$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b4c49abe-72e6-4f9a-956e-fa7aef83fddd.roa File: b4c49abe-72e6-4f9a-956e-fa7aef83fddd.roa (raw, json) Hash identifier: qpd0ut2WLFUnIMOai4a3onpUdsoPLl5iybnmFj7bs0c= Subject key identifier: B4:E2:71:A2:E8:1E:8C:7F:8D:ED:D4:F6:53:2B:8A:6D:9E:B4:8A:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3940FF1D96B198CCE4C119066D4C3483E5BCD28D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b4c49abe-72e6-4f9a-956e-fa7aef83fddd.roa Signing time: Wed 29 Oct 2025 07:40:14 +0000 ROA not before: Wed 29 Oct 2025 07:40:14 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:40:ff:1d:96:b1:98:cc:e4:c1:19:06:6d:4c:34:83:e5:bc:d2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 07:40:14 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=7bc215b7c26aa1a53a3f80e463e0a97ed29807cefa1880ef6aff175381262bd7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ce:12:b2:df:a6:40:7d:6f:33:cb:4c:be:99: 19:9b:6c:55:a4:46:56:83:ec:48:17:01:6f:c2:c1: a5:09:89:6a:a1:5c:49:78:c1:bb:be:b9:9f:63:fa: d9:f9:39:26:90:64:90:ca:7f:42:b4:02:c9:ce:1b: 65:f5:d2:f2:ba:24:2d:9a:4c:58:3b:4a:da:87:38: 56:c4:33:a7:53:1c:ef:2a:eb:2b:a6:63:aa:ff:0e: d1:bc:33:c1:8c:13:2d:1a:ca:79:6e:ec:b2:8d:61: 63:de:5b:46:f2:cd:ce:e5:a4:a6:bb:5a:12:95:c3: 3b:78:74:00:84:22:09:fa:21:a5:dd:4e:21:73:ca: e9:af:b2:72:67:c7:b6:6a:2a:b8:62:53:f1:3d:52: 34:10:16:01:c0:39:c4:e9:55:cd:a8:c3:a6:e4:03: 62:1f:0c:30:50:0f:bc:38:2c:32:d2:40:78:9c:15: a4:9b:88:e2:21:40:1f:46:ef:06:fe:63:7d:f1:e8: 5a:c0:cc:38:8f:19:38:8a:a0:97:db:6b:e8:1d:00: ba:02:58:45:a5:21:0e:f7:c2:4f:d6:79:7e:fa:48: 8a:fd:6a:e8:fb:45:93:8e:e6:05:49:d2:e8:0a:0d: 07:b7:2a:6f:ed:76:2e:e9:0c:9c:de:b6:fd:44:24: 95:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E2:71:A2:E8:1E:8C:7F:8D:ED:D4:F6:53:2B:8A:6D:9E:B4:8A:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b4c49abe-72e6-4f9a-956e-fa7aef83fddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:9000::/40 Signature Algorithm: sha256WithRSAEncryption 58:d3:41:e6:57:65:56:0c:a8:4b:c1:8b:27:7f:1c:d4:90:62: 0c:28:aa:fb:22:db:19:80:c6:bf:8b:28:b8:85:66:1c:f2:16: e4:f3:28:cd:8b:9d:54:aa:93:54:51:8d:90:58:e6:e2:20:6e: ba:8d:f2:26:6e:ff:6d:39:3a:c1:f1:dd:70:83:f5:fb:82:76: 78:79:79:4a:73:78:a9:45:9d:fd:97:08:5e:45:aa:b0:54:02: 37:33:8b:58:54:fb:0b:1d:37:09:f8:c9:16:2b:d0:75:0e:46: 89:c5:ed:11:78:df:78:59:7f:af:a1:0b:94:65:07:76:04:fb: 12:4e:8d:23:26:29:85:a5:66:b4:52:bc:55:8f:75:f2:dd:f1: 35:fe:db:a6:52:96:71:72:84:9c:0b:9d:de:85:88:49:86:6c: 8e:61:f3:e8:0c:73:a4:86:ca:ba:64:92:65:fe:82:7f:a0:1b: 6f:1e:07:a0:b5:1b:cc:4e:c0:66:05:8c:c4:28:c5:0b:bf:fa: 1f:a9:31:66:d2:e7:55:11:34:2e:f8:6b:2a:c5:e6:b1:fe:87: 11:80:55:d8:1c:fc:cc:bb:fe:65:a0:66:28:b4:91:ce:bc:c6: 01:ef:56:24:bb:da:1b:d9:75:be:d0:4e:1a:2b:a3:0e:9f:83: da:c3:3d:1e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOUD/HZaxmMzkwRkGbUw0g+W80o0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTA3NDAxNFoX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAN2JjMjE1YjdjMjZhYTFhNTNhM2Y4 MGU0NjNlMGE5N2VkMjk4MDdjZWZhMTg4MGVmNmFmZjE3NTM4MTI2MmJkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc4Sst+mQH1vM8tMvpkZm2xVpEZW g+xIFwFvwsGlCYlqoVxJeMG7vrmfY/rZ+TkmkGSQyn9CtALJzhtl9dLyuiQtmkxY O0rahzhWxDOnUxzvKusrpmOq/w7RvDPBjBMtGsp5buyyjWFj3ltG8s3O5aSmu1oS lcM7eHQAhCIJ+iGl3U4hc8rpr7JyZ8e2aiq4YlPxPVI0EBYBwDnE6VXNqMOm5ANi HwwwUA+8OCwy0kB4nBWkm4jiIUAfRu8G/mN98ehawMw4jxk4iqCX22voHQC6AlhF pSEO98JP1nl++kiK/Wro+0WTjuYFSdLoCg0Htypv7XYu6Qyc3rb9RCSVRwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLTicaLoHox/je3U9lMrim2etIrgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I0YzQ5YWJlLTcyZTYtNGY5YS05NTZlLWZhN2FlZjgzZmRkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6pAwDQYJKoZIhvcNAQELBQADggEBAFjTQeZXZVYMqEvBiyd/ HNSQYgwoqvsi2xmAxr+LKLiFZhzyFuTzKM2LnVSqk1RRjZBY5uIgbrqN8iZu/205 OsHx3XCD9fuCdnh5eUpzeKlFnf2XCF5FqrBUAjczi1hU+wsdNwn4yRYr0HUORonF 7RF433hZf6+hC5RlB3YE+xJOjSMmKYWlZrRSvFWPdfLd8TX+26ZSlnFyhJwLnd6F iEmGbI5h8+gMc6SGyrpkkmX+gn+gG28eB6C1G8xOwGYFjMQoxQu/+h+pMWbS51UR NC74ayrF5rH+hxGAVdgc/My7/mWgZii0kc68xgHvViS72hvZdb7QThorow6fg9rD PR4= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:14 2025 by rpki-client