$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/589cd174-ff9f-4468-b434-55095a24f148.roa File: 589cd174-ff9f-4468-b434-55095a24f148.roa (raw, json) Hash identifier: cpfYrSwDtbuuw8wYPCtxbjrXrDM0MWuw+fEDJrM9PHo= Subject key identifier: 83:31:43:85:63:BA:BE:F2:70:5B:89:02:C0:B2:50:8D:13:09:A3:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 38FB2540AACE46473B355C361F5966F4322DAF41 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/589cd174-ff9f-4468-b434-55095a24f148.roa Signing time: Mon 13 Oct 2025 15:00:42 +0000 ROA not before: Mon 13 Oct 2025 15:00:42 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:fb:25:40:aa:ce:46:47:3b:35:5c:36:1f:59:66:f4:32:2d:af:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:00:42 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=b32d7b5a94d9e11b87cee4b903d555abc2ce24d8c39d4a2cba6b9930659062be, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cd:02:06:0b:04:f6:c8:e1:86:04:5d:09:36: 08:ef:18:c7:e0:54:e5:c1:74:a1:ac:dd:5a:ad:06: 3a:ec:74:a5:c1:88:79:ee:ed:b5:5f:a8:79:ed:50: ed:21:6b:72:d7:b3:a3:e9:1d:6c:eb:6c:38:8f:86: 94:41:ee:53:34:42:e2:cd:ca:33:84:72:79:70:bc: 2c:bf:82:39:0e:49:8c:66:d9:a6:fb:c7:86:58:cf: 1d:75:0a:f7:12:b5:2c:aa:de:b2:98:0b:2f:89:b6: 58:5b:6b:f8:fe:bc:09:39:4f:c3:ad:1a:a2:3c:ff: 54:9f:2a:52:a2:b2:32:b4:88:a1:8a:64:b2:d4:70: 05:4f:c4:b9:03:44:8b:bb:37:a6:77:27:0c:8f:84: a8:4b:4c:81:e3:40:36:26:d1:77:28:be:c8:f7:36: ad:c0:d5:6e:20:de:9f:6b:86:2b:49:46:f3:84:e4: 5b:0a:69:db:b4:0c:cd:cc:90:5c:32:14:07:ce:c9: d0:5e:f7:4c:a9:25:6c:68:5f:5a:6a:ed:81:92:db: 42:e0:ca:da:88:2d:8d:17:c0:bc:11:80:a4:e2:ad: 1b:9a:85:47:47:71:48:ce:02:2d:2a:01:7e:28:9b: 2e:1e:1e:05:69:76:e7:55:0a:51:99:b1:3a:2b:2a: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:31:43:85:63:BA:BE:F2:70:5B:89:02:C0:B2:50:8D:13:09:A3:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/589cd174-ff9f-4468-b434-55095a24f148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c020::/48 Signature Algorithm: sha256WithRSAEncryption 7a:73:86:b3:70:5d:89:45:e9:b4:8f:4b:60:e4:88:57:19:6c: e2:11:e7:04:5c:61:48:72:1f:44:cc:08:13:10:09:f6:86:1f: 57:29:bb:13:02:a4:76:19:df:fb:7c:c4:2e:65:28:92:5a:8a: 32:07:15:aa:4d:1f:be:35:6f:08:0f:be:3e:ff:c3:f7:cc:7e: f1:98:9b:1c:08:b3:de:4c:8d:47:2a:8a:a1:1f:30:3c:8e:4f: 91:e1:2d:89:1c:04:a0:c2:4e:b2:93:97:1e:2e:c7:63:63:0d: 86:d3:8c:e1:9b:b2:a5:89:bc:ee:46:2f:52:a5:dd:64:2a:f5: e7:ff:20:b9:29:28:ad:97:d0:dd:a7:05:c1:d6:a9:c2:56:34: 81:25:00:19:2f:a9:36:c4:7a:b0:4c:71:ef:4c:5b:e5:54:bd: 05:d8:1f:b7:0a:5f:36:f4:aa:0c:85:23:ca:62:85:1e:8b:98: 4a:51:9d:6e:d2:57:75:58:10:77:d1:59:79:6a:64:93:27:3a: 35:6f:82:35:1e:8e:a1:aa:4a:f0:db:94:a7:68:05:39:c2:8d: fc:7c:1c:52:01:74:7c:67:5d:13:b5:f0:b2:8f:89:70:65:e8: 24:f1:59:3f:56:38:e5:24:91:37:25:dd:7f:7c:ae:5a:b0:19: 14:e1:4b:f9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOPslQKrORkc7NVw2H1lm9DItr0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1MDA0MloX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNAYjMyZDdiNWE5NGQ5ZTExYjg3Y2Vl NGI5MDNkNTU1YWJjMmNlMjRkOGMzOWQ0YTJjYmE2Yjk5MzA2NTkwNjJiZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM0CBgsE9sjhhgRdCTYI7xjH4FTl wXShrN1arQY67HSlwYh57u21X6h57VDtIWty17Oj6R1s62w4j4aUQe5TNELizcoz hHJ5cLwsv4I5DkmMZtmm+8eGWM8ddQr3ErUsqt6ymAsvibZYW2v4/rwJOU/DrRqi PP9UnypSorIytIihimSy1HAFT8S5A0SLuzemdycMj4SoS0yB40A2JtF3KL7I9zat wNVuIN6fa4YrSUbzhORbCmnbtAzNzJBcMhQHzsnQXvdMqSVsaF9aau2BkttC4Mra iC2NF8C8EYCk4q0bmoVHR3FIzgItKgF+KJsuHh4FaXbnVQpRmbE6KyrPIQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIMxQ4Vjur7ycFuJAsCyUI0TCaNEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU4OWNkMTc0LWZmOWYtNDQ2OC1iNDM0LTU1MDk1YTI0ZjE0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMAgMA0GCSqGSIb3DQEBCwUAA4IBAQB6c4azcF2JRem0j0tg 5IhXGWziEecEXGFIch9EzAgTEAn2hh9XKbsTAqR2Gd/7fMQuZSiSWooyBxWqTR++ NW8ID74+/8P3zH7xmJscCLPeTI1HKoqhHzA8jk+R4S2JHASgwk6yk5ceLsdjYw2G 04zhm7KlibzuRi9Spd1kKvXn/yC5KSitl9DdpwXB1qnCVjSBJQAZL6k2xHqwTHHv TFvlVL0F2B+3Cl829KoMhSPKYoUei5hKUZ1u0ld1WBB30Vl5amSTJzo1b4I1Ho6h qkrw25SnaAU5wo38fBxSAXR8Z10TtfCyj4lwZegk8Vk/VjjlJJE3Jd1/fK5asBkU 4Uv5 -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:05 2025 by rpki-client