$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6d6e9e37-2d45-4471-8b16-c8171595635a.roa File: 6d6e9e37-2d45-4471-8b16-c8171595635a.roa (raw, json) Hash identifier: hEywYuRhpZX2ZuCPnGUUXDXHiim10SVfy1tK7PHOMZ4= Subject key identifier: 83:AC:8D:7B:4B:FF:4F:2C:75:BD:22:3F:44:02:34:90:B6:A4:C9:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7427255731D5C279F3252B67E97F882BE0DDE8B8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6d6e9e37-2d45-4471-8b16-c8171595635a.roa Signing time: Thu 13 Nov 2025 00:00:11 +0000 ROA not before: Thu 13 Nov 2025 00:00:11 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:27:25:57:31:d5:c2:79:f3:25:2b:67:e9:7f:88:2b:e0:dd:e8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 13 00:00:11 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=522bc437ee4e9a434b74cdaa5758c166ac297656b8523ce7c7a82b2d0cc8be74, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:fc:53:87:a7:84:d3:a1:1a:b9:ad:17:01: 0d:55:dc:21:41:77:ee:bf:27:c4:9d:81:11:a3:12: cf:82:91:71:f7:6c:62:ff:ae:9a:67:52:60:d1:85: 23:d9:87:98:2e:71:99:52:18:98:0a:c4:8a:d7:5f: ae:55:78:68:10:4e:ab:a9:61:6c:18:bb:49:03:ff: 6e:c2:e2:5a:22:82:e7:7e:21:31:76:62:7b:b3:68: e6:3c:4e:5b:21:cc:2a:61:0d:51:47:31:43:85:e1: 0c:01:1e:d4:9a:03:f9:7f:5c:8f:09:8d:ab:19:a0: db:4c:4a:7f:f2:47:95:1c:71:dd:98:ab:bc:82:6c: 52:a8:43:38:35:6a:e9:73:f7:68:6c:e5:da:a1:2b: 82:6b:eb:2a:89:6e:3f:12:a2:40:57:58:1b:e8:b8: 52:6e:76:71:2a:d4:de:65:82:45:c7:18:8b:ae:83: d6:35:cc:50:fc:fd:d0:a1:e1:67:d6:31:ba:91:e3: d9:ee:5c:de:f5:eb:dc:5f:61:56:a0:32:07:6c:18: 54:b2:81:d6:b6:34:65:07:35:4b:ee:0c:65:1d:7f: 15:59:07:08:02:41:57:46:6a:fb:63:e1:f0:0f:3a: 2e:80:6e:5b:9b:47:cd:ed:23:0d:3a:75:e5:d9:67: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AC:8D:7B:4B:FF:4F:2C:75:BD:22:3F:44:02:34:90:B6:A4:C9:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6d6e9e37-2d45-4471-8b16-c8171595635a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:7000::/40 Signature Algorithm: sha256WithRSAEncryption ac:fe:b7:75:82:34:52:c7:ec:83:8b:cf:9c:3d:12:2c:a8:d7: 46:31:da:b7:9e:ff:f2:5d:c4:45:7b:e3:bb:a2:a0:66:46:4d: 26:2d:a6:90:3c:d3:b9:74:f6:d9:1e:13:93:7e:d7:19:42:10: 76:ed:10:80:e5:4a:f2:34:bb:d3:d8:c1:e1:9d:c0:df:d7:e7: 32:15:1e:b2:2e:34:ad:04:60:e5:c2:ad:eb:50:41:3c:98:65: cd:1f:08:ba:bb:4d:6c:18:4f:c6:09:97:82:4c:1c:bb:73:42: 0e:c7:55:71:2d:85:6d:fa:17:d8:bb:2d:a2:17:cb:09:21:e7: 32:14:75:d7:df:57:62:88:ac:f4:30:6c:6e:b6:21:55:76:05: f8:93:20:36:ae:c6:4e:10:ee:01:d8:98:bb:12:0c:fd:07:07: 89:67:6b:0b:d7:1a:b5:0d:e0:2e:79:e5:6c:cc:f4:1c:a0:5e: f5:c5:e1:d7:a7:aa:ed:dc:ca:37:4e:b4:f2:e9:2b:8b:c5:98: b4:2d:fe:e8:04:24:f2:bc:eb:ae:27:3a:f2:97:48:56:52:7c: f6:0b:8d:59:d3:a9:5c:54:b1:0d:bf:fb:76:03:5c:e2:05:f3: 4c:c3:42:73:2b:85:73:48:d4:00:39:30:e5:e3:a1:99:d2:af: c9:ec:64:7c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdCclVzHVwnnzJStn6X+IK+Dd6LgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExMzAwMDAxMVoX DTI1MTIxODIzNTk1OVowejFJMEcGA1UEBRNANTIyYmM0MzdlZTRlOWE0MzRiNzRj ZGFhNTc1OGMxNjZhYzI5NzY1NmI4NTIzY2U3YzdhODJiMmQwY2M4YmU3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPP8U4enhNOhGrmtFwENVdwhQXfu vyfEnYERoxLPgpFx92xi/66aZ1Jg0YUj2YeYLnGZUhiYCsSK11+uVXhoEE6rqWFs GLtJA/9uwuJaIoLnfiExdmJ7s2jmPE5bIcwqYQ1RRzFDheEMAR7UmgP5f1yPCY2r GaDbTEp/8keVHHHdmKu8gmxSqEM4NWrpc/dobOXaoSuCa+sqiW4/EqJAV1gb6LhS bnZxKtTeZYJFxxiLroPWNcxQ/P3QoeFn1jG6kePZ7lze9evcX2FWoDIHbBhUsoHW tjRlBzVL7gxlHX8VWQcIAkFXRmr7Y+HwDzougG5bm0fN7SMNOnXl2WdUnwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIOsjXtL/08sdb0iP0QCNJC2pMnrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZkNmU5ZTM3LTJkNDUtNDQ3MS04YjE2LWM4MTcxNTk1NjM1YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7XAwDQYJKoZIhvcNAQELBQADggEBAKz+t3WCNFLH7IOLz5w9 Eiyo10Yx2ree//JdxEV747uioGZGTSYtppA807l09tkeE5N+1xlCEHbtEIDlSvI0 u9PYweGdwN/X5zIVHrIuNK0EYOXCretQQTyYZc0fCLq7TWwYT8YJl4JMHLtzQg7H VXEthW36F9i7LaIXywkh5zIUddffV2KIrPQwbG62IVV2BfiTIDauxk4Q7gHYmLsS DP0HB4lnawvXGrUN4C555WzM9BygXvXF4denqu3cyjdOtPLpK4vFmLQt/ugEJPK8 664nOvKXSFZSfPYLjVnTqVxUsQ2/+3YDXOIF80zDQnMrhXNI1AA5MOXjoZnSr8ns ZHw= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:39 2025 by rpki-client