$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e9beec2-4dab-4f31-b0cb-ad6a3a5761b2.roa File: 4e9beec2-4dab-4f31-b0cb-ad6a3a5761b2.roa (raw, json) Hash identifier: jCDqZizNiKGMswrm7Hu44Od9D5j380b4orDePHX8e7c= Subject key identifier: 23:24:40:A4:5C:E8:18:A7:78:0E:F1:93:83:EB:D3:74:69:D8:DB:27 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14847B348FC59A768D4AC70EB698D070EFAA07B3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e9beec2-4dab-4f31-b0cb-ad6a3a5761b2.roa Signing time: Tue 11 Nov 2025 00:10:08 +0000 ROA not before: Tue 11 Nov 2025 00:10:08 +0000 ROA not after: Tue 16 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:84:7b:34:8f:c5:9a:76:8d:4a:c7:0e:b6:98:d0:70:ef:aa:07:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 11 00:10:08 2025 GMT Not After : Dec 16 23:59:59 2025 GMT Subject: serialNumber=d7c30bf93be18b1d33237a070bfe6e4d03275aa316b4a76301d05c53cddea807, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:2e:b0:7b:07:2c:65:7e:05:d2:49:20:8c: 7b:5a:e4:7c:42:09:2c:78:32:b1:5c:16:df:13:4b: af:b6:2b:96:bd:2a:c0:7e:33:48:07:a6:da:00:87: f1:92:71:18:48:e0:04:18:b3:ce:6c:3f:24:c2:01: e3:e2:b3:03:6f:1b:d3:3d:b6:7f:8c:50:d6:9a:11: 91:74:f4:f8:32:56:96:56:7d:6c:78:c8:69:6a:22: c2:63:1d:71:36:f1:03:3e:97:83:2e:4f:c9:ed:9f: 45:b3:f8:6f:a5:a0:71:17:d2:92:d2:ab:bc:69:8b: 5a:26:62:72:f0:1d:f4:e4:d9:83:aa:9e:87:a3:21: ec:5b:e8:72:9c:af:0e:bb:49:64:88:58:e7:f7:8a: 7b:b1:22:4a:49:bb:10:59:fe:9a:5b:21:30:0c:70: da:5d:c1:d9:8c:08:2c:c4:36:b9:31:bf:37:b0:72: 72:d2:62:e5:a1:10:2b:2d:ff:b4:df:ff:f5:a4:82: c5:7d:74:43:ff:c2:25:93:94:fa:f5:82:a7:61:b7: 57:a6:72:bf:07:54:00:01:bf:7d:00:04:8d:3b:b3: 1a:39:6a:21:f0:02:9c:76:7a:8f:fe:30:4d:aa:72: 39:ce:29:6a:6e:25:a0:8d:0b:e7:1e:b4:23:f4:e2: 3b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:24:40:A4:5C:E8:18:A7:78:0E:F1:93:83:EB:D3:74:69:D8:DB:27 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e9beec2-4dab-4f31-b0cb-ad6a3a5761b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:c000::/40 Signature Algorithm: sha256WithRSAEncryption 66:2c:77:50:76:7b:7f:ba:29:84:b9:8c:3f:eb:c4:70:6f:e7: e9:81:4e:f2:ef:04:7e:6a:4f:31:f4:8f:c6:63:3e:39:a7:24: 16:e6:92:db:2a:98:27:5c:6c:18:aa:6d:59:b5:64:fc:f6:79: 86:f5:bc:18:19:01:bb:23:26:38:29:a1:e4:f5:49:35:32:b7: b0:04:81:b2:64:92:cd:d4:b6:59:4b:7d:17:80:02:f9:97:39: b1:6d:b7:0c:1f:de:b1:6b:62:85:ef:3b:c9:0e:79:39:a0:68: 6a:43:4e:a7:74:26:c8:bf:5e:d9:0f:d4:37:74:a5:17:66:02: 9f:21:24:83:51:fa:64:1b:73:11:fb:a8:15:ad:50:8f:74:1b: 1f:c6:8d:be:a1:1b:84:22:1d:f8:25:3d:0a:fa:8e:e5:7b:65: 35:3b:20:20:73:e5:29:1e:51:6c:de:6f:f7:32:4c:29:fd:c5: 96:31:18:08:49:64:84:a6:9b:a6:43:b7:19:bd:ce:91:a2:cd: 9c:41:6e:54:23:53:a0:d9:41:87:6b:d1:a8:fd:1c:50:91:ac: 31:7e:37:d2:5e:79:a0:1c:90:2e:84:e6:a1:cb:a2:d2:e1:21: 76:28:c4:ea:bb:ef:1d:9b:39:3c:d1:8c:f6:a8:dc:67:89:c6: 48:09:eb:27 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFIR7NI/FmnaNSscOtpjQcO+qB7MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExMTAwMTAwOFoX DTI1MTIxNjIzNTk1OVowejFJMEcGA1UEBRNAZDdjMzBiZjkzYmUxOGIxZDMzMjM3 YTA3MGJmZTZlNGQwMzI3NWFhMzE2YjRhNzYzMDFkMDVjNTNjZGRlYTgwNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo8usHsHLGV+BdJJIIx7WuR8Qgks eDKxXBbfE0uvtiuWvSrAfjNIB6baAIfxknEYSOAEGLPObD8kwgHj4rMDbxvTPbZ/ jFDWmhGRdPT4MlaWVn1seMhpaiLCYx1xNvEDPpeDLk/J7Z9Fs/hvpaBxF9KS0qu8 aYtaJmJy8B305NmDqp6HoyHsW+hynK8Ou0lkiFjn94p7sSJKSbsQWf6aWyEwDHDa XcHZjAgsxDa5Mb83sHJy0mLloRArLf+03//1pILFfXRD/8Ilk5T69YKnYbdXpnK/ B1QAAb99AASNO7MaOWoh8AKcdnqP/jBNqnI5zilqbiWgjQvnHrQj9OI7qwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCMkQKRc6BineA7xk4Pr03Rp2NsnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRlOWJlZWMyLTRkYWItNGYzMS1iMGNiLWFkNmEzYTU3NjFiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+sAwDQYJKoZIhvcNAQELBQADggEBAGYsd1B2e3+6KYS5jD/r xHBv5+mBTvLvBH5qTzH0j8ZjPjmnJBbmktsqmCdcbBiqbVm1ZPz2eYb1vBgZAbsj JjgpoeT1STUyt7AEgbJkks3UtllLfReAAvmXObFttwwf3rFrYoXvO8kOeTmgaGpD Tqd0Jsi/XtkP1Dd0pRdmAp8hJINR+mQbcxH7qBWtUI90Gx/Gjb6hG4QiHfglPQr6 juV7ZTU7ICBz5SkeUWzeb/cyTCn9xZYxGAhJZISmm6ZDtxm9zpGizZxBblQjU6DZ QYdr0aj9HFCRrDF+N9JeeaAckC6E5qHLotLhIXYoxOq77x2bOTzRjPao3GeJxkgJ 6yc= -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:26 2025 by rpki-client