$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa File: 612ca3c6-0251-4029-8118-ab1be2a61379.roa (raw, json) Hash identifier: rTyvUXmCYX4JT2I4No8ab3PDya7EpT/w4zgms87nIAM= Subject key identifier: 46:EF:36:E2:22:2B:08:B8:DB:60:18:D9:73:A7:6C:16:64:13:40:29 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7E0CBD11DCE87CEF9F79B313ED1DB50C2B11D812 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa Signing time: Fri 22 Aug 2025 00:01:34 +0000 ROA not before: Fri 22 Aug 2025 00:01:34 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:0c:bd:11:dc:e8:7c:ef:9f:79:b3:13:ed:1d:b5:0c:2b:11:d8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 22 00:01:34 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=40c76f2d272e07866dcbad4fac1c28f35c1a5ff4e36089a20f5cd4f82e7df44c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:b7:3e:bb:74:2f:64:35:d2:69:2e:7a:62: ca:4c:19:de:0a:10:aa:8f:8e:92:92:cb:fa:a4:85: 95:e1:4c:1d:7f:15:14:a3:38:4b:d2:d1:0e:85:a9: 6f:ed:dd:72:cd:6c:6f:e6:39:b1:d0:2d:72:d4:68: 7c:e8:cb:06:fa:32:9f:08:3e:81:95:60:cb:23:27: 3f:86:1f:b2:d0:db:bc:54:5a:48:50:4f:f8:8b:8f: 68:ed:75:b8:4b:b8:5a:a7:79:3e:5a:00:ca:0f:6d: 9a:3f:59:fe:f1:12:7c:57:de:2e:14:c6:54:21:32: 62:64:eb:6e:68:ae:d0:aa:26:00:ff:82:f5:00:83: 29:54:07:3f:78:4f:4c:41:80:1a:92:ae:58:23:cf: fe:0a:03:c8:41:2a:f1:d2:97:ae:52:3e:1c:58:88: f9:da:b2:fd:94:90:8f:82:81:bf:73:d3:23:a0:a4: 70:a8:4e:ac:84:c9:66:64:76:59:2d:17:ea:76:bb: 01:fc:dc:9e:02:16:bd:1d:84:a3:6f:98:98:8e:2a: 58:a0:ae:ff:f3:41:9a:d4:a7:dd:08:ef:1d:e0:91: 4c:63:63:59:01:2b:cb:44:0c:e9:7a:7c:3e:e5:a5: c5:c7:9a:87:50:3a:33:b8:97:c9:fb:5e:26:73:54: 63:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EF:36:E2:22:2B:08:B8:DB:60:18:D9:73:A7:6C:16:64:13:40:29 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4040::/48 Signature Algorithm: sha256WithRSAEncryption 5b:fa:55:2d:14:7e:9b:e8:16:22:d7:2c:8c:c9:46:ae:63:ba: 18:d2:52:bf:ce:52:61:b4:98:ef:3f:bb:62:b9:39:a5:8d:ff: f9:d4:33:d5:0e:a0:ac:53:1f:78:07:9e:4b:b8:4c:80:c8:0b: 8b:9c:75:d9:df:23:5b:a7:90:9a:32:9f:49:f3:f1:d8:6f:1b: cf:ae:d1:b0:b7:d8:5d:e7:ce:b6:02:60:6f:a8:34:8c:bc:a6: 29:d8:45:50:5b:de:84:22:5b:bd:bf:06:bf:03:c5:7a:08:91: 84:da:b7:31:09:e5:ee:3a:84:7c:79:da:9c:2b:5c:dd:8e:ae: 41:41:9a:e0:f3:9e:e4:fc:be:02:f9:15:f5:4e:75:cf:a2:c0: ee:88:9d:73:34:f8:60:1a:ed:0b:8f:42:fe:fa:3d:46:dd:08: db:65:fa:5c:29:4e:78:da:6a:b0:26:fe:57:cd:5a:bd:9c:e8: 9f:b3:6b:93:4d:25:e8:6a:7b:68:36:73:03:3b:52:d7:ff:5f: 77:e7:21:51:62:03:20:cc:c1:17:75:ab:53:1a:fb:45:24:f2: b7:f4:c5:b2:ff:69:b3:2b:09:7e:0b:32:c7:67:9c:a9:b0:61: 7a:39:ea:11:26:9b:94:35:56:3e:e2:53:7d:66:f6:f2:50:3f: 6f:0a:85:35 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfgy9EdzofO+febMT7R21DCsR2BIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMjAwMDEzNFoX DTI1MDkyNjIzNTk1OVowejFJMEcGA1UEBRNANDBjNzZmMmQyNzJlMDc4NjZkY2Jh ZDRmYWMxYzI4ZjM1YzFhNWZmNGUzNjA4OWEyMGY1Y2Q0ZjgyZTdkZjQ0YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcm3Prt0L2Q10mkuemLKTBneChCq j46Sksv6pIWV4UwdfxUUozhL0tEOhalv7d1yzWxv5jmx0C1y1Gh86MsG+jKfCD6B lWDLIyc/hh+y0Nu8VFpIUE/4i49o7XW4S7hap3k+WgDKD22aP1n+8RJ8V94uFMZU ITJiZOtuaK7QqiYA/4L1AIMpVAc/eE9MQYAakq5YI8/+CgPIQSrx0peuUj4cWIj5 2rL9lJCPgoG/c9MjoKRwqE6shMlmZHZZLRfqdrsB/NyeAha9HYSjb5iYjipYoK7/ 80Ga1KfdCO8d4JFMY2NZASvLRAzpenw+5aXFx5qHUDozuJfJ+14mc1RjMwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEbvNuIiKwi422AY2XOnbBZkE0ApMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxMmNhM2M2LTAyNTEtNDAyOS04MTE4LWFiMWJlMmE2MTM3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0BAMA0GCSqGSIb3DQEBCwUAA4IBAQBb+lUtFH6b6BYi1yyM yUauY7oY0lK/zlJhtJjvP7tiuTmljf/51DPVDqCsUx94B55LuEyAyAuLnHXZ3yNb p5CaMp9J8/HYbxvPrtGwt9hd5862AmBvqDSMvKYp2EVQW96EIlu9vwa/A8V6CJGE 2rcxCeXuOoR8edqcK1zdjq5BQZrg857k/L4C+RX1TnXPosDuiJ1zNPhgGu0Lj0L+ +j1G3QjbZfpcKU542mqwJv5XzVq9nOifs2uTTSXoantoNnMDO1LX/1935yFRYgMg zMEXdatTGvtFJPK39MWy/2mzKwl+CzLHZ5ypsGF6OeoRJpuUNVY+4lN9ZvbyUD9v CoU1 -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:20 2025 by rpki-client