$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa File: 98bbbcef-0217-4c51-a717-7af30c63be28.roa (raw, json) Hash identifier: xZfjDQ9Q/cQQ/5ek03EWhF6L+UnVefEV83FCWU3YEZg= Subject key identifier: 23:34:5C:9B:97:93:DD:E2:FD:83:13:29:B7:BF:AC:F3:E0:D4:05:CD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4E19D086CEA39CBD6AF0572F72DFB90996455F8F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa Signing time: Wed 29 Oct 2025 00:00:27 +0000 ROA not before: Wed 29 Oct 2025 00:00:27 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:19:d0:86:ce:a3:9c:bd:6a:f0:57:2f:72:df:b9:09:96:45:5f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:00:27 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=ec97407ddf5e1d9b0607d92c5f6f741c47d8420ed2e02b8296c1ff8b9b6914d7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:8f:d2:af:d1:77:f5:55:97:22:61:1e:48: 57:e8:8f:b1:05:1f:b2:44:3e:b2:29:e4:d0:37:3d: c5:3f:86:00:54:69:c7:dd:63:10:c6:ca:50:be:ce: 0f:b2:65:86:46:21:13:4e:19:ac:39:3a:50:09:cd: fa:a0:7d:a0:67:2e:88:52:d7:57:2b:15:e5:05:3a: 15:21:92:83:85:f2:d1:83:e2:0c:ad:b3:e5:71:6b: a5:15:b7:87:e7:a9:38:80:14:42:1d:50:44:39:f0: 2c:00:0a:33:a3:64:f2:26:4f:86:a7:31:3c:95:3d: 77:a0:28:a2:dc:5b:b6:bf:68:47:3a:47:2e:00:66: 86:c8:b5:87:e1:c2:f9:97:9b:8e:5b:2c:e2:16:57: 66:db:3b:d9:ca:1d:d9:b8:f9:c3:0e:42:de:c8:e5: 77:92:0a:e2:63:a1:c0:c4:2f:a0:ce:8b:35:c3:0b: bb:b9:17:ab:6e:f3:bb:bf:26:f0:2f:2e:cb:60:1a: 27:72:7c:c3:d2:4b:26:72:af:e2:b5:7e:95:0a:0e: 63:c5:92:c1:e3:c5:23:0a:7d:1c:44:d6:9b:f9:55: 96:d9:c1:bf:3d:22:6f:ce:95:81:7d:17:0b:ca:74: 41:4c:d6:bc:21:2f:22:c5:56:20:df:10:3b:f9:fa: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:34:5C:9B:97:93:DD:E2:FD:83:13:29:B7:BF:AC:F3:E0:D4:05:CD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:8800::/40 Signature Algorithm: sha256WithRSAEncryption 34:11:3b:a5:06:84:91:97:26:72:0f:9b:49:e5:e8:1d:bd:2b: b8:03:dd:7e:8d:ee:7b:a2:9a:50:8b:f5:4a:fa:6e:46:63:1b: e2:e2:f2:fc:7f:30:ae:c0:d4:e6:39:0e:04:bf:e3:72:c3:2d: 07:bc:b5:b9:98:5f:2e:14:18:4f:78:dc:29:61:45:92:f0:6a: 7d:60:0e:94:32:f1:0a:d0:06:4c:01:d0:a8:f5:ce:1f:46:0f: 73:1d:b2:40:c3:25:56:a8:32:78:2a:9c:f0:53:29:f9:9c:ca: e4:fe:f6:3a:9e:a7:16:54:f6:ae:00:46:de:2e:e6:66:f5:0b: 2a:c8:98:88:ed:31:1b:67:71:53:79:6b:8e:d0:8a:fe:42:a1: d2:68:b0:a2:b0:f7:c5:a7:8b:8b:99:77:ea:0c:47:f8:f7:7a: 17:69:36:f2:9a:db:1a:13:58:e9:02:3d:ca:36:ef:f3:74:42: c2:6d:01:68:c1:30:35:32:49:09:fb:bb:d1:da:f6:45:a3:4b: aa:b5:30:ba:13:4a:6d:1c:76:f2:e0:22:29:37:b4:06:5e:ba: d2:b4:81:c5:9f:ca:e1:64:09:a9:f3:10:88:d1:ff:bd:f1:e2: 9a:b7:b5:1b:26:46:47:a9:a5:26:61:0e:31:07:ee:2c:5f:55: 5e:2a:d7:19 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUThnQhs6jnL1q8Fcvct+5CZZFX48wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTAwMDAyN1oX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAZWM5NzQwN2RkZjVlMWQ5YjA2MDdk OTJjNWY2Zjc0MWM0N2Q4NDIwZWQyZTAyYjgyOTZjMWZmOGI5YjY5MTRkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI+P0q/Rd/VVlyJhHkhX6I+xBR+y RD6yKeTQNz3FP4YAVGnH3WMQxspQvs4PsmWGRiETThmsOTpQCc36oH2gZy6IUtdX KxXlBToVIZKDhfLRg+IMrbPlcWulFbeH56k4gBRCHVBEOfAsAAozo2TyJk+GpzE8 lT13oCii3Fu2v2hHOkcuAGaGyLWH4cL5l5uOWyziFldm2zvZyh3ZuPnDDkLeyOV3 kgriY6HAxC+gzos1wwu7uRerbvO7vybwLy7LYBoncnzD0ksmcq/itX6VCg5jxZLB 48UjCn0cRNab+VWW2cG/PSJvzpWBfRcLynRBTNa8IS8ixVYg3xA7+fqjrQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCM0XJuXk93i/YMTKbe/rPPg1AXNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4YmJiY2VmLTAyMTctNGM1MS1hNzE3LTdhZjMwYzYzYmUyOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+IgwDQYJKoZIhvcNAQELBQADggEBADQRO6UGhJGXJnIPm0nl 6B29K7gD3X6N7nuimlCL9Ur6bkZjG+Li8vx/MK7A1OY5DgS/43LDLQe8tbmYXy4U GE943ClhRZLwan1gDpQy8QrQBkwB0Kj1zh9GD3MdskDDJVaoMngqnPBTKfmcyuT+ 9jqepxZU9q4ARt4u5mb1CyrImIjtMRtncVN5a47Qiv5CodJosKKw98Wni4uZd+oM R/j3ehdpNvKa2xoTWOkCPco27/N0QsJtAWjBMDUySQn7u9Ha9kWjS6q1MLoTSm0c dvLgIik3tAZeutK0gcWfyuFkCanzEIjR/73x4pq3tRsmRkeppSZhDjEH7ixfVV4q 1xk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:11:00 2025 by rpki-client