$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83c3c4a9-7960-4c3c-b720-6247e5c54fc1.roa File: 83c3c4a9-7960-4c3c-b720-6247e5c54fc1.roa (raw, json) Hash identifier: CMIYjv/efjzwZ2Ft+RiggL+q5u7YbQ+4ooOMllu/RaA= Subject key identifier: 87:E0:5C:84:C8:47:2B:C9:8F:BE:21:77:85:2F:45:CE:2A:1F:37:CF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 065D0E4175E538054B2937EB66503996CF60D1F1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83c3c4a9-7960-4c3c-b720-6247e5c54fc1.roa Signing time: Sat 04 Oct 2025 00:00:33 +0000 ROA not before: Sat 04 Oct 2025 00:00:33 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:f0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5d:0e:41:75:e5:38:05:4b:29:37:eb:66:50:39:96:cf:60:d1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:33 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=4202b2e565170761040685b49425d69310f23c5c217b7e1cadbc5eeca84b0918, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:7b:5d:73:a5:96:e5:a5:f4:5d:cb:6d:7d: 57:d4:24:54:af:b8:33:a2:e2:66:eb:3e:6b:b0:c3: 7d:49:44:07:45:1b:1b:b6:93:11:9b:d8:2f:f8:d8: cc:1f:f5:28:ba:66:37:7c:8d:c2:cc:60:86:c0:23: 20:15:d2:95:cf:ec:d4:68:61:d7:10:93:bc:79:85: b6:8d:be:aa:d7:ea:17:5c:ec:ac:f0:b7:35:77:6e: ed:55:b0:4b:93:06:e8:17:b4:c3:44:40:70:92:63: a0:1a:da:d0:dd:6d:c8:d9:b1:8c:f6:c8:2c:c5:29: 15:b1:83:b9:e7:32:b1:db:d5:f5:98:b6:39:94:ab: 76:18:48:49:e5:9d:09:a1:56:5e:56:6a:52:48:0e: 66:48:e3:8f:dc:91:51:d4:5f:4a:89:21:f1:c1:0c: 05:4e:9b:74:e9:c7:d8:54:ed:ac:ee:da:ef:6e:ee: ee:22:dc:28:eb:2f:0d:57:1c:f1:32:45:5e:8f:80: 09:51:95:b6:97:29:57:f5:8c:d2:97:d3:d4:3e:bd: 91:ff:0e:8b:5d:2f:92:37:71:9b:12:34:99:9e:1a: 80:4f:2d:f3:d6:29:34:0e:c2:b7:27:17:9b:78:5d: 45:89:54:f3:9e:8e:50:6a:2e:0d:cd:8d:b1:71:16: e2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E0:5C:84:C8:47:2B:C9:8F:BE:21:77:85:2F:45:CE:2A:1F:37:CF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83c3c4a9-7960-4c3c-b720-6247e5c54fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:f0c0::/46 Signature Algorithm: sha256WithRSAEncryption 96:85:0c:27:5b:a1:0c:0f:10:4d:5d:58:9c:59:79:93:c0:87: d6:4b:58:1e:b6:3c:15:ec:5f:49:f6:a3:4d:61:fd:11:7b:0a: 2a:32:71:a4:5b:c3:26:7c:49:80:65:42:55:d9:3a:58:42:1b: 17:be:c4:db:2f:d4:35:d6:4f:ce:b1:78:80:e2:88:e7:65:7b: a7:44:53:12:5a:9e:17:95:b0:3d:11:fb:64:f6:0d:e6:aa:d9: f2:ff:c5:62:56:4c:08:3c:d0:15:e6:e8:f6:ee:8f:d0:55:38: c7:13:2c:c3:a7:20:8f:3f:ee:c6:06:60:e0:f5:78:41:46:09: 69:76:20:80:b3:60:cd:64:ee:2f:98:ed:9c:01:d9:85:63:b4: 61:b8:5f:fb:f2:27:70:a8:a7:d1:d0:62:0a:17:96:58:b3:84: 81:6b:a4:31:2d:5e:36:a0:6c:c4:c7:84:0b:e6:76:f7:9d:0f: 29:f4:0e:fa:8a:4f:8d:b1:e3:44:2a:ca:5f:fb:18:44:dc:36: 39:82:cc:b1:74:8a:b0:d9:d3:f7:66:f1:b5:6e:67:c3:d0:1e: db:36:f1:59:27:84:58:a3:96:8b:d8:5f:68:e5:6e:be:9a:fc: 6a:bf:b1:39:7a:65:cd:c1:cf:d3:2c:24:54:4e:a8:e9:fd:f8: c1:68:c1:ed -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBl0OQXXlOAVLKTfrZlA5ls9g0fEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNDAwMDAzM1oX DTI1MTEwODIzNTk1OVowejFJMEcGA1UEBRNANDIwMmIyZTU2NTE3MDc2MTA0MDY4 NWI0OTQyNWQ2OTMxMGYyM2M1YzIxN2I3ZTFjYWRiYzVlZWNhODRiMDkxODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrZ7XXOlluWl9F3LbX1X1CRUr7gz ouJm6z5rsMN9SUQHRRsbtpMRm9gv+NjMH/UoumY3fI3CzGCGwCMgFdKVz+zUaGHX EJO8eYW2jb6q1+oXXOys8Lc1d27tVbBLkwboF7TDREBwkmOgGtrQ3W3I2bGM9sgs xSkVsYO55zKx29X1mLY5lKt2GEhJ5Z0JoVZeVmpSSA5mSOOP3JFR1F9KiSHxwQwF Tpt06cfYVO2s7trvbu7uItwo6y8NVxzxMkVej4AJUZW2lylX9YzSl9PUPr2R/w6L XS+SN3GbEjSZnhqATy3z1ik0DsK3JxebeF1FiVTzno5Qai4NzY2xcRbiZQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIfgXITIRyvJj74hd4UvRc4qHzfPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzYzNjNGE5LTc5NjAtNGMzYy1iNzIwLTYyNDdlNWM1NGZjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8/DAMA0GCSqGSIb3DQEBCwUAA4IBAQCWhQwnW6EMDxBNXVic WXmTwIfWS1getjwV7F9J9qNNYf0RewoqMnGkW8MmfEmAZUJV2TpYQhsXvsTbL9Q1 1k/OsXiA4ojnZXunRFMSWp4XlbA9Eftk9g3mqtny/8ViVkwIPNAV5uj27o/QVTjH EyzDpyCPP+7GBmDg9XhBRglpdiCAs2DNZO4vmO2cAdmFY7RhuF/78idwqKfR0GIK F5ZYs4SBa6QxLV42oGzEx4QL5nb3nQ8p9A76ik+NseNEKspf+xhE3DY5gsyxdIqw 2dP3ZvG1bmfD0B7bNvFZJ4RYo5aL2F9o5W6+mvxqv7E5emXNwc/TLCRUTqjp/fjB aMHt -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:28 2025 by rpki-client