$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6726238-8e0b-4518-8844-5c38ea3f41a4.roa File: a6726238-8e0b-4518-8844-5c38ea3f41a4.roa (raw, json) Hash identifier: cYUwB40L0/xHH4b2ryOk3MB3OhS8UoF9Wszt++xy7tc= Subject key identifier: 80:D5:4B:9F:32:41:81:A5:81:74:43:96:D0:18:48:1B:84:7D:60:92 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0654441AFB40371FA28523883AB177644787CA07 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6726238-8e0b-4518-8844-5c38ea3f41a4.roa Signing time: Mon 15 Sep 2025 15:01:42 +0000 ROA not before: Mon 15 Sep 2025 15:01:42 +0000 ROA not after: Mon 20 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:54:44:1a:fb:40:37:1f:a2:85:23:88:3a:b1:77:64:47:87:ca:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 15 15:01:42 2025 GMT Not After : Oct 20 23:59:59 2025 GMT Subject: serialNumber=66d502f15e7a2a815b30132903ad13df22e0561663f19577a43480426d4f3ace, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:68:43:84:c1:ee:a7:e9:3c:41:69:a4:19: 74:9d:f9:73:cd:05:dc:9b:2f:71:45:97:4c:7e:07: ff:d1:59:b5:09:ad:34:19:ab:72:a2:74:51:c8:4c: 40:f4:36:ef:c7:93:9a:f3:c2:ea:17:1d:44:9e:37: 64:49:9b:c1:b6:42:04:da:61:9e:49:8e:fa:04:90: 48:c1:3f:15:2a:8f:ef:08:17:77:ef:e8:e4:e9:ad: c8:c2:9d:43:3a:0e:8a:ad:d6:76:7e:17:0a:9d:ee: 67:70:e0:a5:bb:4f:3b:00:90:e0:b2:b2:ff:b7:8c: 89:57:d9:0d:e2:e7:c1:f9:17:31:11:ef:84:8d:12: cd:22:7e:ea:33:e6:b0:fe:dd:3d:97:09:e4:b8:13: 14:54:f5:57:09:d3:4a:fc:fa:71:c6:1d:98:04:01: 41:17:af:4b:24:8f:76:49:8c:69:08:85:c4:59:c7: 68:79:33:e4:4f:37:52:0e:ab:d3:e4:88:2d:ba:81: cd:88:6d:d2:fe:b4:a6:30:6f:a4:c3:0e:79:69:7e: 64:4f:3a:de:38:0b:3e:fd:47:39:b8:34:3e:62:48: 76:f6:57:e8:1e:4d:d3:ca:f2:1e:69:c6:44:04:e5: 85:59:3b:6d:3d:de:e2:f9:e4:2d:c9:be:a9:7d:c6: d0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D5:4B:9F:32:41:81:A5:81:74:43:96:D0:18:48:1B:84:7D:60:92 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6726238-8e0b-4518-8844-5c38ea3f41a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:a000::/40 Signature Algorithm: sha256WithRSAEncryption 3a:7e:c9:10:48:cb:45:b6:ee:b2:d9:a5:0d:dc:f9:a3:d6:d6: bc:30:f2:fb:eb:70:68:b2:0a:02:bb:9d:ce:1e:d0:ba:d2:eb: 87:bc:a5:42:7b:32:90:f0:01:b1:17:0e:c7:12:11:8a:1f:45: ce:42:ef:39:30:b8:ad:42:b1:01:14:d0:00:f3:07:10:fc:d7: d1:19:76:2a:86:f7:97:53:e1:5c:79:d5:eb:4c:23:78:dd:3c: c0:5f:dd:bd:27:f5:ea:f3:38:ca:4c:c8:36:65:e5:f5:53:c9: c0:d7:e4:ee:2b:d2:ba:2d:30:62:ca:f7:9b:b3:b5:23:df:a2: 65:b1:ef:ec:e0:3b:64:3f:2f:4e:4c:5c:50:0b:91:83:14:23: 4b:6b:bf:d7:fb:a7:84:06:33:52:56:50:f9:b6:9d:47:f5:55: 14:b8:af:ac:17:1d:c8:ff:66:6c:21:e5:50:26:fa:44:93:46: 19:73:d4:13:9a:cc:f6:3a:e9:83:5a:80:be:65:ac:4f:79:33: 07:3c:d2:8e:a1:04:5a:a4:58:82:77:6f:a4:66:0f:57:a0:f4: ef:17:36:1b:fd:28:90:b7:6f:92:da:07:e0:83:4b:cb:cf:be: 54:92:a8:78:51:2f:b1:20:76:64:a1:95:9c:af:72:f8:07:bb: 35:92:5a:41 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBlREGvtANx+ihSOIOrF3ZEeHygcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkxNTE1MDE0MloX DTI1MTAyMDIzNTk1OVowejFJMEcGA1UEBRNANjZkNTAyZjE1ZTdhMmE4MTViMzAx MzI5MDNhZDEzZGYyMmUwNTYxNjYzZjE5NTc3YTQzNDgwNDI2ZDRmM2FjZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEpoQ4TB7qfpPEFppBl0nflzzQXc my9xRZdMfgf/0Vm1Ca00GatyonRRyExA9Dbvx5Oa88LqFx1EnjdkSZvBtkIE2mGe SY76BJBIwT8VKo/vCBd37+jk6a3Iwp1DOg6KrdZ2fhcKne5ncOClu087AJDgsrL/ t4yJV9kN4ufB+RcxEe+EjRLNIn7qM+aw/t09lwnkuBMUVPVXCdNK/Ppxxh2YBAFB F69LJI92SYxpCIXEWcdoeTPkTzdSDqvT5IgtuoHNiG3S/rSmMG+kww55aX5kTzre OAs+/Uc5uDQ+Ykh29lfoHk3TyvIeacZEBOWFWTttPd7i+eQtyb6pfcbQGQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIDVS58yQYGlgXRDltAYSBuEfWCSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E2NzI2MjM4LThlMGItNDUxOC04ODQ0LTVjMzhlYTNmNDFhNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9KAwDQYJKoZIhvcNAQELBQADggEBADp+yRBIy0W27rLZpQ3c +aPW1rww8vvrcGiyCgK7nc4e0LrS64e8pUJ7MpDwAbEXDscSEYofRc5C7zkwuK1C sQEU0ADzBxD819EZdiqG95dT4Vx51etMI3jdPMBf3b0n9erzOMpMyDZl5fVTycDX 5O4r0rotMGLK95uztSPfomWx7+zgO2Q/L05MXFALkYMUI0trv9f7p4QGM1JWUPm2 nUf1VRS4r6wXHcj/Zmwh5VAm+kSTRhlz1BOazPY66YNagL5lrE95Mwc80o6hBFqk WIJ3b6RmD1eg9O8XNhv9KJC3b5LaB+CDS8vPvlSSqHhRL7EgdmShlZyvcvgHuzWS WkE= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:40 2025 by rpki-client