$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1bb658d-621e-4348-96fa-5f81f0d9578b.roa File: c1bb658d-621e-4348-96fa-5f81f0d9578b.roa (raw, json) Hash identifier: RYfNkdAav55tqxGfMkZjXqztD38ycK51YpGp7rgPtTU= Subject key identifier: 8E:98:5D:09:FD:04:73:22:F4:EE:A5:2F:5A:47:93:E6:6D:8A:20:DF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0EAB43D1DE900D45D5939B6D522E435ABB45B34B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1bb658d-621e-4348-96fa-5f81f0d9578b.roa Signing time: Fri 07 Nov 2025 00:01:03 +0000 ROA not before: Fri 07 Nov 2025 00:01:03 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ab:43:d1:de:90:0d:45:d5:93:9b:6d:52:2e:43:5a:bb:45:b3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:01:03 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=2db61c3765cfeb9cc1b788bcbec97b1befc8df0f0ec3eca85028d46082e76fa8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:02:36:fc:bb:13:03:71:31:5f:8e:67:b2:db: 13:b5:eb:a6:6a:0c:f6:39:fc:8d:72:48:66:73:3c: 47:35:3f:99:fc:c6:ce:06:7d:f9:44:34:0a:66:26: 2a:2c:af:93:48:1b:94:69:dc:69:99:4c:cd:06:b2: d9:29:6c:97:3a:a9:a8:54:a8:ad:c1:11:7c:67:2d: 1e:43:86:8c:94:5c:5a:7d:1a:e9:55:e8:28:4f:af: 07:73:d7:f5:03:d2:16:0a:41:a1:2c:43:4d:20:66: 3b:43:a3:4c:4e:0f:e9:8b:fe:71:c0:03:6d:1e:20: fd:0c:65:dc:7c:7a:f4:fe:ca:56:99:e6:dd:46:9e: db:a1:6a:40:1a:4d:99:1d:49:47:6b:68:7e:3a:64: f8:e0:28:b0:5d:39:5a:95:74:09:42:ba:50:c4:67: aa:b0:58:63:22:62:77:b1:de:93:07:e7:b9:b0:80: e1:f7:42:0e:a8:85:f7:47:bf:e8:75:16:3b:d4:33: a9:9c:97:86:d4:0e:b5:58:81:84:7f:27:e9:58:bb: 13:db:eb:9a:da:98:96:54:f4:fd:84:69:28:51:80: 1c:ea:23:b1:00:4d:a2:57:01:9e:e3:64:49:f1:23: 79:18:5c:31:9f:70:53:fa:1c:d4:ca:10:cb:b4:07: bc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:98:5D:09:FD:04:73:22:F4:EE:A5:2F:5A:47:93:E6:6D:8A:20:DF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1bb658d-621e-4348-96fa-5f81f0d9578b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 4d:c8:4d:a6:a6:0d:65:c6:ca:c6:09:d9:08:e0:02:1c:66:c5: 3b:fa:6c:f7:3a:91:4d:a0:56:7a:07:c9:6b:a3:2c:61:64:64: 8d:9e:af:f5:64:41:53:2a:bc:d1:8b:72:05:e2:92:72:35:8c: a2:03:29:aa:64:4f:de:55:5e:26:d4:06:a5:28:0a:19:96:4e: 8f:ef:77:1b:94:c4:dc:cd:75:c2:9f:f3:29:19:70:9a:2d:32: b6:eb:d0:3d:e2:0a:94:71:28:ed:be:cb:82:d0:c4:f5:b1:2c: bf:e7:78:99:d5:81:f8:81:a5:4b:94:18:90:f6:05:1d:e5:4f: 17:8c:e4:01:3c:a4:16:2b:1e:ef:f7:10:93:76:2d:09:a3:a1: e4:8d:1e:5c:99:bb:64:90:f6:70:52:69:8d:29:67:04:7b:12: 32:3c:38:3f:a8:a8:39:73:ce:6f:39:d6:eb:0f:9c:76:64:09: 89:d4:dc:d0:08:1d:c9:6c:f9:b7:8b:11:81:f7:8a:0f:31:ae: f6:99:7e:e9:da:b3:fd:61:d0:3a:79:e4:eb:dc:9c:9d:76:08: 8e:80:9d:db:9b:f0:ce:b0:81:36:d0:11:88:51:3e:d1:e6:9f: 1d:6e:77:11:68:1a:57:b0:0e:5a:66:52:75:a1:22:c4:61:62: 66:2d:4b:f5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDqtD0d6QDUXVk5ttUi5DWrtFs0swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMDEwM1oX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAMmRiNjFjMzc2NWNmZWI5Y2MxYjc4 OGJjYmVjOTdiMWJlZmM4ZGYwZjBlYzNlY2E4NTAyOGQ0NjA4MmU3NmZhODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwI2/LsTA3ExX45nstsTteumagz2 OfyNckhmczxHNT+Z/MbOBn35RDQKZiYqLK+TSBuUadxpmUzNBrLZKWyXOqmoVKit wRF8Zy0eQ4aMlFxafRrpVegoT68Hc9f1A9IWCkGhLENNIGY7Q6NMTg/pi/5xwANt HiD9DGXcfHr0/spWmebdRp7boWpAGk2ZHUlHa2h+OmT44CiwXTlalXQJQrpQxGeq sFhjImJ3sd6TB+e5sIDh90IOqIX3R7/odRY71DOpnJeG1A61WIGEfyfpWLsT2+ua 2piWVPT9hGkoUYAc6iOxAE2iVwGe42RJ8SN5GFwxn3BT+hzUyhDLtAe8YQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI6YXQn9BHMi9O6lL1pHk+ZtiiDfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MxYmI2NThkLTYyMWUtNDM0OC05NmZhLTVmODFmMGQ5NTc4Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8kjAMA0GCSqGSIb3DQEBCwUAA4IBAQBNyE2mpg1lxsrGCdkI 4AIcZsU7+mz3OpFNoFZ6B8lroyxhZGSNnq/1ZEFTKrzRi3IF4pJyNYyiAymqZE/e VV4m1AalKAoZlk6P73cblMTczXXCn/MpGXCaLTK269A94gqUcSjtvsuC0MT1sSy/ 53iZ1YH4gaVLlBiQ9gUd5U8XjOQBPKQWKx7v9xCTdi0Jo6HkjR5cmbtkkPZwUmmN KWcEexIyPDg/qKg5c85vOdbrD5x2ZAmJ1NzQCB3JbPm3ixGB94oPMa72mX7p2rP9 YdA6eeTr3JyddgiOgJ3bm/DOsIE20BGIUT7R5p8dbncRaBpXsA5aZlJ1oSLEYWJm LUv1 -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:58 2025 by rpki-client