$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa File: cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa (raw, json) Hash identifier: OUvqA+Fk0O1dC7h982Fof4etGImkPVgJ2or/4fmyCK0= Subject key identifier: 66:93:71:5C:98:4A:CB:3B:D0:9E:DB:0A:66:42:9E:1C:30:3F:40:11 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6ABA37F857B77BAB42FA27E9A92F3076078B1CB6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa Signing time: Wed 15 Oct 2025 00:20:34 +0000 ROA not before: Wed 15 Oct 2025 00:20:34 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ba:37:f8:57:b7:7b:ab:42:fa:27:e9:a9:2f:30:76:07:8b:1c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:20:34 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=8b89fad63cea7d5cfa43a2af1b0df2a25a8df6a1e38c9dee84d12840ac459640, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:61:2a:32:a8:1d:be:b5:bd:4a:94:df:fe:62: cb:d7:b8:97:2c:ac:e2:93:04:3b:9e:ac:e7:4d:39: 78:04:b7:b8:78:fb:2a:df:11:69:5c:df:3e:b6:ae: e2:df:bc:b9:74:fa:2f:d1:f2:e5:8b:66:80:e3:c9: 68:95:58:2c:40:d4:a8:5b:5c:69:e1:ca:7f:85:c5: 42:79:b6:7f:fc:cc:9f:d2:07:12:2a:b8:16:c6:72: 2c:82:13:f5:06:42:5e:19:62:44:eb:27:c2:82:ca: 87:ab:0e:e0:7f:ba:35:c7:e1:ec:ae:97:32:43:1f: f8:a9:c6:7d:dc:0c:d5:f3:8b:ca:49:f4:ca:48:6f: a7:f6:12:be:8f:2c:a9:33:b3:55:e2:cc:c9:ae:08: b5:8d:4f:6d:d8:51:98:2a:b6:79:fb:f8:7e:e7:29: 42:92:68:dd:b3:31:b8:6f:a1:67:53:f1:e6:42:bb: cc:3f:0e:fc:2f:e7:9c:29:fa:0d:7e:5f:7a:13:1b: f5:ba:ec:4f:42:eb:70:c4:90:89:b2:5b:31:41:4b: 65:8c:54:8a:ae:c8:42:73:a9:85:12:ae:da:1b:a3: b7:23:a9:84:6d:69:a1:fc:9f:8c:2c:5a:3b:ef:b8: b2:61:f1:20:d2:37:0f:d0:6b:10:8a:57:a6:41:cc: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:93:71:5C:98:4A:CB:3B:D0:9E:DB:0A:66:42:9E:1C:30:3F:40:11 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:4800::/40 Signature Algorithm: sha256WithRSAEncryption b6:3b:1d:92:24:fb:85:bc:0e:af:a8:f7:20:4c:01:09:d7:e8: 18:df:ec:45:dd:86:c4:74:7e:6c:5e:62:cb:96:4e:8c:2f:6c: 1b:d7:b4:60:34:86:49:cb:40:5c:e4:f1:9f:fd:c8:2a:14:d5: 7f:73:df:c3:0d:b1:e5:76:18:b0:ea:f6:4b:03:d5:fb:30:7b: b9:ac:b3:da:71:33:3b:8b:30:64:7e:31:f4:94:c3:64:1a:9e: c4:03:6e:dd:c3:12:76:22:5b:53:3f:60:02:72:9f:c9:57:a7: 9b:26:10:2d:be:3f:c7:3e:c3:1d:70:99:4b:cd:92:82:09:99: ae:56:5c:ac:39:3b:ea:bb:3b:6f:81:a0:e3:2d:9e:8a:7f:17: fe:6b:c1:cf:59:37:3e:60:2f:e1:bf:50:9d:d7:b6:b9:ec:bd: 10:10:aa:e3:f2:30:a5:79:72:4b:60:8d:58:60:c7:6b:34:f7: e9:d0:7a:4f:65:36:7b:26:96:08:29:d8:61:ad:6f:8d:7f:11: 4b:e6:84:93:f0:a3:49:94:70:25:ed:32:35:70:cb:13:bf:22: 0b:47:fa:61:51:b2:af:4a:ce:ab:d3:44:b9:f3:9e:78:1b:3e: 86:c7:68:14:7a:52:d1:17:49:c4:58:42:a8:ab:a1:5f:b9:66: b9:d6:ef:02 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaro3+Fe3e6tC+ifpqS8wdgeLHLYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMjAzNFoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAOGI4OWZhZDYzY2VhN2Q1Y2ZhNDNh MmFmMWIwZGYyYTI1YThkZjZhMWUzOGM5ZGVlODRkMTI4NDBhYzQ1OTY0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmEqMqgdvrW9SpTf/mLL17iXLKzi kwQ7nqznTTl4BLe4ePsq3xFpXN8+tq7i37y5dPov0fLli2aA48lolVgsQNSoW1xp 4cp/hcVCebZ//Myf0gcSKrgWxnIsghP1BkJeGWJE6yfCgsqHqw7gf7o1x+Hsrpcy Qx/4qcZ93AzV84vKSfTKSG+n9hK+jyypM7NV4szJrgi1jU9t2FGYKrZ5+/h+5ylC kmjdszG4b6FnU/HmQrvMPw78L+ecKfoNfl96Exv1uuxPQutwxJCJslsxQUtljFSK rshCc6mFEq7aG6O3I6mEbWmh/J+MLFo777iyYfEg0jcP0GsQilemQczlXQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGaTcVyYSss70J7bCmZCnhwwP0ARMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NmMzVlMjY0LWI1M2EtNGI0OS1hN2M4LTViMTU5YjdjY2ZkNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8UgwDQYJKoZIhvcNAQELBQADggEBALY7HZIk+4W8Dq+o9yBM AQnX6Bjf7EXdhsR0fmxeYsuWTowvbBvXtGA0hknLQFzk8Z/9yCoU1X9z38MNseV2 GLDq9ksD1fswe7mss9pxMzuLMGR+MfSUw2QansQDbt3DEnYiW1M/YAJyn8lXp5sm EC2+P8c+wx1wmUvNkoIJma5WXKw5O+q7O2+BoOMtnop/F/5rwc9ZNz5gL+G/UJ3X trnsvRAQquPyMKV5cktgjVhgx2s09+nQek9lNnsmlggp2GGtb41/EUvmhJPwo0mU cCXtMjVwyxO/IgtH+mFRsq9KzqvTRLnznngbPobHaBR6UtEXScRYQqiroV+5ZrnW 7wI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:32:16 2025 by rpki-client