$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea6376bc-3f0a-4473-94e8-31ba637cd756.roa File: ea6376bc-3f0a-4473-94e8-31ba637cd756.roa (raw, json) Hash identifier: BQyjxKS2mRSb3kIn886geMpyv4Bi7gLWgCpO9raQnxQ= Subject key identifier: BE:19:5F:04:8C:B3:D6:92:33:1A:AB:5E:F8:AD:81:7B:1D:6D:F6:30 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2B9C9426FD1B7847ACD6A10B17C9BABD0145F1DF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea6376bc-3f0a-4473-94e8-31ba637cd756.roa Signing time: Tue 07 Oct 2025 00:00:09 +0000 ROA not before: Tue 07 Oct 2025 00:00:09 +0000 ROA not after: Tue 11 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:9c:94:26:fd:1b:78:47:ac:d6:a1:0b:17:c9:ba:bd:01:45:f1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 7 00:00:09 2025 GMT Not After : Nov 11 23:59:59 2025 GMT Subject: serialNumber=a4eb83f08a80a31a199619a3787668b89a4242f1a70395d587323b750fe9989f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:ff:e6:d3:bd:bc:08:24:aa:1d:6e:3e:3c: d3:06:9d:10:1e:74:b2:65:3f:dc:38:b9:9d:22:4e: 2f:cd:1d:5c:ab:c1:ee:48:00:de:c9:6e:ca:7a:c5: 5b:c8:61:c1:ce:26:8b:66:4c:6d:de:5a:7a:ce:fb: a0:17:f8:86:6e:60:c1:34:89:a8:6c:e6:da:fa:33: 98:f8:c0:27:45:68:39:62:a6:d0:38:f4:a0:d7:08: 1d:bf:c7:92:0f:1f:01:4c:75:bf:ba:c9:1a:91:86: e4:74:59:c8:e6:f5:ae:ca:9c:ac:a9:ac:ed:77:f8: 0c:f8:3e:09:13:4f:26:5b:b9:19:86:be:8b:43:31: 0b:c4:28:94:39:07:4e:50:3c:00:d4:34:6b:e7:a2: 6b:18:0b:aa:5c:cb:b2:4a:aa:1a:37:03:cc:37:8a: c9:49:c4:5d:b9:7b:32:e1:2c:75:9e:df:4a:1e:f9: d0:fd:fd:74:b1:2a:6e:99:48:5e:4a:19:3c:17:3a: 77:dc:12:35:9a:84:3b:db:de:b1:54:ab:5a:6f:13: a0:7f:37:13:29:05:37:2d:1c:2d:d5:f0:f9:0f:0c: 47:1a:c0:ba:07:f0:c0:7f:e0:fa:87:45:34:92:ab: 23:5e:9f:00:b7:ce:d1:49:0a:7d:88:cb:10:6b:61: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:19:5F:04:8C:B3:D6:92:33:1A:AB:5E:F8:AD:81:7B:1D:6D:F6:30 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea6376bc-3f0a-4473-94e8-31ba637cd756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:4800::/40 Signature Algorithm: sha256WithRSAEncryption 41:cd:22:5a:27:d1:eb:c9:0e:76:a9:4e:73:80:55:69:9f:8a: 2e:c3:46:09:a5:9d:1a:93:9a:a0:72:8e:a7:d7:6e:aa:fc:f6: 6b:24:f6:04:99:f7:57:df:00:86:c6:dd:22:b0:ac:df:a4:c2: 14:ad:13:48:45:c0:c9:ce:5f:6a:c2:ba:65:b3:1f:d8:b8:af: 8a:a4:32:a0:74:59:8a:7f:6b:5b:40:f1:1f:9d:9b:1d:c1:49: b4:4d:80:5c:d1:08:6a:44:cc:f3:b1:74:2a:99:67:37:31:d2: 92:20:f2:79:23:a2:33:23:29:08:34:37:14:dc:dc:2c:bf:1c: 3d:8a:0d:4b:72:3c:f1:6e:c5:b3:25:c2:83:cd:ec:27:85:54: 3b:c2:ab:c4:c3:b4:86:8f:46:01:04:fa:b1:f4:5f:06:42:8a: f2:64:66:9d:aa:b9:74:f5:7b:b1:ed:34:1a:28:4a:0f:58:6f: 22:2b:15:bc:1e:22:21:74:db:f6:7b:9f:eb:6d:26:38:a8:ef: 80:87:91:9a:5c:ca:c1:3b:14:1b:18:00:aa:8c:26:a9:e0:99: 80:60:f9:dd:c3:c5:05:46:9b:3a:ca:55:ce:72:8c:ee:7c:36: a5:f3:b0:a3:98:49:b9:3f:33:4f:92:28:9a:cc:8d:ad:a9:54: a5:58:60:ef -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUK5yUJv0beEes1qELF8m6vQFF8d8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNzAwMDAwOVoX DTI1MTExMTIzNTk1OVowejFJMEcGA1UEBRNAYTRlYjgzZjA4YTgwYTMxYTE5OTYx OWEzNzg3NjY4Yjg5YTQyNDJmMWE3MDM5NWQ1ODczMjNiNzUwZmU5OTg5ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwz/5tO9vAgkqh1uPjzTBp0QHnSy ZT/cOLmdIk4vzR1cq8HuSADeyW7KesVbyGHBziaLZkxt3lp6zvugF/iGbmDBNImo bOba+jOY+MAnRWg5YqbQOPSg1wgdv8eSDx8BTHW/uskakYbkdFnI5vWuypysqazt d/gM+D4JE08mW7kZhr6LQzELxCiUOQdOUDwA1DRr56JrGAuqXMuySqoaNwPMN4rJ ScRduXsy4Sx1nt9KHvnQ/f10sSpumUheShk8Fzp33BI1moQ7296xVKtabxOgfzcT KQU3LRwt1fD5DwxHGsC6B/DAf+D6h0U0kqsjXp8At87RSQp9iMsQa2F1UwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL4ZXwSMs9aSMxqrXvitgXsdbfYwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VhNjM3NmJjLTNmMGEtNDQ3My05NGU4LTMxYmE2MzdjZDc1Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9EgwDQYJKoZIhvcNAQELBQADggEBAEHNIlon0evJDnapTnOA VWmfii7DRgmlnRqTmqByjqfXbqr89msk9gSZ91ffAIbG3SKwrN+kwhStE0hFwMnO X2rCumWzH9i4r4qkMqB0WYp/a1tA8R+dmx3BSbRNgFzRCGpEzPOxdCqZZzcx0pIg 8nkjojMjKQg0NxTc3Cy/HD2KDUtyPPFuxbMlwoPN7CeFVDvCq8TDtIaPRgEE+rH0 XwZCivJkZp2quXT1e7HtNBooSg9YbyIrFbweIiF02/Z7n+ttJjio74CHkZpcysE7 FBsYAKqMJqngmYBg+d3DxQVGmzrKVc5yjO58NqXzsKOYSbk/M0+SKJrMja2pVKVY YO8= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:23 2025 by rpki-client