$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa File: 4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa (raw, json) Hash identifier: 1rM8hgPuQcS4aCi/7D4Fej8ivWrEPAj8DLU5vEwbM6Y= Subject key identifier: 0E:77:FD:0C:F6:47:8C:1A:43:B9:73:69:7A:14:97:57:D4:DB:F6:BA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0580720E8D1638D5F5E1A9E833AC99E1A2CCE985 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa Signing time: Tue 09 Sep 2025 00:20:08 +0000 ROA not before: Tue 09 Sep 2025 00:20:08 +0000 ROA not after: Tue 14 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Sep 2025 15:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:80:72:0e:8d:16:38:d5:f5:e1:a9:e8:33:ac:99:e1:a2:cc:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 9 00:20:08 2025 GMT Not After : Oct 14 23:59:59 2025 GMT Subject: serialNumber=73cf047551f8adc1a7d34dd14937fdb454d13be696839e7b460397a01abbfba6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:89:fa:93:84:b1:a7:76:0b:99:23:4b:22: fa:d4:79:c1:c6:1a:b5:a0:2d:17:ab:4f:ac:2e:2d: fe:11:bb:64:34:9b:b1:2e:10:ba:75:39:85:ed:6c: e1:eb:bd:f2:e6:51:35:6e:49:32:9b:f9:b6:b4:ee: 16:9f:a1:7d:ac:3e:64:9e:8a:73:87:64:7e:9f:b8: 32:c4:9d:e9:a2:dd:ae:fc:d4:d3:0c:3c:4f:c1:58: 82:c9:f4:31:e5:28:5f:f9:16:49:cd:79:12:5f:0c: 9d:d6:8c:e7:53:6c:33:e3:be:54:77:79:ed:e6:35: e4:50:a9:31:a5:6c:45:d1:86:d9:d5:61:79:84:44: fd:f5:cd:03:49:be:a5:0d:0b:f9:42:d5:05:d7:8b: 5f:c3:6a:1d:56:d4:5f:89:18:f5:79:2c:86:55:e1: b3:b0:c2:b4:5d:ba:65:00:c2:38:36:5d:0d:af:98: d7:e0:20:eb:50:9b:97:47:87:69:60:23:7b:bf:ee: e0:6d:ae:85:ea:45:7f:49:25:38:b6:dd:9f:20:a2: 9c:b9:d2:d9:3e:58:80:a7:41:f0:33:f1:d2:5a:71: 54:87:43:4e:e9:62:39:91:19:12:1e:7e:12:d0:5e: 41:8a:fb:42:03:e8:dc:17:ae:a2:ef:df:00:e3:bb: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:77:FD:0C:F6:47:8C:1A:43:B9:73:69:7A:14:97:57:D4:DB:F6:BA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:e000::/40 Signature Algorithm: sha256WithRSAEncryption 0b:4a:e5:11:33:96:e6:d5:dd:da:98:aa:63:5b:12:cd:d0:ff: 41:36:b4:2f:96:e0:79:5e:34:ca:69:d9:cf:e0:b3:b1:8f:a3: ed:0a:18:ae:8f:2d:0c:84:70:60:c9:47:6f:b9:db:f0:ac:e5: 74:16:3e:17:c5:f6:6e:27:3c:ff:8b:86:40:7b:3a:40:ee:a9: 0e:cd:8c:8b:45:af:00:3c:f8:13:c0:a1:27:fb:59:58:f7:a9: 95:53:da:61:43:8f:1b:1d:ff:1d:2b:86:c3:2d:f2:55:26:a4: 45:01:15:69:66:26:dd:bb:ea:16:ee:8a:72:e0:97:ff:e8:84: 07:2a:1b:a1:19:00:03:ea:c3:04:aa:b3:f4:e6:58:8b:ae:cf: 39:cb:84:e3:35:b8:94:a4:00:17:10:27:5f:83:8a:66:8d:c3: 32:3d:60:26:e6:60:bf:3d:c7:ea:a6:84:ba:1b:a3:20:0b:62: 33:fb:98:2d:4d:c3:3f:fe:fc:27:29:9b:5a:51:01:81:6f:68: c8:b7:3b:3b:49:b7:77:e6:e5:9c:50:43:74:00:df:9b:15:43: 45:e6:8f:a7:62:2b:0d:ef:b4:2d:a8:9a:f2:cb:03:85:44:9b: d1:e3:d9:be:88:ca:ec:9c:ae:e3:8a:56:e1:f4:94:e4:01:40: 3d:82:09:de -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBYByDo0WONX14anoM6yZ4aLM6YUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkwOTAwMjAwOFoX DTI1MTAxNDIzNTk1OVowejFJMEcGA1UEBRNANzNjZjA0NzU1MWY4YWRjMWE3ZDM0 ZGQxNDkzN2ZkYjQ1NGQxM2JlNjk2ODM5ZTdiNDYwMzk3YTAxYWJiZmJhNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5WJ+pOEsad2C5kjSyL61HnBxhq1 oC0Xq0+sLi3+EbtkNJuxLhC6dTmF7Wzh673y5lE1bkkym/m2tO4Wn6F9rD5knopz h2R+n7gyxJ3pot2u/NTTDDxPwViCyfQx5Shf+RZJzXkSXwyd1oznU2wz475Ud3nt 5jXkUKkxpWxF0YbZ1WF5hET99c0DSb6lDQv5QtUF14tfw2odVtRfiRj1eSyGVeGz sMK0XbplAMI4Nl0Nr5jX4CDrUJuXR4dpYCN7v+7gba6F6kV/SSU4tt2fIKKcudLZ PliAp0HwM/HSWnFUh0NO6WI5kRkSHn4S0F5BivtCA+jcF66i798A47tEywIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA53/Qz2R4waQ7lzaXoUl1fU2/a6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRlMjRlYmFiLTVmMzEtNGViNS05OWRkLWU1ZmUxMTNmMjFmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauOAwDQYJKoZIhvcNAQELBQADggEBAAtK5REzlubV3dqYqmNb Es3Q/0E2tC+W4HleNMpp2c/gs7GPo+0KGK6PLQyEcGDJR2+52/Cs5XQWPhfF9m4n PP+LhkB7OkDuqQ7NjItFrwA8+BPAoSf7WVj3qZVT2mFDjxsd/x0rhsMt8lUmpEUB FWlmJt276hbuinLgl//ohAcqG6EZAAPqwwSqs/TmWIuuzznLhOM1uJSkABcQJ1+D imaNwzI9YCbmYL89x+qmhLoboyALYjP7mC1Nwz/+/Ccpm1pRAYFvaMi3OztJt3fm 5ZxQQ3QA35sVQ0Xmj6diKw3vtC2omvLLA4VEm9Hj2b6IyuycruOKVuH0lOQBQD2C Cd4= -----END CERTIFICATE-----Generated at Mon Sep 15 22:02:50 2025 by rpki-client