$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eda3ff96-e698-48c7-aa27-659c4ce1814d.roa File: eda3ff96-e698-48c7-aa27-659c4ce1814d.roa (raw, json) Hash identifier: jhd/Bc9PG42TpZ5R+Vu0fk1O8JesNPjExBFm4cZ7B7Y= Subject key identifier: DB:10:D5:14:B7:CA:08:B6:D1:12:34:58:D4:EF:DB:F3:96:29:68:1A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 25D10D18483D49D6F6DEC9482A1E689DD4A73CD2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eda3ff96-e698-48c7-aa27-659c4ce1814d.roa Signing time: Sat 04 Oct 2025 00:00:56 +0000 ROA not before: Sat 04 Oct 2025 00:00:56 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:8c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d1:0d:18:48:3d:49:d6:f6:de:c9:48:2a:1e:68:9d:d4:a7:3c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:56 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=de015793ba6568dc0b32182a5ac68969383aee70c9261026d2c997fac4d58c64, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:3d:e7:43:c7:92:7d:d6:8f:43:72:76:dc: ba:ba:e0:5e:24:70:5f:b0:ab:79:fb:c5:df:7f:85: 57:37:cb:96:72:32:dc:fd:3d:1f:8c:77:fa:41:8b: 68:83:b2:c9:2c:7e:b6:1a:16:ef:eb:3d:91:57:c1: 19:c1:07:40:31:62:a7:e7:96:92:4c:20:cd:ba:17: a0:8b:3e:11:90:7e:5c:79:e7:18:7c:72:b1:92:ee: e7:46:65:35:74:91:88:f9:b2:56:cd:06:32:b1:be: 8a:b4:7f:9d:8b:12:05:47:cc:62:bf:ee:6e:5e:72: 32:fd:4d:16:7b:5f:31:08:07:47:03:9c:9e:9e:65: 4a:7f:29:a8:d6:8f:ec:3f:b3:30:03:4c:97:51:d8: 2c:c3:ac:d9:d8:c7:53:26:6a:1e:5b:1c:2e:ec:1c: 2e:7d:26:55:af:11:5c:02:32:02:e1:1d:65:77:d4: b1:59:b5:64:27:8e:b8:a3:63:8c:eb:56:4d:bc:e2: 77:7b:ae:c9:dd:05:31:dd:c0:38:f2:32:ef:8e:a9: 21:66:f1:a8:ea:df:86:9d:dc:2b:8a:47:4a:8e:69: c0:f0:c3:f1:8d:16:0c:71:18:d6:1e:4e:ba:58:66: c8:3f:1b:61:4c:6d:c1:0f:ff:32:74:eb:72:94:fc: c5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:10:D5:14:B7:CA:08:B6:D1:12:34:58:D4:EF:DB:F3:96:29:68:1A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eda3ff96-e698-48c7-aa27-659c4ce1814d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:8c0::/46 Signature Algorithm: sha256WithRSAEncryption 4c:2a:47:c1:9c:0f:61:54:00:85:87:18:42:6d:13:9f:38:5e: 5e:81:89:73:cc:58:e5:eb:61:fa:64:1b:1e:78:08:25:2b:bc: 93:89:52:a2:5f:0d:b1:b8:6b:04:d3:91:48:45:13:14:c1:ba: 40:c3:36:aa:a9:ef:38:2c:18:ae:af:c6:e7:f8:86:72:86:8c: ca:ba:7b:b7:03:87:c0:0c:d5:e1:de:89:8f:b8:03:86:10:e4: 92:cb:3b:d4:09:03:07:ef:4e:4f:fe:96:b9:2d:e3:a2:d4:45: 3f:f8:56:7d:32:71:86:a4:a3:75:57:a8:4d:06:17:c1:77:60: a3:55:35:93:a2:da:68:d7:43:01:cf:61:ce:21:7f:bb:61:66: c0:a9:59:54:71:3c:9b:38:69:b9:f2:09:78:e1:ba:32:d0:be: 6a:7d:31:72:a5:2d:21:c5:e1:dd:40:88:3d:ef:08:16:42:2f: 04:6b:45:17:be:60:4f:0b:83:25:2a:8e:55:9d:49:5d:71:a4: 42:00:c3:b1:56:0f:f3:59:54:38:07:67:93:e0:86:d9:23:84: d7:db:63:38:69:25:6e:80:5b:38:11:e1:2e:09:fb:7b:a0:0b: ea:55:56:b5:f1:64:2a:21:95:f6:5b:00:c3:8b:7e:4f:2e:3c: 6d:53:61:a2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJdENGEg9Sdb23slIKh5ondSnPNIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNDAwMDA1NloX DTI1MTEwODIzNTk1OVowejFJMEcGA1UEBRNAZGUwMTU3OTNiYTY1NjhkYzBiMzIx ODJhNWFjNjg5NjkzODNhZWU3MGM5MjYxMDI2ZDJjOTk3ZmFjNGQ1OGM2NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Q950PHkn3Wj0Nydty6uuBeJHBf sKt5+8Xff4VXN8uWcjLc/T0fjHf6QYtog7LJLH62Ghbv6z2RV8EZwQdAMWKn55aS TCDNuhegiz4RkH5ceecYfHKxku7nRmU1dJGI+bJWzQYysb6KtH+dixIFR8xiv+5u XnIy/U0We18xCAdHA5yenmVKfymo1o/sP7MwA0yXUdgsw6zZ2MdTJmoeWxwu7Bwu fSZVrxFcAjIC4R1ld9SxWbVkJ464o2OM61ZNvOJ3e67J3QUx3cA48jLvjqkhZvGo 6t+GndwrikdKjmnA8MPxjRYMcRjWHk66WGbIPxthTG3BD/8ydOtylPzFwQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNsQ1RS3ygi20RI0WNTv2/OWKWgaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VkYTNmZjk2LWU2OTgtNDhjNy1hYTI3LTY1OWM0Y2UxODE0ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8wjAMA0GCSqGSIb3DQEBCwUAA4IBAQBMKkfBnA9hVACFhxhC bROfOF5egYlzzFjl62H6ZBseeAglK7yTiVKiXw2xuGsE05FIRRMUwbpAwzaqqe84 LBiur8bn+IZyhozKunu3A4fADNXh3omPuAOGEOSSyzvUCQMH705P/pa5LeOi1EU/ +FZ9MnGGpKN1V6hNBhfBd2CjVTWTotpo10MBz2HOIX+7YWbAqVlUcTybOGm58gl4 4boy0L5qfTFypS0hxeHdQIg97wgWQi8Ea0UXvmBPC4MlKo5VnUldcaRCAMOxVg/z WVQ4B2eT4IbZI4TX22M4aSVugFs4EeEuCft7oAvqVVa18WQqIZX2WwDDi35PLjxt U2Gi -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:01 2025 by rpki-client