$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce872d5d-3e27-4b93-a991-60685bf7305f.roa File: ce872d5d-3e27-4b93-a991-60685bf7305f.roa (raw, json) Hash identifier: cPQwfEq2Drq+sMWuZb3Fx5a+JZDZUNd3FyhoHXaKDdU= Subject key identifier: 8E:BF:31:A7:D9:FB:DC:2E:58:84:ED:36:5E:08:59:C9:FC:09:55:97 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 595F4FE0F3A1344009808BBDF4402C421F4895F5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce872d5d-3e27-4b93-a991-60685bf7305f.roa Signing time: Wed 29 Oct 2025 07:40:16 +0000 ROA not before: Wed 29 Oct 2025 07:40:16 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5f:4f:e0:f3:a1:34:40:09:80:8b:bd:f4:40:2c:42:1f:48:95:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 07:40:16 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=062c25c33a8893a4e15b26f4d12ebebe04c99166f252c0cc108f410e6d158e77, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:d9:fd:03:ce:75:43:54:3a:fa:1c:63:89: 73:9c:0b:dd:46:70:de:30:47:0f:35:eb:58:fd:fe: 28:7d:21:f0:51:04:a5:60:7d:62:ec:1a:1c:6e:0e: 8c:70:56:ae:91:09:01:7f:f6:e8:df:97:7d:8c:44: 22:54:94:d1:82:90:77:5f:4a:de:72:1f:13:a9:75: ba:79:27:d2:f3:06:eb:7d:86:11:33:56:e2:2c:12: 56:ce:bc:1c:13:8d:c2:4a:1e:b8:23:8e:a7:e6:80: fb:8c:e3:d1:e3:39:97:9f:87:f3:7d:b0:7f:bd:9d: c1:4c:54:10:c1:21:19:2a:26:98:88:a7:28:29:48: 40:04:fe:06:68:08:b1:b5:18:34:da:f2:31:55:54: 39:a6:f9:f9:5b:8d:05:df:53:b4:22:7c:a7:89:82: c2:6d:f7:61:77:4b:fd:ab:bc:c8:55:8a:8f:1f:17: 89:3e:1b:dd:0d:2b:8c:f8:51:3e:6d:37:cc:15:1d: dd:6f:f7:c3:78:73:5c:5b:46:4f:1c:80:85:10:10: fe:7a:9d:7a:06:2d:a1:2c:41:12:84:27:3b:17:6d: 69:e0:03:04:10:3b:fc:46:c3:3a:1a:15:2c:40:3a: 27:4a:a2:82:ba:86:99:bf:6a:ba:cb:98:3c:e3:17: 9d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BF:31:A7:D9:FB:DC:2E:58:84:ED:36:5E:08:59:C9:FC:09:55:97 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce872d5d-3e27-4b93-a991-60685bf7305f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:e000::/40 Signature Algorithm: sha256WithRSAEncryption 22:1b:78:c1:0f:dd:68:72:6a:9b:87:20:ab:0e:f2:bf:8c:2c: ee:3d:2a:f4:76:71:a0:84:76:64:d3:c4:d8:19:bd:13:d1:a4: a5:f3:07:18:c0:7b:d0:36:88:e1:13:a9:6f:b6:c8:25:d9:1b: fe:b3:c3:0a:82:c3:62:ad:10:a9:e3:82:b5:ce:67:be:1d:4c: aa:10:56:ee:9d:e2:6e:e8:01:36:1a:65:3e:b7:5b:53:8e:9a: 14:84:13:d8:11:6d:ca:41:3d:44:af:ee:f3:79:70:d7:f3:fe: b6:3e:35:99:3c:ef:c1:b1:eb:c1:28:5a:c9:9f:f7:d0:94:6a: 56:37:53:6c:e2:48:5e:47:f8:30:df:ca:35:13:6f:46:ee:63: d2:09:da:f9:2d:75:a6:9f:27:be:80:83:a3:a2:5d:48:a9:79: f0:4f:43:af:e6:94:8a:e9:97:79:0c:a2:68:36:59:4c:d2:27: 32:03:08:ba:66:86:99:af:38:2f:66:a6:8d:af:f2:9f:00:82: 96:ea:ff:b8:5c:12:fe:a1:99:bc:08:5d:00:9b:06:97:f4:3d: 77:55:aa:03:dd:37:ac:35:10:92:17:65:5e:09:59:60:66:2b: 3d:67:2e:7f:56:e2:be:24:1c:4b:d4:ca:c4:40:e2:f2:a1:c8: 7f:39:69:38 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWV9P4POhNEAJgIu99EAsQh9IlfUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTA3NDAxNloX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAMDYyYzI1YzMzYTg4OTNhNGUxNWIy NmY0ZDEyZWJlYmUwNGM5OTE2NmYyNTJjMGNjMTA4ZjQxMGU2ZDE1OGU3NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CvZ/QPOdUNUOvocY4lznAvdRnDe MEcPNetY/f4ofSHwUQSlYH1i7Bocbg6McFaukQkBf/bo35d9jEQiVJTRgpB3X0re ch8TqXW6eSfS8wbrfYYRM1biLBJWzrwcE43CSh64I46n5oD7jOPR4zmXn4fzfbB/ vZ3BTFQQwSEZKiaYiKcoKUhABP4GaAixtRg02vIxVVQ5pvn5W40F31O0InyniYLC bfdhd0v9q7zIVYqPHxeJPhvdDSuM+FE+bTfMFR3db/fDeHNcW0ZPHICFEBD+ep16 Bi2hLEEShCc7F21p4AMEEDv8RsM6GhUsQDonSqKCuoaZv2q6y5g84xedUwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI6/MafZ+9wuWITtNl4IWcn8CVWXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NlODcyZDVkLTNlMjctNGI5My1hOTkxLTYwNjg1YmY3MzA1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6uAwDQYJKoZIhvcNAQELBQADggEBACIbeMEP3WhyapuHIKsO 8r+MLO49KvR2caCEdmTTxNgZvRPRpKXzBxjAe9A2iOETqW+2yCXZG/6zwwqCw2Kt EKnjgrXOZ74dTKoQVu6d4m7oATYaZT63W1OOmhSEE9gRbcpBPUSv7vN5cNfz/rY+ NZk878Gx68EoWsmf99CUalY3U2ziSF5H+DDfyjUTb0buY9IJ2vktdaafJ76Ag6Oi XUipefBPQ6/mlIrpl3kMomg2WUzSJzIDCLpmhpmvOC9mpo2v8p8Agpbq/7hcEv6h mbwIXQCbBpf0PXdVqgPdN6w1EJIXZV4JWWBmKz1nLn9W4r4kHEvUysRA4vKhyH85 aTg= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:28 2025 by rpki-client