$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445e07c8-dbb7-4484-87fd-500b1490bbe7.roa File: 445e07c8-dbb7-4484-87fd-500b1490bbe7.roa (raw, json) Hash identifier: DP1AtlyYm3H+bwhfb6+8jLOkQjxDBW5UsRSuyqgMHq0= Subject key identifier: 2B:1C:52:52:32:F9:4C:0D:4F:B0:74:FC:6C:E9:3D:9C:C6:9E:C2:F7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3429790ECDB9DA5E242752BE85B3DFEF3E5362F6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445e07c8-dbb7-4484-87fd-500b1490bbe7.roa Signing time: Sat 23 Aug 2025 00:30:25 +0000 ROA not before: Sat 23 Aug 2025 00:30:25 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:29:79:0e:cd:b9:da:5e:24:27:52:be:85:b3:df:ef:3e:53:62:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:30:25 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=cafebed4baf0721406949e6c2c8247a052979cb31502eeff8470f4887b04bc33, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:d4:78:35:cb:80:51:bb:66:8c:20:b0:de: f7:e4:4d:bb:81:6a:ac:4d:9c:b8:58:6a:73:27:e5: f9:e0:38:15:28:cf:74:96:7e:b1:58:81:b5:c9:9f: f3:a3:48:c1:03:ac:1f:6d:8f:7f:0f:f3:88:bf:af: a8:75:68:8b:82:13:e5:9b:76:a0:f5:23:a9:7b:0a: 62:43:18:36:73:c0:4c:3a:21:86:cb:01:96:47:bf: 6f:83:ad:a3:de:82:a2:c4:ca:24:46:65:b7:48:55: b5:dc:9e:d3:63:c1:77:26:f2:b3:a6:eb:b1:00:3b: f1:31:4a:ac:43:74:6f:89:90:e4:e5:22:22:7a:a7: 3e:19:e8:cf:b9:da:62:2a:d7:12:41:ba:9f:91:f2: e4:05:8d:06:aa:ef:d4:c6:0e:fb:9d:a5:8c:4a:a1: 40:f7:fe:42:c1:4e:a5:60:81:59:9d:5a:9e:d2:04: 3b:93:0c:7d:c5:7b:08:c5:aa:e9:d0:cc:ec:25:97: 3b:d5:26:82:90:55:52:08:41:e2:9a:8b:25:77:16: 50:76:df:41:2d:62:bb:a3:30:87:a8:b5:64:90:08: a8:2a:b8:8d:30:e2:74:7f:c9:18:3a:a9:7e:6f:4c: c3:87:b2:33:25:86:f3:78:7d:c5:53:66:43:9c:d5: 15:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1C:52:52:32:F9:4C:0D:4F:B0:74:FC:6C:E9:3D:9C:C6:9E:C2:F7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445e07c8-dbb7-4484-87fd-500b1490bbe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 4b:f5:f6:e9:60:ba:36:4a:69:84:58:50:0b:13:86:b7:5c:b2: 13:df:d5:63:c6:14:62:a1:66:0a:fe:c8:b5:1b:49:ce:8c:fa: 4c:f0:bc:de:76:f2:25:a3:69:6b:9c:e2:d3:98:11:ae:d1:f4: 91:b4:bf:72:80:d8:48:c9:35:cb:65:21:9e:9e:29:19:70:94: c9:b0:31:15:cf:ad:47:d0:87:c3:46:7e:52:fe:f3:52:af:bc: ef:34:20:18:5d:67:0a:a9:e8:0d:b9:b0:33:a2:30:07:3e:eb: 7f:73:75:cb:a8:95:15:f6:e2:b2:e3:c9:63:b3:af:83:05:67: 81:e2:f9:87:fc:a8:f3:14:55:98:b3:da:e4:48:30:10:7a:0a: 73:f9:a0:6d:0d:1e:71:45:a0:ac:d8:72:82:a5:55:30:1d:83: 43:84:3a:50:f0:ed:f1:88:af:d7:29:c1:a7:f9:06:7f:73:7b: 49:88:5f:1c:32:f1:c9:cc:d3:c2:94:bd:38:52:19:47:ea:46: 74:34:7e:d8:e6:3f:73:aa:f5:cb:a6:e3:5a:a6:bc:b3:81:58: f1:e3:87:98:7f:53:56:cc:92:85:75:6a:c8:df:fe:69:27:dd: d2:ae:be:d3:fe:92:d5:54:88:3a:43:4b:68:93:ec:fd:03:b6: 89:3f:8d:4c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNCl5Ds252l4kJ1K+hbPf7z5TYvYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMzAyNVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAY2FmZWJlZDRiYWYwNzIxNDA2OTQ5 ZTZjMmM4MjQ3YTA1Mjk3OWNiMzE1MDJlZWZmODQ3MGY0ODg3YjA0YmMzMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq77UeDXLgFG7ZowgsN735E27gWqs TZy4WGpzJ+X54DgVKM90ln6xWIG1yZ/zo0jBA6wfbY9/D/OIv6+odWiLghPlm3ag 9SOpewpiQxg2c8BMOiGGywGWR79vg62j3oKixMokRmW3SFW13J7TY8F3JvKzpuux ADvxMUqsQ3RviZDk5SIieqc+GejPudpiKtcSQbqfkfLkBY0Gqu/Uxg77naWMSqFA 9/5CwU6lYIFZnVqe0gQ7kwx9xXsIxarp0MzsJZc71SaCkFVSCEHimosldxZQdt9B LWK7ozCHqLVkkAioKriNMOJ0f8kYOql+b0zDh7IzJYbzeH3FU2ZDnNUVpwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCscUlIy+UwNT7B0/GzpPZzGnsL3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0NWUwN2M4LWRiYjctNDQ4NC04N2ZkLTUwMGIxNDkwYmJlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yjAMA0GCSqGSIb3DQEBCwUAA4IBAQBL9fbpYLo2SmmEWFAL E4a3XLIT39VjxhRioWYK/si1G0nOjPpM8LzedvIlo2lrnOLTmBGu0fSRtL9ygNhI yTXLZSGenikZcJTJsDEVz61H0IfDRn5S/vNSr7zvNCAYXWcKqegNubAzojAHPut/ c3XLqJUV9uKy48ljs6+DBWeB4vmH/KjzFFWYs9rkSDAQegpz+aBtDR5xRaCs2HKC pVUwHYNDhDpQ8O3xiK/XKcGn+QZ/c3tJiF8cMvHJzNPClL04UhlH6kZ0NH7Y5j9z qvXLpuNapryzgVjx44eYf1NWzJKFdWrI3/5pJ93Srr7T/pLVVIg6Q0tok+z9A7aJ P41M -----END CERTIFICATE-----Generated at Sat Aug 23 06:44:40 2025 by rpki-client