$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83375d68-232d-4999-9b8f-cbf59f65a3fb.roa File: 83375d68-232d-4999-9b8f-cbf59f65a3fb.roa (raw, json) Hash identifier: 9sBkgETqBMS81md1tSkvT1u0dVh/lQDjW09HZFzOvFQ= Subject key identifier: 5A:3D:85:A3:22:F8:75:C4:04:87:CC:83:2B:99:08:57:3D:F4:C3:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7FE50FF96186DB7E5F7FF73B7178368AA9C6BDC1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83375d68-232d-4999-9b8f-cbf59f65a3fb.roa Signing time: Fri 24 Oct 2025 00:00:27 +0000 ROA not before: Fri 24 Oct 2025 00:00:27 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daed:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e5:0f:f9:61:86:db:7e:5f:7f:f7:3b:71:78:36:8a:a9:c6:bd:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 24 00:00:27 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=145ca299e0eebaecc16901a25f5b690552f3f968229b3ad645e29072a81d8e0e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:35:dd:fc:ef:90:25:d7:4d:38:f2:fe:b9: d1:2c:df:6b:aa:07:4c:c9:34:ab:d8:c3:f4:56:70: d0:3b:58:64:61:1b:fc:78:32:f9:5d:3b:f6:9c:36: e4:fd:09:1e:9e:6c:aa:0b:f5:f3:ff:e3:ef:e8:5d: de:ea:2d:05:4a:1c:98:7a:b6:c2:c9:5c:42:74:d8: a3:c3:58:88:48:9e:b0:26:98:72:05:eb:c4:87:5b: c7:e1:05:26:12:2d:8c:3a:5d:e5:ed:37:13:c8:2b: 0d:74:95:f1:8b:d9:52:b6:25:f9:80:80:66:2f:88: 6a:eb:78:a1:53:1c:2e:4f:28:a1:d1:ff:aa:f3:82: 27:9e:04:f7:96:ba:74:8a:a7:1e:6a:66:86:bc:4a: 12:47:a2:51:eb:11:6b:3a:fe:ad:ab:d6:a2:f6:52: b6:1c:b0:e3:56:f7:e9:66:44:02:2d:08:88:c9:9d: 63:f4:95:02:08:2c:28:2e:e5:45:2c:c3:c3:4f:9b: 11:48:73:d9:48:a3:e5:07:0d:66:4e:19:2e:75:c6: e4:fd:c7:1c:66:90:48:f5:c4:f1:13:1a:1c:fe:79: 25:84:c4:f2:c1:50:0f:21:26:35:a5:12:31:07:1a: 48:87:26:91:81:01:ec:56:9a:dc:ed:ca:34:6a:e7: 53:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3D:85:A3:22:F8:75:C4:04:87:CC:83:2B:99:08:57:3D:F4:C3:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83375d68-232d-4999-9b8f-cbf59f65a3fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:4040::/48 Signature Algorithm: sha256WithRSAEncryption 9e:9a:e0:33:45:1d:eb:dd:ea:64:6b:5f:aa:4b:9d:ba:4e:c0: 55:05:fe:57:53:ae:2a:4e:ee:2c:ff:2c:cf:ea:c8:c1:00:e7: 72:91:d8:d3:f0:37:94:92:00:94:8d:3e:d6:3e:6b:26:45:3d: 19:b6:47:65:62:52:29:21:7c:b2:cf:85:17:d3:57:16:d1:34: 3b:08:dc:ec:a8:fb:a8:c4:59:28:e5:f3:11:a6:d2:a2:9a:37: 19:f2:df:8a:95:66:10:7a:b4:bc:65:34:de:51:e4:0c:ab:8a: 47:a6:9b:61:c1:88:09:68:99:7e:63:a4:1e:02:02:78:4c:0d: 6b:13:62:99:d5:2d:80:cd:1d:fc:f2:a7:50:c0:cb:17:a1:a2: 4b:ff:d2:24:cf:18:47:18:d7:87:33:e7:49:03:e1:57:30:42: 4c:05:b7:48:ad:d9:00:03:10:20:bf:ca:68:4f:b8:79:16:ff: 6e:45:3c:0c:ee:e9:52:88:69:fc:be:2f:f3:99:87:2d:6b:f8: 99:31:e1:66:83:c0:b6:af:b4:29:62:6e:f3:98:13:a0:6e:93: 11:a3:df:99:fc:f0:a8:03:39:d4:c2:4a:55:00:8d:8d:8a:fc: df:1e:ff:f9:1a:d6:a4:84:d9:78:b3:4b:44:62:cd:15:ce:74: 0b:a5:98:a4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUf+UP+WGG235ff/c7cXg2iqnGvcEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyNDAwMDAyN1oX DTI1MTEyODIzNTk1OVowejFJMEcGA1UEBRNAMTQ1Y2EyOTllMGVlYmFlY2MxNjkw MWEyNWY1YjY5MDU1MmYzZjk2ODIyOWIzYWQ2NDVlMjkwNzJhODFkOGUwZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7k13fzvkCXXTTjy/rnRLN9rqgdM yTSr2MP0VnDQO1hkYRv8eDL5XTv2nDbk/QkenmyqC/Xz/+Pv6F3e6i0FShyYerbC yVxCdNijw1iISJ6wJphyBevEh1vH4QUmEi2MOl3l7TcTyCsNdJXxi9lStiX5gIBm L4hq63ihUxwuTyih0f+q84InngT3lrp0iqceamaGvEoSR6JR6xFrOv6tq9ai9lK2 HLDjVvfpZkQCLQiIyZ1j9JUCCCwoLuVFLMPDT5sRSHPZSKPlBw1mThkudcbk/ccc ZpBI9cTxExoc/nklhMTywVAPISY1pRIxBxpIhyaRgQHsVprc7co0audTSwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFo9haMi+HXEBIfMgyuZCFc99MNEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMzc1ZDY4LTIzMmQtNDk5OS05YjhmLWNiZjU5ZjY1YTNmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7UBAMA0GCSqGSIb3DQEBCwUAA4IBAQCemuAzRR3r3epka1+q S526TsBVBf5XU64qTu4s/yzP6sjBAOdykdjT8DeUkgCUjT7WPmsmRT0ZtkdlYlIp IXyyz4UX01cW0TQ7CNzsqPuoxFko5fMRptKimjcZ8t+KlWYQerS8ZTTeUeQMq4pH ppthwYgJaJl+Y6QeAgJ4TA1rE2KZ1S2AzR388qdQwMsXoaJL/9IkzxhHGNeHM+dJ A+FXMEJMBbdIrdkAAxAgv8poT7h5Fv9uRTwM7ulSiGn8vi/zmYcta/iZMeFmg8C2 r7QpYm7zmBOgbpMRo9+Z/PCoAznUwkpVAI2NivzfHv/5GtakhNl4s0tEYs0VznQL pZik -----END CERTIFICATE-----Generated at Wed Nov 5 15:27:30 2025 by rpki-client