$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08cfc748-a0fe-40b0-9306-6b4fecf097e6.roa File: 08cfc748-a0fe-40b0-9306-6b4fecf097e6.roa (raw, json) Hash identifier: Hmi3/zTCBByJzTuwUkmviQci8XK+1+esCWJBr8U/oXU= Subject key identifier: 9F:FD:A6:E8:00:6E:2B:A4:37:E0:62:8E:D0:52:16:B2:2C:FE:A2:4D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1AD3E0C601982F8B1D2D863CDFDEE028DFBBF89B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08cfc748-a0fe-40b0-9306-6b4fecf097e6.roa Signing time: Fri 26 Sep 2025 00:01:38 +0000 ROA not before: Fri 26 Sep 2025 00:01:38 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d3:e0:c6:01:98:2f:8b:1d:2d:86:3c:df:de:e0:28:df:bb:f8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 26 00:01:38 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=4b17beee6328e30ff5a9ae59bce64538832dfdd9c7d3915a526efe70b2e1745b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:b9:91:28:ae:7f:4e:16:22:18:9b:85:c8: 38:59:14:10:85:ae:f9:8a:70:08:98:a7:08:fa:46: f8:3e:a6:4a:98:ab:c9:83:d1:d2:57:d0:8c:84:c3: 16:22:78:63:96:1a:43:6a:aa:35:35:00:ad:63:5f: 04:fe:3b:69:db:8f:67:30:02:34:28:b8:45:24:21: 24:85:f5:b9:a3:b3:53:95:f3:10:12:ec:40:53:02: a6:e9:6e:91:79:71:cd:75:63:b9:3f:0f:b5:ac:6f: 12:f6:3f:ab:a8:2a:6e:2e:c7:5c:28:af:b8:60:be: 3b:c5:49:31:3b:2a:10:98:4f:b8:ab:8e:db:bb:d9: 40:ed:1d:c9:71:60:56:ed:53:d7:bd:38:77:99:e2: 00:e2:a5:51:2e:19:67:2b:c8:d0:01:41:78:b2:37: 5a:97:27:5e:67:6f:3f:13:41:7e:50:bf:37:f5:37: fb:94:ed:62:67:d6:c0:34:48:14:1e:a3:95:3b:f0: 21:13:de:54:d5:27:b6:68:76:ad:14:8a:6c:5a:8a: 41:cc:89:ed:a4:c8:17:fc:86:19:f1:47:97:15:13: 3b:cd:a8:93:18:31:19:99:a6:57:b6:83:e8:4b:a7: e7:c5:16:85:af:e5:2d:3f:36:9c:ce:b2:9a:2d:ba: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FD:A6:E8:00:6E:2B:A4:37:E0:62:8E:D0:52:16:B2:2C:FE:A2:4D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08cfc748-a0fe-40b0-9306-6b4fecf097e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:2000::/40 Signature Algorithm: sha256WithRSAEncryption 7c:0d:68:53:e2:79:16:eb:c7:fa:ba:b6:a0:15:66:4b:b5:65: a9:e8:1d:07:43:ad:b2:d6:e4:da:4e:38:96:55:f4:ee:25:2d: 5b:be:c4:d9:96:3d:1a:60:91:44:29:e8:ee:a1:82:e4:7b:7a: 66:9c:be:2a:4a:11:99:09:f2:ab:c2:1c:35:a1:10:5e:66:a0: bb:c2:08:5e:32:ca:73:16:12:b5:f7:ed:05:c6:15:3b:3d:3f: a7:5d:60:b9:0a:af:63:94:a1:06:16:4b:8d:ca:15:a4:d3:8b: 87:1d:47:ae:7c:b3:ef:2c:00:ec:fc:fb:d1:6e:cf:2f:2d:d9: 14:30:3c:70:d9:71:68:f7:80:c9:b5:1c:39:3e:f4:be:35:c0: e7:f2:b6:7e:77:93:4e:ec:68:72:69:7a:b2:69:49:b1:16:0e: 78:ba:50:16:ce:92:9e:27:eb:d1:38:f8:1e:38:be:ed:92:f2: f8:cd:48:ff:97:de:1f:d7:5d:e4:4e:46:26:aa:a0:67:c3:29: 23:59:30:ef:ed:ce:73:33:e1:cf:66:59:4a:1a:b4:99:2b:5c: 61:30:fc:c9:9b:ca:11:c5:89:b8:6e:ec:2b:94:ac:52:22:1d: c0:60:de:b8:dc:fc:8e:f0:75:9a:9d:8d:f2:c6:62:6c:ec:2c: 63:4f:ce:b5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGtPgxgGYL4sdLYY8397gKN+7+JswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkyNjAwMDEzOFoX DTI1MTAzMTIzNTk1OVowejFJMEcGA1UEBRNANGIxN2JlZWU2MzI4ZTMwZmY1YTlh ZTU5YmNlNjQ1Mzg4MzJkZmRkOWM3ZDM5MTVhNTI2ZWZlNzBiMmUxNzQ1YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqe5kSiuf04WIhibhcg4WRQQha75 inAImKcI+kb4PqZKmKvJg9HSV9CMhMMWInhjlhpDaqo1NQCtY18E/jtp249nMAI0 KLhFJCEkhfW5o7NTlfMQEuxAUwKm6W6ReXHNdWO5Pw+1rG8S9j+rqCpuLsdcKK+4 YL47xUkxOyoQmE+4q47bu9lA7R3JcWBW7VPXvTh3meIA4qVRLhlnK8jQAUF4sjda lydeZ28/E0F+UL839Tf7lO1iZ9bANEgUHqOVO/AhE95U1Se2aHatFIpsWopBzInt pMgX/IYZ8UeXFRM7zaiTGDEZmaZXtoPoS6fnxRaFr+UtPzaczrKaLbqkrQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJ/9pugAbiukN+BijtBSFrIs/qJNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4Y2ZjNzQ4LWEwZmUtNDBiMC05MzA2LTZiNGZlY2YwOTdlNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7yAwDQYJKoZIhvcNAQELBQADggEBAHwNaFPieRbrx/q6tqAV Zku1ZanoHQdDrbLW5NpOOJZV9O4lLVu+xNmWPRpgkUQp6O6hguR7emacvipKEZkJ 8qvCHDWhEF5moLvCCF4yynMWErX37QXGFTs9P6ddYLkKr2OUoQYWS43KFaTTi4cd R658s+8sAOz8+9Fuzy8t2RQwPHDZcWj3gMm1HDk+9L41wOfytn53k07saHJperJp SbEWDni6UBbOkp4n69E4+B44vu2S8vjNSP+X3h/XXeRORiaqoGfDKSNZMO/tznMz 4c9mWUoatJkrXGEw/MmbyhHFibhu7CuUrFIiHcBg3rjc/I7wdZqdjfLGYmzsLGNP zrU= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:45 2025 by rpki-client