$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3f319ba4-4f75-49fd-9a3b-a90c938a24af.roa File: 3f319ba4-4f75-49fd-9a3b-a90c938a24af.roa (raw, json) Hash identifier: pqDX8qEni09BIHNKkjpOxvKyl+pH6mpZ5AiRc+kuWg0= Subject key identifier: 8D:B5:4E:BB:87:5F:67:1A:B2:76:C9:E4:96:85:D1:4E:5C:F7:14:DC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 423049D497683C1E2A9CB683361DBCA4D38ABFA2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3f319ba4-4f75-49fd-9a3b-a90c938a24af.roa Signing time: Wed 13 Aug 2025 00:00:12 +0000 ROA not before: Wed 13 Aug 2025 00:00:12 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:30:49:d4:97:68:3c:1e:2a:9c:b6:83:36:1d:bc:a4:d3:8a:bf:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 13 00:00:12 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=ebce560d759889bffff013ecc7bbb3e3aa6f7a58da0438301b10f669e0f5a779, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:33:1d:63:95:a9:e8:e3:a6:60:b0:47:a4: 64:9c:17:3d:b1:80:f2:53:87:3d:91:43:74:cd:3e: f0:29:a2:3a:30:84:d3:20:88:60:49:15:83:b8:f9: 6d:7b:16:d5:71:bd:fe:99:bd:99:d2:8c:8c:42:b2: 98:1c:11:39:02:81:66:26:fe:20:4e:65:91:ff:f6: 90:53:65:57:fc:f0:04:84:96:3f:b0:fe:8b:50:e1: 83:22:a5:a4:cf:31:01:a4:1d:7b:65:be:dc:85:f4: a2:43:f2:72:73:a5:ae:fb:3f:0f:97:5e:93:c6:56: c1:13:3c:fa:62:7d:ce:84:35:b2:8a:95:43:fa:16: 20:4e:ca:2a:b6:74:30:40:8f:c4:03:67:a2:d5:a7: 3e:b0:c9:39:ab:f8:8e:31:3a:ec:87:e2:60:20:16: 87:62:bb:b0:a0:65:5e:92:3b:73:82:16:d4:e6:31: d6:d8:53:da:a1:be:b6:7d:e8:0d:84:ee:c2:63:a5: 57:97:1d:8b:8e:b5:94:bc:52:53:02:7b:32:cf:f2: f5:3f:c7:59:56:b8:bc:23:75:2a:f0:f3:24:f0:fa: df:4d:8f:a2:1a:b0:92:5b:91:77:4e:f6:b8:f7:eb: de:69:a1:80:1a:d0:ff:de:c9:93:50:2d:ba:ae:e1: 01:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B5:4E:BB:87:5F:67:1A:B2:76:C9:E4:96:85:D1:4E:5C:F7:14:DC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3f319ba4-4f75-49fd-9a3b-a90c938a24af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:4000::/40 Signature Algorithm: sha256WithRSAEncryption 07:3d:a9:9f:72:6a:83:03:b5:c2:3a:c6:5f:9d:04:01:af:3b: e4:44:84:2a:19:06:46:30:c7:06:cd:0a:8e:30:e5:b9:f0:d1: 2c:1d:50:c1:13:3e:9a:db:da:d3:87:6f:22:8e:bb:42:d0:bf: c0:ce:3c:e5:72:46:95:9d:48:00:09:9b:a6:6c:af:8b:d3:77: 92:f7:42:be:e3:d3:f1:50:84:19:34:68:a5:a7:24:70:30:54: 61:0a:dc:05:ea:40:79:36:3a:af:3a:79:b6:ae:13:62:c8:89: 7f:d9:36:cf:83:77:ca:04:10:0c:9d:f6:74:dc:c3:1d:a4:7b: 8f:aa:23:ee:aa:1c:a3:bc:5c:4d:ea:28:b9:c4:e9:2e:d8:4e: e4:54:56:38:d1:6c:d0:97:d9:dd:8b:ba:65:35:7d:9d:b0:bf: ad:6c:f6:7b:d3:a2:3b:6f:77:47:6b:18:55:fb:fd:a3:77:ec: a2:8d:15:bf:ca:bb:2e:13:ce:65:f5:cc:47:88:e6:ca:f6:d8: d7:ac:48:72:11:8b:d6:9e:a0:79:61:2e:1c:ef:ea:5f:da:b0: 0c:75:58:27:d4:0c:38:51:1e:77:e1:ef:42:ae:8e:e5:64:ba: 5a:45:2a:69:77:c6:5e:a3:d7:a5:aa:8b:52:37:bb:72:f4:08: d0:dc:ad:a2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQjBJ1JdoPB4qnLaDNh28pNOKv6IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxMzAwMDAxMloX DTI1MDkxNzIzNTk1OVowejFJMEcGA1UEBRNAZWJjZTU2MGQ3NTk4ODliZmZmZjAx M2VjYzdiYmIzZTNhYTZmN2E1OGRhMDQzODMwMWIxMGY2NjllMGY1YTc3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR4zHWOVqejjpmCwR6RknBc9sYDy U4c9kUN0zT7wKaI6MITTIIhgSRWDuPltexbVcb3+mb2Z0oyMQrKYHBE5AoFmJv4g TmWR//aQU2VX/PAEhJY/sP6LUOGDIqWkzzEBpB17Zb7chfSiQ/Jyc6Wu+z8Pl16T xlbBEzz6Yn3OhDWyipVD+hYgTsoqtnQwQI/EA2ei1ac+sMk5q/iOMTrsh+JgIBaH YruwoGVekjtzghbU5jHW2FPaob62fegNhO7CY6VXlx2LjrWUvFJTAnsyz/L1P8dZ Vri8I3Uq8PMk8PrfTY+iGrCSW5F3Tva49+veaaGAGtD/3smTUC26ruEBawIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI21TruHX2casnbJ5JaF0U5c9xTcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNmMzE5YmE0LTRmNzUtNDlmZC05YTNiLWE5MGM5MzhhMjRhZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMkAwDQYJKoZIhvcNAQELBQADggEBAAc9qZ9yaoMDtcI6xl+d BAGvO+REhCoZBkYwxwbNCo4w5bnw0SwdUMETPprb2tOHbyKOu0LQv8DOPOVyRpWd SAAJm6Zsr4vTd5L3Qr7j0/FQhBk0aKWnJHAwVGEK3AXqQHk2Oq86ebauE2LIiX/Z Ns+Dd8oEEAyd9nTcwx2ke4+qI+6qHKO8XE3qKLnE6S7YTuRUVjjRbNCX2d2LumU1 fZ2wv61s9nvTojtvd0drGFX7/aN37KKNFb/Kuy4TzmX1zEeI5sr22NesSHIRi9ae oHlhLhzv6l/asAx1WCfUDDhRHnfh70KujuVkulpFKml3xl6j16Wqi1I3u3L0CNDc raI= -----END CERTIFICATE-----Generated at Sat Aug 23 08:07:26 2025 by rpki-client