$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/082ff1eb-44aa-43f9-9667-adb2b519afec.roa File: 082ff1eb-44aa-43f9-9667-adb2b519afec.roa (raw, json) Hash identifier: wrrgeq8cd+eUotsfYhUX4ItaxY39tnOCFIjwcff1KAg= Subject key identifier: 3C:5C:10:E7:43:96:20:71:50:8A:BD:BC:44:FB:0C:57:7D:65:7B:F2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 049A9096892183959B0FD200864E678322AC768F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/082ff1eb-44aa-43f9-9667-adb2b519afec.roa Signing time: Wed 08 Oct 2025 00:00:35 +0000 ROA not before: Wed 08 Oct 2025 00:00:35 +0000 ROA not after: Wed 12 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9a:90:96:89:21:83:95:9b:0f:d2:00:86:4e:67:83:22:ac:76:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 8 00:00:35 2025 GMT Not After : Nov 12 23:59:59 2025 GMT Subject: serialNumber=7616d3ddb46e52ada6c8efaeaa1b3b31f6b48b30b9b1041769b8df298da3fb87, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:2c:32:97:6d:3e:eb:63:06:49:1a:4e:5e: 0a:08:df:27:08:9d:4a:c0:d3:f2:d2:ca:72:27:83: be:72:0f:9a:71:4e:92:49:65:36:a7:2e:5e:f0:9e: c2:cd:0e:9a:ed:f7:18:cc:d2:ff:a5:71:22:75:f3: bd:c6:2b:2d:30:46:8c:cd:28:8c:05:50:43:3b:fa: ae:38:9d:6c:13:ff:16:07:58:5e:c7:09:d4:3b:69: 01:2b:76:2c:7a:fd:a9:05:30:58:04:e0:a8:67:22: 61:86:94:9a:e1:19:23:7f:7e:23:4d:67:32:71:16: 2e:f0:05:e6:49:d3:30:ec:09:06:98:dd:aa:fe:30: 32:d9:f4:b1:96:3b:69:f5:dd:17:77:56:d4:a4:ee: 76:d1:a7:b4:78:88:df:86:2f:c2:0e:9c:4e:14:e3: c8:c3:ee:1f:6a:c8:6a:87:96:03:20:1a:c7:69:8e: 24:aa:86:d5:2f:e7:fe:1c:8a:c7:91:8b:ec:40:9f: 92:e3:c8:1c:f1:46:5d:c5:03:43:34:0e:10:2a:f4: 69:37:c0:04:1e:9e:3a:dd:32:89:8c:9e:0c:e4:cd: 2f:7f:32:c5:92:6a:e4:ac:0a:93:13:89:8b:09:fd: 5f:df:fb:0a:26:8d:08:e0:7f:0b:11:86:be:67:32: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5C:10:E7:43:96:20:71:50:8A:BD:BC:44:FB:0C:57:7D:65:7B:F2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/082ff1eb-44aa-43f9-9667-adb2b519afec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:2800::/40 Signature Algorithm: sha256WithRSAEncryption 99:19:8e:3f:0b:52:e2:77:a4:ad:e6:8f:43:6b:56:73:74:a7: e3:ee:6c:72:46:10:74:4b:02:c2:2c:7d:f5:72:1c:ec:1e:37: a5:81:6e:00:ff:60:ac:cd:46:a6:19:f9:52:31:7d:be:16:18: 32:3d:98:ec:2d:24:f1:e9:25:53:1c:29:4b:89:82:91:d3:f5: 44:0a:9e:ec:d4:3f:2a:61:d4:ef:0c:43:32:3f:7e:5f:36:fa: 83:5e:9c:ee:8e:93:42:c3:36:a6:4e:71:cb:59:8d:0b:f7:60: 0f:ea:c5:be:e1:6d:d3:16:49:6d:c3:22:c3:0b:0b:de:c9:10: fd:f6:69:e2:d2:69:40:b4:66:15:b4:b7:7f:7c:da:23:08:80: 2c:25:79:31:56:14:3e:fd:d4:89:57:38:c9:21:42:e6:49:ef: 94:65:d0:0c:a5:8c:ee:b3:d2:d8:87:e3:73:f4:71:9a:b5:87: d4:75:1f:c7:ea:92:7f:04:c4:bc:22:c7:d6:46:e1:c8:a3:d1: 96:b0:10:7c:9e:5a:1e:f4:36:5a:62:8f:86:9a:f3:73:f9:96: 5b:f4:96:4e:81:5e:95:f9:4f:e0:92:c2:e0:05:4a:26:69:54: 0d:9f:8c:cd:a9:28:b6:2c:9f:98:ab:23:ad:ad:aa:5f:56:7c: d0:81:0e:2a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBJqQlokhg5WbD9IAhk5ngyKsdo8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwODAwMDAzNVoX DTI1MTExMjIzNTk1OVowejFJMEcGA1UEBRNANzYxNmQzZGRiNDZlNTJhZGE2Yzhl ZmFlYWExYjNiMzFmNmI0OGIzMGI5YjEwNDE3NjliOGRmMjk4ZGEzZmI4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZUsMpdtPutjBkkaTl4KCN8nCJ1K wNPy0spyJ4O+cg+acU6SSWU2py5e8J7CzQ6a7fcYzNL/pXEidfO9xistMEaMzSiM BVBDO/quOJ1sE/8WB1hexwnUO2kBK3Ysev2pBTBYBOCoZyJhhpSa4Rkjf34jTWcy cRYu8AXmSdMw7AkGmN2q/jAy2fSxljtp9d0Xd1bUpO520ae0eIjfhi/CDpxOFOPI w+4fashqh5YDIBrHaY4kqobVL+f+HIrHkYvsQJ+S48gc8UZdxQNDNA4QKvRpN8AE Hp463TKJjJ4M5M0vfzLFkmrkrAqTE4mLCf1f3/sKJo0I4H8LEYa+ZzK/awIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDxcEOdDliBxUIq9vET7DFd9ZXvyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4MmZmMWViLTQ0YWEtNDNmOS05NjY3LWFkYjJiNTE5YWZlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYCgwDQYJKoZIhvcNAQELBQADggEBAJkZjj8LUuJ3pK3mj0Nr VnN0p+PubHJGEHRLAsIsffVyHOweN6WBbgD/YKzNRqYZ+VIxfb4WGDI9mOwtJPHp JVMcKUuJgpHT9UQKnuzUPyph1O8MQzI/fl82+oNenO6Ok0LDNqZOcctZjQv3YA/q xb7hbdMWSW3DIsMLC97JEP32aeLSaUC0ZhW0t3982iMIgCwleTFWFD791IlXOMkh QuZJ75Rl0AyljO6z0tiH43P0cZq1h9R1H8fqkn8ExLwix9ZG4cij0ZawEHyeWh70 Nlpij4aa83P5llv0lk6BXpX5T+CSwuAFSiZpVA2fjM2pKLYsn5irI62tql9WfNCB Dio= -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:45 2025 by rpki-client