$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8457b23d-d50e-4b48-bd70-aa0e3c7abb86.roa File: 8457b23d-d50e-4b48-bd70-aa0e3c7abb86.roa (raw, json) Hash identifier: qHWBmUGn1XzVrOn2AFxeShIdGSqh4PtYSd847/1k3KI= Subject key identifier: AD:01:99:13:08:CF:22:A9:AE:0B:F1:F1:24:16:C6:C0:87:10:41:28 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6479D99CB027FFBB411D1745FC12EA43151CBB58 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8457b23d-d50e-4b48-bd70-aa0e3c7abb86.roa Signing time: Fri 19 Sep 2025 00:20:18 +0000 ROA not before: Fri 19 Sep 2025 00:20:18 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:79:d9:9c:b0:27:ff:bb:41:1d:17:45:fc:12:ea:43:15:1c:bb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 19 00:20:18 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=88edb67e630adc2ce1f04690bc3436404ae0f67012a104881b3c99c7ac872cb2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:a3:0d:04:ae:9d:a1:32:58:76:ec:fb:7c: 09:fa:36:45:d9:48:8b:8f:e6:9f:cc:eb:1b:29:4c: 69:e8:49:b0:71:b1:0b:3b:50:0e:90:eb:8e:35:d5: b9:46:d1:a6:4f:99:ca:79:9d:ab:56:ca:c8:65:0c: 85:57:21:f5:72:02:03:01:94:7d:91:4b:e9:cd:fb: 9c:92:6f:9e:7b:e3:6c:58:18:09:49:d2:19:dc:b1: e6:9b:72:c3:ab:84:20:6d:d9:ac:3a:96:43:54:7d: 01:60:c4:fd:13:e5:cd:a2:1a:9f:3d:2b:f4:68:41: 24:dc:f0:ef:9b:24:cd:9d:76:95:42:8b:5b:6f:3f: 88:3c:fc:3f:5a:63:00:06:d0:e6:0b:78:53:3d:ca: 3f:b9:65:09:65:06:9d:70:6b:27:2e:1c:bd:4e:80: e5:05:30:f7:13:dc:c3:9d:c7:69:e8:5a:47:30:94: 01:e3:3e:ce:57:28:f4:da:b0:fb:43:27:70:38:99: 8a:97:09:ff:a9:33:2e:09:2f:8a:83:19:bd:dd:02: 0f:19:dc:83:52:a4:de:d9:c9:b3:92:02:77:8e:fc: be:bc:46:7f:3f:a0:d6:85:1b:50:bf:94:15:ea:30: f9:73:65:8b:dd:19:3b:24:c1:16:f3:bf:29:90:ef: de:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:01:99:13:08:CF:22:A9:AE:0B:F1:F1:24:16:C6:C0:87:10:41:28 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8457b23d-d50e-4b48-bd70-aa0e3c7abb86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:b000::/40 Signature Algorithm: sha256WithRSAEncryption 7a:fe:6d:90:09:99:f6:95:b1:2d:0f:c4:28:5a:0a:98:33:75: 10:6d:a2:a7:b2:00:47:b9:4d:d3:12:b4:7e:cb:07:d3:10:44: 30:56:3f:80:bf:30:1b:c9:08:37:27:9b:db:0b:d3:66:99:69: 11:76:cc:96:55:7a:c9:08:31:75:51:f4:ec:55:30:c7:f6:7f: df:0e:2e:55:05:16:47:2b:9d:f2:55:ec:8b:4b:a5:b9:30:a8: 6d:32:3c:2a:3a:31:95:33:18:25:b1:50:0e:a1:38:e4:b5:da: 26:cf:90:01:7f:dc:bf:db:4c:cf:22:1b:ae:62:22:16:15:1e: 6a:7c:bf:c1:01:e8:83:bc:07:5f:6e:e0:ee:65:5e:b6:ea:2c: b1:43:9c:94:8c:9a:4c:08:2b:dc:a0:e3:81:b2:77:7e:ea:fa: 6a:2a:f5:9e:2c:0f:22:42:32:05:af:cc:54:69:8d:e9:fe:c5: be:be:f4:3f:84:70:30:6b:77:cf:d1:5a:bb:55:e2:1d:66:6d: a3:eb:88:6a:ac:a0:d9:0e:63:66:4d:15:72:6c:7e:2c:86:81: b8:97:a9:27:8e:b7:01:db:82:f5:e3:e8:c1:df:ee:7f:95:50: 08:bf:89:e1:fb:f3:ee:da:f1:38:e8:55:98:c6:14:2a:1e:f2: 3c:6e:15:4f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZHnZnLAn/7tBHRdF/BLqQxUcu1gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkxOTAwMjAxOFoX DTI1MTAyNDIzNTk1OVowejFJMEcGA1UEBRNAODhlZGI2N2U2MzBhZGMyY2UxZjA0 NjkwYmMzNDM2NDA0YWUwZjY3MDEyYTEwNDg4MWIzYzk5YzdhYzg3MmNiMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXqjDQSunaEyWHbs+3wJ+jZF2UiL j+afzOsbKUxp6EmwcbELO1AOkOuONdW5RtGmT5nKeZ2rVsrIZQyFVyH1cgIDAZR9 kUvpzfuckm+ee+NsWBgJSdIZ3LHmm3LDq4QgbdmsOpZDVH0BYMT9E+XNohqfPSv0 aEEk3PDvmyTNnXaVQotbbz+IPPw/WmMABtDmC3hTPco/uWUJZQadcGsnLhy9ToDl BTD3E9zDncdp6FpHMJQB4z7OVyj02rD7QydwOJmKlwn/qTMuCS+Kgxm93QIPGdyD UqTe2cmzkgJ3jvy+vEZ/P6DWhRtQv5QV6jD5c2WL3Rk7JMEW878pkO/ewwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK0BmRMIzyKprgvx8SQWxsCHEEEoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0NTdiMjNkLWQ1MGUtNGI0OC1iZDcwLWFhMGUzYzdhYmI4Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+7AwDQYJKoZIhvcNAQELBQADggEBAHr+bZAJmfaVsS0PxCha CpgzdRBtoqeyAEe5TdMStH7LB9MQRDBWP4C/MBvJCDcnm9sL02aZaRF2zJZVeskI MXVR9OxVMMf2f98OLlUFFkcrnfJV7ItLpbkwqG0yPCo6MZUzGCWxUA6hOOS12ibP kAF/3L/bTM8iG65iIhYVHmp8v8EB6IO8B19u4O5lXrbqLLFDnJSMmkwIK9yg44Gy d37q+moq9Z4sDyJCMgWvzFRpjen+xb6+9D+EcDBrd8/RWrtV4h1mbaPriGqsoNkO Y2ZNFXJsfiyGgbiXqSeOtwHbgvXj6MHf7n+VUAi/ieH78+7a8TjoVZjGFCoe8jxu FU8= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:42 2025 by rpki-client