$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1be81b8b-723f-40f7-b725-279fceb1a1b2.roa File: 1be81b8b-723f-40f7-b725-279fceb1a1b2.roa (raw, json) Hash identifier: nKbTnreVRPa5MaACVkgpJ4oOyJ9V/kj7iVdntE28ra4= Subject key identifier: B4:9B:B6:6C:CC:24:C2:42:7A:16:1C:04:DD:8C:82:B4:9B:5B:3D:24 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3339F9DB5EA73C0D233740827108C988FCABF687 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1be81b8b-723f-40f7-b725-279fceb1a1b2.roa Signing time: Tue 21 Oct 2025 00:00:44 +0000 ROA not before: Tue 21 Oct 2025 00:00:44 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:39:f9:db:5e:a7:3c:0d:23:37:40:82:71:08:c9:88:fc:ab:f6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 21 00:00:44 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=2361cc331825c43a607331c7d40ab5a5f6e490ba31afcca270586b8728d3ae35, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:7f:ad:a2:96:1e:65:e9:df:8c:cd:82:8e: 7e:12:8b:b8:d2:05:1e:04:95:71:4b:f0:d3:7b:7f: ab:6f:8e:24:34:a4:57:65:32:59:ed:72:dc:dd:24: b6:08:25:1c:67:ca:d6:16:6c:38:5a:95:6b:57:a9: 8b:c8:af:00:0e:50:b8:f8:c5:d0:a0:26:09:74:2b: e8:8d:ac:41:de:d7:66:04:9d:0e:53:84:a7:72:de: 57:28:88:c0:e0:9f:b9:34:e8:26:86:05:a6:ec:7e: 83:46:53:4f:78:e4:63:44:b3:bd:89:6b:4d:e6:6f: 83:05:c9:9b:e8:af:ba:1a:9f:81:dd:0e:1a:87:0c: c6:16:3d:be:f9:7a:87:09:7d:b7:ce:51:ae:09:81: d7:05:35:c5:9e:49:a3:30:cf:50:85:1e:50:87:bc: 17:d2:0e:5e:ba:fa:74:fb:4a:3c:ea:0f:6f:42:7f: 0d:d1:9f:09:e0:6f:30:db:a0:e7:be:bd:01:c0:b4: 21:bc:fd:d7:96:82:9d:b2:a0:68:c6:47:01:ca:04: d2:f0:39:68:74:e0:42:39:8c:3e:ed:f4:8e:97:bc: 5b:03:a2:68:b5:7f:87:8c:e5:0c:52:0c:64:a5:c3: 83:12:f4:b5:b4:45:ed:b6:da:df:fe:4f:2b:f0:ca: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9B:B6:6C:CC:24:C2:42:7A:16:1C:04:DD:8C:82:B4:9B:5B:3D:24 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1be81b8b-723f-40f7-b725-279fceb1a1b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:4000::/40 Signature Algorithm: sha256WithRSAEncryption 41:4e:b4:c6:8b:10:fb:4c:30:e8:d1:0c:27:64:6d:4a:84:b8: 2c:03:7d:4a:b1:49:2c:f8:68:3e:ec:76:0f:b8:83:73:54:25: 67:e8:ce:97:6e:11:41:44:2b:b5:0b:56:c3:68:66:42:ae:49: 1e:10:ee:8c:59:03:c0:08:95:f3:ae:13:88:6e:d3:20:2d:e3: 4e:36:5c:ab:bf:25:30:bf:c9:e8:83:9e:6a:78:d9:d9:a5:7a: e5:85:c2:3e:72:8d:bf:cb:c4:61:bf:71:ae:d5:e1:e9:8b:37: c1:5c:52:cd:1e:62:25:55:0a:bf:b6:da:8f:5a:5a:74:3e:99: 1c:dc:dc:81:07:29:b4:29:7c:79:dd:e6:7f:49:a7:9a:80:8b: 96:05:00:31:89:d3:c6:47:bd:a5:c9:ca:63:82:98:46:2c:cd: c2:33:af:ff:30:36:c4:92:2a:6d:eb:c8:3c:b3:87:fb:c1:c8: a7:4a:d0:36:2f:5a:2e:e1:50:a0:ed:05:1f:10:b7:be:c8:d6: 9d:7e:76:ab:95:14:76:d3:0c:89:33:6c:e5:25:e4:82:0f:41: 45:8c:4a:8c:6d:2c:9e:60:ff:6a:86:bd:d6:31:4d:f7:56:48: 0c:25:7b:43:39:89:82:80:ed:c1:21:87:d9:1b:e2:b1:6a:f9: 11:45:1b:52 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMzn5216nPA0jN0CCcQjJiPyr9ocwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyMTAwMDA0NFoX DTI1MTEyNTIzNTk1OVowejFJMEcGA1UEBRNAMjM2MWNjMzMxODI1YzQzYTYwNzMz MWM3ZDQwYWI1YTVmNmU0OTBiYTMxYWZjY2EyNzA1ODZiODcyOGQzYWUzNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb9/raKWHmXp34zNgo5+Eou40gUe BJVxS/DTe3+rb44kNKRXZTJZ7XLc3SS2CCUcZ8rWFmw4WpVrV6mLyK8ADlC4+MXQ oCYJdCvojaxB3tdmBJ0OU4Snct5XKIjA4J+5NOgmhgWm7H6DRlNPeORjRLO9iWtN 5m+DBcmb6K+6Gp+B3Q4ahwzGFj2++XqHCX23zlGuCYHXBTXFnkmjMM9QhR5Qh7wX 0g5euvp0+0o86g9vQn8N0Z8J4G8w26Dnvr0BwLQhvP3XloKdsqBoxkcBygTS8Dlo dOBCOYw+7fSOl7xbA6JotX+HjOUMUgxkpcODEvS1tEXtttrf/k8r8Mp/GwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLSbtmzMJMJCehYcBN2MgrSbWz0kMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiZTgxYjhiLTcyM2YtNDBmNy1iNzI1LTI3OWZjZWIxYTFiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba70AwDQYJKoZIhvcNAQELBQADggEBAEFOtMaLEPtMMOjRDCdk bUqEuCwDfUqxSSz4aD7sdg+4g3NUJWfozpduEUFEK7ULVsNoZkKuSR4Q7oxZA8AI lfOuE4hu0yAt4042XKu/JTC/yeiDnmp42dmleuWFwj5yjb/LxGG/ca7V4emLN8Fc Us0eYiVVCr+22o9aWnQ+mRzc3IEHKbQpfHnd5n9Jp5qAi5YFADGJ08ZHvaXJymOC mEYszcIzr/8wNsSSKm3ryDyzh/vByKdK0DYvWi7hUKDtBR8Qt77I1p1+dquVFHbT DIkzbOUl5IIPQUWMSoxtLJ5g/2qGvdYxTfdWSAwle0M5iYKA7cEhh9kb4rFq+RFF G1I= -----END CERTIFICATE-----Generated at Wed Nov 5 09:49:50 2025 by rpki-client