$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa File: d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa (raw, json) Hash identifier: 01VDr/r8I6gUMgD7pmxLQQ2eQ9reGfBsd4YR0WYozQw= Subject key identifier: 4C:35:08:6C:F5:05:1F:5A:23:E7:9A:4B:43:E8:91:7C:F2:47:EF:2A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 38A661C2D01BC74B68FDB1B82B9A5DEBD868AEA9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa Signing time: Mon 13 Oct 2025 15:00:05 +0000 ROA not before: Mon 13 Oct 2025 15:00:05 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c0a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a6:61:c2:d0:1b:c7:4b:68:fd:b1:b8:2b:9a:5d:eb:d8:68:ae:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:00:05 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=9fa64dab61af2a89a24a3bc5014c74c2187c7b327835179c4d5ef1660f7146cb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:26:10:5c:74:55:de:1e:14:2f:34:e1:3e:4f: 8b:9f:3b:40:2e:de:1b:e0:f3:59:55:9d:12:23:40: 3a:f7:59:cd:25:02:a2:57:de:28:1d:c5:42:31:0b: 0d:89:fe:1e:e8:f7:fe:11:d6:6f:14:fa:29:12:0b: 73:70:8a:89:3b:86:4c:63:27:ec:52:22:c9:f7:36: d9:44:93:f5:c3:20:8f:f7:30:b1:3d:14:5d:44:70: 00:5e:6c:51:8f:6c:20:25:43:62:af:ca:69:69:59: 1a:ca:2b:72:08:af:ce:5c:0e:27:ab:d0:85:c6:af: fd:5d:02:96:82:28:de:86:81:6f:7c:8e:e6:bc:2b: 76:4e:4b:7e:eb:7f:7f:e6:8f:b8:e3:f1:2a:a8:d3: 7b:f3:0f:33:2e:78:ed:58:2d:8b:9f:e0:14:e1:06: 83:fd:e0:9c:d8:4d:fb:1f:1c:80:f9:8b:86:52:29: e2:75:f7:51:dd:07:f3:eb:5f:43:41:1a:42:04:08: 8d:5c:6f:ce:29:52:82:58:e4:bc:0c:45:89:5d:46: a9:58:f2:e5:79:0b:09:4d:07:80:72:9a:41:cf:1d: 8e:10:8b:38:86:7f:7c:c6:27:74:66:6f:8a:13:b4: aa:b1:0c:21:c5:52:a6:fa:ef:87:67:03:b3:b6:59: da:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:35:08:6C:F5:05:1F:5A:23:E7:9A:4B:43:E8:91:7C:F2:47:EF:2A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c0a0::/48 Signature Algorithm: sha256WithRSAEncryption b1:2e:ed:54:46:46:83:a4:c8:e6:4e:b1:36:94:6d:7a:b2:6a: 41:7d:d7:a1:e8:22:e6:65:77:0e:dd:ed:51:34:39:f8:df:82: cc:fd:3e:01:b4:e7:44:e8:19:48:cd:6e:22:e2:f1:f8:2c:ab: d8:81:31:71:6e:81:34:05:28:ed:22:4a:cf:b9:8d:3f:10:6b: 34:03:5e:38:c0:4a:2c:90:b0:cf:eb:07:78:7e:ff:3e:29:78: 93:16:49:21:a6:eb:16:b0:72:7c:c4:cf:96:20:f1:c9:b8:2e: 5c:92:27:19:08:39:62:f8:e0:0d:b8:e2:60:70:a2:f0:da:dc: fd:ab:49:f1:ff:9a:93:c5:fb:50:e0:44:e8:a3:1e:3c:d6:46: 54:fd:af:37:59:97:5d:ab:39:a9:a4:86:7d:a1:fa:50:8c:bf: 18:79:d4:67:ff:0a:d4:d9:62:16:8b:55:db:9e:cb:15:b7:7d: f5:8c:a2:a6:ed:a1:64:c7:98:ce:e7:ba:75:92:de:d9:ed:15: e2:ec:2c:9c:43:a7:b9:45:2e:1b:c9:a6:ae:cb:0c:e0:4c:fe: 90:ab:70:0a:f3:06:c0:34:99:80:87:14:03:99:22:c1:fc:48: 5e:8b:42:d0:ce:c0:32:7d:d9:4d:63:11:d5:7e:74:57:41:0e: d1:83:82:69 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOKZhwtAbx0to/bG4K5pd69horqkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1MDAwNVoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNAOWZhNjRkYWI2MWFmMmE4OWEyNGEz YmM1MDE0Yzc0YzIxODdjN2IzMjc4MzUxNzljNGQ1ZWYxNjYwZjcxNDZjYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SYQXHRV3h4ULzThPk+LnztALt4b 4PNZVZ0SI0A691nNJQKiV94oHcVCMQsNif4e6Pf+EdZvFPopEgtzcIqJO4ZMYyfs UiLJ9zbZRJP1wyCP9zCxPRRdRHAAXmxRj2wgJUNir8ppaVkayityCK/OXA4nq9CF xq/9XQKWgijehoFvfI7mvCt2Tkt+639/5o+44/EqqNN78w8zLnjtWC2Ln+AU4QaD /eCc2E37HxyA+YuGUinidfdR3Qfz619DQRpCBAiNXG/OKVKCWOS8DEWJXUapWPLl eQsJTQeAcppBzx2OEIs4hn98xid0Zm+KE7SqsQwhxVKm+u+HZwOztlna2QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEw1CGz1BR9aI+eaS0PokXzyR+8qMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzNDM1ZGJiLTVkMWUtNDk0OC04MDI3LWU2NDMzZjcyYmZjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8CgMA0GCSqGSIb3DQEBCwUAA4IBAQCxLu1URkaDpMjmTrE2 lG16smpBfdeh6CLmZXcO3e1RNDn434LM/T4BtOdE6BlIzW4i4vH4LKvYgTFxboE0 BSjtIkrPuY0/EGs0A144wEoskLDP6wd4fv8+KXiTFkkhpusWsHJ8xM+WIPHJuC5c kicZCDli+OANuOJgcKLw2tz9q0nx/5qTxftQ4EToox481kZU/a83WZddqzmppIZ9 ofpQjL8YedRn/wrU2WIWi1XbnssVt331jKKm7aFkx5jO57p1kt7Z7RXi7CycQ6e5 RS4byaauywzgTP6Qq3AK8wbANJmAhxQDmSLB/Ehei0LQzsAyfdlNYxHVfnRXQQ7R g4Jp -----END CERTIFICATE-----Generated at Mon Oct 20 14:56:58 2025 by rpki-client