$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6847be47-f4ca-4d44-9aa3-778c0a0660b3.roa File: 6847be47-f4ca-4d44-9aa3-778c0a0660b3.roa (raw, json) Hash identifier: dssT46LVzXJZpOLdamxMV1sUq5RILDb7fUtQbxCN0oY= Subject key identifier: 65:7B:2B:89:27:68:F8:A0:D2:42:D1:2B:1A:9E:56:35:5F:C2:FC:EE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 75C95978AE7636A92D745687FBCD2A22BE7D2C4F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6847be47-f4ca-4d44-9aa3-778c0a0660b3.roa Signing time: Sat 23 Aug 2025 00:01:21 +0000 ROA not before: Sat 23 Aug 2025 00:01:21 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c9:59:78:ae:76:36:a9:2d:74:56:87:fb:cd:2a:22:be:7d:2c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:01:21 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=fd10b5d0387b3f9c6478338dd8ba5a87e843be9104a5232865289b381546376e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:d8:a9:6a:cc:91:15:c5:ba:01:76:0d:e9: a8:c5:6b:34:b8:a3:36:69:7e:c1:18:91:65:d2:a2: 74:60:ef:64:18:5c:fc:f6:32:e8:e4:88:af:68:5f: 82:8b:af:8b:44:04:4e:31:5d:4f:08:dc:48:fc:09: 2f:63:a6:01:9f:d7:b7:51:de:fd:97:42:e9:80:54: ec:1b:81:89:3c:d9:b3:92:d8:e4:09:4b:fe:58:f6: 75:5a:ae:6d:98:fd:8a:4d:2f:98:28:d6:7e:56:ff: ac:ea:22:d1:41:47:d9:59:aa:59:2a:25:69:9a:24: b0:fe:3e:25:15:0a:33:8a:f3:c7:c2:d1:db:03:0b: 34:61:6c:e7:77:e6:97:03:77:05:98:a3:ff:db:f0: 48:df:9c:61:a7:91:b0:39:35:cf:dc:64:16:de:95: 07:de:43:2b:89:74:f6:86:db:be:10:48:5b:44:ca: 9b:04:8f:56:e9:97:86:59:84:ad:42:3b:c1:0d:10: f0:a6:4e:8a:91:4a:81:71:97:75:1d:93:c1:e3:60: 85:c4:a3:3d:79:3c:f2:76:c0:cf:bd:e3:ac:d0:e8: 89:cb:b9:ce:31:23:f9:47:01:8e:03:e7:ed:1b:cb: d0:b2:52:76:5b:1a:a5:ad:ea:e3:13:d9:4d:a8:76: 32:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7B:2B:89:27:68:F8:A0:D2:42:D1:2B:1A:9E:56:35:5F:C2:FC:EE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6847be47-f4ca-4d44-9aa3-778c0a0660b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:840::/48 Signature Algorithm: sha256WithRSAEncryption 76:63:76:fd:7b:c3:bc:b5:47:5a:85:a2:86:e2:18:66:fe:96: 7d:6e:f0:69:46:f7:2e:2c:ce:6d:22:e8:96:61:9a:12:51:b5: 58:9a:82:59:64:6b:91:65:2c:40:9c:66:5b:4f:05:d8:b0:21: 67:8d:13:74:47:ce:94:6f:94:b4:d2:63:cd:8d:8c:0b:1a:14: 4f:63:48:97:0f:5a:59:36:13:8e:92:d2:ae:7c:08:be:31:09: a2:d4:ee:ed:1b:17:bf:64:dc:28:e7:fb:e6:2d:c7:9b:28:75: fa:52:16:6c:a6:27:69:a2:92:cf:a2:6f:4a:a1:44:c8:35:d4: 29:dc:e1:8a:7c:e3:1c:09:00:c7:a7:06:7e:25:44:ff:db:e7: 0f:9e:e4:ad:b2:13:39:ac:18:2a:bf:9e:f5:6c:7a:db:04:0d: 87:35:49:bc:f4:a0:1e:49:95:d3:46:b7:3d:b3:af:a0:c0:a0: cb:a0:07:33:57:d5:71:76:c2:55:b6:63:4d:f7:00:89:82:4d: c4:91:f2:4a:4a:b3:67:3d:2a:61:86:3d:82:40:72:42:8c:be: 6a:37:d2:77:a2:99:ff:f7:fc:db:68:8c:7f:3f:9a:36:e4:24: 4f:35:62:56:8c:74:ca:d7:36:88:27:a9:2a:4b:14:f0:ff:80: f1:5b:74:41 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdclZeK52NqktdFaH+80qIr59LE8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMDEyMVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAZmQxMGI1ZDAzODdiM2Y5YzY0Nzgz MzhkZDhiYTVhODdlODQzYmU5MTA0YTUyMzI4NjUyODliMzgxNTQ2Mzc2ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtejYqWrMkRXFugF2DemoxWs0uKM2 aX7BGJFl0qJ0YO9kGFz89jLo5IivaF+Ci6+LRAROMV1PCNxI/AkvY6YBn9e3Ud79 l0LpgFTsG4GJPNmzktjkCUv+WPZ1Wq5tmP2KTS+YKNZ+Vv+s6iLRQUfZWapZKiVp miSw/j4lFQozivPHwtHbAws0YWznd+aXA3cFmKP/2/BI35xhp5GwOTXP3GQW3pUH 3kMriXT2htu+EEhbRMqbBI9W6ZeGWYStQjvBDRDwpk6KkUqBcZd1HZPB42CFxKM9 eTzydsDPveOs0OiJy7nOMSP5RwGOA+ftG8vQslJ2WxqlrerjE9lNqHYyjQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGV7K4knaPig0kLRKxqeVjVfwvzuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY4NDdiZTQ3LWY0Y2EtNGQ0NC05YWEzLTc3OGMwYTA2NjBiMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYQhAMA0GCSqGSIb3DQEBCwUAA4IBAQB2Y3b9e8O8tUdahaKG 4hhm/pZ9bvBpRvcuLM5tIuiWYZoSUbVYmoJZZGuRZSxAnGZbTwXYsCFnjRN0R86U b5S00mPNjYwLGhRPY0iXD1pZNhOOktKufAi+MQmi1O7tGxe/ZNwo5/vmLcebKHX6 UhZspidpopLPom9KoUTINdQp3OGKfOMcCQDHpwZ+JUT/2+cPnuStshM5rBgqv571 bHrbBA2HNUm89KAeSZXTRrc9s6+gwKDLoAczV9VxdsJVtmNN9wCJgk3EkfJKSrNn PSphhj2CQHJCjL5qN9J3opn/9/zbaIx/P5o25CRPNWJWjHTK1zaIJ6kqSxTw/4Dx W3RB -----END CERTIFICATE-----Generated at Sat Aug 23 06:47:07 2025 by rpki-client