$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b86e4fe-b34b-45ab-8ce2-590368c9acfc.roa File: 6b86e4fe-b34b-45ab-8ce2-590368c9acfc.roa (raw, json) Hash identifier: 5Z4blDaSyAHoF/cXses6lsCIm+EffKnH03Tkckwgwy8= Subject key identifier: 52:83:5B:28:70:E3:D6:AB:22:F0:EE:7A:57:D4:1D:81:68:26:F2:68 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 011AD413D3540325ECAA203524024593A65D7F67 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b86e4fe-b34b-45ab-8ce2-590368c9acfc.roa Signing time: Fri 07 Nov 2025 00:20:37 +0000 ROA not before: Fri 07 Nov 2025 00:20:37 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1a:d4:13:d3:54:03:25:ec:aa:20:35:24:02:45:93:a6:5d:7f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:20:37 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=51d2fa5adc9bb200ba379e830a87441118a35151868b8bf4676fabbdf7118b79, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:01:93:48:fe:27:40:85:e8:eb:ad:1c:d8: 5f:09:80:00:88:f5:64:2f:19:be:38:80:0e:18:30: be:2c:c0:eb:ec:e2:b3:66:ee:1a:e5:2b:fa:e3:d3: 9d:eb:1c:df:bd:85:36:3f:aa:d3:e9:7f:11:16:6e: 62:2c:d9:2e:0e:98:00:42:e2:04:a9:d5:7a:eb:d0: 1f:8d:77:63:06:6d:23:d1:39:77:e5:ff:9e:51:d1: a9:33:9b:88:8e:4e:87:52:e6:f3:e9:d4:f0:ff:38: 81:c6:8a:4b:06:0b:11:a9:83:33:a3:e4:b3:68:ea: ef:f8:60:61:7e:9d:36:e5:9a:0b:52:39:0b:58:73: 86:09:f7:76:64:ab:f9:78:56:3c:7c:b2:76:8c:c0: f3:ae:5e:3d:a6:7d:fd:8d:9d:34:66:f1:a4:be:24: d2:68:7a:97:d5:cf:44:b6:c5:35:69:10:19:8f:d2: d4:29:ef:f8:73:bd:ff:40:e3:f1:2a:f9:8c:d0:9a: 7f:23:7a:1c:3a:2d:ce:6f:24:01:0d:56:1d:60:a9: a1:01:71:2c:a8:dc:0c:c8:41:20:52:b7:2a:c7:97: 28:1f:66:19:14:37:3c:74:4b:05:d9:f3:66:0a:85: 61:4c:ab:62:06:13:74:e1:14:34:8e:4a:9d:02:5a: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:83:5B:28:70:E3:D6:AB:22:F0:EE:7A:57:D4:1D:81:68:26:F2:68 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b86e4fe-b34b-45ab-8ce2-590368c9acfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:f000::/40 Signature Algorithm: sha256WithRSAEncryption b0:70:71:c3:72:69:2c:f8:b4:0b:4a:5d:77:95:cf:f5:5d:30: 56:40:2f:64:2f:38:d9:4b:77:f4:20:89:d2:07:e7:66:74:47: a3:51:13:53:53:2c:94:f0:c4:fb:c8:91:8e:32:dd:0b:ff:2e: c6:41:e7:8e:f9:98:bf:d1:f4:cc:e0:7f:2f:85:4d:ee:bb:a4: 5d:dc:d6:04:60:93:70:96:90:85:9e:75:fc:b2:58:48:cd:2f: 2e:c6:6e:e8:81:88:0a:3d:79:10:25:a6:75:1c:6b:40:97:36: c6:0b:d0:4c:12:00:71:f8:5d:c7:90:5b:4b:ea:17:0e:fb:c5: dc:49:0d:2e:c5:6f:00:1a:b7:8b:23:c4:7c:a5:19:6c:b5:9a: 25:d3:80:7d:2a:f3:77:87:86:e6:fb:ec:67:10:7f:fc:c5:48: 2d:89:ee:2e:6b:82:6a:9f:45:98:9c:ae:95:d7:24:0f:eb:cd: 6b:39:42:38:0f:08:a2:f1:e9:95:a1:f0:5c:80:1e:a7:ea:4d: e0:15:cf:30:7a:54:0f:6d:1c:6e:f4:90:fa:64:91:77:f8:18: b2:f2:53:78:cb:ea:33:d4:7f:c3:01:1c:e2:91:de:f8:73:f2: 7b:06:08:29:29:2f:45:21:92:2b:91:1d:32:ca:8d:df:cd:d3: bd:9b:6b:f9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUARrUE9NUAyXsqiA1JAJFk6Zdf2cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMjAzN1oX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNANTFkMmZhNWFkYzliYjIwMGJhMzc5 ZTgzMGE4NzQ0MTExOGEzNTE1MTg2OGI4YmY0Njc2ZmFiYmRmNzExOGI3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JEBk0j+J0CF6OutHNhfCYAAiPVk Lxm+OIAOGDC+LMDr7OKzZu4a5Sv649Od6xzfvYU2P6rT6X8RFm5iLNkuDpgAQuIE qdV669AfjXdjBm0j0Tl35f+eUdGpM5uIjk6HUubz6dTw/ziBxopLBgsRqYMzo+Sz aOrv+GBhfp025ZoLUjkLWHOGCfd2ZKv5eFY8fLJ2jMDzrl49pn39jZ00ZvGkviTS aHqX1c9EtsU1aRAZj9LUKe/4c73/QOPxKvmM0Jp/I3ocOi3ObyQBDVYdYKmhAXEs qNwMyEEgUrcqx5coH2YZFDc8dEsF2fNmCoVhTKtiBhN04RQ0jkqdAlp74wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFKDWyhw49arIvDuelfUHYFoJvJoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZiODZlNGZlLWIzNGItNDVhYi04Y2UyLTU5MDM2OGM5YWNmYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba//AwDQYJKoZIhvcNAQELBQADggEBALBwccNyaSz4tAtKXXeV z/VdMFZAL2QvONlLd/QgidIH52Z0R6NRE1NTLJTwxPvIkY4y3Qv/LsZB5475mL/R 9Mzgfy+FTe67pF3c1gRgk3CWkIWedfyyWEjNLy7GbuiBiAo9eRAlpnUca0CXNsYL 0EwSAHH4XceQW0vqFw77xdxJDS7FbwAat4sjxHylGWy1miXTgH0q83eHhub77GcQ f/zFSC2J7i5rgmqfRZicrpXXJA/rzWs5QjgPCKLx6ZWh8FyAHqfqTeAVzzB6VA9t HG70kPpkkXf4GLLyU3jL6jPUf8MBHOKR3vhz8nsGCCkpL0UhkiuRHTLKjd/N072b a/k= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:47 2025 by rpki-client