$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa File: cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa (raw, json) Hash identifier: cvymKLOp8fw/qyJtscdlowOrSJ3bPUJWwIdpaZ2qyl4= Subject key identifier: 39:4F:14:BA:A8:86:F7:90:D2:9F:CE:00:1D:07:52:5F:42:86:22:F1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0CD70A39F772FBA1FE3FACDA512003E58CEA164C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa Signing time: Mon 13 Oct 2025 15:40:50 +0000 ROA not before: Mon 13 Oct 2025 15:40:50 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d7:0a:39:f7:72:fb:a1:fe:3f:ac:da:51:20:03:e5:8c:ea:16:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:40:50 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=e90de0b03db27901cffbea0c1f80cb9ec07b968816e3d744a4818ce43f41e4ac, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:62:46:09:78:33:21:5a:c6:b1:ea:82:9f: 4e:53:c3:9a:7c:cb:2f:8c:26:0f:eb:5b:7a:5e:10: f2:6a:e8:86:e1:18:d2:4d:cc:da:83:77:c1:91:26: e5:34:0b:80:74:9f:ec:af:b4:ab:50:e5:ac:8e:01: e9:fe:34:db:61:fd:4c:dd:a2:79:91:d3:bd:fb:d8: d5:83:3e:73:1c:7a:f4:fa:1f:7b:1f:a0:b0:47:62: 6d:49:5d:35:82:58:09:80:d8:2f:15:09:e8:91:54: 4c:92:ae:bf:b5:c7:6a:ae:83:de:17:0f:1d:8d:e3: 3c:b2:25:d8:1d:24:56:83:4d:73:79:d9:0d:ec:a3: 20:c6:ef:33:14:10:52:60:a6:fd:d6:db:9a:49:df: f5:ab:ff:81:73:ef:ae:e5:61:56:e3:50:71:c8:88: bf:90:8e:7c:ca:5c:61:45:5d:a7:bc:28:c3:89:41: f9:3e:f7:8d:74:59:18:77:df:81:0e:f0:af:77:a9: 2a:a3:19:2e:c2:c4:c0:94:ca:6f:4a:b1:f3:d0:13: eb:12:a1:10:72:78:a5:42:b9:cf:52:02:8e:49:fc: a5:77:7e:f7:e8:ae:d6:76:4a:e7:55:37:40:35:8e: 07:ba:51:5d:ce:0f:e1:e4:a1:98:ae:ab:58:80:ca: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4F:14:BA:A8:86:F7:90:D2:9F:CE:00:1D:07:52:5F:42:86:22:F1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:1000::/40 Signature Algorithm: sha256WithRSAEncryption 27:4b:b9:80:af:c1:25:70:65:a0:25:44:cf:8c:84:6a:80:de: ec:0d:6c:1d:93:f6:e6:7b:0c:ae:83:8c:f4:af:8f:17:64:ce: 36:51:42:37:97:b5:4d:55:0e:5d:7e:ad:19:e6:26:02:9d:e2: e9:15:34:8e:31:90:69:92:ee:05:de:53:e1:6f:bf:4e:8f:fe: 23:29:10:af:d0:75:2e:51:15:bf:8a:82:a3:83:a2:07:56:e5: 15:63:0b:18:a6:3b:d1:1a:10:19:5d:9b:b9:dd:e9:8c:c1:37: be:4e:ef:69:91:88:e6:80:fc:01:ce:ca:2b:6e:c7:dd:ff:95: c6:ec:a9:8c:06:09:d7:2d:7d:e7:d7:4b:83:1b:3c:c7:c8:b5: 3f:ae:79:01:66:d5:a2:c5:93:fd:d6:d8:9e:86:cf:59:bf:c6: fc:61:31:c0:2a:4b:59:1d:8f:cc:26:2f:23:fb:2b:8c:f5:60: c6:a4:d8:ae:be:3b:68:b5:74:99:79:1a:be:27:df:95:6d:19: b1:a5:21:c0:e7:35:60:81:e2:be:e4:6b:ff:20:1e:64:a7:d8: 94:f8:e4:f6:32:30:6a:98:86:d1:9e:02:50:b7:5d:0a:53:8f: 92:39:ff:f9:15:fe:c5:fe:77:14:8c:f9:1a:e0:26:62:7e:b4: 71:91:f6:b5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDNcKOfdy+6H+P6zaUSAD5YzqFkwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1NDA1MFoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNAZTkwZGUwYjAzZGIyNzkwMWNmZmJl YTBjMWY4MGNiOWVjMDdiOTY4ODE2ZTNkNzQ0YTQ4MThjZTQzZjQxZTRhYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjZiRgl4MyFaxrHqgp9OU8OafMsv jCYP61t6XhDyauiG4RjSTczag3fBkSblNAuAdJ/sr7SrUOWsjgHp/jTbYf1M3aJ5 kdO9+9jVgz5zHHr0+h97H6CwR2JtSV01glgJgNgvFQnokVRMkq6/tcdqroPeFw8d jeM8siXYHSRWg01zedkN7KMgxu8zFBBSYKb91tuaSd/1q/+Bc++u5WFW41BxyIi/ kI58ylxhRV2nvCjDiUH5PveNdFkYd9+BDvCvd6kqoxkuwsTAlMpvSrHz0BPrEqEQ cnilQrnPUgKOSfyld3736K7WdkrnVTdANY4HulFdzg/h5KGYrqtYgMrO0wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDlPFLqohveQ0p/OAB0HUl9ChiLxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NhZDAyNTNjLWU4ZWEtNGE3MC1hZjk3LWVmMzdlN2I5MTVlNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYRAwDQYJKoZIhvcNAQELBQADggEBACdLuYCvwSVwZaAlRM+M hGqA3uwNbB2T9uZ7DK6DjPSvjxdkzjZRQjeXtU1VDl1+rRnmJgKd4ukVNI4xkGmS 7gXeU+Fvv06P/iMpEK/QdS5RFb+KgqODogdW5RVjCximO9EaEBldm7nd6YzBN75O 72mRiOaA/AHOyitux93/lcbsqYwGCdctfefXS4MbPMfItT+ueQFm1aLFk/3W2J6G z1m/xvxhMcAqS1kdj8wmLyP7K4z1YMak2K6+O2i1dJl5Gr4n35VtGbGlIcDnNWCB 4r7ka/8gHmSn2JT45PYyMGqYhtGeAlC3XQpTj5I5//kV/sX+dxSM+RrgJmJ+tHGR 9rU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:25 2025 by rpki-client