$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa File: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (raw, json) Hash identifier: wv/XALieHNmWHJ4L6VooZmXjZEEkgxXVG9hW7kw4pts= Subject key identifier: 5B:A9:2D:18:2E:C4:23:21:42:4B:1E:A0:C2:B7:DE:75:E0:AF:FA:10 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 4AEC1DF70B4ED08B518422EBEDD425F3FDDC65AE Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa Signing time: Thu 22 Oct 2026 00:07:25 +0000 ROA not before: Thu 22 Oct 2026 00:07:25 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ec:1d:f7:0b:4e:d0:8b:51:84:22:eb:ed:d4:25:f3:fd:dc:65:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Oct 22 00:07:25 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=f1bfe3708ab7746dc9ade10ecbc1b66fce2750ede9d9907e5641f4acb5335042, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:2a:04:74:01:30:33:55:92:c8:93:d9:0f: f2:80:ea:8a:04:f1:cb:9f:02:45:3d:50:7b:fe:03: c5:e6:29:78:c2:54:11:4f:51:68:90:b1:42:04:1c: 01:ac:70:77:bf:a7:4f:15:1f:fa:d9:7a:64:f2:44: b5:c3:4a:4d:23:93:0e:53:d3:a0:73:e9:b0:0d:4f: 5d:4b:7b:80:57:31:de:be:a8:2c:b8:8a:81:4b:b3: 9a:ac:35:b1:0f:c3:25:aa:00:87:ec:b0:e6:77:67: 30:06:92:41:0b:1b:64:62:a7:82:03:25:cc:f1:7c: d2:6b:6e:41:f5:75:03:5c:e4:0e:c3:e1:79:a4:87: 52:c1:aa:f1:3c:6e:44:1b:5e:42:9a:d6:eb:4d:c8: 7a:2c:f1:94:3a:99:8c:22:32:29:55:8f:14:96:3b: 99:72:ff:a1:5f:93:55:15:92:02:08:68:3b:2c:54: da:d4:03:98:b1:b1:6e:bc:99:96:33:11:b4:7e:b3: 55:1c:75:b9:8b:b2:12:b5:85:66:c0:33:44:ba:04: 2c:fd:3c:ea:70:d7:19:d1:8e:15:e2:45:77:4c:e6: 2f:ab:6f:3f:10:e1:5f:2b:8c:67:7b:df:38:61:6b: f8:ea:f4:fe:5d:08:dc:bf:b4:b8:8d:d4:43:d5:c9: b3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A9:2D:18:2E:C4:23:21:42:4B:1E:A0:C2:B7:DE:75:E0:AF:FA:10 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.128.0/18 Signature Algorithm: sha256WithRSAEncryption a3:e1:c3:17:ae:a9:6d:33:83:a2:4d:1b:dd:d0:7e:59:3e:e9: cd:60:34:b4:4b:c1:e3:7b:7f:c7:6e:fb:cc:ac:6b:ca:27:83: 19:7d:b0:ad:94:ff:64:2f:5f:44:48:7e:05:dc:3b:90:43:d6: 65:c9:e1:74:67:8e:45:ee:24:0d:b0:96:1b:a7:f8:30:64:49: 81:dc:c6:a4:26:21:e7:b3:f3:c6:98:18:92:aa:bb:87:a9:02: 7e:a9:2f:77:c2:db:ea:28:aa:db:35:e9:d3:1b:17:2e:85:fe: 43:24:f8:06:1f:a8:52:18:0b:af:00:ff:59:7b:36:6d:4b:80: ed:45:2b:81:f8:bb:5a:46:77:58:8d:c7:93:49:97:c7:98:75: 0b:32:a5:d2:3d:fe:53:88:07:12:01:21:4e:1c:aa:91:02:90: 9f:1e:1b:94:1a:0c:d0:31:86:af:6e:e4:ee:75:ad:75:8a:02: 58:a2:6b:35:17:36:d5:b1:2b:f9:f7:5f:87:0d:29:a3:20:63: b0:47:c5:e9:16:08:28:f3:2f:6b:5c:c6:e3:f2:b1:17:86:b2: 75:12:56:6c:40:aa:84:ff:eb:25:bf:68:8b:af:12:47:a6:a7: 9a:3b:ef:af:28:b5:f5:dc:ed:27:4f:e6:dd:64:87:60:18:c7: 52:19:b5:c0 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUSuwd9wtO0ItRhCLr7dQl8/3cZa4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MTAyMjAwMDcyNVoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAZjFiZmUzNzA4YWI3NzQ2ZGM5YWRl MTBlY2JjMWI2NmZjZTI3NTBlZGU5ZDk5MDdlNTY0MWY0YWNiNTMzNTA0MjEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe8qBHQBMDNVksiT2Q/ygOqKBPHL nwJFPVB7/gPF5il4wlQRT1FokLFCBBwBrHB3v6dPFR/62Xpk8kS1w0pNI5MOU9Og c+mwDU9dS3uAVzHevqgsuIqBS7OarDWxD8MlqgCH7LDmd2cwBpJBCxtkYqeCAyXM 8XzSa25B9XUDXOQOw+F5pIdSwarxPG5EG15CmtbrTch6LPGUOpmMIjIpVY8UljuZ cv+hX5NVFZICCGg7LFTa1AOYsbFuvJmWMxG0frNVHHW5i7IStYVmwDNEugQs/Tzq cNcZ0Y4V4kV3TOYvq28/EOFfK4xne984YWv46vT+XQjcv7S4jdRD1cmzmwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFFupLRguxCMhQkseoMK33nXgr/oQMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzllMzdmODU1LTQ4YmYtNDIwYS1hODZjLTVlZWI0ZmMxZjc5MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGrymAMA0GCSqGSIb3DQEBCwUAA4IBAQCj4cMXrqltM4OiTRvd0H5Z PunNYDS0S8Hje3/HbvvMrGvKJ4MZfbCtlP9kL19ESH4F3DuQQ9ZlyeF0Z45F7iQN sJYbp/gwZEmB3MakJiHns/PGmBiSqruHqQJ+qS93wtvqKKrbNenTGxcuhf5DJPgG H6hSGAuvAP9ZezZtS4DtRSuB+LtaRndYjceTSZfHmHULMqXSPf5TiAcSASFOHKqR ApCfHhuUGgzQMYavbuTuda11igJYoms1FzbVsSv591+HDSmjIGOwR8XpFggo8y9r XMbj8rEXhrJ1ElZsQKqE/+slv2iLrxJHpqeaO++vKLX13O0nT+bdZIdgGMdSGbXA -----END CERTIFICATE-----Generated at Thu Nov 5 05:08:20 2026 by rpki-client