$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa File: b235d168-8a46-461c-98e6-45ec802567db.roa (raw, json) Hash identifier: 7AWY/seiO4NxEms4exvQuFpxwRQGH/XdZQU5FfRKV0o= Subject key identifier: FB:D9:CB:29:EB:93:69:D3:D8:D1:56:16:B1:C6:1F:AF:D1:A9:7E:55 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4CBA5598E4A8E1281D1EDBDACEE948480CA9C2C0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa Signing time: Sun 09 Nov 2025 01:01:07 +0000 ROA not before: Sun 09 Nov 2025 01:01:07 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ba:55:98:e4:a8:e1:28:1d:1e:db:da:ce:e9:48:48:0c:a9:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 01:01:07 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=59002fe16e30920b063ffd74d563dd00ebde33fcfe32b9ed0b96275a7009daa1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:60:62:c2:6d:60:33:b9:a7:67:6f:60:1e: 2b:4e:96:06:02:65:08:96:fd:7f:d0:d4:b4:58:22: 3a:af:f5:89:b3:a7:24:43:cb:1b:9e:f5:da:11:f1: 8c:d4:be:bc:20:3a:38:39:8d:6d:89:ff:7d:6f:83: 58:f2:a6:a8:f7:6c:39:95:74:95:32:65:a3:65:7c: 08:0b:4e:17:f0:2f:41:75:6e:53:f2:67:1b:d4:27: 4f:07:a9:1e:21:b6:9e:d1:e2:fa:cd:ce:c4:59:87: 91:86:3e:72:c2:25:1d:28:0d:32:2b:89:e5:6a:bf: b2:7e:94:e4:04:2a:9b:75:4b:be:9d:66:54:da:56: fb:d8:c1:da:89:0c:70:24:4e:2d:bc:51:9f:c7:3e: 80:71:2f:12:0f:32:a2:15:26:d5:d9:9d:12:01:50: 21:10:52:ea:d7:9a:72:76:ab:da:a9:df:88:08:55: e1:9e:d6:fb:8e:fe:cc:03:93:b8:f9:de:9e:f0:5d: e0:f7:80:f7:86:32:e0:27:d6:0b:17:4d:b5:8e:4a: e6:6c:50:e2:96:62:02:10:d1:6d:3b:fb:d4:5e:86: 7f:0e:3f:4f:46:d6:52:64:1e:75:56:11:17:14:2c: 17:76:a8:c4:cd:67:b1:1a:d0:f8:f4:ce:a9:ce:46: 0f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D9:CB:29:EB:93:69:D3:D8:D1:56:16:B1:C6:1F:AF:D1:A9:7E:55 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:9000::/40 Signature Algorithm: sha256WithRSAEncryption 7e:7b:31:64:e9:0f:18:08:48:56:81:a5:88:ae:e5:6e:35:e5: 8e:95:70:d6:f2:8d:2f:c1:68:f0:0e:7a:49:88:b5:55:6d:93: d8:9d:e3:02:29:33:53:08:0a:8c:d9:8a:42:be:e7:e9:30:67: ae:7e:41:cb:73:07:81:99:07:37:88:58:98:94:a6:5c:87:f1: 99:2b:f0:46:4a:e1:fe:6f:b5:ce:83:f5:28:28:37:2e:38:7d: e5:b8:6e:68:9c:3d:d7:c0:88:1d:c9:bf:95:c4:8d:7e:3f:fb: 74:f1:1b:f5:01:5b:09:b3:b8:3d:8f:cd:75:2c:08:0c:55:0a: 5c:8c:54:aa:27:7b:6a:4e:3a:c5:61:9a:10:45:15:55:e7:5e: b5:02:90:22:bf:17:e0:34:a8:5c:f5:8e:8e:61:84:74:a0:a3: 4a:c6:79:a5:5b:58:4d:64:a6:a9:4c:55:34:7d:f6:e0:11:dc: fb:05:d7:dd:89:fc:c8:93:00:eb:a7:b2:b1:ac:d3:60:3a:5f: f9:90:e4:6d:26:01:48:79:a0:d8:b3:aa:58:6b:5a:5a:ef:81: e7:0f:78:a5:67:c9:ce:9d:e9:0a:6d:21:d8:42:db:7b:b6:c8: 5b:28:ac:f4:c5:70:7a:24:dc:63:e8:dc:65:dd:e9:f7:33:8e: bc:94:96:56 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTLpVmOSo4SgdHtvazulISAypwsAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAxMDEwN1oX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNANTkwMDJmZTE2ZTMwOTIwYjA2M2Zm ZDc0ZDU2M2RkMDBlYmRlMzNmY2ZlMzJiOWVkMGI5NjI3NWE3MDA5ZGFhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMtgYsJtYDO5p2dvYB4rTpYGAmUI lv1/0NS0WCI6r/WJs6ckQ8sbnvXaEfGM1L68IDo4OY1tif99b4NY8qao92w5lXSV MmWjZXwIC04X8C9BdW5T8mcb1CdPB6keIbae0eL6zc7EWYeRhj5ywiUdKA0yK4nl ar+yfpTkBCqbdUu+nWZU2lb72MHaiQxwJE4tvFGfxz6AcS8SDzKiFSbV2Z0SAVAh EFLq15pydqvaqd+ICFXhntb7jv7MA5O4+d6e8F3g94D3hjLgJ9YLF021jkrmbFDi lmICENFtO/vUXoZ/Dj9PRtZSZB51VhEXFCwXdqjEzWexGtD49M6pzkYP4wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPvZyynrk2nT2NFWFrHGH6/RqX5VMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IyMzVkMTY4LThhNDYtNDYxYy05OGU2LTQ1ZWM4MDI1NjdkYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8ZAwDQYJKoZIhvcNAQELBQADggEBAH57MWTpDxgISFaBpYiu 5W415Y6VcNbyjS/BaPAOekmItVVtk9id4wIpM1MICozZikK+5+kwZ65+QctzB4GZ BzeIWJiUplyH8Zkr8EZK4f5vtc6D9SgoNy44feW4bmicPdfAiB3Jv5XEjX4/+3Tx G/UBWwmzuD2PzXUsCAxVClyMVKone2pOOsVhmhBFFVXnXrUCkCK/F+A0qFz1jo5h hHSgo0rGeaVbWE1kpqlMVTR99uAR3PsF192J/MiTAOunsrGs02A6X/mQ5G0mAUh5 oNizqlhrWlrvgecPeKVnyc6d6QptIdhC23u2yFsorPTFcHok3GPo3GXd6fczjryU llY= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:14 2025 by rpki-client