$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa File: 07bbdcc6-3088-4488-9174-6e4b19fef87e.roa (raw, json) Hash identifier: E0rfmwIO7VcNYVNcIUFU2FYHBHb9zEtuiB/sMcpVvvI= Subject key identifier: 00:BB:CA:E8:1C:3D:18:5D:4D:AD:18:17:65:19:F5:7A:4C:CE:98:4F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 139150C174DFB4EE745D4D7999F48332799E03F5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa Signing time: Sun 19 Oct 2025 00:00:21 +0000 ROA not before: Sun 19 Oct 2025 00:00:21 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:91:50:c1:74:df:b4:ee:74:5d:4d:79:99:f4:83:32:79:9e:03:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:00:21 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=7a058b6d78cf554304bb6b3ea4e9ab272494f107aad2030b6c73f0894ed1277a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:1c:9d:1e:fa:85:5f:95:29:0c:22:8c:dd: 3d:b1:c5:3e:30:a0:b0:ec:17:2c:31:d6:83:00:a7: c8:27:4b:0b:ac:c8:c1:ad:a5:d7:4c:5c:a4:9b:da: dc:00:fe:ab:c2:49:9e:b4:5b:f6:e4:87:9e:76:eb: ac:21:5a:04:ea:30:8f:30:02:5e:06:1f:3b:87:ce: 21:67:3c:8e:6a:6e:1b:34:eb:8f:00:95:17:53:99: ba:8c:00:e3:61:0a:15:d8:86:db:56:d8:60:d9:14: 1c:55:dd:36:a3:63:be:6e:77:ff:a8:f9:ea:59:8a: ee:67:b2:4f:03:7c:20:fe:d8:61:16:40:1c:3d:11: a7:4c:ef:20:a2:db:40:7c:69:73:8f:2d:c4:ce:f4: 74:a9:3a:ca:2e:13:37:07:b4:db:07:bc:c7:ef:74: 70:20:7a:a2:bd:33:5e:28:ff:42:0e:d3:3e:2d:72: 04:17:43:58:73:97:5a:c7:7a:96:72:3f:a3:6d:d6: 3b:03:f5:d7:01:90:ed:5c:53:25:4a:4e:16:ab:98: 95:41:5a:59:73:61:e2:f0:57:29:91:e9:4f:44:c5: 0d:6b:cf:f8:14:bb:8a:a0:44:c5:99:ee:70:f1:28: 95:f8:2e:5b:d3:b9:d0:49:ba:20:54:f4:82:fb:26: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BB:CA:E8:1C:3D:18:5D:4D:AD:18:17:65:19:F5:7A:4C:CE:98:4F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:2000::/40 Signature Algorithm: sha256WithRSAEncryption 4a:fb:58:94:e6:a6:18:09:3b:fb:13:11:17:28:b4:8c:f0:18: 22:45:2f:53:87:6d:c2:35:78:1e:f8:fa:d8:d9:34:32:12:d1: d1:df:96:38:49:fe:b5:13:aa:c4:a5:ed:2d:97:79:94:09:f8: 9c:43:7c:b5:24:da:42:9d:f7:39:ce:d0:85:86:d4:99:3b:4c: 9f:5b:e6:a8:d2:64:e1:b5:bc:3a:fd:ff:46:2a:44:87:20:66: 2a:83:97:20:54:6b:d7:da:e1:df:78:27:ba:1a:a6:fa:b2:8f: 12:98:a6:78:18:49:e5:6c:34:cc:42:7a:2d:60:60:7a:a9:e2: 73:d4:45:a1:a1:14:00:b7:eb:b7:9c:c3:ce:e4:4a:cc:11:e9: da:cc:a2:09:3e:02:88:c3:44:07:e8:77:a4:c5:10:60:04:50: cf:2a:db:ed:44:6a:9e:e4:fc:39:38:92:9e:5b:02:53:2d:a4: 03:cb:f6:eb:c5:cd:08:bc:56:cd:56:4e:fc:c8:16:84:56:0d: 04:1d:e7:2c:ec:c9:9d:5b:26:69:b9:9c:c3:50:e5:34:84:c8: a3:e0:0b:c7:34:3c:85:6c:b5:2d:6f:49:3f:12:17:71:cf:28: 45:3f:bf:f8:8f:91:a6:d5:5f:4e:ff:a6:f4:91:a0:0b:90:b2: f0:92:4c:4b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUE5FQwXTftO50XU15mfSDMnmeA/UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxOTAwMDAyMVoX DTI1MTEyMzIzNTk1OVowejFJMEcGA1UEBRNAN2EwNThiNmQ3OGNmNTU0MzA0YmI2 YjNlYTRlOWFiMjcyNDk0ZjEwN2FhZDIwMzBiNmM3M2YwODk0ZWQxMjc3YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3ccnR76hV+VKQwijN09scU+MKCw 7BcsMdaDAKfIJ0sLrMjBraXXTFykm9rcAP6rwkmetFv25IeeduusIVoE6jCPMAJe Bh87h84hZzyOam4bNOuPAJUXU5m6jADjYQoV2IbbVthg2RQcVd02o2O+bnf/qPnq WYruZ7JPA3wg/thhFkAcPRGnTO8gottAfGlzjy3EzvR0qTrKLhM3B7TbB7zH73Rw IHqivTNeKP9CDtM+LXIEF0NYc5dax3qWcj+jbdY7A/XXAZDtXFMlSk4Wq5iVQVpZ c2Hi8FcpkelPRMUNa8/4FLuKoETFme5w8SiV+C5b07nQSbogVPSC+yaGxQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAC7yugcPRhdTa0YF2UZ9XpMzphPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3YmJkY2M2LTMwODgtNDQ4OC05MTc0LTZlNGIxOWZlZjg3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7SAwDQYJKoZIhvcNAQELBQADggEBAEr7WJTmphgJO/sTERco tIzwGCJFL1OHbcI1eB74+tjZNDIS0dHfljhJ/rUTqsSl7S2XeZQJ+JxDfLUk2kKd 9znO0IWG1Jk7TJ9b5qjSZOG1vDr9/0YqRIcgZiqDlyBUa9fa4d94J7oapvqyjxKY pngYSeVsNMxCei1gYHqp4nPURaGhFAC367ecw87kSswR6drMogk+AojDRAfod6TF EGAEUM8q2+1Eap7k/Dk4kp5bAlMtpAPL9uvFzQi8Vs1WTvzIFoRWDQQd5yzsyZ1b Jmm5nMNQ5TSEyKPgC8c0PIVstS1vST8SF3HPKEU/v/iPkabVX07/pvSRoAuQsvCS TEs= -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:43 2025 by rpki-client