$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e2b27d5d-70c7-4ade-8dcd-4c39bd7edb66.roa File: e2b27d5d-70c7-4ade-8dcd-4c39bd7edb66.roa (raw, json) Hash identifier: 2fl1AgpLmD4cZwybydXyFovzVobNXJECq2vkjjpnR78= Subject key identifier: C1:38:19:84:3B:E7:C8:4D:69:0A:9C:D4:95:0D:7C:EB:64:F8:B0:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3514E5FA55777804AE923AD6F48BB0C7966AB039 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e2b27d5d-70c7-4ade-8dcd-4c39bd7edb66.roa Signing time: Sat 08 Nov 2025 00:20:56 +0000 ROA not before: Sat 08 Nov 2025 00:20:56 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:14:e5:fa:55:77:78:04:ae:92:3a:d6:f4:8b:b0:c7:96:6a:b0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:20:56 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=47828150a3206d1e04d7321b2ee5bf868b40dc3bf3c71d79c3e1b482fb3a15df, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e1:43:55:78:87:6d:48:19:89:ac:40:34:80: 85:07:35:82:e9:5a:6a:e8:3a:9b:76:8b:7e:4b:ea: 6e:8c:f0:bc:82:7b:45:1a:f8:d6:d6:06:42:80:45: b1:58:1e:ed:1c:ec:85:27:4f:f8:b0:74:cb:bf:6e: b6:26:a8:56:c4:05:e9:0c:5c:9b:54:eb:86:7b:38: 56:2b:dc:c1:20:00:07:be:31:3a:d5:9e:00:12:4f: 57:0d:60:d9:ab:44:18:02:81:71:87:64:a9:6c:9e: 84:dd:23:dc:1f:dd:7c:e8:79:37:bd:c7:bb:e2:cf: be:b3:a8:5d:4a:9a:81:ce:f7:55:3d:5b:d9:cb:d6: 7d:05:8e:82:3a:4c:c0:28:80:db:d8:6e:e9:14:3c: 77:2f:88:41:53:b3:12:99:5d:84:21:77:bb:fb:fe: 97:5b:bc:ea:a6:b2:b0:3d:2a:d8:11:a1:92:3c:f1: f4:fa:8f:d7:92:f1:e9:ba:e9:9a:14:50:a9:ea:f2: 04:cf:ea:0b:9e:96:34:5a:b6:67:f8:c1:a2:e1:ae: e3:17:5a:4d:3d:15:15:0f:ca:44:ee:e8:88:e3:4e: be:14:72:07:56:10:41:50:bd:80:4a:a3:ee:8c:0b: bc:28:f0:6b:b1:4f:d3:0e:3c:f0:33:10:96:9b:cf: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:38:19:84:3B:E7:C8:4D:69:0A:9C:D4:95:0D:7C:EB:64:F8:B0:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e2b27d5d-70c7-4ade-8dcd-4c39bd7edb66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:d000::/48 Signature Algorithm: sha256WithRSAEncryption 06:23:fb:fe:ec:2e:d7:cc:e4:d9:5e:7d:bd:a6:d7:6c:0c:97: f4:63:13:e4:5f:9e:a1:e6:55:e8:36:35:fa:03:f3:9a:13:65: 99:e4:15:b1:41:79:b2:6c:b9:77:fe:e4:79:4c:a6:dd:24:fd: 4f:06:b7:b2:f0:df:2f:ad:52:84:14:ca:8a:4d:0b:20:21:48: bb:ef:6d:ec:b4:80:0d:e8:28:7f:45:10:5f:43:26:f7:84:1e: eb:fa:e2:97:00:6f:b8:74:5d:10:84:7d:a4:87:63:e1:9e:0f: a1:d0:b1:6b:db:57:47:6d:39:96:3f:a2:b6:d4:2c:31:fa:92: 18:13:22:49:60:c8:8a:9d:9b:4c:48:ff:9d:79:3a:ab:cc:4a: ae:5a:e5:80:3c:0e:94:68:42:09:51:a2:7d:a8:cc:c1:b8:14: 0c:14:ee:1f:03:fa:e5:16:4a:a0:0b:de:02:f3:66:f9:b3:88: 3e:27:d3:53:2d:05:8b:b1:e7:3e:4c:02:ea:4c:06:92:47:94: af:05:93:8e:b0:32:07:97:27:23:b1:c1:a7:ee:53:60:da:49: 4a:dc:25:de:fa:25:b0:0f:01:04:bb:da:f5:48:d2:8d:ca:c3: 38:77:5e:be:1a:b7:b8:47:97:eb:d3:71:4e:64:78:cc:4e:4f: 4b:0a:68:f7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNRTl+lV3eASukjrW9Iuwx5ZqsDkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMjA1NloX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNANDc4MjgxNTBhMzIwNmQxZTA0ZDcz MjFiMmVlNWJmODY4YjQwZGMzYmYzYzcxZDc5YzNlMWI0ODJmYjNhMTVkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOFDVXiHbUgZiaxANICFBzWC6Vpq 6Dqbdot+S+pujPC8gntFGvjW1gZCgEWxWB7tHOyFJ0/4sHTLv262JqhWxAXpDFyb VOuGezhWK9zBIAAHvjE61Z4AEk9XDWDZq0QYAoFxh2SpbJ6E3SPcH9186Hk3vce7 4s++s6hdSpqBzvdVPVvZy9Z9BY6COkzAKIDb2G7pFDx3L4hBU7MSmV2EIXe7+/6X W7zqprKwPSrYEaGSPPH0+o/XkvHpuumaFFCp6vIEz+oLnpY0WrZn+MGi4a7jF1pN PRUVD8pE7uiI406+FHIHVhBBUL2ASqPujAu8KPBrsU/TDjzwMxCWm89qTQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFME4GYQ758hNaQqc1JUNfOtk+LBEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UyYjI3ZDVkLTcwYzctNGFkZS04ZGNkLTRjMzliZDdlZGI2Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7NAAMA0GCSqGSIb3DQEBCwUAA4IBAQAGI/v+7C7XzOTZXn29 ptdsDJf0YxPkX56h5lXoNjX6A/OaE2WZ5BWxQXmybLl3/uR5TKbdJP1PBrey8N8v rVKEFMqKTQsgIUi7723stIAN6Ch/RRBfQyb3hB7r+uKXAG+4dF0QhH2kh2Phng+h 0LFr21dHbTmWP6K21Cwx+pIYEyJJYMiKnZtMSP+deTqrzEquWuWAPA6UaEIJUaJ9 qMzBuBQMFO4fA/rlFkqgC94C82b5s4g+J9NTLQWLsec+TALqTAaSR5SvBZOOsDIH lycjscGn7lNg2klK3CXe+iWwDwEEu9r1SNKNysM4d16+Gre4R5fr03FOZHjMTk9L Cmj3 -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:57 2025 by rpki-client