$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa File: dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa (raw, json) Hash identifier: L5aIEZNaBJ1GZbhWRCgzLWrjB4Onwl/eKVXGBq+fTvg= Subject key identifier: DF:30:FF:E7:E3:A3:CE:4D:47:59:B1:3B:BD:C3:35:B7:A4:72:9D:96 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1D350C1B737592F5E9862824EF11582182DB7438 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa Signing time: Mon 13 Oct 2025 15:40:49 +0000 ROA not before: Mon 13 Oct 2025 15:40:49 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:35:0c:1b:73:75:92:f5:e9:86:28:24:ef:11:58:21:82:db:74:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:40:49 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=61a75ca328bcaa788693237f14f1533236a4e4c0afb2588f093151557a9862de, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6a:07:ea:61:35:b4:07:ea:d9:e0:0f:bc:2c: ed:00:40:70:f4:42:ae:21:a1:8d:2e:6c:2e:73:2b: a8:95:7b:87:21:34:0d:44:de:e6:74:c3:2e:7a:74: db:a8:9f:96:11:d1:82:e9:bf:69:ae:bf:4b:f2:31: 74:e6:07:02:b9:0e:c9:97:e1:e6:b3:b0:b5:13:3a: 0c:19:ea:82:00:8a:e6:76:b2:96:c7:81:bd:aa:0b: 59:c6:59:d9:06:d4:49:28:c0:a8:d5:15:90:cd:d9: 94:4f:51:97:61:73:d2:ef:04:99:41:c5:04:3a:21: 8d:7b:71:8c:a6:6b:64:3f:fe:be:bb:fd:4e:b2:2e: a0:a4:9e:d2:8f:f8:20:bf:95:f6:79:88:3a:80:0f: 5b:6e:8a:c8:4f:a6:b0:e5:9c:fb:97:6c:cd:a2:b6: ea:10:90:ea:33:d7:b2:5d:75:4e:79:2a:57:06:f7: 5b:3c:7a:98:45:78:59:b8:85:51:99:2a:85:d5:50: 28:d1:b8:69:b1:ea:61:1d:33:e1:99:10:72:97:54: dd:1c:dc:ca:97:f9:02:1f:c0:d4:49:3f:32:38:4d: 7d:3f:a9:04:c7:23:7c:04:73:f7:7a:52:5b:c9:80: 19:83:9f:bc:30:8c:19:82:94:09:4c:4d:3e:bf:2b: 9e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:30:FF:E7:E3:A3:CE:4D:47:59:B1:3B:BD:C3:35:B7:A4:72:9D:96 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 53:d1:f2:7d:60:85:ff:8e:38:9c:74:90:6a:03:4a:c2:4f:46: 16:db:84:44:27:04:c1:5f:d8:95:6c:00:ae:02:d7:d0:25:8f: 02:c7:b4:c1:2e:05:3d:9b:84:c3:d2:26:4c:e9:03:0a:3e:4e: 2c:fe:3d:3c:f4:b0:87:e0:7d:20:bd:e7:ed:15:e4:a6:a2:db: b4:2d:1f:7a:d9:d7:c4:2c:41:91:55:60:6e:e5:96:d4:4a:dc: 0f:19:a3:6a:ad:6a:6e:a9:c0:bf:18:ba:2f:1f:9b:04:a2:ce: 78:fe:c5:a7:3e:bc:f9:28:9e:51:86:b2:d0:f4:f8:f4:d4:93: 42:e8:89:1d:30:6c:73:e5:bd:3a:d2:81:eb:e7:52:93:51:da: 64:a7:51:fc:37:8b:be:c2:c6:d0:de:6b:c7:4a:9c:d7:13:d2: 5b:3b:9c:42:52:54:2d:7e:70:02:a2:e5:3b:49:57:86:54:b8: a1:58:0b:55:bb:0a:21:b2:db:e4:a5:30:ed:df:a9:d0:59:7d: 16:8c:7c:af:46:55:07:fa:3e:16:3e:b8:23:8e:de:64:a0:db: 9f:66:2d:1b:c4:18:8b:d1:7b:a9:09:9d:d5:93:58:72:51:fc: 5b:83:c1:db:59:83:5a:65:7b:96:64:56:1b:d8:51:f4:33:22: f9:2e:e6:a0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHTUMG3N1kvXphigk7xFYIYLbdDgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1NDA0OVoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNANjFhNzVjYTMyOGJjYWE3ODg2OTMy MzdmMTRmMTUzMzIzNmE0ZTRjMGFmYjI1ODhmMDkzMTUxNTU3YTk4NjJkZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GoH6mE1tAfq2eAPvCztAEBw9EKu IaGNLmwucyuolXuHITQNRN7mdMMuenTbqJ+WEdGC6b9prr9L8jF05gcCuQ7Jl+Hm s7C1EzoMGeqCAIrmdrKWx4G9qgtZxlnZBtRJKMCo1RWQzdmUT1GXYXPS7wSZQcUE OiGNe3GMpmtkP/6+u/1Osi6gpJ7Sj/ggv5X2eYg6gA9bborIT6aw5Zz7l2zNorbq EJDqM9eyXXVOeSpXBvdbPHqYRXhZuIVRmSqF1VAo0bhpsephHTPhmRByl1TdHNzK l/kCH8DUST8yOE19P6kExyN8BHP3elJbyYAZg5+8MIwZgpQJTE0+vyue8wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFN8w/+fjo85NR1mxO73DNbekcp2WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmZWIzOWFkLTI2NDQtNGYyYS1iMjNlLTE4ZjUxY2NkNDllMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYRDAMA0GCSqGSIb3DQEBCwUAA4IBAQBT0fJ9YIX/jjicdJBq A0rCT0YW24REJwTBX9iVbACuAtfQJY8Cx7TBLgU9m4TD0iZM6QMKPk4s/j089LCH 4H0gveftFeSmotu0LR962dfELEGRVWBu5ZbUStwPGaNqrWpuqcC/GLovH5sEos54 /sWnPrz5KJ5RhrLQ9Pj01JNC6IkdMGxz5b060oHr51KTUdpkp1H8N4u+wsbQ3mvH SpzXE9JbO5xCUlQtfnACouU7SVeGVLihWAtVuwohstvkpTDt36nQWX0WjHyvRlUH +j4WPrgjjt5koNufZi0bxBiL0XupCZ3Vk1hyUfxbg8HbWYNaZXuWZFYb2FH0MyL5 Luag -----END CERTIFICATE-----Generated at Mon Oct 20 09:56:45 2025 by rpki-client