$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa File: b9e1c759-db10-4a48-b586-da1f1ff39287.roa (raw, json) Hash identifier: EXSJXXtoZTZQ1IYDdeKOkr27fQ1K2uFwsHSDdd7w0bU= Subject key identifier: 14:CA:F3:86:D4:88:7B:EC:20:AD:44:DA:A1:7A:DC:AD:82:B2:26:B8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0BB65F8F642F006956E905F7860113FD23B9D3D4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa Signing time: Sun 19 Oct 2025 00:00:08 +0000 ROA not before: Sun 19 Oct 2025 00:00:08 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b6:5f:8f:64:2f:00:69:56:e9:05:f7:86:01:13:fd:23:b9:d3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:00:08 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=bf3f000eb74fbc085c4d9239e200e42236b7e69450e4a0e3e3599d792a087adc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:76:93:2f:5f:27:51:3a:c6:d3:21:2b:fd:60: 02:90:99:ed:42:67:ea:74:09:d5:e7:4a:d5:27:97: 39:51:b6:ea:86:97:23:91:f2:a3:1d:90:14:d7:32: c9:34:32:69:dd:22:86:4d:74:99:10:99:d2:04:bf: 4f:d6:35:d7:98:40:2c:e8:6b:ba:df:56:8e:c3:d9: 15:46:fd:37:c9:e1:30:12:ad:8e:5d:c8:06:2b:b2: 5d:5c:78:cb:97:a9:07:5b:33:39:2f:e2:ba:78:ca: c4:82:7f:9c:7c:6e:b6:74:62:0e:6c:88:24:79:00: e9:85:be:67:37:8b:8a:43:8d:3f:f8:91:3b:a6:4f: 3e:b6:95:2b:23:9e:63:00:12:ec:54:34:57:34:fe: 26:20:e3:be:bb:44:dd:1a:b7:b4:28:ac:54:77:52: 87:5f:d5:49:b8:d7:8f:31:14:cb:83:ea:46:4c:17: 08:2c:ab:53:07:6b:9b:06:0f:b9:d4:26:18:75:bb: b0:7e:1e:b7:cf:84:4c:2e:54:d8:e8:d6:96:77:ac: 9c:72:3f:3a:e2:38:9f:f3:ac:d8:fe:f1:90:5d:8c: e6:ec:12:95:d4:49:90:5a:55:98:9c:f2:46:54:95: 12:33:e8:3d:97:d4:96:1c:05:41:f1:00:b3:c8:09: 19:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CA:F3:86:D4:88:7B:EC:20:AD:44:DA:A1:7A:DC:AD:82:B2:26:B8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:9000::/40 Signature Algorithm: sha256WithRSAEncryption 88:20:0e:05:d6:41:9c:25:53:1a:db:35:5d:09:46:2f:ed:51: 94:c3:44:8b:bc:87:9b:d8:9d:d7:c5:8c:75:17:78:8e:27:47: 37:78:54:ad:6b:7e:55:c8:ca:45:aa:a5:a1:62:6a:8a:26:af: cd:97:96:f2:10:3e:40:fe:29:5e:ba:fe:fe:60:fa:40:db:d1: e8:8d:b3:13:71:3d:46:ca:47:d5:1b:c7:30:00:9b:a6:08:1e: 60:f8:73:9f:3c:82:da:75:bf:1b:1e:2c:de:d6:53:2a:c0:23: 0f:96:d6:a1:e8:e6:d3:03:4a:c7:b1:96:25:8a:10:79:08:c2: f0:80:10:ee:45:4b:07:03:1b:61:f8:4b:32:91:7d:21:bc:7a: f7:c7:4a:61:8b:4e:9c:14:4b:61:ad:38:fb:7e:7c:4b:82:ca: 69:5d:da:6a:b5:f9:d8:71:35:8b:56:60:a1:90:ee:c0:48:55: d9:28:ac:ff:f2:37:2c:ec:8d:ed:c2:a9:15:39:9b:ba:ea:01: ea:8c:2f:f4:12:d6:76:39:26:00:99:5b:a1:4c:82:ae:c7:53: 2e:08:92:db:3f:e0:a7:2c:d8:19:04:ce:ab:66:49:22:c6:89: e6:a4:e8:66:6d:26:53:e8:d0:48:78:25:3b:68:68:9e:55:59: 05:62:59:43 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUC7Zfj2QvAGlW6QX3hgET/SO509QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxOTAwMDAwOFoX DTI1MTEyMzIzNTk1OVowejFJMEcGA1UEBRNAYmYzZjAwMGViNzRmYmMwODVjNGQ5 MjM5ZTIwMGU0MjIzNmI3ZTY5NDUwZTRhMGUzZTM1OTlkNzkyYTA4N2FkYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HaTL18nUTrG0yEr/WACkJntQmfq dAnV50rVJ5c5UbbqhpcjkfKjHZAU1zLJNDJp3SKGTXSZEJnSBL9P1jXXmEAs6Gu6 31aOw9kVRv03yeEwEq2OXcgGK7JdXHjLl6kHWzM5L+K6eMrEgn+cfG62dGIObIgk eQDphb5nN4uKQ40/+JE7pk8+tpUrI55jABLsVDRXNP4mIOO+u0TdGre0KKxUd1KH X9VJuNePMRTLg+pGTBcILKtTB2ubBg+51CYYdbuwfh63z4RMLlTY6NaWd6yccj86 4jif86zY/vGQXYzm7BKV1EmQWlWYnPJGVJUSM+g9l9SWHAVB8QCzyAkZvwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBTK84bUiHvsIK1E2qF63K2Csia4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I5ZTFjNzU5LWRiMTAtNGE0OC1iNTg2LWRhMWYxZmYzOTI4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7ZAwDQYJKoZIhvcNAQELBQADggEBAIggDgXWQZwlUxrbNV0J Ri/tUZTDRIu8h5vYndfFjHUXeI4nRzd4VK1rflXIykWqpaFiaoomr82XlvIQPkD+ KV66/v5g+kDb0eiNsxNxPUbKR9UbxzAAm6YIHmD4c588gtp1vxseLN7WUyrAIw+W 1qHo5tMDSsexliWKEHkIwvCAEO5FSwcDG2H4SzKRfSG8evfHSmGLTpwUS2GtOPt+ fEuCymld2mq1+dhxNYtWYKGQ7sBIVdkorP/yNyzsje3CqRU5m7rqAeqML/QS1nY5 JgCZW6FMgq7HUy4Ikts/4Kcs2BkEzqtmSSLGieak6GZtJlPo0Eh4JTtoaJ5VWQVi WUM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:28:24 2025 by rpki-client