$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcb796cd-0001-4f06-a9c5-198757a8dde6.roa File: dcb796cd-0001-4f06-a9c5-198757a8dde6.roa (raw, json) Hash identifier: 0iuTULvlde7pFq5ryV94c4rElROYomZAevPkuyQmcXk= Subject key identifier: 4A:F8:D0:22:11:F8:2D:80:0F:7F:91:B2:9C:9F:17:B7:E7:FF:81:AD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 17B0DF54FABBA14C0DAB41336D9AAF6F3C37B75A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcb796cd-0001-4f06-a9c5-198757a8dde6.roa Signing time: Sun 09 Nov 2025 00:10:47 +0000 ROA not before: Sun 09 Nov 2025 00:10:47 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b0:df:54:fa:bb:a1:4c:0d:ab:41:33:6d:9a:af:6f:3c:37:b7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:10:47 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=f115df99a871b5eacaa559c9b16d2d65ab12a77a6a0bb784bd8e4e9f7256c4e9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:b6:df:e5:1f:2d:5a:44:4d:51:98:69:7a: 7c:59:26:54:83:30:dc:6b:eb:c6:85:4d:bc:56:d5: 3c:d0:c9:72:b4:c3:e1:b8:7d:67:f8:ff:d5:51:56: 4d:65:83:28:ca:c2:ee:bf:fc:39:61:65:5f:13:d3: a7:94:48:c0:a4:c1:56:cf:bb:38:52:ae:5c:07:99: d0:b5:dc:bf:22:36:8d:64:0b:cf:98:16:12:9b:6c: f4:05:6a:01:6e:fb:e1:17:5a:20:b1:4f:75:52:ee: c6:f0:72:fd:1f:5d:5c:8f:1b:d3:1f:5e:e7:e2:41: dd:0e:9d:da:71:22:2e:bb:bd:f7:74:16:45:af:13: 1c:05:f8:78:af:8b:08:90:74:b1:1f:53:f0:8e:b5: 0e:fa:35:35:f7:b1:46:e2:29:33:87:0c:ba:f8:52: 17:b1:00:2b:59:c2:a2:0e:76:22:0e:f9:8c:82:3e: 10:46:34:5e:37:36:01:4b:6c:bf:99:4e:be:60:24: 33:86:43:76:8d:3d:8b:5d:ca:2c:5c:f7:53:a2:46: 5d:24:ed:82:68:a3:21:80:45:73:72:a6:6a:16:8f: 62:4a:8b:b3:89:ee:dc:f3:5c:c7:29:d4:1f:22:cf: f4:bf:0c:87:ea:99:a2:34:5f:04:3a:6f:ba:2e:59: 9a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F8:D0:22:11:F8:2D:80:0F:7F:91:B2:9C:9F:17:B7:E7:FF:81:AD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcb796cd-0001-4f06-a9c5-198757a8dde6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14::/38 Signature Algorithm: sha256WithRSAEncryption b8:ee:bd:af:98:f2:06:32:a0:be:95:bd:58:f3:36:56:03:43: 18:a5:56:e3:cc:72:14:95:e6:49:16:bd:7e:36:3e:c0:84:6f: 27:53:32:7e:ed:5f:42:2e:63:5b:f5:9a:d6:7f:c2:d8:20:a3: 97:22:55:bb:bc:b2:8b:95:84:3a:f4:59:7b:0d:06:37:cf:15: 24:52:d8:bd:8b:f5:4f:87:86:4f:e9:40:bb:3a:34:a6:a4:8b: f4:e8:96:0c:8c:e2:b1:16:a7:bd:a2:bb:0f:aa:07:6b:dc:fa: 92:b2:c6:18:c9:27:44:ce:1e:91:ab:4f:64:1c:a7:b6:93:f7: 54:0a:64:0f:69:8a:73:f0:b6:46:48:40:c8:67:4d:4a:fa:5f: 93:5c:8a:51:9d:f8:f8:df:53:e7:85:39:41:cd:34:a5:1a:fd: 62:95:fc:6b:6f:84:8b:b3:b5:83:0c:ff:c4:51:c7:5f:bc:ee: fb:fe:fa:be:34:6e:7c:d3:93:3c:d2:65:87:c2:e8:d5:60:e5: cd:bc:61:1d:d2:e4:1d:6f:4a:6f:85:45:43:74:eb:0d:9e:3a: d1:9a:ef:28:fa:5b:2b:c2:7d:63:cc:46:65:23:83:fa:fa:6b: 24:ab:9f:cc:f4:ed:dc:06:fc:98:90:29:4c:db:fa:7b:1e:d1: 92:b6:6d:6d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUF7DfVPq7oUwNq0EzbZqvbzw3t1owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwMTA0N1oX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAZjExNWRmOTlhODcxYjVlYWNhYTU1 OWM5YjE2ZDJkNjVhYjEyYTc3YTZhMGJiNzg0YmQ4ZTRlOWY3MjU2YzRlOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4u23+UfLVpETVGYaXp8WSZUgzDc a+vGhU28VtU80MlytMPhuH1n+P/VUVZNZYMoysLuv/w5YWVfE9OnlEjApMFWz7s4 Uq5cB5nQtdy/IjaNZAvPmBYSm2z0BWoBbvvhF1ogsU91Uu7G8HL9H11cjxvTH17n 4kHdDp3acSIuu733dBZFrxMcBfh4r4sIkHSxH1PwjrUO+jU197FG4ikzhwy6+FIX sQArWcKiDnYiDvmMgj4QRjReNzYBS2y/mU6+YCQzhkN2jT2LXcosXPdTokZdJO2C aKMhgEVzcqZqFo9iSouzie7c81zHKdQfIs/0vwyH6pmiNF8EOm+6LlmanwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEr40CIR+C2AD3+RspyfF7fn/4GtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjYjc5NmNkLTAwMDEtNGYwNi1hOWM1LTE5ODc1N2E4ZGRlNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFAAwDQYJKoZIhvcNAQELBQADggEBALjuva+Y8gYyoL6VvVjz NlYDQxilVuPMchSV5kkWvX42PsCEbydTMn7tX0IuY1v1mtZ/wtggo5ciVbu8souV hDr0WXsNBjfPFSRS2L2L9U+Hhk/pQLs6NKaki/TolgyM4rEWp72iuw+qB2vc+pKy xhjJJ0TOHpGrT2Qcp7aT91QKZA9pinPwtkZIQMhnTUr6X5NcilGd+PjfU+eFOUHN NKUa/WKV/GtvhIuztYMM/8RRx1+87vv++r40bnzTkzzSZYfC6NVg5c28YR3S5B1v Sm+FRUN06w2eOtGa7yj6WyvCfWPMRmUjg/r6aySrn8z07dwG/JiQKUzb+nse0ZK2 bW0= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:39 2025 by rpki-client