$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa File: eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa (raw, json) Hash identifier: 5/F7tuq55PFQ4hpIwoRAO+wHR2+/qelE+EqY7lU6Syw= Subject key identifier: 80:F5:F3:0F:42:C9:A7:A9:9C:4F:F5:F6:80:9A:C3:5B:4B:CA:69:F8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5BB794C10F8B57BA94D9C19BB6B4401963A25219 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa Signing time: Wed 15 Oct 2025 00:00:03 +0000 ROA not before: Wed 15 Oct 2025 00:00:03 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b7:94:c1:0f:8b:57:ba:94:d9:c1:9b:b6:b4:40:19:63:a2:52:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:00:03 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=4425481b2aa7b926178d4b094c6df5cd380c38070c9da6515ccddaa055028a72, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e8:82:89:f3:42:da:0e:bc:80:c8:1d:fe:fe: 91:0c:16:ce:21:78:b4:7d:fd:d7:6c:f8:8e:e3:84: d9:c1:28:f0:98:71:5f:e0:29:07:26:bb:40:bc:b9: b1:89:cb:ea:f0:bc:82:f7:5d:51:35:b3:d6:d6:d1: b5:5c:83:21:3d:44:e4:0e:0c:ff:de:68:1c:38:1f: 83:6c:0c:30:90:f6:9c:21:1f:10:52:33:a9:6c:3b: 4b:a4:63:33:12:09:ff:8e:7d:e5:82:6a:a3:c6:e7: 32:b6:fa:30:b5:fd:3c:fd:80:d3:85:2c:64:ea:67: 0f:8c:6f:d9:40:2e:ce:13:7b:75:de:db:59:a3:7b: 30:3a:0b:3a:95:6d:32:41:7d:ba:58:67:c8:71:db: 44:a4:08:36:87:d7:a2:83:e5:07:89:44:ed:dc:73: 27:14:7b:76:7e:83:b8:3f:9e:e3:d4:aa:3f:14:5b: 87:6c:02:e5:4f:1d:d0:3b:f9:28:e8:4f:3b:61:b2: 22:d0:5c:5e:f2:45:c9:89:5a:6b:02:b0:51:88:a9: 6e:75:9c:19:c0:4c:cf:26:06:3b:09:a0:6e:30:13: 73:c6:2d:e5:5e:de:e9:d9:f6:3d:99:7c:7c:31:e4: 2d:28:8e:cb:f2:b8:8c:96:58:68:31:10:9c:de:cc: 91:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F5:F3:0F:42:C9:A7:A9:9C:4F:F5:F6:80:9A:C3:5B:4B:CA:69:F8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:4000::/40 Signature Algorithm: sha256WithRSAEncryption 41:38:1d:62:b4:92:83:d1:0f:66:cd:8c:6e:2e:ab:48:5a:03: 40:10:48:39:80:c6:12:39:f2:f7:3f:be:f7:0c:32:48:2b:8b: d6:88:2c:7a:2e:04:72:85:01:13:2b:2d:34:29:b3:c4:20:2f: a5:f0:82:ec:ca:21:a3:ca:ba:82:80:5e:b6:d5:e6:a9:55:1b: 14:c4:0f:fa:a4:80:3a:2f:7f:d2:29:29:1d:4b:70:cb:4c:19: 35:1b:cb:c1:dc:76:17:b3:84:ef:f9:b0:0a:0e:7b:af:df:c1: 80:27:d1:5e:63:65:e4:4b:3e:2c:05:6b:b3:3a:5b:65:ff:21: d1:92:04:5e:fc:0b:76:ab:80:4b:30:3a:75:cd:87:d3:49:83: a1:3b:30:06:aa:83:93:09:ff:64:36:2c:67:85:75:21:1e:a8: bb:f3:f8:86:30:89:bc:51:6c:55:2f:6c:9b:ff:6f:2f:45:46: 16:92:f9:d7:0b:30:1f:7a:b0:be:4d:bf:b8:79:8f:2e:a8:95: 5e:27:4b:be:38:0f:57:cc:e5:cc:97:2e:ab:b9:c5:e5:d9:b2: 97:bc:7c:0c:ba:45:3b:a3:83:49:e6:d7:f5:8f:67:7d:8e:df: 01:5e:27:c6:75:52:35:da:24:2b:95:ff:e2:fe:06:9e:92:af: 38:e4:d7:86 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUW7eUwQ+LV7qU2cGbtrRAGWOiUhkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMDAwM1oX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNANDQyNTQ4MWIyYWE3YjkyNjE3OGQ0 YjA5NGM2ZGY1Y2QzODBjMzgwNzBjOWRhNjUxNWNjZGRhYTA1NTAyOGE3MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOiCifNC2g68gMgd/v6RDBbOIXi0 ff3XbPiO44TZwSjwmHFf4CkHJrtAvLmxicvq8LyC911RNbPW1tG1XIMhPUTkDgz/ 3mgcOB+DbAwwkPacIR8QUjOpbDtLpGMzEgn/jn3lgmqjxucytvowtf08/YDThSxk 6mcPjG/ZQC7OE3t13ttZo3swOgs6lW0yQX26WGfIcdtEpAg2h9eig+UHiUTt3HMn FHt2foO4P57j1Ko/FFuHbALlTx3QO/ko6E87YbIi0Fxe8kXJiVprArBRiKludZwZ wEzPJgY7CaBuMBNzxi3lXt7p2fY9mXx8MeQtKI7L8riMllhoMRCc3syROQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFID18w9CyaepnE/19oCaw1tLymn4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ViMTQ3YjBhLTkzYWMtNGFiNy04YzQwLTFkZjJjODg3MjVhNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8UAwDQYJKoZIhvcNAQELBQADggEBAEE4HWK0koPRD2bNjG4u q0haA0AQSDmAxhI58vc/vvcMMkgri9aILHouBHKFARMrLTQps8QgL6XwguzKIaPK uoKAXrbV5qlVGxTED/qkgDovf9IpKR1LcMtMGTUby8HcdhezhO/5sAoOe6/fwYAn 0V5jZeRLPiwFa7M6W2X/IdGSBF78C3argEswOnXNh9NJg6E7MAaqg5MJ/2Q2LGeF dSEeqLvz+IYwibxRbFUvbJv/by9FRhaS+dcLMB96sL5Nv7h5jy6olV4nS744D1fM 5cyXLqu5xeXZspe8fAy6RTujg0nm1/WPZ32O3wFeJ8Z1UjXaJCuV/+L+Bp6Srzjk 14Y= -----END CERTIFICATE-----Generated at Mon Oct 20 20:33:26 2025 by rpki-client