$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa File: 485da602-98f5-4e2b-890f-c254a3071aeb.roa (raw, json) Hash identifier: PCPdOm7F7P4UB++4MA9+ujG1rJfCUa8BKCV9hhzejVM= Subject key identifier: 0F:02:A1:CB:4C:42:54:C0:40:75:85:41:E2:BF:BC:32:5C:87:F7:55 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D2EE04B39107DDAA7EBFC3866B042A0F6B92B5B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa Signing time: Sat 16 Aug 2025 00:00:42 +0000 ROA not before: Sat 16 Aug 2025 00:00:42 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2a::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:2e:e0:4b:39:10:7d:da:a7:eb:fc:38:66:b0:42:a0:f6:b9:2b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 16 00:00:42 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=c5e6919cfd68922309b435b7ca3287e60ac5c5f67f8d7cefac04749aef454a60, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:6a:80:bf:a8:ad:6e:2a:d3:fa:27:df:f8: d0:9c:f3:83:71:02:2d:72:6d:90:79:0b:84:03:c2: a0:a1:64:5e:1f:81:e1:ed:d3:80:08:db:c0:7b:ae: e8:c3:e5:85:4f:94:1f:7f:aa:df:18:8d:d7:82:8c: 8e:c8:b6:c9:3c:d1:45:ea:19:a3:1a:22:56:30:2b: f2:d4:9a:cd:a6:ae:78:fa:96:9f:f6:82:f1:ee:1d: 6e:4c:a0:7a:e1:e0:50:a1:2b:0f:c0:4f:51:ff:53: 0e:47:e1:25:12:1d:95:09:d2:54:f9:47:d6:d7:f4: 63:02:43:cb:ec:f9:76:96:fd:b4:d0:3f:3c:4b:8c: 34:f0:75:da:f3:39:4e:4d:37:f3:f1:9d:15:5e:87: 3a:2c:06:c7:7b:dc:64:67:b9:63:89:b5:1d:90:99: 1f:b1:26:58:bf:99:4a:cf:10:76:8d:c8:05:25:c0: 26:78:23:2b:24:0a:86:b8:48:99:36:8f:3f:9e:3d: b4:e5:fa:e5:cf:74:90:2f:3c:d3:21:87:a8:d3:46: 04:fe:b9:2c:c4:56:5e:ce:81:19:d6:bd:81:f8:c8: 3d:6c:10:11:37:dd:68:af:68:06:26:f5:19:96:ed: 5f:ca:7a:6e:82:23:61:d4:a9:c4:a0:c9:49:91:42: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:02:A1:CB:4C:42:54:C0:40:75:85:41:E2:BF:BC:32:5C:87:F7:55 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2a::/36 Signature Algorithm: sha256WithRSAEncryption 54:f4:16:09:52:dc:b9:84:0e:33:bb:34:c4:a1:c4:2a:8d:38: 61:0e:f2:61:2c:e7:2e:9d:5f:42:2b:38:4d:d3:cc:44:d1:60: b6:b4:03:09:9e:83:12:ab:07:7d:19:09:ed:c8:e7:5b:a4:d1: 17:1d:6a:2c:31:cd:f5:aa:9d:d2:a7:14:be:bf:3d:d8:aa:26: fd:85:b6:d3:c8:e0:75:af:9f:60:03:49:29:91:92:2b:4e:6e: 99:85:a5:53:9a:a9:4c:f1:17:c8:65:7a:fe:58:59:8b:16:b9: 61:89:6c:eb:7d:57:74:7b:7a:b0:af:eb:95:b0:7e:f9:28:5e: 96:bd:59:58:5a:22:90:e3:06:2d:89:38:51:f9:de:55:57:c5: da:9d:f0:6d:09:82:cc:ff:13:99:ff:2d:7e:c6:bd:c7:5f:3a: 9f:67:f3:b0:12:72:43:bc:66:74:c2:ca:0a:79:13:a2:b5:12: 2a:2c:3b:4f:2a:b5:6f:67:7f:7b:81:d2:55:17:3b:04:b5:28: 73:bd:1a:e1:0f:fc:7d:c4:96:a6:37:07:23:5c:9a:bf:25:0f: 09:f9:02:34:1b:e2:47:f6:2a:fd:11:17:f7:64:c0:c0:ab:41: fe:33:f5:a9:7a:c1:2e:38:43:20:ee:b0:06:f4:5a:0b:8d:76: 23:38:70:6d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbS7gSzkQfdqn6/w4ZrBCoPa5K1swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNjAwMDA0MloX DTI1MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAYzVlNjkxOWNmZDY4OTIyMzA5YjQz NWI3Y2EzMjg3ZTYwYWM1YzVmNjdmOGQ3Y2VmYWMwNDc0OWFlZjQ1NGE2MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2pqgL+orW4q0/on3/jQnPODcQIt cm2QeQuEA8KgoWReH4Hh7dOACNvAe67ow+WFT5Qff6rfGI3XgoyOyLbJPNFF6hmj GiJWMCvy1JrNpq54+paf9oLx7h1uTKB64eBQoSsPwE9R/1MOR+ElEh2VCdJU+UfW 1/RjAkPL7Pl2lv200D88S4w08HXa8zlOTTfz8Z0VXoc6LAbHe9xkZ7ljibUdkJkf sSZYv5lKzxB2jcgFJcAmeCMrJAqGuEiZNo8/nj205frlz3SQLzzTIYeo00YE/rks xFZezoEZ1r2B+Mg9bBARN91or2gGJvUZlu1fynpugiNh1KnEoMlJkULGFwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA8CoctMQlTAQHWFQeK/vDJch/dVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ4NWRhNjAyLTk4ZjUtNGUyYi04OTBmLWMyNTRhMzA3MWFlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaKgAwDQYJKoZIhvcNAQELBQADggEBAFT0FglS3LmEDjO7NMSh xCqNOGEO8mEs5y6dX0IrOE3TzETRYLa0AwmegxKrB30ZCe3I51uk0RcdaiwxzfWq ndKnFL6/PdiqJv2FttPI4HWvn2ADSSmRkitObpmFpVOaqUzxF8hlev5YWYsWuWGJ bOt9V3R7erCv65WwfvkoXpa9WVhaIpDjBi2JOFH53lVXxdqd8G0Jgsz/E5n/LX7G vcdfOp9n87ASckO8ZnTCygp5E6K1EiosO08qtW9nf3uB0lUXOwS1KHO9GuEP/H3E lqY3ByNcmr8lDwn5AjQb4kf2Kv0RF/dkwMCrQf4z9al6wS44QyDusAb0WguNdiM4 cG0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:44 2025 by rpki-client