$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ef6ab83-cb4a-4c45-a58b-8383ab2bf4f7.roa File: 9ef6ab83-cb4a-4c45-a58b-8383ab2bf4f7.roa (raw, json) Hash identifier: UagrqnXJIFV5lKu27hAbaOvxw8kAjv8MMhzz7TYs9W8= Subject key identifier: EC:4F:06:E7:33:87:01:8F:D4:E7:51:A2:C5:AF:6A:70:8E:4D:B2:C6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2EB258D417E665E36CF025F2FEE98036A203BE98 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ef6ab83-cb4a-4c45-a58b-8383ab2bf4f7.roa Signing time: Wed 08 Oct 2025 00:01:01 +0000 ROA not before: Wed 08 Oct 2025 00:01:01 +0000 ROA not after: Wed 12 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b2:58:d4:17:e6:65:e3:6c:f0:25:f2:fe:e9:80:36:a2:03:be:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 8 00:01:01 2025 GMT Not After : Nov 12 23:59:59 2025 GMT Subject: serialNumber=e497eef846f6143876c34e12bf461f62c9b6660a7ca58beeaad3259ca0a3cbc8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:40:96:a4:a2:c0:05:ed:4a:80:cc:9a:21:8c: 5f:63:54:cf:3a:ec:8f:e8:a4:00:dd:63:71:5e:73: 32:d3:c9:57:e9:14:37:12:c7:40:7a:2a:62:cf:81: f6:3a:52:cd:1f:b3:b8:19:ff:15:52:ba:f9:d7:48: 66:d9:fe:fb:5a:d9:1c:96:8e:e4:d1:46:6d:d0:44: 8a:2c:52:3a:9d:91:36:72:ac:37:a1:36:6a:4b:77: 9e:d3:eb:83:53:01:dc:f0:8f:b7:6f:c9:ac:e8:5d: 8d:d9:87:99:8c:0d:7e:6a:ad:0c:6b:27:ea:47:b4: 8a:c0:26:db:6e:8d:a1:11:d4:0a:b7:84:ba:ee:66: b2:73:d1:c2:62:d5:b9:a6:68:8c:f3:7b:56:18:45: d7:be:80:57:54:4b:eb:8d:ea:90:0f:e9:bb:db:0c: 8d:5f:73:1c:14:60:85:5f:04:d6:7f:ca:9f:eb:03: ad:a7:98:bb:f9:10:f2:1a:14:96:ec:a1:f6:e3:4e: 48:d2:c1:ea:18:68:bb:55:60:09:69:b1:56:49:7c: 9c:5d:3c:03:2a:4a:51:2b:7c:67:08:7a:28:e5:a0: d9:45:53:f8:8f:6a:a7:ee:9d:d3:3d:44:d6:8f:e4: 60:53:cf:56:99:40:4b:13:ef:4b:d2:64:0b:40:00: 74:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4F:06:E7:33:87:01:8F:D4:E7:51:A2:C5:AF:6A:70:8E:4D:B2:C6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ef6ab83-cb4a-4c45-a58b-8383ab2bf4f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:b000::/40 Signature Algorithm: sha256WithRSAEncryption 55:46:8f:31:ed:11:fe:9b:c6:26:c6:18:a6:ad:2e:e4:41:2d: 8e:d1:86:55:f4:2b:dc:2a:3f:8d:86:d0:7b:65:f6:31:33:a3: 91:6f:c0:d8:dc:ce:b6:03:56:d3:33:81:f4:53:26:dd:d0:f6: d9:7a:d5:ea:8a:19:a9:ef:bc:4b:d1:7f:78:c5:44:01:d2:7c: 7e:cb:97:48:b9:3a:35:0d:10:61:33:e3:ef:38:9e:7d:5a:5a: 58:8b:12:37:3e:1b:b1:5f:e4:e5:7d:a5:6b:19:54:20:1e:70: 63:01:15:cb:df:f5:7a:07:5d:0d:32:0e:51:10:a2:6c:27:27: 76:2d:be:d2:87:55:18:bf:88:f4:41:05:ba:8a:ee:d2:f9:9d: b6:4c:8b:80:fb:ec:df:c4:d1:5b:59:69:5a:1e:50:8c:4b:54: 94:a3:71:4a:04:f6:4f:b8:6d:ba:12:f9:4c:e0:90:c3:79:fc: 22:bc:46:d7:19:dd:02:41:61:55:c2:ba:88:8b:f2:63:79:6b: 1f:21:2f:31:16:a5:b4:36:dc:13:df:b4:da:8f:59:eb:12:b3: e8:7c:3a:5c:3d:8a:15:c5:48:17:87:8f:89:67:d8:32:94:1d: 20:ac:0c:31:20:b4:a5:45:d8:91:1e:52:eb:d9:2a:20:52:eb: f0:13:5d:a1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULrJY1BfmZeNs8CXy/umANqIDvpgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwODAwMDEwMVoX DTI1MTExMjIzNTk1OVowejFJMEcGA1UEBRNAZTQ5N2VlZjg0NmY2MTQzODc2YzM0 ZTEyYmY0NjFmNjJjOWI2NjYwYTdjYTU4YmVlYWFkMzI1OWNhMGEzY2JjODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmECWpKLABe1KgMyaIYxfY1TPOuyP 6KQA3WNxXnMy08lX6RQ3EsdAeipiz4H2OlLNH7O4Gf8VUrr510hm2f77Wtkclo7k 0UZt0ESKLFI6nZE2cqw3oTZqS3ee0+uDUwHc8I+3b8ms6F2N2YeZjA1+aq0Mayfq R7SKwCbbbo2hEdQKt4S67mayc9HCYtW5pmiM83tWGEXXvoBXVEvrjeqQD+m72wyN X3McFGCFXwTWf8qf6wOtp5i7+RDyGhSW7KH2405I0sHqGGi7VWAJabFWSXycXTwD KkpRK3xnCHoo5aDZRVP4j2qn7p3TPUTWj+RgU89WmUBLE+9L0mQLQAB0NQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOxPBuczhwGP1OdRosWvanCOTbLGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzllZjZhYjgzLWNiNGEtNGM0NS1hNThiLTgzODNhYjJiZjRmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYLAwDQYJKoZIhvcNAQELBQADggEBAFVGjzHtEf6bxibGGKat LuRBLY7RhlX0K9wqP42G0Htl9jEzo5FvwNjczrYDVtMzgfRTJt3Q9tl61eqKGanv vEvRf3jFRAHSfH7Ll0i5OjUNEGEz4+84nn1aWliLEjc+G7Ff5OV9pWsZVCAecGMB Fcvf9XoHXQ0yDlEQomwnJ3YtvtKHVRi/iPRBBbqK7tL5nbZMi4D77N/E0VtZaVoe UIxLVJSjcUoE9k+4bboS+UzgkMN5/CK8RtcZ3QJBYVXCuoiL8mN5ax8hLzEWpbQ2 3BPftNqPWesSs+h8Olw9ihXFSBeHj4ln2DKUHSCsDDEgtKVF2JEeUuvZKiBS6/AT XaE= -----END CERTIFICATE-----Generated at Wed Oct 8 21:30:52 2025 by rpki-client