$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa File: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (raw, json) Hash identifier: GBUmV7kDiDil+MB1ROSLhi2YD7ufwLwA7D98kY68Ilw= Subject key identifier: E6:9C:FC:4E:6B:1C:29:C9:5C:4C:04:B1:A4:2B:40:ED:91:B2:39:54 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 101E1CCFF75C51FE3756284CA41DC5B6CF41946D Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa Signing time: Fri 17 Oct 2025 00:01:25 +0000 ROA not before: Fri 17 Oct 2025 00:01:25 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1e:1c:cf:f7:5c:51:fe:37:56:28:4c:a4:1d:c5:b6:cf:41:94:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 17 00:01:25 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=3e82c18853b259cb61affe9c8883de81e6980b1ddb1a92d892710d6a529afebf, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e5:8b:74:5d:08:0a:3b:64:1c:2a:49:b1:68: 9e:ed:dd:da:6f:d4:94:03:64:fe:55:7d:20:40:71: 7c:3c:89:4c:4c:95:15:fa:56:5b:07:ee:bb:65:32: 8c:c4:ce:4c:56:7f:c4:e5:b8:d7:d3:14:d6:ef:fd: af:d4:3f:03:f2:e7:f6:0d:bc:97:b5:a3:72:2d:19: 6d:b8:68:39:52:18:bf:64:e6:7c:27:5f:f6:1b:fb: 72:21:b7:0b:92:92:99:fd:f9:09:03:be:5e:32:dc: a2:12:27:bf:ac:7c:a7:ad:a3:e3:d5:c8:96:98:79: 4e:e6:3d:89:41:f0:1e:1d:a9:f3:ed:02:29:69:d6: fb:f2:ea:f4:3f:0c:6a:c9:08:53:ba:45:f1:c9:f6: ab:1d:af:96:a3:5b:02:22:ed:72:b5:99:e8:d0:0e: 1f:40:ff:4f:67:da:5d:6d:45:5d:f0:bb:14:83:e0: 8b:6f:7d:2b:51:1d:34:9d:e2:be:9c:7e:7b:c7:96: db:68:e1:ac:a6:77:5f:9e:f6:12:9b:dc:57:2c:2e: f8:de:a1:34:f8:4d:e9:d3:a3:0d:5d:73:43:d3:d4: 2e:b3:f8:62:c0:d8:ef:9f:aa:df:2f:30:e3:8a:93: 30:c8:2b:a5:26:a7:2f:c1:18:6c:6e:d9:a6:47:3f: 32:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9C:FC:4E:6B:1C:29:C9:5C:4C:04:B1:A4:2B:40:ED:91:B2:39:54 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.238.0/23 Signature Algorithm: sha256WithRSAEncryption 32:f8:48:2d:29:73:da:fb:76:86:76:79:99:18:9c:8f:79:76: 2d:49:de:2c:00:48:19:eb:12:b4:fb:65:67:48:0f:9c:db:99: 6d:a5:c0:08:66:d1:b0:1e:a1:39:15:9e:a3:ab:be:7c:e6:18: 65:cd:c8:7d:bd:dd:9f:9d:c4:91:9b:ba:63:f8:ae:35:9c:f9: 4c:3d:d0:b3:b0:40:8e:83:d9:93:94:f1:83:b5:81:f0:0e:25: 1b:29:ab:94:06:d4:3a:c1:2c:17:2e:57:e9:af:e9:ee:cb:e9: 9b:1e:65:55:45:b0:eb:aa:18:8a:89:4b:a8:05:7c:46:1e:8b: 31:66:d2:62:4b:05:43:28:57:2e:d7:eb:9d:02:fd:a7:ec:41: 1b:b7:16:c5:8e:b7:b2:7a:15:bd:52:70:9b:2c:fc:db:03:5f: 63:b6:85:a7:29:5b:1d:bf:65:b3:4b:09:ca:a5:37:b2:97:46: 78:b4:f2:90:93:57:49:78:72:34:38:12:f6:8b:86:48:3e:9e: a1:ba:d3:31:16:43:3f:8e:3f:71:ac:bd:6c:0c:c4:40:33:2b: 86:82:39:83:94:46:83:ef:c7:29:03:d2:55:b3:76:20:39:1b: da:b9:19:ad:45:46:31:69:a4:33:25:13:41:49:fa:6b:7c:f6: 9e:9a:3c:da -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUEB4cz/dcUf43VihMpB3Fts9BlG0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MTAxNzAwMDEyNVoX DTI1MTEyMTIzNTk1OVowejFJMEcGA1UEBRNAM2U4MmMxODg1M2IyNTljYjYxYWZm ZTljODg4M2RlODFlNjk4MGIxZGRiMWE5MmQ4OTI3MTBkNmE1MjlhZmViZjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uWLdF0ICjtkHCpJsWie7d3ab9SU A2T+VX0gQHF8PIlMTJUV+lZbB+67ZTKMxM5MVn/E5bjX0xTW7/2v1D8D8uf2DbyX taNyLRltuGg5Uhi/ZOZ8J1/2G/tyIbcLkpKZ/fkJA75eMtyiEie/rHynraPj1ciW mHlO5j2JQfAeHanz7QIpadb78ur0PwxqyQhTukXxyfarHa+Wo1sCIu1ytZno0A4f QP9PZ9pdbUVd8LsUg+CLb30rUR00neK+nH57x5bbaOGspndfnvYSm9xXLC743qE0 +E3p06MNXXND09Qus/hiwNjvn6rfLzDjipMwyCulJqcvwRhsbtmmRz8ygwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOac/E5rHCnJXEwEsaQrQO2RsjlUMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzQ4YTY3MTU2LTEyMmUtNDFkNC1hMmE4LTgwNDZjYzVlY2M0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBrynuMA0GCSqGSIb3DQEBCwUAA4IBAQAy+EgtKXPa+3aGdnmZGJyP eXYtSd4sAEgZ6xK0+2VnSA+c25ltpcAIZtGwHqE5FZ6jq7585hhlzch9vd2fncSR m7pj+K41nPlMPdCzsECOg9mTlPGDtYHwDiUbKauUBtQ6wSwXLlfpr+nuy+mbHmVV RbDrqhiKiUuoBXxGHosxZtJiSwVDKFcu1+udAv2n7EEbtxbFjreyehW9UnCbLPzb A19jtoWnKVsdv2WzSwnKpTeyl0Z4tPKQk1dJeHI0OBL2i4ZIPp6hutMxFkM/jj9x rL1sDMRAMyuGgjmDlEaD78cpA9JVs3YgORvauRmtRUYxaaQzJRNBSfprfPaemjza -----END CERTIFICATE-----Generated at Mon Oct 20 04:35:32 2025 by rpki-client