$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e516b28b-c549-41c8-a3c8-97331669f493.roa File: e516b28b-c549-41c8-a3c8-97331669f493.roa (raw, json) Hash identifier: zbJtbvVDaIf8SLlmTsCjnniEt7DBdV6pw8aoLb9bwNw= Subject key identifier: 59:C9:58:E6:70:16:C5:46:0A:EE:BC:24:FE:60:27:14:25:25:74:62 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5545426FAEF84DED6FC73AFF97E0EB5A0FD339A9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e516b28b-c549-41c8-a3c8-97331669f493.roa Signing time: Sat 08 Nov 2025 00:01:04 +0000 ROA not before: Sat 08 Nov 2025 00:01:04 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:45:42:6f:ae:f8:4d:ed:6f:c7:3a:ff:97:e0:eb:5a:0f:d3:39:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:01:04 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=3995126806c28642009064e130636b533c87851027d05cab98bdbf8317bfcae9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:1f:96:bb:8d:ae:26:b2:bd:4b:04:bc:e0: 5d:65:28:1d:d0:5a:02:19:1d:2e:c4:3c:f1:f7:9d: 71:33:34:51:c4:d4:3c:cc:2e:e3:86:07:29:a5:b0: ce:a1:fe:7c:93:ae:08:0b:56:f5:9e:83:a0:6f:76: 8a:2e:7d:7a:66:ce:55:78:bf:e1:91:ef:02:9f:c2: b8:e2:06:d7:14:65:eb:a0:9d:35:c5:fb:2a:74:7a: a9:e5:f1:c1:9f:74:3b:e0:81:d5:2e:33:d7:08:82: 3b:b7:66:98:49:8f:24:55:b7:79:cb:6a:78:68:8d: e1:2b:0c:85:9d:a2:11:aa:8b:92:f9:4d:78:fa:92: 48:6d:74:a5:d6:6c:f3:71:27:f4:13:3f:90:65:d1: 60:a7:fa:ee:68:cf:be:2e:34:4e:fd:05:e0:6f:48: 7c:6a:29:dc:66:95:49:c7:15:38:ff:ba:e2:37:dc: d0:03:81:1f:5f:34:23:c9:e3:62:46:c3:5e:48:03: 6f:d2:66:bf:ce:35:92:6e:fa:38:f5:3d:62:44:58: 76:13:80:36:66:f9:c3:4d:c6:8d:7a:2a:f7:bf:cc: 94:f2:d4:55:fd:c0:59:f0:aa:a0:32:7f:3c:80:7c: 2a:2c:fe:30:d3:26:be:17:d7:e7:fb:dd:cc:fc:91: 2d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C9:58:E6:70:16:C5:46:0A:EE:BC:24:FE:60:27:14:25:25:74:62 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e516b28b-c549-41c8-a3c8-97331669f493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c800::/40 Signature Algorithm: sha256WithRSAEncryption 9c:24:80:b4:61:74:5f:52:cc:2e:99:ad:b8:82:6f:4e:27:11: 64:23:56:46:27:e1:60:51:2d:9f:a7:d4:12:32:b4:49:ab:c5: 74:64:5b:5a:a7:7c:de:86:97:d9:23:a6:7c:00:49:e5:ac:c9: 11:fa:79:78:a9:d0:c5:69:cc:7e:74:84:f9:70:fc:74:de:01: 98:2d:da:bd:dc:d0:da:75:3c:ff:2f:e1:c1:2a:1f:01:f4:76: 74:01:31:f9:b1:3f:d7:ed:39:83:f4:2e:55:64:6e:ac:79:52: 5f:3c:63:8c:8b:85:39:84:ae:4c:c0:ad:5e:94:a4:e0:44:33: e2:81:38:01:ed:8b:df:99:65:28:f1:7c:f5:e6:45:15:5b:05: 18:a7:6f:cf:cc:ad:ae:2a:9c:16:82:c2:11:2a:d1:70:bc:1c: b5:fc:45:a1:fb:ab:2d:54:12:56:4a:45:65:c0:23:75:68:53: f1:30:74:da:b6:bb:c7:18:62:34:c1:cf:c1:93:09:28:72:9c: d3:83:b4:33:8d:ae:d4:cc:b6:69:aa:7b:f0:40:86:d0:82:e4: 99:e6:11:8f:00:50:10:da:ba:8d:de:c7:56:63:3f:36:fa:15: b3:ab:20:fc:34:9c:3e:02:54:38:50:5a:dc:89:7b:31:d3:6d: e3:79:85:f6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVUVCb674Te1vxzr/l+DrWg/TOakwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDEwNFoX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAMzk5NTEyNjgwNmMyODY0MjAwOTA2 NGUxMzA2MzZiNTMzYzg3ODUxMDI3ZDA1Y2FiOThiZGJmODMxN2JmY2FlOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT0flruNriayvUsEvOBdZSgd0FoC GR0uxDzx951xMzRRxNQ8zC7jhgcppbDOof58k64IC1b1noOgb3aKLn16Zs5VeL/h ke8Cn8K44gbXFGXroJ01xfsqdHqp5fHBn3Q74IHVLjPXCII7t2aYSY8kVbd5y2p4 aI3hKwyFnaIRqouS+U14+pJIbXSl1mzzcSf0Ez+QZdFgp/ruaM++LjRO/QXgb0h8 aincZpVJxxU4/7riN9zQA4EfXzQjyeNiRsNeSANv0ma/zjWSbvo49T1iRFh2E4A2 ZvnDTcaNeir3v8yU8tRV/cBZ8KqgMn88gHwqLP4w0ya+F9fn+93M/JEtjQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFnJWOZwFsVGCu68JP5gJxQlJXRiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1MTZiMjhiLWM1NDktNDFjOC1hM2M4LTk3MzMxNjY5ZjQ5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8sgwDQYJKoZIhvcNAQELBQADggEBAJwkgLRhdF9SzC6ZrbiC b04nEWQjVkYn4WBRLZ+n1BIytEmrxXRkW1qnfN6Gl9kjpnwASeWsyRH6eXip0MVp zH50hPlw/HTeAZgt2r3c0Np1PP8v4cEqHwH0dnQBMfmxP9ftOYP0LlVkbqx5Ul88 Y4yLhTmErkzArV6UpOBEM+KBOAHti9+ZZSjxfPXmRRVbBRinb8/Mra4qnBaCwhEq 0XC8HLX8RaH7qy1UElZKRWXAI3VoU/EwdNq2u8cYYjTBz8GTCShynNODtDONrtTM tmmqe/BAhtCC5JnmEY8AUBDauo3ex1ZjPzb6FbOrIPw0nD4CVDhQWtyJezHTbeN5 hfY= -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:03 2025 by rpki-client