$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/81f26a69-4419-444e-a58a-f1c88386085f.roa File: 81f26a69-4419-444e-a58a-f1c88386085f.roa (raw, json) Hash identifier: AtRVIeHyOQ5FtWrad5zXw/asX6OP0J72/vqJtqhhx+0= Subject key identifier: DA:07:8B:AD:95:0C:00:EA:86:AA:76:F5:53:8E:8F:D7:58:64:0F:0C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A7200C8789975FC02B5C8C7C049103066D27AB6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/81f26a69-4419-444e-a58a-f1c88386085f.roa Signing time: Tue 28 Oct 2025 00:00:06 +0000 ROA not before: Tue 28 Oct 2025 00:00:06 +0000 ROA not after: Tue 02 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:72:00:c8:78:99:75:fc:02:b5:c8:c7:c0:49:10:30:66:d2:7a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 28 00:00:06 2025 GMT Not After : Dec 2 23:59:59 2025 GMT Subject: serialNumber=03dfb1076124421d4b807edd41c4cd18ccbdbf484d7be0368b98fa9f7d8e6d46, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:51:7a:d1:1e:c0:02:e5:a9:23:e2:5a:06: 7e:04:2b:fc:5d:a4:97:09:30:97:8d:6c:63:a4:7f: 42:88:3d:1e:92:19:22:3b:45:07:51:c0:3b:9b:bf: 69:67:c1:12:d8:0c:14:40:0e:47:0d:11:82:b5:78: c7:3d:34:3e:4e:2c:d8:3a:00:6d:26:e4:44:62:1f: 2a:10:43:4c:2a:16:61:59:6e:23:8d:da:bc:3d:18: ca:0d:f9:91:ca:5e:ef:d1:3e:92:f2:3e:6c:89:e8: e4:11:63:9c:cd:e3:c2:87:66:64:76:52:26:64:a3: 35:52:a6:20:94:d7:a3:35:40:f7:d0:9a:32:90:61: b7:5b:0b:20:9b:3a:ca:d6:4b:b4:6b:66:70:e8:10: eb:ae:2c:8c:9c:3c:4e:59:87:80:39:7c:40:67:28: 31:d4:21:92:bb:bd:18:66:2a:fa:33:47:57:b1:ca: 67:74:1a:73:8d:02:a9:86:65:4d:18:05:50:bb:6b: bd:96:2d:84:2c:ce:e1:19:8f:34:dd:1d:e2:88:92: d0:6a:96:92:1f:7e:37:f3:34:90:aa:5a:59:ca:ef: 45:39:1f:53:cb:50:45:89:d0:11:9a:df:ea:c3:0e: 46:18:27:1d:28:6e:38:70:cb:8e:5a:92:7a:cb:1f: 45:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:07:8B:AD:95:0C:00:EA:86:AA:76:F5:53:8E:8F:D7:58:64:0F:0C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/81f26a69-4419-444e-a58a-f1c88386085f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:8000::/40 Signature Algorithm: sha256WithRSAEncryption 89:21:5d:76:bf:75:35:f9:26:25:af:ad:ea:d5:90:21:34:d7: 71:fc:8d:d9:da:02:13:df:9f:30:55:fe:b9:3b:db:f3:fc:53: 81:f2:26:83:a6:65:a9:9a:2a:c7:a4:d1:39:8c:01:d2:c1:88: d2:86:6d:42:66:06:a3:2f:06:52:7f:8d:27:00:71:c5:9c:dc: 2f:50:40:b8:7d:9c:45:f5:50:5a:08:db:12:f9:33:05:6e:8d: 99:d2:28:93:67:7d:c9:bc:50:1a:b4:1f:2f:34:5d:f2:b3:1a: 27:8b:2c:07:92:4c:30:84:42:5c:55:8e:c0:ad:06:68:99:22: 47:6e:22:82:23:7c:91:95:a8:33:38:01:4b:2f:1d:66:0f:4b: b9:26:f9:c9:dc:49:c6:5e:80:6f:2f:b0:0a:48:35:13:5d:a5: 88:6e:ca:c6:d3:ae:01:a8:4b:b7:8a:24:9c:3e:3a:12:cd:4f: 9b:5c:12:5d:7e:aa:3d:7f:9b:ef:fe:93:70:6a:c0:2a:86:16: ff:b8:6f:cb:ba:4a:61:b7:3f:7f:ef:7b:8b:e5:9e:5f:68:4c: ff:d0:ab:57:59:a3:e8:55:b5:fa:d8:ab:75:91:eb:15:0d:e6: bc:32:b1:86:38:f8:c5:74:54:cd:25:a3:4a:18:41:ff:5b:8c: 25:21:92:25 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCnIAyHiZdfwCtcjHwEkQMGbSerYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyODAwMDAwNloX DTI1MTIwMjIzNTk1OVowejFJMEcGA1UEBRNAMDNkZmIxMDc2MTI0NDIxZDRiODA3 ZWRkNDFjNGNkMThjY2JkYmY0ODRkN2JlMDM2OGI5OGZhOWY3ZDhlNmQ0NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZtRetEewALlqSPiWgZ+BCv8XaSX CTCXjWxjpH9CiD0ekhkiO0UHUcA7m79pZ8ES2AwUQA5HDRGCtXjHPTQ+TizYOgBt JuREYh8qEENMKhZhWW4jjdq8PRjKDfmRyl7v0T6S8j5siejkEWOczePCh2ZkdlIm ZKM1UqYglNejNUD30JoykGG3WwsgmzrK1ku0a2Zw6BDrriyMnDxOWYeAOXxAZygx 1CGSu70YZir6M0dXscpndBpzjQKphmVNGAVQu2u9li2ELM7hGY803R3iiJLQapaS H3438zSQqlpZyu9FOR9Ty1BFidARmt/qww5GGCcdKG44cMuOWpJ6yx9FYQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNoHi62VDADqhqp29VOOj9dYZA8MMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxZjI2YTY5LTQ0MTktNDQ0ZS1hNThhLWYxYzg4Mzg2MDg1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMoAwDQYJKoZIhvcNAQELBQADggEBAIkhXXa/dTX5JiWvrerV kCE013H8jdnaAhPfnzBV/rk72/P8U4HyJoOmZamaKsek0TmMAdLBiNKGbUJmBqMv BlJ/jScAccWc3C9QQLh9nEX1UFoI2xL5MwVujZnSKJNnfcm8UBq0Hy80XfKzGieL LAeSTDCEQlxVjsCtBmiZIkduIoIjfJGVqDM4AUsvHWYPS7km+cncScZegG8vsApI NRNdpYhuysbTrgGoS7eKJJw+OhLNT5tcEl1+qj1/m+/+k3BqwCqGFv+4b8u6SmG3 P3/ve4vlnl9oTP/Qq1dZo+hVtfrYq3WR6xUN5rwysYY4+MV0VM0lo0oYQf9bjCUh kiU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:39 2025 by rpki-client