$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/b3ba338e-4843-454b-abe5-65f09756225a.roa File: b3ba338e-4843-454b-abe5-65f09756225a.roa (raw, json) Hash identifier: ej5Jl8WN8vpG/jtiHBYWjgJxmlZgso4oyf4xH338b+c= Subject key identifier: 1A:A7:01:BF:B8:FD:5E:7E:86:4B:EB:2D:0C:E4:BD:21:A7:42:A8:22 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 3D32BC6E43BAA949BDBF254FF8C25D6407962A63 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/b3ba338e-4843-454b-abe5-65f09756225a.roa Signing time: Thu 22 Oct 2026 00:07:28 +0000 ROA not before: Thu 22 Oct 2026 00:07:28 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 00:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:32:bc:6e:43:ba:a9:49:bd:bf:25:4f:f8:c2:5d:64:07:96:2a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 22 00:07:28 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=7c381d46c330ff8da513c3ac614627a43be5490a6e4cff7f13bc52190265e03b, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:56:9e:a1:85:b4:98:ac:b3:e7:5c:40:05: bb:50:9e:36:7b:d2:04:19:d9:f7:f3:50:8e:a8:d0: e6:b4:fa:75:7a:86:f2:22:3e:24:c4:07:99:8a:e0: ce:33:4a:03:9b:83:41:87:ce:1f:84:77:41:e1:76: c0:f4:22:67:06:c6:a1:78:cb:31:c2:17:9c:42:29: d6:b9:cf:fc:22:34:d3:08:a0:92:7f:6a:97:e6:22: 9d:19:f3:65:ce:4a:06:06:86:e7:21:cd:27:0b:7b: 64:4c:f3:e0:44:d9:7a:c1:f6:3b:db:8a:dc:c0:94: cc:9b:87:eb:0d:c8:c2:52:a8:a1:fb:0d:a6:bf:ec: f6:0c:9e:08:9c:f3:ac:36:75:3e:70:06:64:4a:43: 29:b2:44:c3:c0:fb:20:50:7d:20:6d:4f:b4:5d:d0: 5f:bb:97:c3:09:c0:64:c9:7e:4c:7f:90:da:aa:33: 39:52:b6:61:47:94:91:92:50:2c:33:c1:5c:92:3b: c0:1e:af:f2:ce:de:88:58:bd:42:a8:c7:bf:f3:19: be:22:20:6a:7a:aa:5b:d1:81:4d:8a:e2:cb:8a:98: 6c:6b:d3:64:8a:f2:a2:9c:ee:f7:d9:33:ff:f2:a8: b2:42:55:61:d3:db:28:44:e7:ff:fd:af:e9:5f:75: 4d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A7:01:BF:B8:FD:5E:7E:86:4B:EB:2D:0C:E4:BD:21:A7:42:A8:22 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/b3ba338e-4843-454b-abe5-65f09756225a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.192.0/24 Signature Algorithm: sha256WithRSAEncryption 05:a7:2e:23:fb:56:7a:13:ab:46:40:4d:7c:4a:d0:4f:3f:48: 1b:60:0f:9e:13:e5:eb:a4:2e:bc:61:51:dc:d7:97:ae:8f:0f: 2d:ee:bc:ab:75:64:35:26:97:28:5c:1c:ff:bd:6a:ae:67:7e: 4b:0c:ca:5f:a8:5b:a0:6d:b5:55:04:ab:7f:fb:2e:60:ab:26: 2d:d6:e5:e5:34:e6:fe:0d:f2:b6:ef:58:9c:c5:32:60:18:6e: 6d:41:ff:6f:bf:f7:03:8e:31:40:0c:9b:ad:3e:2a:ce:99:0b: f6:c4:2b:ba:18:8e:f5:40:03:6a:83:30:52:59:a2:6e:01:98: 76:11:ad:b0:af:d4:80:c3:70:cb:f2:41:1d:72:ed:2a:c9:dc: 2a:39:79:05:6d:07:86:e5:16:c8:ed:ec:10:5b:ec:33:00:29: 29:28:53:51:fd:46:fa:e7:48:eb:85:74:3e:e7:d8:ce:2a:09: 20:0e:7d:27:d6:02:34:59:c4:c2:c3:15:14:f9:da:af:6e:f1: 27:a7:0e:6b:83:bd:fb:17:8f:9e:77:19:c6:c5:95:36:a8:8d: bd:71:17:ae:65:f5:09:04:a0:62:30:25:ac:4d:fe:b6:2c:7e: fc:2a:1f:f3:d8:8f:29:b3:91:ba:4e:17:db:6d:0a:2b:fb:ad: 5e:c7:28:0c -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUPTK8bkO6qUm9vyVP+MJdZAeWKmMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAyMjAwMDcyOFoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAN2MzODFkNDZjMzMwZmY4ZGE1MTNj M2FjNjE0NjI3YTQzYmU1NDkwYTZlNGNmZjdmMTNiYzUyMTkwMjY1ZTAzYjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYtWnqGFtJiss+dcQAW7UJ42e9IE Gdn381COqNDmtPp1eobyIj4kxAeZiuDOM0oDm4NBh84fhHdB4XbA9CJnBsaheMsx whecQinWuc/8IjTTCKCSf2qX5iKdGfNlzkoGBobnIc0nC3tkTPPgRNl6wfY724rc wJTMm4frDcjCUqih+w2mv+z2DJ4InPOsNnU+cAZkSkMpskTDwPsgUH0gbU+0XdBf u5fDCcBkyX5Mf5DaqjM5UrZhR5SRklAsM8FckjvAHq/yzt6IWL1CqMe/8xm+IiBq eqpb0YFNiuLLiphsa9NkivKinO732TP/8qiyQlVh09soROf//a/pX3VNYwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFBqnAb+4/V5+hkvrLQzkvSGnQqgiMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 L2IzYmEzMzhlLTQ4NDMtNDU0Yi1hYmU1LTY1ZjA5NzU2MjI1YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQArynAMA0GCSqGSIb3DQEBCwUAA4IBAQAFpy4j+1Z6E6tGQE18StBP P0gbYA+eE+XrpC68YVHc15eujw8t7ryrdWQ1JpcoXBz/vWquZ35LDMpfqFugbbVV BKt/+y5gqyYt1uXlNOb+DfK271icxTJgGG5tQf9vv/cDjjFADJutPirOmQv2xCu6 GI71QANqgzBSWaJuAZh2Ea2wr9SAw3DL8kEdcu0qydwqOXkFbQeG5RbI7ewQW+wz ACkpKFNR/Ub650jrhXQ+59jOKgkgDn0n1gI0WcTCwxUU+dqvbvEnpw5rg737F4+e dxnGxZU2qI29cReuZfUJBKBiMCWsTf62LH78Kh/z2I8ps5G6ThfbbQor+61exygM -----END CERTIFICATE-----Generated at Sun Oct 25 03:13:50 2026 by rpki-client