$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b837fbb2-31ae-4620-add9-a5933bff88c4.roa File: b837fbb2-31ae-4620-add9-a5933bff88c4.roa (raw, json) Hash identifier: yNoaOoTm0i2fcQ5QaoqdytRqC0+IknQaJl0M2B1lJic= Subject key identifier: C9:FF:9B:5E:C9:CD:41:36:90:D5:D5:1C:86:D7:21:49:65:07:7F:4B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74A0B48BE747460076FE692A47066B056F50D3B3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b837fbb2-31ae-4620-add9-a5933bff88c4.roa Signing time: Mon 06 Oct 2025 15:00:44 +0000 ROA not before: Mon 06 Oct 2025 15:00:44 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafd:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a0:b4:8b:e7:47:46:00:76:fe:69:2a:47:06:6b:05:6f:50:d3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 6 15:00:44 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=06bb522b17d5e417fee0b617608d44ddcbc219a2665654e614403601dca404cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:1c:a0:4e:ff:bf:6d:3d:25:0e:25:56:6a: 45:c8:8e:c2:3a:c4:63:59:e0:85:34:c5:48:d8:2c: d7:f7:3d:fb:63:5c:da:ae:51:fe:7e:6a:ef:b4:e5: 6a:6a:a6:05:c6:d1:00:d6:98:80:0f:3d:e2:06:85: 36:57:02:f9:3c:7d:0f:00:48:4b:5b:85:6a:5e:c0: 03:fb:8c:e3:dd:c0:5c:08:08:76:1b:8a:fe:dc:e4: d0:ca:68:f6:8f:57:55:f5:4c:a1:4c:4e:2e:8f:57: 67:83:8b:02:63:5c:fc:69:0d:df:81:4c:12:b0:cf: ce:81:20:6b:de:2e:80:5c:4a:21:d0:11:91:67:a6: 64:cd:ea:9b:95:88:f2:a3:fb:b3:36:e3:de:e3:57: 14:d3:44:eb:50:da:a7:8e:15:44:00:df:a7:b5:0f: 94:ec:5f:1e:3a:4f:b0:bb:d3:ce:7a:21:6b:16:a1: c0:51:19:41:1f:24:a1:b9:5e:cd:52:f0:54:4f:aa: 3b:b7:cc:5b:7a:c8:5f:9c:69:1b:ca:5b:0a:e0:82: d0:1d:94:a8:82:82:59:85:58:9b:26:5a:23:fb:4e: c1:9a:1a:7b:0c:43:4b:2e:94:d4:64:0a:52:96:36: 21:71:6a:db:ed:86:ab:69:db:ac:04:dd:a0:ab:49: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FF:9B:5E:C9:CD:41:36:90:D5:D5:1C:86:D7:21:49:65:07:7F:4B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b837fbb2-31ae-4620-add9-a5933bff88c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafd:4040::/48 Signature Algorithm: sha256WithRSAEncryption 8a:ff:48:ca:32:83:5b:5d:95:6f:cd:a0:af:16:d3:f6:07:03: 28:c4:f1:87:57:c1:bf:35:10:af:5e:0c:08:24:b9:08:4d:05: b1:e9:8a:a8:2f:54:cd:2a:87:01:96:85:d4:26:5e:79:e4:2c: 7e:25:e3:ab:0f:49:15:5a:fc:38:62:da:20:01:c3:4e:78:60: 92:40:56:6a:bb:23:2b:30:ca:c0:ab:16:98:03:a8:10:5c:fc: 7a:a5:96:3b:52:2d:fc:db:37:d6:71:f2:fb:68:45:40:2b:53: d3:96:18:ed:25:2f:18:73:98:a8:9f:9f:ac:a1:05:8c:cd:46: 36:51:08:04:c1:45:de:b7:73:9b:06:03:36:ac:57:d0:3d:22: 0f:a0:97:f0:37:48:ee:04:3b:b5:82:dc:29:4b:f8:41:d9:bb: 42:61:8f:68:39:7c:4c:f8:4c:62:9c:3b:ad:90:e9:d1:2b:14: 46:4d:aa:2d:08:67:3a:ab:3c:db:0d:b2:95:29:0d:70:62:d1: 36:95:26:19:4f:aa:6a:dd:66:b7:92:be:a7:04:e1:00:a8:68: eb:24:5b:3f:5b:2b:c7:c3:28:a1:b7:ae:22:87:3f:5b:e7:e2: fa:74:e9:10:d6:85:26:ba:16:84:7a:f7:1f:cf:31:a0:97:7a: bf:98:97:02 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdKC0i+dHRgB2/mkqRwZrBW9Q07MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNjE1MDA0NFoX DTI1MTExMDIzNTk1OVowejFJMEcGA1UEBRNAMDZiYjUyMmIxN2Q1ZTQxN2ZlZTBi NjE3NjA4ZDQ0ZGRjYmMyMTlhMjY2NTY1NGU2MTQ0MDM2MDFkY2E0MDRjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrMcoE7/v209JQ4lVmpFyI7COsRj WeCFNMVI2CzX9z37Y1zarlH+fmrvtOVqaqYFxtEA1piADz3iBoU2VwL5PH0PAEhL W4VqXsAD+4zj3cBcCAh2G4r+3OTQymj2j1dV9UyhTE4uj1dng4sCY1z8aQ3fgUwS sM/OgSBr3i6AXEoh0BGRZ6ZkzeqblYjyo/uzNuPe41cU00TrUNqnjhVEAN+ntQ+U 7F8eOk+wu9POeiFrFqHAURlBHyShuV7NUvBUT6o7t8xbeshfnGkbylsK4ILQHZSo goJZhVibJloj+07Bmhp7DENLLpTUZApSljYhcWrb7YaradusBN2gq0lKowIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMn/m17JzUE2kNXVHIbXIUllB39LMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4MzdmYmIyLTMxYWUtNDYyMC1hZGQ5LWE1OTMzYmZmODhjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/UBAMA0GCSqGSIb3DQEBCwUAA4IBAQCK/0jKMoNbXZVvzaCv FtP2BwMoxPGHV8G/NRCvXgwIJLkITQWx6YqoL1TNKocBloXUJl555Cx+JeOrD0kV Wvw4YtogAcNOeGCSQFZquyMrMMrAqxaYA6gQXPx6pZY7Ui382zfWcfL7aEVAK1PT lhjtJS8Yc5ion5+soQWMzUY2UQgEwUXet3ObBgM2rFfQPSIPoJfwN0juBDu1gtwp S/hB2btCYY9oOXxM+ExinDutkOnRKxRGTaotCGc6qzzbDbKVKQ1wYtE2lSYZT6pq 3Wa3kr6nBOEAqGjrJFs/WyvHwyiht64ihz9b5+L6dOkQ1oUmuhaEevcfzzGgl3q/ mJcC -----END CERTIFICATE-----Generated at Mon Oct 20 14:52:08 2025 by rpki-client