$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7521d624-9f73-434b-b487-b3db6d556c03.roa File: 7521d624-9f73-434b-b487-b3db6d556c03.roa (raw, json) Hash identifier: s3C5ylUMXOGFltUb96rsS6kvHsRMCdH2PAWsHFkP4Ak= Subject key identifier: 3B:41:77:A6:52:97:91:B5:C6:0F:BC:F6:48:F8:CA:72:89:76:D9:CC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 43A467F0FB725C7BA1774E743F9A6D1E71773E29 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7521d624-9f73-434b-b487-b3db6d556c03.roa Signing time: Sun 02 Nov 2025 00:00:05 +0000 ROA not before: Sun 02 Nov 2025 00:00:05 +0000 ROA not after: Sun 07 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a4:67:f0:fb:72:5c:7b:a1:77:4e:74:3f:9a:6d:1e:71:77:3e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 2 00:00:05 2025 GMT Not After : Dec 7 23:59:59 2025 GMT Subject: serialNumber=2c33c6bd9f21791c6172f85e4e54e8b1880296586304762328363fd6d6f8072a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:56:ef:ad:49:0c:d1:e7:f4:bb:67:42:e7: c0:9a:9e:33:80:f2:46:68:ff:c6:e5:33:cc:ca:b3: ec:ce:c7:b1:5e:e9:94:4f:e7:7a:4d:a9:c8:3b:6d: c4:d7:10:77:2b:52:6c:ab:e7:44:f3:e1:c9:61:4d: 81:33:c8:72:71:44:a1:82:ee:29:91:4d:2c:15:65: f5:cd:f0:73:c1:cc:4b:8e:ae:dd:c9:12:79:62:c1: d3:a0:d3:4f:b8:01:8f:2a:d6:94:b7:fe:ca:dd:1e: 0d:50:7d:3a:26:ed:5c:ff:70:f9:ca:a0:ab:1c:32: 26:4b:07:88:51:f0:df:3d:78:ef:ea:73:28:14:d6: 79:41:3b:79:78:af:d7:cf:df:07:f8:9a:a1:be:d5: 9a:7b:bb:bd:70:fc:24:11:f3:15:29:44:e3:61:d3: 7b:f3:93:87:01:cb:9d:f9:d5:53:49:c6:90:93:d2: 74:6b:ea:9d:35:52:cb:78:88:34:4c:6f:c0:ed:05: b5:d8:40:58:36:d5:1c:b3:0b:1b:6a:fb:ba:72:85: 4a:f9:75:a3:99:82:ed:18:5b:fa:da:d6:96:4b:a2: 0b:52:e2:87:3b:0f:dd:59:41:b0:3d:a7:6e:ee:20: 71:64:f8:5a:f3:33:1d:b6:91:06:29:10:03:97:88: 56:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:41:77:A6:52:97:91:B5:C6:0F:BC:F6:48:F8:CA:72:89:76:D9:CC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7521d624-9f73-434b-b487-b3db6d556c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:8000::/40 Signature Algorithm: sha256WithRSAEncryption 90:3f:65:b5:35:ca:a8:8e:42:2d:7a:3e:fe:9f:a8:31:02:ca: e1:54:44:17:c2:44:48:f3:6e:07:ec:40:21:11:91:8d:fb:ab: a2:e3:47:ae:45:35:d8:4d:75:77:72:7a:92:b7:53:9e:d1:11: 87:f1:5a:ba:34:d5:8a:c1:90:66:bf:14:51:b5:e7:9f:b4:e9: af:4e:38:6d:c5:c8:56:a7:69:f8:db:1e:18:7b:ce:0c:cd:b0: 08:35:4b:46:5e:e1:ff:a3:9d:b6:65:5c:64:19:3d:74:9f:46: 91:f3:c6:f7:22:87:5b:bf:b7:a6:45:e4:fa:84:53:a1:1a:11: 9b:e1:a9:34:9e:05:6c:1e:87:8a:e1:7e:f9:d9:e5:29:9d:2e: b0:3f:52:13:80:5e:b1:46:65:b3:34:23:16:be:f6:a7:8e:a7: 03:8b:30:f3:91:ad:a6:99:00:59:d9:bd:b6:f7:1b:d6:a5:a8: ee:64:0f:2f:f4:d1:d5:f5:1e:21:55:63:d1:6f:e0:19:67:79: 60:c6:71:f5:64:f4:1f:23:55:a6:c2:cf:1e:d7:b0:56:48:34: b5:5a:33:44:04:37:bc:0e:7c:5e:b7:69:a1:b3:38:2e:d9:9f: e1:8e:a5:b2:31:f5:17:18:8d:b7:77:a0:d1:37:dd:c5:cf:4b: ff:c2:10:4a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQ6Rn8PtyXHuhd050P5ptHnF3PikwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwMjAwMDAwNVoX DTI1MTIwNzIzNTk1OVowejFJMEcGA1UEBRNAMmMzM2M2YmQ5ZjIxNzkxYzYxNzJm ODVlNGU1NGU4YjE4ODAyOTY1ODYzMDQ3NjIzMjgzNjNmZDZkNmY4MDcyYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+JW761JDNHn9LtnQufAmp4zgPJG aP/G5TPMyrPszsexXumUT+d6TanIO23E1xB3K1Jsq+dE8+HJYU2BM8hycUShgu4p kU0sFWX1zfBzwcxLjq7dyRJ5YsHToNNPuAGPKtaUt/7K3R4NUH06Ju1c/3D5yqCr HDImSweIUfDfPXjv6nMoFNZ5QTt5eK/Xz98H+JqhvtWae7u9cPwkEfMVKUTjYdN7 85OHAcud+dVTScaQk9J0a+qdNVLLeIg0TG/A7QW12EBYNtUcswsbavu6coVK+XWj mYLtGFv62taWS6ILUuKHOw/dWUGwPadu7iBxZPha8zMdtpEGKRADl4hWDwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDtBd6ZSl5G1xg+89kj4ynKJdtnMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc1MjFkNjI0LTlmNzMtNDM0Yi1iNDg3LWIzZGI2ZDU1NmMwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYIAwDQYJKoZIhvcNAQELBQADggEBAJA/ZbU1yqiOQi16Pv6f qDECyuFURBfCREjzbgfsQCERkY37q6LjR65FNdhNdXdyepK3U57REYfxWro01YrB kGa/FFG155+06a9OOG3FyFanafjbHhh7zgzNsAg1S0Ze4f+jnbZlXGQZPXSfRpHz xvcih1u/t6ZF5PqEU6EaEZvhqTSeBWweh4rhfvnZ5SmdLrA/UhOAXrFGZbM0Ixa+ 9qeOpwOLMPORraaZAFnZvbb3G9alqO5kDy/00dX1HiFVY9Fv4BlneWDGcfVk9B8j VabCzx7XsFZINLVaM0QEN7wOfF63aaGzOC7Zn+GOpbIx9RcYjbd3oNE33cXPS//C EEo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:52 2025 by rpki-client