$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6a8a8c-5766-4c00-992a-470de2ca86b4.roa File: 9d6a8a8c-5766-4c00-992a-470de2ca86b4.roa (raw, json) Hash identifier: GOTigwmt6axB8dycNROPVrOnbdsLygegGsK9JgvjTlc= Subject key identifier: 6D:00:38:75:CA:31:93:EE:A4:B3:A3:E3:4D:57:AB:F0:8B:75:14:43 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2880FCC8A375C566005960915C175B2A7E874D53 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6a8a8c-5766-4c00-992a-470de2ca86b4.roa Signing time: Tue 04 Nov 2025 00:00:06 +0000 ROA not before: Tue 04 Nov 2025 00:00:06 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:80:fc:c8:a3:75:c5:66:00:59:60:91:5c:17:5b:2a:7e:87:4d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 4 00:00:06 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=3e36aab0b5698ca085295b0db58e21b3f28e3a51d3cdb4041f71abe647cc927f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6a:06:e9:cc:16:e3:07:bf:e1:c4:7a:81:d8: c8:ca:53:1f:d2:b7:25:cf:8a:e5:f1:d2:bd:62:48: 9b:e1:5a:19:26:33:37:5c:e6:26:a4:1f:92:74:2c: 89:a9:90:d5:a1:a0:4c:05:65:ea:94:aa:13:6d:01: bf:b0:b7:eb:13:0a:0b:e4:12:34:12:3c:a2:f7:34: 9c:f0:f3:75:85:cc:58:f6:b6:69:2b:95:69:f5:63: 8c:90:38:f5:ab:3f:93:1f:e1:2c:cb:d0:36:51:d2: f4:41:c3:62:55:31:48:43:a2:c3:4b:f0:11:30:f0: f3:01:2c:ff:4b:d2:14:89:d7:78:00:40:3d:f1:b6: 8c:a6:ff:b3:24:c3:80:e6:80:0f:74:d4:59:74:8b: fb:49:07:6b:de:03:32:7a:f5:21:93:5e:4f:fa:2a: 7a:ad:45:9c:5d:13:a4:ed:c0:3e:4e:b6:7c:4f:b8: 61:80:39:47:3e:03:83:ef:05:1e:08:d5:eb:68:a9: 35:b1:1f:70:d5:27:40:d9:cb:38:55:71:6a:36:56: 71:fb:e0:10:73:c6:c9:b0:1e:3a:b5:c2:b0:d8:da: 67:b2:d2:4e:80:85:8f:ab:4f:d9:2b:83:03:9d:c8: c5:24:e9:62:0a:d3:51:b8:e4:9c:ef:fb:31:ab:bb: 3f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:00:38:75:CA:31:93:EE:A4:B3:A3:E3:4D:57:AB:F0:8B:75:14:43 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6a8a8c-5766-4c00-992a-470de2ca86b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:8000::/40 Signature Algorithm: sha256WithRSAEncryption bd:f7:44:41:6f:e8:87:11:fc:49:89:6a:44:f8:c3:55:50:6e: b3:3a:7f:6c:22:3f:a8:da:00:75:ea:ce:16:68:e1:7d:89:91: 39:41:a7:1c:77:73:60:ca:44:61:b4:08:48:cd:e1:9b:05:b6: a7:4a:d1:0e:ce:9a:6d:36:11:90:e9:d9:a0:2a:31:18:2f:12: c4:61:d7:0a:c2:2d:fc:1c:79:cb:a5:76:34:6a:7d:12:75:55: 2f:87:41:24:d4:c8:da:d6:e3:9d:d8:9b:bd:e5:1b:43:09:76: 2b:23:2f:68:65:b5:bd:8f:79:6f:36:c7:10:10:e9:7b:3b:6c: 51:b3:42:f1:e1:af:fa:97:7c:27:36:33:04:4e:3c:4f:82:bd: 8c:07:c5:84:d6:87:a0:fe:7c:c7:52:e8:28:b4:c5:f2:ae:7b: a9:22:2e:ca:90:cf:ed:7a:7d:3c:f7:15:b1:3b:33:8d:c5:ea: e2:0b:83:f1:dd:8a:91:4a:ce:7a:dd:bf:ac:52:92:a6:68:14: 8d:d6:49:8e:97:52:bd:7e:84:8c:12:a1:20:17:76:3d:51:c0: be:00:23:a9:6f:97:3b:59:0d:8e:d0:47:f1:30:b8:b7:e6:da: b1:d1:91:ca:40:2b:bb:ec:a0:68:ee:61:05:fb:18:6e:ac:5a: 72:67:4e:1b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKID8yKN1xWYAWWCRXBdbKn6HTVMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNDAwMDAwNloX DTI1MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAM2UzNmFhYjBiNTY5OGNhMDg1Mjk1 YjBkYjU4ZTIxYjNmMjhlM2E1MWQzY2RiNDA0MWY3MWFiZTY0N2NjOTI3ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmoG6cwW4we/4cR6gdjIylMf0rcl z4rl8dK9Ykib4VoZJjM3XOYmpB+SdCyJqZDVoaBMBWXqlKoTbQG/sLfrEwoL5BI0 Ejyi9zSc8PN1hcxY9rZpK5Vp9WOMkDj1qz+TH+Esy9A2UdL0QcNiVTFIQ6LDS/AR MPDzASz/S9IUidd4AEA98baMpv+zJMOA5oAPdNRZdIv7SQdr3gMyevUhk15P+ip6 rUWcXROk7cA+TrZ8T7hhgDlHPgOD7wUeCNXraKk1sR9w1SdA2cs4VXFqNlZx++AQ c8bJsB46tcKw2NpnstJOgIWPq0/ZK4MDncjFJOliCtNRuOSc7/sxq7s/CwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG0AOHXKMZPupLOj401Xq/CLdRRDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkNmE4YThjLTU3NjYtNGMwMC05OTJhLTQ3MGRlMmNhODZiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9oAwDQYJKoZIhvcNAQELBQADggEBAL33REFv6IcR/EmJakT4 w1VQbrM6f2wiP6jaAHXqzhZo4X2JkTlBpxx3c2DKRGG0CEjN4ZsFtqdK0Q7Omm02 EZDp2aAqMRgvEsRh1wrCLfwceculdjRqfRJ1VS+HQSTUyNrW453Ym73lG0MJdisj L2hltb2PeW82xxAQ6Xs7bFGzQvHhr/qXfCc2MwROPE+CvYwHxYTWh6D+fMdS6Ci0 xfKue6kiLsqQz+16fTz3FbE7M43F6uILg/HdipFKznrdv6xSkqZoFI3WSY6XUr1+ hIwSoSAXdj1RwL4AI6lvlztZDY7QR/EwuLfm2rHRkcpAK7vsoGjuYQX7GG6sWnJn Ths= -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:14 2025 by rpki-client