$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b82c715e-5b6d-400a-a87e-497b43db313b.roa File: b82c715e-5b6d-400a-a87e-497b43db313b.roa (raw, json) Hash identifier: COJ5LawcXzSoCnJ2pZ3la/of3bAz7gsFiAc//UnnwwQ= Subject key identifier: EE:50:34:EB:95:0C:65:C3:35:16:59:0F:BD:A1:E6:1C:7E:1C:64:10 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 39382E8C3656DA94E60FFB8AA868C6ADA89E6E6B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b82c715e-5b6d-400a-a87e-497b43db313b.roa Signing time: Mon 13 Oct 2025 15:00:11 +0000 ROA not before: Mon 13 Oct 2025 15:00:11 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:38:2e:8c:36:56:da:94:e6:0f:fb:8a:a8:68:c6:ad:a8:9e:6e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:00:11 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=6bcfb8e02ed0bf302239783df6c5cc9fc94e9746a83267100d5dcc5e571da751, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:6a:89:38:47:06:c6:3a:0e:7a:f1:79:8e: ab:c5:a1:cf:7c:1f:c2:5a:54:61:dc:d1:04:76:51: cb:bb:3d:23:a3:14:fc:8e:f8:39:2c:52:d0:86:fc: b8:df:ac:8d:e8:cb:a0:1d:3f:7a:d7:63:35:25:42: ca:92:36:17:5c:39:87:c5:86:41:db:6f:e7:d0:7f: 52:ab:4b:94:bb:0f:6f:f2:25:50:f6:e0:01:a6:fd: 21:92:ef:c1:4d:75:9d:b4:ec:5c:99:24:6d:f4:5b: 7a:1f:dc:18:4f:82:71:0d:9e:40:64:c8:01:46:ba: 69:47:87:b3:76:36:d3:09:f7:52:e0:44:60:5e:d2: ab:88:76:66:f1:f8:76:e6:2a:24:8e:5e:15:0b:8f: 67:90:ed:54:fb:b3:71:80:cc:64:4b:f3:45:1f:d5: 2e:a6:ec:34:11:24:a0:d9:e7:53:c0:6c:cb:c6:92: eb:e5:b3:94:38:35:cd:73:ad:34:34:41:3e:22:90: 1f:40:e0:c3:92:37:e5:1b:1c:bb:c7:1e:da:72:fb: 77:7a:c4:81:35:1f:dc:5c:db:e9:89:bc:d3:20:2f: 43:ff:d5:15:01:5f:91:ab:a6:83:bc:f6:81:77:0d: 4b:bc:7d:b9:70:8c:de:19:d0:0d:39:cb:06:cd:19: 79:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:50:34:EB:95:0C:65:C3:35:16:59:0F:BD:A1:E6:1C:7E:1C:64:10 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b82c715e-5b6d-400a-a87e-497b43db313b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 5b:e8:be:1d:74:05:a1:5a:e3:dc:3b:16:25:1f:ba:9c:d6:db: 66:74:a4:0a:c0:1e:0d:a8:3b:a1:6a:f5:91:bf:d0:a8:3c:68: 5e:28:d5:8c:0f:1e:d0:20:32:52:b3:5a:23:f5:63:25:9d:ea: d7:0f:c9:95:88:c7:93:d7:33:67:99:26:8a:9c:65:7e:67:f3: 9f:8b:ed:4b:34:13:1c:bf:e5:ea:61:4e:21:0a:b5:58:81:7d: 3b:4f:74:a1:f1:94:11:ac:69:1f:7a:9e:64:ac:00:77:b4:37: 87:63:fe:4c:5d:4d:08:62:6c:b5:a6:15:10:98:a8:20:09:f1: 63:91:e2:21:03:ce:1f:0f:17:73:ab:48:33:29:51:4a:3f:67: 9b:b7:b5:ce:b0:80:e7:94:71:df:04:82:e2:64:7e:d5:83:4d: 9d:23:d0:15:49:88:5c:01:6d:a2:48:2a:04:cf:7e:a3:d8:a4: d6:87:42:9d:c9:b4:bc:e2:06:a2:c8:be:a1:8a:e5:04:f2:b2: 49:94:46:0c:22:65:5f:ef:10:cd:1a:74:52:3a:ba:11:46:17: 81:e8:34:7b:22:90:aa:f3:c9:2e:36:7f:b6:c0:e8:96:77:5b: 5f:0b:74:d4:90:18:9d:78:9b:52:60:d0:e3:d1:13:91:e8:98: 46:5e:1f:46 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOTgujDZW2pTmD/uKqGjGraiebmswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1MDAxMVoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNANmJjZmI4ZTAyZWQwYmYzMDIyMzk3 ODNkZjZjNWNjOWZjOTRlOTc0NmE4MzI2NzEwMGQ1ZGNjNWU1NzFkYTc1MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGNqiThHBsY6DnrxeY6rxaHPfB/C WlRh3NEEdlHLuz0joxT8jvg5LFLQhvy436yN6MugHT9612M1JULKkjYXXDmHxYZB 22/n0H9Sq0uUuw9v8iVQ9uABpv0hku/BTXWdtOxcmSRt9Ft6H9wYT4JxDZ5AZMgB RrppR4ezdjbTCfdS4ERgXtKriHZm8fh25iokjl4VC49nkO1U+7NxgMxkS/NFH9Uu puw0ESSg2edTwGzLxpLr5bOUODXNc600NEE+IpAfQODDkjflGxy7xx7acvt3esSB NR/cXNvpibzTIC9D/9UVAV+Rq6aDvPaBdw1LvH25cIzeGdANOcsGzRl5iQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFO5QNOuVDGXDNRZZD72h5hx+HGQQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4MmM3MTVlLTViNmQtNDAwYS1hODdlLTQ5N2I0M2RiMzEzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8ijAMA0GCSqGSIb3DQEBCwUAA4IBAQBb6L4ddAWhWuPcOxYl H7qc1ttmdKQKwB4NqDuhavWRv9CoPGheKNWMDx7QIDJSs1oj9WMlnerXD8mViMeT 1zNnmSaKnGV+Z/Ofi+1LNBMcv+XqYU4hCrVYgX07T3Sh8ZQRrGkfep5krAB3tDeH Y/5MXU0IYmy1phUQmKggCfFjkeIhA84fDxdzq0gzKVFKP2ebt7XOsIDnlHHfBILi ZH7Vg02dI9AVSYhcAW2iSCoEz36j2KTWh0KdybS84gaiyL6hiuUE8rJJlEYMImVf 7xDNGnRSOroRRheB6DR7IpCq88kuNn+2wOiWd1tfC3TUkBideJtSYNDj0ROR6JhG Xh9G -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:38 2025 by rpki-client