuXATtittgtXqgKdVmOTFxMewxhoRUUGDKfcitJNnn1btmArso9MY5Ug65p -----END CERTIFICATE-----Generated at Sat Sep 5 08:44:18 2026 by rpki-client