$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3119727a-0085-4a38-8cdf-7eaddddb55e5.roa File: 3119727a-0085-4a38-8cdf-7eaddddb55e5.roa (raw, json) Hash identifier: 5ZmkomMg2DTlUCyqp6grikRGZWbJM+SHjM2oBbjQUhM= Subject key identifier: 6E:31:C7:05:7B:50:33:DB:00:45:90:14:5F:3A:6E:C6:9E:72:D3:28 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 34838B86C0E71660569AF61E69DA748E7FF5C997 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3119727a-0085-4a38-8cdf-7eaddddb55e5.roa Signing time: Wed 08 Oct 2025 00:00:57 +0000 ROA not before: Wed 08 Oct 2025 00:00:57 +0000 ROA not after: Wed 12 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:83:8b:86:c0:e7:16:60:56:9a:f6:1e:69:da:74:8e:7f:f5:c9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 8 00:00:57 2025 GMT Not After : Nov 12 23:59:59 2025 GMT Subject: serialNumber=02094a677e601993cea3ccd4399ccf955e809152eaf4977e995d9616f9224a8e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:05:79:5e:8a:fd:60:f4:6d:9f:19:41:8c:3a: 13:0b:b5:eb:d0:f5:b7:94:ef:01:6b:4f:95:b0:7c: 7b:62:eb:08:e6:dd:e9:20:c1:b3:49:9b:4b:53:08: f8:5e:e6:4b:27:21:03:54:2c:90:3d:a5:c6:57:5f: 0a:ff:8f:06:76:a3:06:94:72:25:d2:10:71:71:17: c4:13:c9:24:bc:ae:8a:e7:58:88:ef:46:fd:11:66: ac:35:6e:d6:76:93:ea:9d:3a:3b:5a:4c:46:b9:80: 38:02:c6:52:d5:f8:2f:9b:76:ec:f2:fe:9a:7f:d3: 57:ce:4e:4a:ea:0b:5b:8c:ca:fc:6d:5f:ef:77:63: c1:3a:57:dd:b8:60:5a:6d:b7:cd:ac:dc:37:03:81: df:38:01:05:f1:97:50:33:32:34:db:1e:7b:f8:68: 6f:e1:c7:30:93:18:1e:23:33:07:6e:ec:32:98:f9: ea:65:1e:f3:ae:56:45:d1:ba:82:a6:4c:b9:e0:81: 5b:cd:35:9c:52:c0:13:91:49:9d:3b:c3:12:18:4c: c2:ef:f2:90:03:23:db:1e:eb:f4:5e:be:cd:2e:5d: 9d:d1:25:47:b7:1f:0c:46:36:04:5f:ac:36:7a:e8: cd:ed:8e:34:4c:13:8a:0c:fa:de:07:5e:44:5e:49: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:31:C7:05:7B:50:33:DB:00:45:90:14:5F:3A:6E:C6:9E:72:D3:28 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3119727a-0085-4a38-8cdf-7eaddddb55e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:800::/40 Signature Algorithm: sha256WithRSAEncryption 3d:e1:bf:34:7f:1f:d0:01:cb:50:b1:89:19:ff:00:60:81:67: e4:d8:e3:a3:90:e0:d7:40:5a:68:32:fc:f2:2b:51:78:08:84: 72:ae:b3:09:32:4a:bd:b7:ab:a4:f7:94:ac:74:a6:c9:63:8e: c5:c1:28:17:27:35:45:7e:97:b4:b8:88:bf:78:7d:55:39:bf: d5:02:88:d1:f7:8b:9f:0c:4e:cb:8f:68:33:66:7c:4c:8b:6f: 28:3b:18:c5:cd:17:09:c6:e1:a5:b0:5d:e4:b0:e9:5e:a0:5e: df:08:7f:0f:90:c2:7a:95:65:45:84:be:5b:12:a4:cb:26:a1: 84:f6:6a:8d:c8:44:c8:a9:8c:41:26:6b:ea:18:73:17:c9:ad: 87:a6:8b:a1:9a:83:b2:98:d2:24:da:33:2e:77:0a:c7:a9:b0: 52:fb:d2:e5:7f:95:0d:fc:82:8f:44:3d:8c:78:a7:14:58:39: 8c:9d:07:a3:29:0e:9d:0a:00:4c:d2:1d:77:8b:d2:7f:f3:0e: 97:fa:c0:7a:c9:27:da:a8:d4:41:e6:1f:db:ba:4b:bc:69:73: d7:34:8a:20:d8:bb:3d:5e:c0:f7:14:86:89:6c:10:f8:8b:04: 62:bf:ec:fa:a0:57:a6:a5:aa:b8:1d:08:1a:5f:c7:02:bf:ad: 4d:33:29:06 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNIOLhsDnFmBWmvYeadp0jn/1yZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwODAwMDA1N1oX DTI1MTExMjIzNTk1OVowejFJMEcGA1UEBRNAMDIwOTRhNjc3ZTYwMTk5M2NlYTNj Y2Q0Mzk5Y2NmOTU1ZTgwOTE1MmVhZjQ5NzdlOTk1ZDk2MTZmOTIyNGE4ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQV5Xor9YPRtnxlBjDoTC7Xr0PW3 lO8Ba0+VsHx7YusI5t3pIMGzSZtLUwj4XuZLJyEDVCyQPaXGV18K/48GdqMGlHIl 0hBxcRfEE8kkvK6K51iI70b9EWasNW7WdpPqnTo7WkxGuYA4AsZS1fgvm3bs8v6a f9NXzk5K6gtbjMr8bV/vd2PBOlfduGBabbfNrNw3A4HfOAEF8ZdQMzI02x57+Ghv 4ccwkxgeIzMHbuwymPnqZR7zrlZF0bqCpky54IFbzTWcUsATkUmdO8MSGEzC7/KQ AyPbHuv0Xr7NLl2d0SVHtx8MRjYEX6w2eujN7Y40TBOKDPreB15EXkmT2QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG4xxwV7UDPbAEWQFF86bsaectMoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxMTk3MjdhLTAwODUtNGEzOC04Y2RmLTdlYWRkZGRiNTVlNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYAgwDQYJKoZIhvcNAQELBQADggEBAD3hvzR/H9ABy1CxiRn/ AGCBZ+TY46OQ4NdAWmgy/PIrUXgIhHKuswkySr23q6T3lKx0psljjsXBKBcnNUV+ l7S4iL94fVU5v9UCiNH3i58MTsuPaDNmfEyLbyg7GMXNFwnG4aWwXeSw6V6gXt8I fw+QwnqVZUWEvlsSpMsmoYT2ao3IRMipjEEma+oYcxfJrYemi6Gag7KY0iTaMy53 CsepsFL70uV/lQ38go9EPYx4pxRYOYydB6MpDp0KAEzSHXeL0n/zDpf6wHrJJ9qo 1EHmH9u6S7xpc9c0iiDYuz1ewPcUholsEPiLBGK/7PqgV6alqrgdCBpfxwK/rU0z KQY= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:28 2025 by rpki-client