$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa File: 652666fe-aad6-4cd8-8e35-91322c742337.roa (raw, json) Hash identifier: VInt37w7zSccXbwlguTPgXcAWIdcosyKZdXlKBZuUw8= Subject key identifier: 7D:BB:78:71:A0:91:0D:4D:1B:A9:77:E6:7E:AB:5C:E0:B4:26:90:68 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 38C01A9C14D3705333FCAA5A6F7CE990E32BAE21 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa Signing time: Sat 23 Aug 2025 00:20:25 +0000 ROA not before: Sat 23 Aug 2025 00:20:25 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c0:1a:9c:14:d3:70:53:33:fc:aa:5a:6f:7c:e9:90:e3:2b:ae:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:20:25 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=f524fbbb4ad78c8350d0e69c9bf33253eeaa201bb66816f2d07425b6e964b065, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:6c:57:cd:94:ba:6c:fa:79:e8:bd:b1:78: db:ae:ec:6b:6b:f2:cf:85:46:a0:83:62:c7:a0:ff: ed:4f:b4:27:fa:e3:1c:66:0a:f8:53:8b:a4:4a:0e: 7f:fc:ed:2e:b3:69:86:e7:32:51:42:35:5f:34:4e: 95:4f:5e:ad:72:04:c1:9d:20:53:57:ae:6a:cc:f2: 0c:3a:71:90:b9:b9:bf:36:ba:02:71:85:4d:9f:d3: 0d:7a:ad:18:88:1a:93:7e:8d:9c:3b:6f:bf:70:c0: ed:9e:70:72:c8:ab:dc:66:13:a2:51:79:eb:39:53: 4c:4e:c8:50:75:b2:12:32:c7:f6:a5:a5:c2:53:a4: 88:f9:25:81:3c:94:1a:4b:1b:c1:c1:5c:87:84:79: d1:c6:34:79:45:ef:6d:3a:97:b0:ee:2d:ba:fe:f5: a8:ab:9e:d6:0e:57:ab:c1:d1:84:fa:ea:00:73:40: 93:10:04:0f:4d:da:6f:5a:c6:76:b5:9b:bb:d4:ac: 49:10:31:bf:e1:43:84:2b:f7:c7:33:78:eb:63:cd: 9a:60:84:7d:f4:e5:1b:30:e2:71:cb:16:04:e1:3e: 52:b3:c7:24:71:57:60:e9:f6:e5:a4:8a:ba:ce:f5: 53:22:ed:76:c0:b6:d9:c0:48:7f:64:19:c3:36:f7: ee:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BB:78:71:A0:91:0D:4D:1B:A9:77:E6:7E:AB:5C:E0:B4:26:90:68 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9000::/40 Signature Algorithm: sha256WithRSAEncryption 2e:a3:24:10:80:8a:f2:3d:c1:87:e1:aa:77:65:71:a6:17:f5: eb:13:d5:c6:ae:d4:e9:31:23:17:d6:33:38:77:7b:2c:e0:d1: d0:0b:45:ba:fe:13:2e:f7:b6:36:a5:34:dc:fb:05:38:39:db: 92:99:da:7f:4b:57:25:ba:cc:b8:d8:d8:7a:4c:3f:d6:d4:d3: 8a:d6:05:7e:81:7f:07:4d:85:c5:28:42:19:bf:be:0e:16:b2: c2:c5:58:e8:71:4f:81:35:54:f5:55:41:00:85:5c:1e:4d:df: 93:5b:a5:95:25:74:7b:11:9f:3b:74:48:4e:2a:f8:76:2e:4b: be:69:bd:ff:89:25:89:ef:c7:ea:05:dc:68:3c:da:c1:de:7f: a4:77:03:e1:e2:72:4f:7b:b5:03:f2:69:83:03:c6:86:e7:89: b7:0c:2f:50:58:77:64:7a:5e:fc:1f:cf:d7:36:08:8a:f7:25: d6:34:6f:8c:67:b3:c6:44:1a:79:90:8a:c2:f0:37:60:5c:92: 86:13:bb:ba:7b:f4:51:ea:11:83:8d:29:02:6c:a1:9b:d8:19: 7f:6f:f7:ee:88:f2:aa:66:0e:32:ff:51:55:83:39:74:11:13: e2:57:09:69:e9:b8:2c:b1:f5:16:23:06:b4:f7:d9:49:d4:27: af:61:0b:40 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOMAanBTTcFMz/Kpab3zpkOMrriEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMjAyNVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAZjUyNGZiYmI0YWQ3OGM4MzUwZDBl NjljOWJmMzMyNTNlZWFhMjAxYmI2NjgxNmYyZDA3NDI1YjZlOTY0YjA2NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJdsV82Uumz6eei9sXjbruxra/LP hUagg2LHoP/tT7Qn+uMcZgr4U4ukSg5//O0us2mG5zJRQjVfNE6VT16tcgTBnSBT V65qzPIMOnGQubm/NroCcYVNn9MNeq0YiBqTfo2cO2+/cMDtnnByyKvcZhOiUXnr OVNMTshQdbISMsf2paXCU6SI+SWBPJQaSxvBwVyHhHnRxjR5Re9tOpew7i26/vWo q57WDlerwdGE+uoAc0CTEAQPTdpvWsZ2tZu71KxJEDG/4UOEK/fHM3jrY82aYIR9 9OUbMOJxyxYE4T5Ss8ckcVdg6fblpIq6zvVTIu12wLbZwEh/ZBnDNvfuoQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH27eHGgkQ1NG6l35n6rXOC0JpBoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY1MjY2NmZlLWFhZDYtNGNkOC04ZTM1LTkxMzIyYzc0MjMzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/5AwDQYJKoZIhvcNAQELBQADggEBAC6jJBCAivI9wYfhqndl caYX9esT1cau1OkxIxfWMzh3eyzg0dALRbr+Ey73tjalNNz7BTg525KZ2n9LVyW6 zLjY2HpMP9bU04rWBX6BfwdNhcUoQhm/vg4WssLFWOhxT4E1VPVVQQCFXB5N35Nb pZUldHsRnzt0SE4q+HYuS75pvf+JJYnvx+oF3Gg82sHef6R3A+Hick97tQPyaYMD xobnibcML1BYd2R6Xvwfz9c2CIr3JdY0b4xns8ZEGnmQisLwN2BckoYTu7p79FHq EYONKQJsoZvYGX9v9+6I8qpmDjL/UVWDOXQRE+JXCWnpuCyx9RYjBrT32UnUJ69h C0A= -----END CERTIFICATE-----Generated at Sat Aug 23 06:47:09 2025 by rpki-client