$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa File: 2f724fc4-af92-4f6e-9781-835f37854eec.roa (raw, json) Hash identifier: ECOus0EKGrzk5mqtqW/I66mw+eFcO6QneSVJTm0aZQ0= Subject key identifier: BE:14:0E:BF:0C:D8:0E:03:CB:A6:65:17:6F:65:D3:4F:EE:B2:A8:A2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 35C748A5491546E9F4FFEAFF400B88A9C80111B9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa Signing time: Wed 15 Oct 2025 00:40:53 +0000 ROA not before: Wed 15 Oct 2025 00:40:53 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1f:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c7:48:a5:49:15:46:e9:f4:ff:ea:ff:40:0b:88:a9:c8:01:11:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:40:53 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=942f6e826455d2d6d0281e21c99c9e2ea29769e415119b25ac93b69eb1e4684d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:aa:f5:0e:93:09:6d:c3:ea:09:86:56:4e: 4f:5c:f2:fe:d2:96:43:4d:66:76:ab:cb:1f:8a:e9: c4:a7:58:2a:e1:44:94:e5:8c:a7:86:4b:98:d9:36: 34:06:49:29:bb:c2:6c:c0:54:ab:4e:5b:3f:5c:0a: 75:32:4a:2e:89:50:66:ca:9b:69:50:3c:5a:2f:fd: 72:8c:a9:19:2a:e6:20:e5:7e:3d:08:4b:93:3f:7c: 24:a7:e0:03:02:59:4a:40:ba:40:fd:ce:08:19:f8: 5d:9a:bf:bd:82:ad:eb:1f:92:2a:7a:fb:a2:82:3a: a9:8c:ae:21:12:b2:a4:71:7f:7f:45:35:e5:23:e6: 01:e3:55:28:e0:14:f8:f5:19:30:a8:92:3d:e1:93: 56:47:f3:fd:80:6b:c2:df:69:b4:10:a3:2c:38:11: 47:03:69:dc:e4:02:63:4c:75:a6:17:a1:21:24:ac: 7d:3f:de:a3:94:78:10:e7:a7:c9:42:f5:f3:58:11: ad:df:d5:dd:75:db:92:8b:24:19:7b:72:7d:13:9a: c9:c9:c6:c5:7e:d2:9e:83:a9:64:d0:3e:de:c8:04: 37:2f:7d:0b:05:bd:d7:e6:37:da:b1:2c:3d:33:22: 42:ad:cd:83:07:f2:d6:2b:df:20:f8:44:96:e4:29: 87:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:14:0E:BF:0C:D8:0E:03:CB:A6:65:17:6F:65:D3:4F:EE:B2:A8:A2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1f:c00::/38 Signature Algorithm: sha256WithRSAEncryption 4a:04:01:ba:dd:8f:87:9b:69:3f:87:dd:a3:21:cd:e7:97:00: 71:92:cb:b3:27:e6:fd:fd:a5:05:91:13:e8:b7:20:ce:dd:49: a3:2a:92:06:b4:e5:66:54:89:a9:1e:f3:85:01:3b:70:f0:de: 7d:42:0c:2a:74:60:d6:6a:8e:af:4b:d6:1d:58:2a:dd:93:71: 80:ec:a2:26:8b:30:0d:4a:ca:d1:cf:39:3f:d6:57:5e:fd:ca: 9c:4c:dd:e0:9b:4f:79:2e:7e:88:0c:66:51:e3:fe:0a:c7:a0: 5e:2c:de:32:3a:52:b5:d4:aa:01:7f:a3:a8:ba:c2:d9:0b:5c: 5f:8e:2e:c2:b4:6f:6f:c1:28:70:1d:c4:20:10:19:67:3f:a6: 53:23:dd:2d:cc:c0:7e:9e:58:f0:29:6b:2d:46:c0:54:76:f3: 8e:c5:28:b1:61:d3:31:18:a4:f7:f6:30:c2:5b:f0:e6:2d:fb: 61:6f:41:3f:18:c5:84:06:44:42:30:4b:3e:55:37:70:ea:aa: 45:ab:66:0d:71:72:af:28:61:ef:8b:9b:19:eb:fd:6c:87:59: 37:dd:4c:8d:30:55:fc:09:a0:6f:36:f8:10:5e:b0:22:21:17: 06:97:b1:99:12:48:8c:b8:74:db:04:ed:06:36:23:03:81:0e: 71:ca:a2:a8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNcdIpUkVRun0/+r/QAuIqcgBEbkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNDA1M1oX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAOTQyZjZlODI2NDU1ZDJkNmQwMjgx ZTIxYzk5YzllMmVhMjk3NjllNDE1MTE5YjI1YWM5M2I2OWViMWU0Njg0ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusGq9Q6TCW3D6gmGVk5PXPL+0pZD TWZ2q8sfiunEp1gq4USU5YynhkuY2TY0Bkkpu8JswFSrTls/XAp1MkouiVBmyptp UDxaL/1yjKkZKuYg5X49CEuTP3wkp+ADAllKQLpA/c4IGfhdmr+9gq3rH5Iqevui gjqpjK4hErKkcX9/RTXlI+YB41Uo4BT49RkwqJI94ZNWR/P9gGvC32m0EKMsOBFH A2nc5AJjTHWmF6EhJKx9P96jlHgQ56fJQvXzWBGt39XddduSiyQZe3J9E5rJycbF ftKeg6lk0D7eyAQ3L30LBb3X5jfasSw9MyJCrc2DB/LWK98g+ESW5CmHfQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL4UDr8M2A4Dy6ZlF29l00/usqiiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmNzI0ZmM0LWFmOTItNGY2ZS05NzgxLTgzNWYzNzg1NGVlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHwwwDQYJKoZIhvcNAQELBQADggEBAEoEAbrdj4ebaT+H3aMh zeeXAHGSy7Mn5v39pQWRE+i3IM7dSaMqkga05WZUiake84UBO3Dw3n1CDCp0YNZq jq9L1h1YKt2TcYDsoiaLMA1KytHPOT/WV179ypxM3eCbT3kufogMZlHj/grHoF4s 3jI6UrXUqgF/o6i6wtkLXF+OLsK0b2/BKHAdxCAQGWc/plMj3S3MwH6eWPApay1G wFR2847FKLFh0zEYpPf2MMJb8OYt+2FvQT8YxYQGREIwSz5VN3DqqkWrZg1xcq8o Ye+Lmxnr/WyHWTfdTI0wVfwJoG82+BBesCIhFwaXsZkSSIy4dNsE7QY2IwOBDnHK oqg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:33 2025 by rpki-client