$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08139f8c-2c48-4f09-9917-9ff73fe712df.roa File: 08139f8c-2c48-4f09-9917-9ff73fe712df.roa (raw, json) Hash identifier: MUXreLUdXgXpQ38xsQHM9uN681z//xJ9Ef8koeQPgm4= Subject key identifier: 50:C1:5B:10:56:FB:01:62:E1:4B:FA:32:26:BE:6E:21:EA:DE:EE:4D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42A36485A6ACEE041C8D0229FE469084166B4F63 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08139f8c-2c48-4f09-9917-9ff73fe712df.roa Signing time: Tue 07 Oct 2025 00:00:05 +0000 ROA not before: Tue 07 Oct 2025 00:00:05 +0000 ROA not after: Tue 11 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a3:64:85:a6:ac:ee:04:1c:8d:02:29:fe:46:90:84:16:6b:4f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 7 00:00:05 2025 GMT Not After : Nov 11 23:59:59 2025 GMT Subject: serialNumber=e34a2d40fa16e849ab94b198e3ac09a444287103f221a0a000ce2fc2a9881056, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:53:17:99:44:5d:3a:69:8e:ca:e4:0b:b1:59: 3d:fa:85:56:8f:1d:7f:af:9d:d0:4c:f2:f1:a9:4c: 61:c1:f8:80:bc:88:4a:88:a1:6e:60:16:d9:fc:d3: 30:27:c4:7c:9e:07:ac:dc:01:2b:67:26:dc:de:e7: 02:e8:6a:7b:db:f2:23:66:95:64:5c:c4:08:84:3f: a2:b7:a1:d6:75:16:ac:47:bc:78:6c:83:60:cf:31: a8:63:6a:dd:8e:af:a5:1c:9e:7a:8e:a3:aa:e7:f0: d6:89:07:dd:57:be:bd:1e:4e:9f:9e:f4:0c:df:66: 60:6f:de:fc:9f:15:ef:70:d8:73:58:44:05:fe:64: 17:09:d6:c1:28:1b:e3:a8:2d:c4:7e:68:b2:18:fd: 11:66:e5:71:d2:56:92:93:7c:ee:c9:37:f6:13:fd: 1a:57:8f:f8:f3:83:41:ee:57:2b:a2:55:6f:ea:c6: 2c:a3:68:d2:e5:dd:4f:cd:11:fb:5f:16:5c:6a:73: fb:91:aa:bf:f8:6a:27:19:85:6a:c2:f4:5c:17:24: 4b:d4:23:4d:d8:a8:c4:53:f8:de:b0:3b:b6:03:9d: 7b:11:5a:da:57:7a:04:8e:a1:35:62:93:5f:38:b6: ee:5b:af:1b:f5:58:47:26:f4:f5:f4:55:ee:85:c9: 8a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C1:5B:10:56:FB:01:62:E1:4B:FA:32:26:BE:6E:21:EA:DE:EE:4D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08139f8c-2c48-4f09-9917-9ff73fe712df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:2800::/40 Signature Algorithm: sha256WithRSAEncryption 57:dc:91:e2:1c:4a:cb:8f:72:6f:9f:5d:2f:8c:87:a5:4b:a9: 3c:82:d0:f7:7d:dd:cf:30:b6:d0:41:2d:9d:85:d7:7a:8c:ed: c3:4b:49:9b:a7:66:5f:c1:07:57:c4:15:3a:e4:1c:26:35:a4: 9f:aa:8a:61:30:56:54:7a:ae:5e:f7:67:a4:26:73:13:12:53: 05:09:7e:7c:83:d9:fc:a3:8a:8a:b0:ec:96:b9:e0:11:8e:c0: ff:14:d0:fd:90:a6:d3:c1:8f:c2:17:d3:4b:f3:d7:0d:8e:2e: 5a:0e:02:bd:98:3f:e8:10:d7:2a:4d:08:02:6d:2e:6a:2a:e4: 13:98:b7:f8:c6:de:83:1d:cc:41:65:65:6d:df:2d:2d:f3:bf: 62:54:a6:a8:a2:af:9e:47:72:01:f7:64:17:c5:63:b6:25:72: 0f:90:28:c8:f5:c6:8e:a9:fa:72:50:8a:5a:3d:56:a5:b8:33: 5e:cf:f3:7f:72:c7:3a:c0:9c:82:6b:ab:23:6d:93:44:05:87: db:2e:d0:8a:f7:a5:9e:b1:24:93:1a:1a:77:84:9e:fc:91:ea: 58:ca:4d:1d:1c:ca:c5:e7:ef:d2:cb:7d:b6:7d:cd:03:4b:39: 70:a0:17:33:17:88:55:3e:04:43:d5:5e:51:24:50:96:9f:7d: df:c9:f3:aa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQqNkhaas7gQcjQIp/kaQhBZrT2MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNzAwMDAwNVoX DTI1MTExMTIzNTk1OVowejFJMEcGA1UEBRNAZTM0YTJkNDBmYTE2ZTg0OWFiOTRi MTk4ZTNhYzA5YTQ0NDI4NzEwM2YyMjFhMGEwMDBjZTJmYzJhOTg4MTA1NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlMXmURdOmmOyuQLsVk9+oVWjx1/ r53QTPLxqUxhwfiAvIhKiKFuYBbZ/NMwJ8R8nges3AErZybc3ucC6Gp72/IjZpVk XMQIhD+it6HWdRasR7x4bINgzzGoY2rdjq+lHJ56jqOq5/DWiQfdV769Hk6fnvQM 32Zgb978nxXvcNhzWEQF/mQXCdbBKBvjqC3EfmiyGP0RZuVx0laSk3zuyTf2E/0a V4/484NB7lcrolVv6sYso2jS5d1PzRH7XxZcanP7kaq/+GonGYVqwvRcFyRL1CNN 2KjEU/jesDu2A517EVraV3oEjqE1YpNfOLbuW68b9VhHJvT19FXuhcmKmQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFDBWxBW+wFi4Uv6Mia+biHq3u5NMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4MTM5ZjhjLTJjNDgtNGYwOS05OTE3LTlmZjczZmU3MTJkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9CgwDQYJKoZIhvcNAQELBQADggEBAFfckeIcSsuPcm+fXS+M h6VLqTyC0Pd93c8wttBBLZ2F13qM7cNLSZunZl/BB1fEFTrkHCY1pJ+qimEwVlR6 rl73Z6QmcxMSUwUJfnyD2fyjioqw7Ja54BGOwP8U0P2QptPBj8IX00vz1w2OLloO Ar2YP+gQ1ypNCAJtLmoq5BOYt/jG3oMdzEFlZW3fLS3zv2JUpqiir55HcgH3ZBfF Y7Ylcg+QKMj1xo6p+nJQilo9VqW4M17P839yxzrAnIJrqyNtk0QFh9su0Ir3pZ6x JJMaGneEnvyR6ljKTR0cysXn79LLfbZ9zQNLOXCgFzMXiFU+BEPVXlEkUJaffd/J 86o= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:13 2025 by rpki-client