$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7df54ca1-fa6b-41e4-8480-61d86d49f455.roa File: 7df54ca1-fa6b-41e4-8480-61d86d49f455.roa (raw, json) Hash identifier: y+0b8Q3przTXbbtQCJJw+RhHHdRC8UQfjjCctCrc+6g= Subject key identifier: 81:A0:E6:6F:4C:B1:36:90:37:6E:FE:D4:D1:09:29:FA:3A:37:8B:F3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3B24A1C927225D35A76C3589A8871539408E95B1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7df54ca1-fa6b-41e4-8480-61d86d49f455.roa Signing time: Tue 14 Oct 2025 00:10:28 +0000 ROA not before: Tue 14 Oct 2025 00:10:28 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:24:a1:c9:27:22:5d:35:a7:6c:35:89:a8:87:15:39:40:8e:95:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:10:28 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=fe550998d8594bdcf5f6ec45e989a41564f217ea8167270bc6d25cf414b4340d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:02:f4:fa:ea:13:7a:58:5c:ca:cd:f3:19: d7:a2:33:fc:37:f8:4e:11:43:fb:f0:27:8e:1d:c0: 04:d9:ba:8e:6d:24:6a:50:52:a5:f5:ac:d6:a9:4a: 3a:35:44:f8:a4:23:d9:a3:41:f1:23:32:e7:03:d0: 1e:ba:4c:97:8d:12:6f:c0:c0:e5:aa:b8:23:2a:40: 45:b5:7f:78:cd:0b:c0:83:88:cc:60:a8:a2:77:9b: 4d:a9:50:b5:f7:36:8b:ee:53:29:9e:12:24:13:fa: 63:50:ab:52:7a:da:e5:ea:6c:52:ba:bd:a1:4d:ac: df:b3:68:0c:47:31:32:08:d0:40:2a:8f:a2:29:b5: 49:c2:fa:83:e0:b3:66:a4:6b:52:ff:7c:a0:16:a2: 70:40:01:ba:95:b7:71:23:0c:78:4f:52:90:54:59: 3e:af:15:4c:06:b7:d4:f8:5a:1d:f4:01:8c:0a:11: 06:8e:5e:13:e2:74:73:57:db:b5:8c:be:00:10:2b: ea:e2:b8:15:20:5d:d6:fb:3f:81:68:29:0a:76:bb: 5f:e6:6d:97:e6:58:53:ad:08:a3:a0:c3:53:5f:4d: 41:4e:74:7e:4a:49:76:b2:29:ac:46:63:3b:e6:42: da:d7:88:40:96:c2:3b:03:11:d4:22:16:b1:c7:4a: 0f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A0:E6:6F:4C:B1:36:90:37:6E:FE:D4:D1:09:29:FA:3A:37:8B:F3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7df54ca1-fa6b-41e4-8480-61d86d49f455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8040::/48 Signature Algorithm: sha256WithRSAEncryption a0:c5:38:fe:6b:33:2e:29:3c:63:69:6b:0a:d9:8d:49:35:71: 55:fc:4f:ac:ba:d0:ae:06:04:75:35:a6:b1:df:20:05:64:61: 84:2e:d6:f3:4b:b7:90:b6:fc:87:15:11:c4:e1:56:87:cb:5d: d6:af:8f:8f:b9:00:19:5a:1e:cf:79:70:ce:75:d5:36:5d:cd: 9a:68:7e:4e:84:c2:7b:76:48:1f:e7:8a:03:ae:3a:a0:fd:87: 3e:d6:55:b9:71:6e:50:83:1c:b6:39:f3:da:7a:37:72:e6:e0: e5:10:e5:4e:d1:59:be:8b:b2:f4:d5:4b:c3:ce:68:4a:88:d4: 7e:07:58:97:1b:2a:22:5e:54:8c:64:c4:b8:df:88:16:62:a9: 99:4f:f6:73:6d:1a:36:fc:93:28:df:d1:a1:c6:d2:46:ce:dc: 02:08:bf:bc:13:7a:2c:45:87:15:13:e3:83:ee:25:bb:40:7b: 5f:d0:3e:3a:5a:dd:d9:03:35:54:a2:0c:23:f6:64:63:10:89: 2b:34:d0:96:e9:dc:38:8f:7b:70:b4:18:09:29:8d:5b:a4:da: 43:08:9d:45:cd:51:ef:18:c2:82:34:f8:0d:8d:4b:53:48:4f: 27:db:07:30:92:d1:32:96:c8:64:0f:5c:17:92:66:0b:51:50: 2f:a0:aa:00 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOyShySciXTWnbDWJqIcVOUCOlbEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMTAyOFoX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNAZmU1NTA5OThkODU5NGJkY2Y1ZjZl YzQ1ZTk4OWE0MTU2NGYyMTdlYTgxNjcyNzBiYzZkMjVjZjQxNGI0MzQwZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6cC9PrqE3pYXMrN8xnXojP8N/hO EUP78CeOHcAE2bqObSRqUFKl9azWqUo6NUT4pCPZo0HxIzLnA9AeukyXjRJvwMDl qrgjKkBFtX94zQvAg4jMYKiid5tNqVC19zaL7lMpnhIkE/pjUKtSetrl6mxSur2h Tazfs2gMRzEyCNBAKo+iKbVJwvqD4LNmpGtS/3ygFqJwQAG6lbdxIwx4T1KQVFk+ rxVMBrfU+Fod9AGMChEGjl4T4nRzV9u1jL4AECvq4rgVIF3W+z+BaCkKdrtf5m2X 5lhTrQijoMNTX01BTnR+Skl2simsRmM75kLa14hAlsI7AxHUIhaxx0oPeQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIGg5m9MsTaQN27+1NEJKfo6N4vzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdkZjU0Y2ExLWZhNmItNDFlNC04NDgwLTYxZDg2ZDQ5ZjQ1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8oBAMA0GCSqGSIb3DQEBCwUAA4IBAQCgxTj+azMuKTxjaWsK 2Y1JNXFV/E+sutCuBgR1Naax3yAFZGGELtbzS7eQtvyHFRHE4VaHy13Wr4+PuQAZ Wh7PeXDOddU2Xc2aaH5OhMJ7dkgf54oDrjqg/Yc+1lW5cW5Qgxy2OfPaejdy5uDl EOVO0Vm+i7L01UvDzmhKiNR+B1iXGyoiXlSMZMS434gWYqmZT/ZzbRo2/JMo39Gh xtJGztwCCL+8E3osRYcVE+OD7iW7QHtf0D46Wt3ZAzVUogwj9mRjEIkrNNCW6dw4 j3twtBgJKY1bpNpDCJ1FzVHvGMKCNPgNjUtTSE8n2wcwktEylshkD1wXkmYLUVAv oKoA -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:54 2025 by rpki-client