$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/b3ba338e-4843-454b-abe5-65f09756225a.roa File: b3ba338e-4843-454b-abe5-65f09756225a.roa (raw, json) Hash identifier: Mf2NIJH9IfPzZ7oAHeUn9AKZQZwtos7P5QRYym1AnzM= Subject key identifier: A1:30:92:C9:18:B7:61:25:E1:01:6F:4D:EA:72:75:82:9F:A2:C3:48 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 0FA4CFBFB82B9451EF8F5D2232520D325D134FC9 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/b3ba338e-4843-454b-abe5-65f09756225a.roa Signing time: Mon 03 Aug 2026 00:00:25 +0000 ROA not before: Mon 03 Aug 2026 00:00:25 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a4:cf:bf:b8:2b:94:51:ef:8f:5d:22:32:52:0d:32:5d:13:4f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:25 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=8cd100f0682dd6c8cd8d75ef6539ce95f16d808cf7610bc4142164bbf4556b97, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:c9:73:2f:7c:de:e0:d9:c5:72:15:b1:12: 11:37:1e:a0:3f:b6:ec:ef:ad:79:62:7d:ca:f3:ca: b8:f9:5e:a6:c9:5d:0f:77:18:58:88:49:34:f1:ee: c0:49:7f:7f:1c:f3:e4:1e:55:06:9b:2d:43:70:e8: 33:74:1b:9d:3e:f5:da:f9:54:83:11:97:11:41:db: 8a:03:c1:17:2d:54:ad:9e:c6:ab:18:cf:4c:fd:b0: a3:b7:62:7f:0d:24:dc:7a:c1:e7:d4:cb:bd:a9:f2: f2:fd:d3:83:a9:05:b1:59:b2:54:48:9b:e9:89:61: cd:5a:0c:3c:ba:dd:ba:64:39:68:28:20:c4:17:c7: 81:8b:62:64:a7:b1:7b:cf:b9:c7:22:5b:1a:4c:e9: 85:09:da:d7:c6:16:e3:2f:08:d3:a5:45:cd:de:cc: bc:3d:4e:20:73:d6:28:c4:d6:1e:66:94:a1:56:d9: 6a:bf:ca:52:3a:ca:fe:d9:75:e2:6f:dc:94:a1:df: 43:62:0f:2e:b1:eb:25:95:ff:e4:a2:bb:11:06:21: d8:53:98:9d:f7:17:50:2a:09:05:db:04:08:7b:4a: 19:6b:e2:73:2e:c9:2a:b8:16:94:62:8a:bf:11:99: 22:73:1a:61:54:59:24:9b:80:3f:32:8a:9e:12:2e: 1f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:30:92:C9:18:B7:61:25:E1:01:6F:4D:EA:72:75:82:9F:A2:C3:48 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/b3ba338e-4843-454b-abe5-65f09756225a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.192.0/24 Signature Algorithm: sha256WithRSAEncryption 56:92:5c:84:8a:61:7f:a6:12:62:97:8a:82:0d:a9:9f:58:96: ee:1c:eb:c8:37:6f:b8:7a:16:0e:6a:5c:39:d9:a4:2a:36:d6: c6:2b:3c:49:14:e1:8e:85:4e:39:f6:5a:25:9d:ef:70:25:46: e6:92:9d:23:c0:4b:fb:4d:be:00:9c:77:2b:0c:60:20:e5:a9: d3:08:c1:62:81:56:fd:b1:78:bf:d1:94:91:73:57:4d:0c:9b: 58:62:67:0f:00:0c:75:e8:8a:ba:56:31:b3:79:2a:cb:f4:9f: 6e:1d:ea:3f:10:ae:13:80:03:fa:79:d6:57:d6:58:72:ed:f8: ee:04:c7:1c:6e:c9:db:72:7b:62:73:7d:9c:63:cf:e1:2e:94: 0b:25:9d:58:d8:ce:a3:e9:e6:73:9c:44:f9:39:b4:70:c7:b0: 0d:58:54:e9:7c:77:ae:db:d2:d1:1d:4e:05:6b:2a:a4:1f:c2: c7:21:e9:a9:5f:83:b8:9a:55:4b:78:2e:68:86:3d:29:2e:11: 5d:2f:fd:e5:32:8b:87:62:27:c4:cc:a4:8a:9e:bc:79:ac:f1: 72:2a:91:f7:b6:21:6d:7b:97:c8:67:0c:a0:31:75:e5:94:dd: 2a:a6:61:ea:10:d3:86:7f:ed:f0:d5:a4:47:d7:88:14:51:7f: 71:9b:5e:7d -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUD6TPv7grlFHvj10iMlINMl0TT8kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyNVoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAOGNkMTAwZjA2ODJkZDZjOGNkOGQ3 NWVmNjUzOWNlOTVmMTZkODA4Y2Y3NjEwYmM0MTQyMTY0YmJmNDU1NmI5NzEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQXJcy983uDZxXIVsRIRNx6gP7bs 7615Yn3K88q4+V6myV0PdxhYiEk08e7ASX9/HPPkHlUGmy1DcOgzdBudPvXa+VSD EZcRQduKA8EXLVStnsarGM9M/bCjt2J/DSTcesHn1Mu9qfLy/dODqQWxWbJUSJvp iWHNWgw8ut26ZDloKCDEF8eBi2Jkp7F7z7nHIlsaTOmFCdrXxhbjLwjTpUXN3sy8 PU4gc9YoxNYeZpShVtlqv8pSOsr+2XXib9yUod9DYg8usesllf/korsRBiHYU5id 9xdQKgkF2wQIe0oZa+JzLskquBaUYoq/EZkicxphVFkkm4A/MoqeEi4fRwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKEwkskYt2El4QFvTepydYKfosNIMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 L2IzYmEzMzhlLTQ4NDMtNDU0Yi1hYmU1LTY1ZjA5NzU2MjI1YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQArynAMA0GCSqGSIb3DQEBCwUAA4IBAQBWklyEimF/phJil4qCDamf WJbuHOvIN2+4ehYOalw52aQqNtbGKzxJFOGOhU459lolne9wJUbmkp0jwEv7Tb4A nHcrDGAg5anTCMFigVb9sXi/0ZSRc1dNDJtYYmcPAAx16Iq6VjGzeSrL9J9uHeo/ EK4TgAP6edZX1lhy7fjuBMccbsnbcntic32cY8/hLpQLJZ1Y2M6j6eZznET5ObRw x7ANWFTpfHeu29LRHU4FayqkH8LHIempX4O4mlVLeC5ohj0pLhFdL/3lMouHYifE zKSKnrx5rPFyKpH3tiFte5fIZwygMXXllN0qpmHqENOGf+3w1aRH14gUUX9xm159 -----END CERTIFICATE-----Generated at Sat Sep 5 08:43:55 2026 by rpki-client