$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa File: d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa (raw, json) Hash identifier: S3JHlG4UgmWq9pClawIzQWf+pQ+a3LFEJlTHeiK3oC8= Subject key identifier: 5B:D2:21:D8:2D:F3:B1:87:F8:47:0F:FB:1B:DF:91:E6:09:B4:55:DF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7E6F1B0F8CDD860C570E8109BF4701DB21D9F0DA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa Signing time: Fri 26 Sep 2025 00:00:14 +0000 ROA not before: Fri 26 Sep 2025 00:00:14 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6f:1b:0f:8c:dd:86:0c:57:0e:81:09:bf:47:01:db:21:d9:f0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 26 00:00:14 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=6d937e5380ae94d025c9e2bec78f1a20aa092c1593ff3d750a586f9048ba491c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:00:98:d5:52:f3:46:58:78:d7:8a:7f:ea: 0d:c2:2c:ab:2f:0b:9a:7c:d8:b7:3c:48:5b:7f:d8: ec:f2:3d:82:e1:07:11:4b:e6:3b:de:bc:fd:15:32: 23:a3:f5:db:23:a3:e4:8d:e3:17:b9:27:44:b3:78: 37:97:29:76:3d:0c:0f:f2:cc:63:a7:79:a0:3e:86: db:78:3c:52:e6:14:1f:3d:3a:43:b0:03:7e:eb:4c: b1:df:07:72:35:08:52:cc:40:41:cc:f6:13:41:b7: 22:fe:06:29:db:dd:0d:ff:10:c5:68:f5:47:4d:25: 8a:a3:12:53:b3:6f:8a:8e:64:1a:01:f0:0d:8f:e4: 17:ad:a6:ef:6f:65:f3:89:cd:59:89:c7:5f:38:a9: 7a:bb:a0:da:1a:d8:d3:a7:df:e1:da:1c:2c:9c:71: 22:25:d0:1a:6b:14:62:07:f1:e9:2f:34:59:24:ce: a2:43:25:0b:ee:ba:34:fc:e1:2a:ce:10:88:b3:03: d1:c7:3b:52:4e:42:fa:e8:0c:6f:38:f9:27:d2:02: 8f:10:df:93:44:33:eb:b2:08:a9:88:7d:f0:a0:bc: 5a:9b:7c:94:b4:c8:df:42:d1:2f:56:e4:b7:fd:0b: 22:91:c2:26:30:57:32:db:ca:15:ed:2c:08:d2:17: b2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D2:21:D8:2D:F3:B1:87:F8:47:0F:FB:1B:DF:91:E6:09:B4:55:DF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:2800::/40 Signature Algorithm: sha256WithRSAEncryption ac:24:89:58:b1:81:ab:21:0e:84:9c:5f:40:59:d6:57:5e:f3: 9b:be:b8:0a:04:14:40:96:52:44:ed:b0:6b:f1:c4:aa:f2:a5: 44:38:93:07:4e:d1:46:56:f1:7a:dd:6e:fd:f2:2e:df:a0:9d: 6b:26:10:6f:23:19:3d:84:ae:b8:5a:ea:43:73:f5:c1:1b:ec: ca:ee:79:dc:f0:58:54:4e:6e:e0:0c:7b:75:d9:ff:36:f6:8e: 6a:9b:db:cf:2f:dc:56:b0:0a:98:9c:8c:64:b6:26:76:3b:11: 61:b0:1d:f1:c1:f4:4f:c1:87:d8:06:d5:2d:8f:1c:76:21:38: 22:a3:4b:c6:3e:47:21:15:e5:de:4d:00:77:d1:bf:02:d6:36: ba:5a:f8:9d:2e:fc:a5:21:f7:25:11:83:cb:4f:b8:c6:58:74: 54:9d:0d:a5:49:42:07:f7:92:74:9c:a7:37:5e:da:15:77:11: 01:37:19:8b:c4:3b:5d:bc:9d:98:74:9c:89:f8:02:61:34:a8: c5:ae:d3:55:b6:c4:ad:fb:06:12:86:1b:57:71:cb:8a:70:bb: 4b:6f:78:90:e2:9a:f9:4b:c2:86:f6:3c:89:a5:46:d0:a5:69: 09:fe:65:f9:e3:16:2c:26:3a:4e:0c:95:f1:30:bb:a7:56:08: 88:5a:1c:e4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfm8bD4zdhgxXDoEJv0cB2yHZ8NowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkyNjAwMDAxNFoX DTI1MTAzMTIzNTk1OVowejFJMEcGA1UEBRNANmQ5MzdlNTM4MGFlOTRkMDI1Yzll MmJlYzc4ZjFhMjBhYTA5MmMxNTkzZmYzZDc1MGE1ODZmOTA0OGJhNDkxYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5oAmNVS80ZYeNeKf+oNwiyrLwua fNi3PEhbf9js8j2C4QcRS+Y73rz9FTIjo/XbI6PkjeMXuSdEs3g3lyl2PQwP8sxj p3mgPobbeDxS5hQfPTpDsAN+60yx3wdyNQhSzEBBzPYTQbci/gYp290N/xDFaPVH TSWKoxJTs2+KjmQaAfANj+QXrabvb2Xzic1ZicdfOKl6u6DaGtjTp9/h2hwsnHEi JdAaaxRiB/HpLzRZJM6iQyUL7ro0/OEqzhCIswPRxztSTkL66AxvOPkn0gKPEN+T RDPrsgipiH3woLxam3yUtMjfQtEvVuS3/QsikcImMFcy28oV7SwI0heyhQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFvSIdgt87GH+EcP+xvfkeYJtFXfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q0M2EyZTU2LTJkNTgtNGM3ZC04ZWUyLTBjYTZhYzhhNjI3NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7ygwDQYJKoZIhvcNAQELBQADggEBAKwkiVixgashDoScX0BZ 1lde85u+uAoEFECWUkTtsGvxxKrypUQ4kwdO0UZW8Xrdbv3yLt+gnWsmEG8jGT2E rrha6kNz9cEb7MruedzwWFRObuAMe3XZ/zb2jmqb288v3FawCpicjGS2JnY7EWGw HfHB9E/Bh9gG1S2PHHYhOCKjS8Y+RyEV5d5NAHfRvwLWNrpa+J0u/KUh9yURg8tP uMZYdFSdDaVJQgf3knScpzde2hV3EQE3GYvEO128nZh0nIn4AmE0qMWu01W2xK37 BhKGG1dxy4pwu0tveJDimvlLwob2PImlRtClaQn+ZfnjFiwmOk4MlfEwu6dWCIha HOQ= -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:57 2025 by rpki-client