$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d33fb258-4c78-4848-a4fe-7a4ed9edb0bd.roa File: d33fb258-4c78-4848-a4fe-7a4ed9edb0bd.roa (raw, json) Hash identifier: oLel1lL9IC/xbzqjf45nYqHIHLVqJxJ2eK1KFcdGV8E= Subject key identifier: 84:47:E7:83:F5:EA:41:C6:70:67:2B:D8:EF:89:7C:C9:E6:96:BC:37 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5193EE4A3918782EEF0CDDB91B8678E590A4F933 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d33fb258-4c78-4848-a4fe-7a4ed9edb0bd.roa Signing time: Wed 29 Oct 2025 00:10:05 +0000 ROA not before: Wed 29 Oct 2025 00:10:05 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:2880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:93:ee:4a:39:18:78:2e:ef:0c:dd:b9:1b:86:78:e5:90:a4:f9:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:10:05 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=4b93de53a173525aef6d6d1ee129fdd169a7fb2b73b8600b6608fe2444b40c07, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:27:27:4b:f9:a3:37:b4:c5:3b:88:0c:52:f0: 08:e7:b7:f9:b0:9e:ed:ff:d3:1c:b4:c2:51:1d:76: 94:0e:83:81:34:44:4d:ed:c6:41:20:ab:ac:57:20: 68:94:19:bc:d5:cc:c4:e0:76:af:c6:18:33:cf:3c: 26:ee:4b:37:90:67:d3:1e:aa:62:ab:19:5e:96:3d: 47:d8:e6:1e:b5:12:76:be:66:e2:72:90:e4:ed:5c: 39:16:52:8d:30:bb:2e:12:6c:1c:df:aa:7f:35:82: 1d:43:9d:0b:bf:7c:26:71:64:cf:51:5e:21:e1:75: f8:6b:d2:00:72:ca:00:27:b3:25:e5:50:72:df:ac: c0:97:2f:c9:ff:16:11:db:b8:40:72:5c:68:2a:21: d3:b4:f6:55:1a:34:f4:34:30:42:c4:3b:29:0d:57: c5:ba:f0:a2:03:d3:79:00:10:52:90:1f:ca:96:f4: 0f:63:40:a7:48:48:86:91:65:f4:55:54:c2:86:75: fa:e6:68:c7:b0:53:87:55:f9:0e:68:2e:d5:ae:35: b5:6c:21:ae:28:c7:7b:3c:a2:90:7c:ba:60:d6:f1: 35:7a:58:78:71:ff:e9:4e:cd:54:63:a7:e6:f8:66: 99:43:30:81:92:55:ef:ec:2f:16:a6:10:06:e8:a7: 0a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:47:E7:83:F5:EA:41:C6:70:67:2B:D8:EF:89:7C:C9:E6:96:BC:37 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d33fb258-4c78-4848-a4fe-7a4ed9edb0bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:2880::/46 Signature Algorithm: sha256WithRSAEncryption a2:a0:d1:75:c6:c4:14:ff:25:46:5e:84:e0:b0:a3:d3:75:c3: 9e:16:0b:ca:e2:d4:c1:07:64:5d:28:ec:e4:4f:34:27:e9:ba: bc:b1:34:dc:23:5b:8b:3a:97:fd:01:63:81:6d:7d:81:94:6d: ee:b5:f8:b0:b9:27:4d:6e:92:19:ff:f6:b7:09:85:1d:ef:4a: 3e:d8:db:ef:df:05:79:27:b2:3e:43:f4:4d:19:42:7c:b2:a9: e7:90:83:2d:9b:7f:5f:98:0d:98:7c:1e:05:78:7f:68:78:cd: 51:5a:61:90:1d:a6:c3:f9:b5:63:13:57:1c:c3:e3:b1:d8:08: 18:cd:be:68:15:6f:74:87:bf:f0:34:c0:be:fc:23:6a:91:f9: 3a:16:55:d5:68:35:8b:bb:98:84:50:cf:3c:44:14:fb:84:79: 90:57:ee:67:a3:ca:87:e1:f4:49:84:c4:3c:1a:2a:13:4c:73: c0:d0:d5:0b:51:35:8e:6e:4e:ed:c0:70:8b:81:e8:73:a7:dc: 07:a3:e8:b4:55:5a:4f:f8:4c:1c:52:34:15:92:f6:f6:42:a0: 94:e6:65:16:a7:d7:99:6a:ac:9c:26:1c:29:5b:fa:ab:52:04: 03:d8:ff:8e:0b:0a:b5:29:94:60:68:0c:53:ff:92:43:ca:7d: 4c:93:0e:54 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUZPuSjkYeC7vDN25G4Z45ZCk+TMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTAwMTAwNVoX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNANGI5M2RlNTNhMTczNTI1YWVmNmQ2 ZDFlZTEyOWZkZDE2OWE3ZmIyYjczYjg2MDBiNjYwOGZlMjQ0NGI0MGMwNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5icnS/mjN7TFO4gMUvAI57f5sJ7t /9MctMJRHXaUDoOBNERN7cZBIKusVyBolBm81czE4Havxhgzzzwm7ks3kGfTHqpi qxlelj1H2OYetRJ2vmbicpDk7Vw5FlKNMLsuEmwc36p/NYIdQ50Lv3wmcWTPUV4h 4XX4a9IAcsoAJ7Ml5VBy36zAly/J/xYR27hAclxoKiHTtPZVGjT0NDBCxDspDVfF uvCiA9N5ABBSkB/KlvQPY0CnSEiGkWX0VVTChnX65mjHsFOHVfkOaC7VrjW1bCGu KMd7PKKQfLpg1vE1elh4cf/pTs1UY6fm+GaZQzCBklXv7C8WphAG6KcKlwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIRH54P16kHGcGcr2O+JfMnmlrw3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzM2ZiMjU4LTRjNzgtNDg0OC1hNGZlLTdhNGVkOWVkYjBiZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8yiAMA0GCSqGSIb3DQEBCwUAA4IBAQCioNF1xsQU/yVGXoTg sKPTdcOeFgvK4tTBB2RdKOzkTzQn6bq8sTTcI1uLOpf9AWOBbX2BlG3utfiwuSdN bpIZ//a3CYUd70o+2Nvv3wV5J7I+Q/RNGUJ8sqnnkIMtm39fmA2YfB4FeH9oeM1R WmGQHabD+bVjE1ccw+Ox2AgYzb5oFW90h7/wNMC+/CNqkfk6FlXVaDWLu5iEUM88 RBT7hHmQV+5no8qH4fRJhMQ8GioTTHPA0NULUTWObk7twHCLgehzp9wHo+i0VVpP +EwcUjQVkvb2QqCU5mUWp9eZaqycJhwpW/qrUgQD2P+OCwq1KZRgaAxT/5JDyn1M kw5U -----END CERTIFICATE-----Generated at Wed Nov 5 09:49:51 2025 by rpki-client