$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa File: 2304fccd-a194-40a7-978d-bdb25807cebe.roa (raw, json) Hash identifier: ZJYjyTVHLDIjOMtDhXjv+4jysaIuRioZwVoPQ1di8hQ= Subject key identifier: E4:D1:0E:D3:DE:40:9A:9C:4D:2E:86:3B:68:3F:8F:B4:85:58:D5:26 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1889B3E40D93618A949AD93B45680DB1146747C3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa Signing time: Wed 06 Aug 2025 00:01:13 +0000 ROA not before: Wed 06 Aug 2025 00:01:13 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:89:b3:e4:0d:93:61:8a:94:9a:d9:3b:45:68:0d:b1:14:67:47:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 6 00:01:13 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=664339ad375c4d74e129f54d1fd987f5796c1f8fb04f6d211610991511ac141d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:aa:7b:1c:a5:91:2a:d2:f8:b9:67:99:67:f4: bc:0a:75:80:f1:ce:83:10:0f:b5:fc:23:14:d3:21: f0:5c:25:e7:c3:f6:5a:70:00:41:44:f4:52:c5:fa: e4:e8:28:a7:40:91:1f:94:50:8d:07:80:02:d9:58: 6a:e7:fd:88:77:5b:bf:27:05:2a:a9:62:2d:37:bd: c8:60:b8:ba:d1:0f:1c:81:4c:67:6d:5a:87:14:95: 09:af:50:a7:12:9f:1f:c8:40:46:c5:3d:82:e6:3b: de:13:c8:33:84:82:9c:e8:c5:a3:03:63:bd:3c:f8: d7:a3:2d:5b:42:48:8f:d6:44:43:d8:28:7d:97:e7: 56:8c:34:bf:98:c4:b5:0c:1e:39:de:79:82:f1:03: f5:53:a8:3f:a2:12:f3:cf:89:12:a3:3e:70:81:a0: 75:37:01:52:8c:ce:fe:90:0d:9b:9b:58:58:7c:ac: b9:60:0f:39:fa:25:ab:d9:f7:70:d5:52:c7:22:68: 53:44:c6:92:a1:0a:77:94:d5:98:a9:4b:96:c4:36: 04:89:52:81:76:64:a8:d5:38:0f:d0:ac:08:bd:f5: cf:60:7c:e3:a0:bb:f7:c4:21:6b:14:71:0b:a7:f0: d5:4a:3e:91:30:f5:9c:6f:8b:c9:dc:7c:19:60:32: 71:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D1:0E:D3:DE:40:9A:9C:4D:2E:86:3B:68:3F:8F:B4:85:58:D5:26 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:c800::/40 Signature Algorithm: sha256WithRSAEncryption c6:7e:fe:eb:3e:3e:4f:e2:58:6d:13:ed:ba:18:7f:00:52:be: 46:f5:b2:20:b8:28:07:04:bc:4b:59:5f:3a:de:d7:3d:1d:0c: e7:f9:10:bb:bc:94:1c:33:b0:b6:ca:73:cc:14:33:b1:b7:1f: 3c:cb:b6:6a:c4:a9:e0:8c:d4:06:a9:cb:9b:58:6e:55:1c:fe: 45:67:f3:20:e0:ca:08:44:58:08:a3:ab:cf:77:6d:5b:af:6f: 67:27:61:c8:b1:05:c4:f7:f4:a0:c3:5e:a0:2e:a4:73:15:ce: 3c:d4:51:c9:6a:60:cc:ee:f0:06:42:d1:09:52:af:01:07:6e: 77:97:ee:a4:d0:19:22:34:f2:c4:28:37:43:78:1d:3c:7e:19: f6:c7:af:6e:f1:31:50:9c:cb:52:f7:ba:5f:d2:cb:0f:ba:6c: 24:51:64:f9:46:f6:5a:81:c1:08:b4:45:5c:12:5b:48:7d:50: 87:60:81:d3:3a:53:6b:c4:66:d5:aa:3b:f9:cf:9f:38:7a:6c: 85:50:a7:cb:cb:aa:b7:fa:6d:bd:0a:ac:5c:4b:bd:2a:27:d0: e1:c6:a7:1b:f5:eb:bf:5c:12:5f:b5:dc:1c:02:59:3f:a4:c6: 08:2b:f1:f4:17:62:0e:10:a8:02:7a:7c:5b:35:f2:c8:9f:fd: 0a:e4:29:59 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGImz5A2TYYqUmtk7RWgNsRRnR8MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwNjAwMDExM1oX DTI1MDkxMDIzNTk1OVowejFJMEcGA1UEBRNANjY0MzM5YWQzNzVjNGQ3NGUxMjlm NTRkMWZkOTg3ZjU3OTZjMWY4ZmIwNGY2ZDIxMTYxMDk5MTUxMWFjMTQxZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Kp7HKWRKtL4uWeZZ/S8CnWA8c6D EA+1/CMU0yHwXCXnw/ZacABBRPRSxfrk6CinQJEflFCNB4AC2Vhq5/2Id1u/JwUq qWItN73IYLi60Q8cgUxnbVqHFJUJr1CnEp8fyEBGxT2C5jveE8gzhIKc6MWjA2O9 PPjXoy1bQkiP1kRD2Ch9l+dWjDS/mMS1DB453nmC8QP1U6g/ohLzz4kSoz5wgaB1 NwFSjM7+kA2bm1hYfKy5YA85+iWr2fdw1VLHImhTRMaSoQp3lNWYqUuWxDYEiVKB dmSo1TgP0KwIvfXPYHzjoLv3xCFrFHELp/DVSj6RMPWcb4vJ3HwZYDJxWwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOTRDtPeQJqcTS6GO2g/j7SFWNUmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzMDRmY2NkLWExOTQtNDBhNy05NzhkLWJkYjI1ODA3Y2ViZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba78gwDQYJKoZIhvcNAQELBQADggEBAMZ+/us+Pk/iWG0T7boY fwBSvkb1siC4KAcEvEtZXzre1z0dDOf5ELu8lBwzsLbKc8wUM7G3HzzLtmrEqeCM 1Aapy5tYblUc/kVn8yDgyghEWAijq893bVuvb2cnYcixBcT39KDDXqAupHMVzjzU UclqYMzu8AZC0QlSrwEHbneX7qTQGSI08sQoN0N4HTx+GfbHr27xMVCcy1L3ul/S yw+6bCRRZPlG9lqBwQi0RVwSW0h9UIdggdM6U2vEZtWqO/nPnzh6bIVQp8vLqrf6 bb0KrFxLvSon0OHGpxv1679cEl+13BwCWT+kxggr8fQXYg4QqAJ6fFs18sif/Qrk KVk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:13:51 2025 by rpki-client