$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3aa197c4-ad52-4dbd-9cbe-67990253cbf7.roa File: 3aa197c4-ad52-4dbd-9cbe-67990253cbf7.roa (raw, json) Hash identifier: Tdh8xFePgmT5KkXFJDDbLqddGd1U3ElGXq5Antka2Oo= Subject key identifier: 94:A0:28:78:CD:43:54:3A:F5:CC:4F:CE:21:FF:36:E8:D1:B8:EF:40 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 660FDF955CD88EA5C3DFAEA48FC563023397A023 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3aa197c4-ad52-4dbd-9cbe-67990253cbf7.roa Signing time: Wed 15 Oct 2025 00:20:33 +0000 ROA not before: Wed 15 Oct 2025 00:20:33 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0f:df:95:5c:d8:8e:a5:c3:df:ae:a4:8f:c5:63:02:33:97:a0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:20:33 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=fc207cf0453aa25bf846b61cf6a3a571adabb62c9f99978a86bdb64497884315, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f8:35:8a:53:e0:65:84:f2:a4:e1:b9:9c:a9: 4b:6b:73:38:9d:0a:64:a7:a6:47:1f:6c:ff:5e:30: e5:f3:92:6a:cd:a0:df:4d:ab:a9:bd:8a:ad:b4:25: 5b:4d:91:91:14:88:2e:9b:ea:19:29:2b:02:7c:aa: 20:61:22:cf:ab:64:bd:aa:52:a6:50:43:b0:52:69: 43:a2:ee:bd:90:2d:10:71:bb:3a:32:b0:3e:21:62: 8b:09:ef:93:91:7c:14:ca:23:38:66:6a:db:51:44: 98:43:07:83:6c:46:09:63:27:c7:42:c8:4b:db:e1: e3:7f:56:47:43:2b:ff:98:49:85:13:aa:40:a2:54: 53:44:93:e0:bf:2d:94:35:35:8e:20:56:d0:ca:22: d5:ff:c7:fd:17:6d:b1:80:30:38:59:0b:80:43:49: 4c:a3:ce:8a:34:f8:29:a0:45:1c:4b:39:54:01:17: d8:97:de:df:d3:06:73:78:cf:cd:16:35:6a:c4:98: d2:b6:e3:0e:89:74:19:7a:4c:f6:44:eb:11:41:5a: 21:f0:4d:3f:58:f1:b5:ef:7e:51:2a:58:78:1a:02: 44:d0:06:39:bb:c0:e0:12:aa:99:19:54:14:0a:24: 66:7a:ad:e4:76:f9:ca:b4:e7:26:d2:c2:44:66:10: 2a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A0:28:78:CD:43:54:3A:F5:CC:4F:CE:21:FF:36:E8:D1:B8:EF:40 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3aa197c4-ad52-4dbd-9cbe-67990253cbf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:f000::/40 Signature Algorithm: sha256WithRSAEncryption 12:62:32:e4:29:9f:aa:89:a6:25:b9:7d:6b:ed:5f:a4:4a:d4: 05:a8:09:d0:9a:47:25:e9:d4:65:a6:b8:cf:7f:ef:ba:a5:a6: 4d:3c:4e:aa:d7:bf:7d:16:29:65:e4:73:13:a3:7f:48:24:37: 25:5f:f5:10:21:9b:02:00:47:10:58:20:dc:44:55:7b:a0:f0: b6:a0:d1:b2:34:29:32:e8:51:ee:cd:00:ec:b7:e0:c2:dd:ed: fa:dd:f5:5c:c0:4f:c6:3b:10:6b:f9:63:5c:62:00:6e:3d:10: 90:ee:ab:1e:40:91:cd:4e:38:d2:42:10:59:de:8c:b5:3e:3f: 63:f4:5c:2b:59:2f:c0:cf:e4:16:4b:26:fb:f5:9f:4a:37:57: ee:2c:d1:6d:b6:26:f1:38:97:42:43:d2:6e:f7:c5:d0:f5:f0: f3:46:49:4e:52:3f:3c:1e:b0:60:d0:6c:51:b5:5d:f1:b6:fb: fd:69:58:d5:72:29:0c:c3:a6:71:73:97:40:14:6d:63:1e:a1: b0:60:84:85:62:88:fe:34:54:12:76:cf:45:7c:de:76:e4:62: 8a:a9:27:8e:2e:12:b2:65:24:9e:ba:d5:da:45:39:ba:66:3a: 47:98:45:c6:ee:1a:89:35:ec:ba:fb:4f:dc:20:74:f2:11:d2: 65:c2:dc:14 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZg/flVzYjqXD366kj8VjAjOXoCMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMjAzM1oX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAZmMyMDdjZjA0NTNhYTI1YmY4NDZi NjFjZjZhM2E1NzFhZGFiYjYyYzlmOTk5NzhhODZiZGI2NDQ5Nzg4NDMxNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/g1ilPgZYTypOG5nKlLa3M4nQpk p6ZHH2z/XjDl85JqzaDfTaupvYqttCVbTZGRFIgum+oZKSsCfKogYSLPq2S9qlKm UEOwUmlDou69kC0Qcbs6MrA+IWKLCe+TkXwUyiM4ZmrbUUSYQweDbEYJYyfHQshL 2+Hjf1ZHQyv/mEmFE6pAolRTRJPgvy2UNTWOIFbQyiLV/8f9F22xgDA4WQuAQ0lM o86KNPgpoEUcSzlUARfYl97f0wZzeM/NFjVqxJjStuMOiXQZekz2ROsRQVoh8E0/ WPG1735RKlh4GgJE0AY5u8DgEqqZGVQUCiRmeq3kdvnKtOcm0sJEZhAqQQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJSgKHjNQ1Q69cxPziH/NujRuO9AMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhYTE5N2M0LWFkNTItNGRiZC05Y2JlLTY3OTkwMjUzY2JmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNvAwDQYJKoZIhvcNAQELBQADggEBABJiMuQpn6qJpiW5fWvt X6RK1AWoCdCaRyXp1GWmuM9/77qlpk08TqrXv30WKWXkcxOjf0gkNyVf9RAhmwIA RxBYINxEVXug8Lag0bI0KTLoUe7NAOy34MLd7frd9VzAT8Y7EGv5Y1xiAG49EJDu qx5Akc1OONJCEFnejLU+P2P0XCtZL8DP5BZLJvv1n0o3V+4s0W22JvE4l0JD0m73 xdD18PNGSU5SPzwesGDQbFG1XfG2+/1pWNVyKQzDpnFzl0AUbWMeobBghIViiP40 VBJ2z0V83nbkYoqpJ44uErJlJJ661dpFObpmOkeYRcbuGok17Lr7T9wgdPIR0mXC 3BQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:54 2025 by rpki-client