$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa File: 4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa (raw, json) Hash identifier: X4TMyPZF43g74vP0q83b5yFTFBLnAAjvMy5S3eoC6Rk= Subject key identifier: 90:C7:12:93:BE:D0:E5:3D:34:0E:8F:89:58:68:55:85:9C:49:CC:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 245682D3AC8BC7129A364595836DFBC60F53CFCA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa Signing time: Fri 17 Oct 2025 00:01:59 +0000 ROA not before: Fri 17 Oct 2025 00:01:59 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:56:82:d3:ac:8b:c7:12:9a:36:45:95:83:6d:fb:c6:0f:53:cf:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 17 00:01:59 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=aa09cdb7a178b2d44083eeea970f7478c39b9ae192c4bda9fe56d768a01fadbc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:19:09:69:6e:77:7d:80:af:21:28:d3:45:f6: df:12:d1:55:be:1e:e4:48:2b:2f:39:bc:89:87:fe: 22:f5:04:28:7c:be:61:32:1b:84:4f:16:c7:1c:2e: aa:1e:03:b4:a0:ea:7a:d3:85:9b:66:1f:4b:8c:bf: 28:ca:d5:87:54:bd:ff:93:8a:98:39:ad:08:e3:f8: 34:98:41:ab:79:16:9e:aa:ac:3d:bf:a9:27:84:bc: ff:18:61:70:16:5f:f8:90:85:3b:ea:62:2c:85:c4: 46:5b:99:86:4f:5e:ea:fd:d6:01:66:a9:c1:e9:6e: 1d:1c:fd:a5:09:8b:9b:b4:86:c3:1b:af:06:bf:95: b4:b5:68:89:77:03:31:ba:5d:bd:1a:74:7c:84:0d: c1:14:52:b9:68:2b:f5:93:34:d7:d3:fe:4b:b2:14: 7a:42:7e:17:f8:32:87:68:ae:45:ab:19:ee:36:bb: eb:a4:24:c9:ca:57:8a:90:51:00:8a:0b:e3:dd:42: 46:f0:fe:27:84:6f:6c:a6:e8:6c:83:bf:4a:80:32: e6:53:b4:07:7a:1c:92:18:5a:ac:7a:4b:50:80:af: 24:86:da:84:47:93:37:78:03:42:b7:c2:44:ba:c1: 1c:11:ee:08:7d:03:e9:18:55:61:03:69:bb:4c:05: 84:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C7:12:93:BE:D0:E5:3D:34:0E:8F:89:58:68:55:85:9C:49:CC:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:e000::/40 Signature Algorithm: sha256WithRSAEncryption 7e:75:6f:7e:75:52:21:6d:cc:57:0a:66:05:ab:61:01:d7:13: fd:b0:03:0f:36:de:de:81:7d:80:f0:0b:41:6b:35:c4:2b:b2: 17:f6:93:41:54:f5:14:8c:39:7d:f9:e1:a9:22:04:25:0d:9e: e1:28:f7:44:ba:af:56:f7:fe:88:c3:1d:65:0c:25:db:96:0b: 73:34:9f:2a:1b:af:f7:fb:45:79:1b:cb:01:b6:33:4e:79:a4: 85:a4:ad:de:14:72:3c:9a:1c:bf:83:39:dd:ad:15:dd:aa:45: 3a:86:f6:df:d0:67:c7:fd:1a:ae:3b:61:cb:82:42:1e:9a:c1: 9c:d1:b5:6a:30:5f:08:ac:85:cb:ed:c0:57:43:18:2a:e6:47: 21:0d:4e:2d:3f:fa:30:90:5f:37:1d:54:de:28:9c:15:46:6e: da:58:ac:bc:92:c6:bf:70:8a:07:2d:7b:40:9e:fb:c1:53:88: 1d:0d:d5:97:9a:8b:a5:b4:8e:41:fb:ea:ff:8d:11:e4:40:20: 92:20:02:73:e9:22:c2:4e:b7:8d:d6:9a:d1:1e:72:50:d6:f7: b1:89:34:6c:3c:7a:fc:24:a1:e9:a9:b0:3f:b4:d3:4e:bc:58: c3:3b:04:9e:68:46:83:63:92:dd:ec:68:d4:b0:f5:21:01:94: 6b:50:84:8a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJFaC06yLxxKaNkWVg237xg9Tz8owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNzAwMDE1OVoX DTI1MTEyMTIzNTk1OVowejFJMEcGA1UEBRNAYWEwOWNkYjdhMTc4YjJkNDQwODNl ZWVhOTcwZjc0NzhjMzliOWFlMTkyYzRiZGE5ZmU1NmQ3NjhhMDFmYWRiYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BkJaW53fYCvISjTRfbfEtFVvh7k SCsvObyJh/4i9QQofL5hMhuETxbHHC6qHgO0oOp604WbZh9LjL8oytWHVL3/k4qY Oa0I4/g0mEGreRaeqqw9v6knhLz/GGFwFl/4kIU76mIshcRGW5mGT17q/dYBZqnB 6W4dHP2lCYubtIbDG68Gv5W0tWiJdwMxul29GnR8hA3BFFK5aCv1kzTX0/5LshR6 Qn4X+DKHaK5FqxnuNrvrpCTJyleKkFEAigvj3UJG8P4nhG9spuhsg79KgDLmU7QH ehySGFqsektQgK8khtqER5M3eANCt8JEusEcEe4IfQPpGFVhA2m7TAWErwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJDHEpO+0OU9NA6PiVhoVYWcScziMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiN2JlYzhiLTZkNmEtNGYwNS04MjYxLWUwNmQ5ZjNkMmRiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+uAwDQYJKoZIhvcNAQELBQADggEBAH51b351UiFtzFcKZgWr YQHXE/2wAw823t6BfYDwC0FrNcQrshf2k0FU9RSMOX354akiBCUNnuEo90S6r1b3 /ojDHWUMJduWC3M0nyobr/f7RXkbywG2M055pIWkrd4UcjyaHL+DOd2tFd2qRTqG 9t/QZ8f9Gq47YcuCQh6awZzRtWowXwishcvtwFdDGCrmRyENTi0/+jCQXzcdVN4o nBVGbtpYrLySxr9wigcte0Ce+8FTiB0N1Zeai6W0jkH76v+NEeRAIJIgAnPpIsJO t43WmtEeclDW97GJNGw8evwkoempsD+00068WMM7BJ5oRoNjkt3saNSw9SEBlGtQ hIo= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:11 2025 by rpki-client