$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa File: 3537691c-1a10-4699-a8a0-4cec50a35534.roa (raw, json) Hash identifier: QDp8YND+KztMKLnBYPmSf2UPXQ5O7iL5iTGtsdu+7LE= Subject key identifier: 20:49:34:4F:78:D0:32:7A:6D:87:09:D6:12:6A:7A:A0:59:0D:57:8A Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 5AE2079DCC5E82B35C8E266565B5D0D6D46057AE Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa Signing time: Fri 17 Oct 2025 00:10:04 +0000 ROA not before: Fri 17 Oct 2025 00:10:04 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fa:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e2:07:9d:cc:5e:82:b3:5c:8e:26:65:65:b5:d0:d6:d4:60:57:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 17 00:10:04 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=c4b8360573017d8d045ad679daf6f96ccfca4a0763177cddc5f2e9f2be0ef411, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:78:c6:80:5a:e7:08:ac:75:da:77:e2:75: 08:44:49:6b:f2:fd:5f:1c:4b:b0:82:ae:d4:07:1f: 81:ba:d1:c1:b5:04:d7:5a:4f:6c:cd:f4:6e:72:df: 01:d2:68:9e:b6:cf:4a:cd:89:3d:37:2b:1b:4b:8e: 2a:31:c2:b0:0e:48:83:bb:57:54:81:32:c1:28:18: 55:a9:83:43:ce:be:d1:9b:c6:7a:cf:e9:da:c9:94: fc:12:eb:c5:5a:db:35:38:27:e3:e5:05:38:18:c4: b0:14:41:08:2d:62:db:65:4d:27:e2:06:ec:80:6f: 65:66:68:b4:29:b4:f0:b5:d9:f4:d4:c9:98:49:d0: e4:e1:5b:7b:9d:f5:da:cc:01:5a:c7:b0:54:e9:fe: 7e:82:36:c3:23:58:ea:b3:05:65:af:fe:ee:a7:2d: 64:17:bd:b9:ef:52:7a:cf:9e:19:05:26:83:eb:03: 59:bf:df:71:f6:99:fc:36:c1:49:c7:b6:57:a3:a3: 20:a1:61:1e:61:33:f0:aa:ca:eb:3b:84:2b:85:bd: 6d:fc:5d:1e:d0:64:07:39:a2:c8:2b:1d:b5:bf:ce: 80:b5:8d:3e:52:dd:e2:c2:87:12:f5:4f:d7:d5:16: 55:22:e0:b1:20:6b:28:30:ac:77:c6:d2:09:22:83: 06:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:49:34:4F:78:D0:32:7A:6D:87:09:D6:12:6A:7A:A0:59:0D:57:8A X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fa:8000::/40 Signature Algorithm: sha256WithRSAEncryption 33:e7:e7:d6:7f:d0:ac:34:3f:86:42:86:4f:c0:6b:b9:a9:43: b9:81:97:f0:7a:5e:c8:f0:22:8a:0e:38:97:78:53:5a:ee:d8: 69:99:8a:bc:94:41:42:fb:01:77:00:14:e0:8b:25:7e:58:27: 84:bb:8b:01:03:f0:36:7c:7a:8f:fd:52:45:01:0d:5c:70:f7: ae:44:4d:ef:f0:fe:b3:9b:b8:71:13:af:3b:89:88:1b:32:72: aa:7f:c0:b2:48:40:23:43:25:7d:8e:2f:d6:7c:ba:33:3f:2c: 92:46:e8:9f:48:bb:ec:c4:a8:92:61:9c:1a:9c:2b:52:76:ea: 35:39:40:9f:52:c9:a6:3c:94:1d:d6:84:49:56:e5:af:ed:d5: 2b:32:49:18:82:16:81:99:28:19:44:dc:97:09:88:52:d0:bf: 29:8f:a6:e8:62:13:8f:d1:03:21:ff:2d:17:c4:15:2a:d3:7c: d2:1c:de:15:bf:c7:f1:b5:1b:1a:17:08:eb:fe:79:08:59:f3: 4a:72:4a:34:1c:7a:f6:f6:30:8f:5a:1f:52:31:56:95:1f:6f: 75:49:22:10:a5:4d:ec:fd:de:21:23:fa:48:9c:50:1e:5c:a0: 60:bc:98:43:aa:05:22:00:78:3c:88:27:f1:f3:d7:34:32:ea: 24:40:cf:5f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWuIHncxegrNcjiZlZbXQ1tRgV64wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MTAxNzAwMTAwNFoX DTI1MTEyMTIzNTk1OVowejFJMEcGA1UEBRNAYzRiODM2MDU3MzAxN2Q4ZDA0NWFk Njc5ZGFmNmY5NmNjZmNhNGEwNzYzMTc3Y2RkYzVmMmU5ZjJiZTBlZjQxMTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+14xoBa5wisddp34nUIRElr8v1f HEuwgq7UBx+ButHBtQTXWk9szfRuct8B0miets9KzYk9NysbS44qMcKwDkiDu1dU gTLBKBhVqYNDzr7Rm8Z6z+nayZT8EuvFWts1OCfj5QU4GMSwFEEILWLbZU0n4gbs gG9lZmi0KbTwtdn01MmYSdDk4Vt7nfXazAFax7BU6f5+gjbDI1jqswVlr/7upy1k F72571J6z54ZBSaD6wNZv99x9pn8NsFJx7ZXo6MgoWEeYTPwqsrrO4Qrhb1t/F0e 0GQHOaLIKx21v86AtY0+Ut3iwocS9U/X1RZVIuCxIGsoMKx3xtIJIoMG7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCBJNE940DJ6bYcJ1hJqeqBZDVeKMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzM1Mzc2OTFjLTFhMTAtNDY5OS1hOGEwLTRjZWM1MGEzNTUzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A+oAwDQYJKoZIhvcNAQELBQADggEBADPn59Z/0Kw0P4ZChk/A a7mpQ7mBl/B6XsjwIooOOJd4U1ru2GmZiryUQUL7AXcAFOCLJX5YJ4S7iwED8DZ8 eo/9UkUBDVxw965ETe/w/rObuHETrzuJiBsycqp/wLJIQCNDJX2OL9Z8ujM/LJJG 6J9Iu+zEqJJhnBqcK1J26jU5QJ9SyaY8lB3WhElW5a/t1SsySRiCFoGZKBlE3JcJ iFLQvymPpuhiE4/RAyH/LRfEFSrTfNIc3hW/x/G1GxoXCOv+eQhZ80pySjQcevb2 MI9aH1IxVpUfb3VJIhClTez93iEj+kicUB5coGC8mEOqBSIAeDyIJ/Hz1zQy6iRA z18= -----END CERTIFICATE-----Generated at Mon Oct 20 23:07:37 2025 by rpki-client