$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e6bab3e6-c28e-47e7-bab4-a461b1539faa.roa File: e6bab3e6-c28e-47e7-bab4-a461b1539faa.roa (raw, json) Hash identifier: RRtSd+O2pIZvZXZXerCVH/AgB/8lE6vgcTkk0NVOBZE= Subject key identifier: 6A:7A:ED:52:AE:12:59:25:C8:ED:5B:A7:4C:B6:32:AF:4C:5E:8D:33 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A8E114E50B7A988177A6AB35EE44E61ACFA2ADE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e6bab3e6-c28e-47e7-bab4-a461b1539faa.roa Signing time: Wed 29 Oct 2025 00:10:10 +0000 ROA not before: Wed 29 Oct 2025 00:10:10 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8e:11:4e:50:b7:a9:88:17:7a:6a:b3:5e:e4:4e:61:ac:fa:2a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:10:10 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=dd916a1ef21b85695769480f93521984d79f711b1c4fc5bb7f50386868748134, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:d7:91:d6:19:08:f7:0f:db:0a:37:b9:9d: 05:84:31:59:a7:dd:18:b3:7e:ae:ce:2c:de:2d:a1: 62:fd:2a:ba:6b:52:d3:d6:64:18:60:8a:a7:94:a3: 10:04:71:aa:76:33:ec:56:90:82:7e:ee:ce:55:d4: 79:90:ee:c5:84:23:c7:d2:ab:f3:ae:fe:3c:18:20: 7e:77:fd:df:ea:ad:f8:61:a3:7b:01:3f:94:dd:c0: 59:df:42:2b:42:86:da:0f:b9:73:8b:8b:d1:cd:2a: 19:24:95:62:49:4e:94:88:83:7d:63:70:4f:78:88: 55:30:74:e6:4d:aa:61:9d:fa:6e:b5:5b:df:fd:14: ba:91:de:e9:93:94:c4:0f:26:86:58:43:f3:61:ec: 7b:48:40:20:75:72:6d:27:35:95:21:94:71:a1:d6: 9d:8b:bd:a3:c9:8f:54:df:25:13:a7:c8:1c:e8:6e: 7d:4f:d7:a8:b5:70:2a:65:f7:52:c6:2e:cb:00:f9: 0b:94:e8:d3:d7:88:22:0d:7c:b9:15:83:9e:f7:6a: 1e:a8:b2:91:74:e0:6d:46:22:a3:e9:a0:ba:7f:d1: 88:73:ad:f8:72:19:e4:30:bd:8e:97:73:58:ce:07: 16:4e:cd:43:63:62:e0:a9:0c:59:d8:a2:81:e8:72: b8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7A:ED:52:AE:12:59:25:C8:ED:5B:A7:4C:B6:32:AF:4C:5E:8D:33 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e6bab3e6-c28e-47e7-bab4-a461b1539faa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:f000::/40 Signature Algorithm: sha256WithRSAEncryption 5e:24:aa:d9:34:87:ee:02:60:4b:a3:6b:9f:df:80:b5:49:f3: ce:2b:45:29:60:02:2e:f3:ca:8b:ff:ff:6f:fd:d6:b4:9a:f5: 21:08:b1:79:59:57:3b:84:4c:10:b1:32:81:cc:ca:c6:5a:a2: 86:8c:45:75:92:2d:24:5b:1d:b3:24:4b:ef:30:45:f1:a4:89: fe:1c:19:f4:67:4e:99:87:e9:f4:27:04:58:b9:d6:51:c6:e4: e8:fd:3a:4b:04:b7:25:33:1f:36:c5:db:45:35:1f:e5:87:20: 80:28:84:5c:25:42:95:46:75:41:75:82:b9:ad:3b:d6:2a:6a: bf:49:44:47:68:dc:7d:c2:f5:c7:40:31:5c:8c:02:4e:d9:66: ee:5c:33:ee:bc:a5:95:62:12:6e:cd:a3:41:3d:e6:56:47:6a: e2:04:e1:04:b7:e9:31:b6:28:11:1b:da:0d:52:eb:58:43:eb: 1c:58:b7:07:2a:38:db:50:eb:c4:11:3d:e6:06:61:11:de:d6: d6:fe:a6:84:41:c2:6d:cc:92:12:64:07:69:c1:9c:56:b2:66: 85:43:90:82:25:39:ef:60:f6:cf:90:26:d2:63:81:39:3e:e1: 8a:69:23:fb:62:72:15:58:09:f5:ab:b4:2f:c4:d4:6c:1f:47: bb:4d:ed:f3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCo4RTlC3qYgXemqzXuROYaz6Kt4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTAwMTAxMFoX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAZGQ5MTZhMWVmMjFiODU2OTU3Njk0 ODBmOTM1MjE5ODRkNzlmNzExYjFjNGZjNWJiN2Y1MDM4Njg2ODc0ODEzNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfrXkdYZCPcP2wo3uZ0FhDFZp90Y s36uzizeLaFi/Sq6a1LT1mQYYIqnlKMQBHGqdjPsVpCCfu7OVdR5kO7FhCPH0qvz rv48GCB+d/3f6q34YaN7AT+U3cBZ30IrQobaD7lzi4vRzSoZJJViSU6UiIN9Y3BP eIhVMHTmTaphnfputVvf/RS6kd7pk5TEDyaGWEPzYex7SEAgdXJtJzWVIZRxodad i72jyY9U3yUTp8gc6G59T9eotXAqZfdSxi7LAPkLlOjT14giDXy5FYOe92oeqLKR dOBtRiKj6aC6f9GIc634chnkML2Ol3NYzgcWTs1DY2LgqQxZ2KKB6HK4RwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGp67VKuElklyO1bp0y2Mq9MXo0zMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U2YmFiM2U2LWMyOGUtNDdlNy1iYWI0LWE0NjFiMTUzOWZhYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8/AwDQYJKoZIhvcNAQELBQADggEBAF4kqtk0h+4CYEuja5/f gLVJ884rRSlgAi7zyov//2/91rSa9SEIsXlZVzuETBCxMoHMysZaooaMRXWSLSRb HbMkS+8wRfGkif4cGfRnTpmH6fQnBFi51lHG5Oj9OksEtyUzHzbF20U1H+WHIIAo hFwlQpVGdUF1grmtO9Yqar9JREdo3H3C9cdAMVyMAk7ZZu5cM+68pZViEm7No0E9 5lZHauIE4QS36TG2KBEb2g1S61hD6xxYtwcqONtQ68QRPeYGYRHe1tb+poRBwm3M khJkB2nBnFayZoVDkIIlOe9g9s+QJtJjgTk+4YppI/tichVYCfWrtC/E1GwfR7tN 7fM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:49:52 2025 by rpki-client