$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa File: eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa (raw, json) Hash identifier: /2fKFNdALrBjXMgOYwWETKkBwV5RgfmhItLMQx2MQAc= Subject key identifier: CE:20:FB:97:97:73:6C:24:FD:66:21:B0:15:9D:52:9E:C8:10:7E:BD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0DD6F76C4CF91DAF2CA4A6A3363419A1AB06D129 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa Signing time: Tue 21 Oct 2025 00:00:08 +0000 ROA not before: Tue 21 Oct 2025 00:00:08 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d6:f7:6c:4c:f9:1d:af:2c:a4:a6:a3:36:34:19:a1:ab:06:d1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 21 00:00:08 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=496ae85df533ea72fced08d6c1065faf283f4e0c3d024b57457ed5d6d0f83c74, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:71:e0:22:18:3b:f3:ee:ef:18:cc:f5:55:09: 15:9b:1f:19:b3:9c:28:25:45:30:58:ea:02:21:50: 93:77:50:ef:b6:dc:26:7a:9c:b5:73:c1:a2:80:b9: f2:2b:16:00:76:da:69:09:5d:a0:de:9d:c1:c5:f4: c1:0c:ce:87:a1:ae:3d:8d:0a:44:69:4a:6d:48:b2: 21:bf:6a:b7:53:e1:3c:01:73:a6:c3:28:92:3d:13: 5c:5c:58:d8:72:f0:43:c6:31:38:01:c8:b0:82:0c: 78:4d:8d:be:a6:30:30:5a:8a:3c:15:18:8f:3f:8f: 0d:59:06:e8:13:37:9e:55:19:d9:df:68:63:75:a4: 52:af:e0:2f:d0:9f:fc:85:db:35:5a:f0:8f:a2:0b: 1d:af:0b:e3:dc:ae:73:c9:a3:80:3d:8a:bd:dd:e2: 93:d2:81:5e:ec:6a:9e:9e:1a:27:c5:39:d8:b5:37: 0b:f9:eb:bd:42:99:3a:39:56:31:80:c9:7f:77:27: 5d:77:f9:d5:3e:98:69:f1:1a:d5:70:fc:7a:45:03: 10:3f:21:31:07:b5:3e:91:f2:68:82:43:02:30:0c: fa:fb:72:77:58:fe:9e:d3:63:7d:a3:11:27:1a:4a: 69:5f:27:d5:9b:e0:61:61:70:1d:32:cd:fa:7c:6b: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:20:FB:97:97:73:6C:24:FD:66:21:B0:15:9D:52:9E:C8:10:7E:BD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:8000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:d9:69:85:37:ca:1c:41:cb:c9:6a:0b:37:cc:60:f2:3b:9e: 88:06:57:3e:0f:b9:02:2c:04:5a:01:b1:31:95:06:05:d4:d9: a6:a4:26:3b:08:ac:eb:3c:8d:31:af:29:34:12:56:0a:0f:fc: c0:9c:e7:fe:ac:44:02:36:ae:43:0c:4e:85:d8:2a:d7:3f:2f: b9:9f:cd:a9:27:11:e3:fd:40:fa:a5:2e:f2:22:95:6d:fc:e2: 5e:d5:87:bb:f7:e6:49:b2:8a:ef:08:e7:71:4b:f4:57:fc:f4: 30:04:52:0d:35:eb:53:07:0c:a0:ba:f3:a1:62:31:38:04:7e: f5:42:5f:28:c5:97:cd:e8:ed:f1:22:ec:1b:54:ee:3b:b8:70: c2:78:d4:ef:fb:91:0a:c3:af:e3:64:2c:71:38:ce:8d:0f:b2: 81:ed:60:bf:d9:00:4f:ef:e8:20:c3:e5:d0:04:b9:1e:35:75: a2:a3:7a:85:9c:86:b7:16:85:b5:fc:78:53:bc:b3:0f:20:8d: 49:35:27:e6:ce:17:3f:bb:e8:ca:1a:5b:2c:0a:fd:a4:0b:db: c8:05:66:2b:b4:98:59:e0:f2:cf:1d:ba:ea:4c:89:dc:c9:90: e5:cc:e5:66:5f:73:b2:1f:05:54:db:c5:74:77:63:22:27:97: 75:ab:12:45 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDdb3bEz5Ha8spKajNjQZoasG0SkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyMTAwMDAwOFoX DTI1MTEyNTIzNTk1OVowejFJMEcGA1UEBRNANDk2YWU4NWRmNTMzZWE3MmZjZWQw OGQ2YzEwNjVmYWYyODNmNGUwYzNkMDI0YjU3NDU3ZWQ1ZDZkMGY4M2M3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63HgIhg78+7vGMz1VQkVmx8Zs5wo JUUwWOoCIVCTd1Dvttwmepy1c8GigLnyKxYAdtppCV2g3p3BxfTBDM6Hoa49jQpE aUptSLIhv2q3U+E8AXOmwyiSPRNcXFjYcvBDxjE4Aciwggx4TY2+pjAwWoo8FRiP P48NWQboEzeeVRnZ32hjdaRSr+Av0J/8hds1WvCPogsdrwvj3K5zyaOAPYq93eKT 0oFe7GqenhonxTnYtTcL+eu9Qpk6OVYxgMl/dyddd/nVPphp8RrVcPx6RQMQPyEx B7U+kfJogkMCMAz6+3J3WP6e02N9oxEnGkppXyfVm+BhYXAdMs36fGsSbQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM4g+5eXc2wk/WYhsBWdUp7IEH69MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VhYzNlYWY5LWQ4MzctNGY3Zi1iZGIyLTBkMmQzMTU4M2ZkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba74AwDQYJKoZIhvcNAQELBQADggEBAFzZaYU3yhxBy8lqCzfM YPI7nogGVz4PuQIsBFoBsTGVBgXU2aakJjsIrOs8jTGvKTQSVgoP/MCc5/6sRAI2 rkMMToXYKtc/L7mfzaknEeP9QPqlLvIilW384l7Vh7v35kmyiu8I53FL9Ff89DAE Ug0161MHDKC686FiMTgEfvVCXyjFl83o7fEi7BtU7ju4cMJ41O/7kQrDr+NkLHE4 zo0PsoHtYL/ZAE/v6CDD5dAEuR41daKjeoWchrcWhbX8eFO8sw8gjUk1J+bOFz+7 6MoaWywK/aQL28gFZiu0mFng8s8duupMidzJkOXM5WZfc7IfBVTbxXR3YyInl3Wr EkU= -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:22 2025 by rpki-client