$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa File: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (raw, json) Hash identifier: iP7/JU1mljiUfiC8nO+MEr/dZ0c+dF9vVqRDfvtQdiM= Subject key identifier: F1:AC:A6:13:76:3D:9B:B5:7D:A4:47:B8:D7:CC:64:7C:91:7C:CC:94 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 57970E565CE3272117571525787B54AEB74BC1C4 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa Signing time: Fri 17 Oct 2025 00:01:28 +0000 ROA not before: Fri 17 Oct 2025 00:01:28 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:97:0e:56:5c:e3:27:21:17:57:15:25:78:7b:54:ae:b7:4b:c1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 17 00:01:28 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=b7b1f1bcada78031f3447145e3b42811f7a1f38bfcb0bd70bc0828a85a07cec4, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e4:8a:dd:25:24:43:1c:9e:32:e8:7e:13:f7: 00:3c:d2:8b:2b:cd:90:03:4b:ab:a1:8e:87:37:7b: ee:35:e9:ea:10:57:20:ea:7f:e1:4a:6b:24:d4:fa: ff:8f:89:11:1b:4d:48:a4:b6:8e:63:f8:48:4a:da: ad:de:7f:b2:9e:2c:f6:ca:ed:c2:c6:03:b1:ea:a3: f4:75:97:e2:8f:c9:8c:7e:17:04:2a:2c:54:c5:61: f2:ed:1b:e1:ba:c8:8c:a4:6e:1d:4a:e3:bd:1f:73: ab:b3:b2:1e:8f:44:ba:7e:fc:15:0d:66:9f:f8:24: 28:7e:30:0f:1a:d0:65:cd:15:c1:cf:29:73:aa:0d: 53:a3:93:e1:fe:53:48:b4:4f:93:9c:38:71:06:7b: 2c:25:d5:7d:3b:65:51:91:76:92:b1:ac:00:3b:b9: 18:5a:95:bd:0c:94:e8:a5:93:7d:71:6c:cc:9a:e5: ef:1f:60:0e:71:24:86:5e:bc:e0:c2:15:7e:87:e8: 92:00:95:44:40:8d:94:eb:c3:cf:db:ce:1f:cb:c2: 6e:9d:26:47:14:a7:62:55:5c:eb:dd:9a:67:3f:11: 87:a8:23:93:d9:aa:a5:73:21:fc:89:f4:12:8b:74: 82:41:2f:b3:e8:01:c1:74:78:44:46:a6:22:0a:f0: 5e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AC:A6:13:76:3D:9B:B5:7D:A4:47:B8:D7:CC:64:7C:91:7C:CC:94 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.240.0/20 Signature Algorithm: sha256WithRSAEncryption 06:1f:15:e3:b2:fc:72:d7:9a:3d:c2:87:45:b5:1a:9d:b5:f9: d8:93:22:88:35:db:87:d0:ba:85:7c:eb:6e:10:12:aa:83:c3: 11:d6:37:2c:a1:2e:52:b0:67:69:d4:e0:00:c7:6f:dc:c0:7d: 72:83:21:ad:77:e1:48:80:87:f7:26:03:de:96:5d:10:cb:1e: ba:c2:97:1c:26:9a:68:fc:b5:fe:c2:44:e2:9c:3d:e8:94:75: 1e:93:f6:df:3d:a7:c3:51:00:f7:e6:61:f0:9c:f1:87:93:3e: 65:ad:60:b4:05:e2:47:07:84:40:de:68:c5:3e:af:ca:c8:28: 53:e5:92:4c:22:cf:e7:5f:92:ed:ff:bd:15:0b:2d:14:a7:c5: 0d:16:35:78:1e:c9:d9:31:ee:92:1e:2b:ab:d2:f1:04:e2:5d: bb:ec:93:f3:db:ea:ae:35:3e:b1:09:cc:b2:f9:67:7d:ea:bc: f6:3f:0f:8c:a1:12:74:49:a2:99:c3:2d:55:b6:12:f0:d2:36: cf:d2:65:fc:4a:41:77:09:f0:8c:ec:dc:23:db:78:d6:26:1d: 57:0b:e5:6d:de:f5:67:c0:f3:95:60:ea:32:fb:ab:f8:9f:67: 72:fc:b7:c8:15:c0:73:34:33:14:43:16:b2:8c:9d:30:74:76: 7d:41:a4:45 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUV5cOVlzjJyEXVxUleHtUrrdLwcQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MTAxNzAwMDEyOFoX DTI1MTEyMTIzNTk1OVowejFJMEcGA1UEBRNAYjdiMWYxYmNhZGE3ODAzMWYzNDQ3 MTQ1ZTNiNDI4MTFmN2ExZjM4YmZjYjBiZDcwYmMwODI4YTg1YTA3Y2VjNDEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleSK3SUkQxyeMuh+E/cAPNKLK82Q A0uroY6HN3vuNenqEFcg6n/hSmsk1Pr/j4kRG01IpLaOY/hIStqt3n+yniz2yu3C xgOx6qP0dZfij8mMfhcEKixUxWHy7RvhusiMpG4dSuO9H3Ors7Iej0S6fvwVDWaf +CQofjAPGtBlzRXBzylzqg1To5Ph/lNItE+TnDhxBnssJdV9O2VRkXaSsawAO7kY WpW9DJTopZN9cWzMmuXvH2AOcSSGXrzgwhV+h+iSAJVEQI2U68PP284fy8JunSZH FKdiVVzr3ZpnPxGHqCOT2aqlcyH8ifQSi3SCQS+z6AHBdHhERqYiCvBetQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPGsphN2PZu1faRHuNfMZHyRfMyUMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 Lzc0ZWZlOGIzLWQzOWMtNGE4Yi05YjdiLTU5OTRhYTRjOGQ4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQErynwMA0GCSqGSIb3DQEBCwUAA4IBAQAGHxXjsvxy15o9wodFtRqd tfnYkyKINduH0LqFfOtuEBKqg8MR1jcsoS5SsGdp1OAAx2/cwH1ygyGtd+FIgIf3 JgPell0Qyx66wpccJppo/LX+wkTinD3olHUek/bfPafDUQD35mHwnPGHkz5lrWC0 BeJHB4RA3mjFPq/KyChT5ZJMIs/nX5Lt/70VCy0Up8UNFjV4HsnZMe6SHiur0vEE 4l277JPz2+quNT6xCcyy+Wd96rz2Pw+MoRJ0SaKZwy1VthLw0jbP0mX8SkF3CfCM 7Nwj23jWJh1XC+Vt3vVnwPOVYOoy+6v4n2dy/LfIFcBzNDMUQxayjJ0wdHZ9QaRF -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:18 2025 by rpki-client