$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75997448-5993-4bc5-85e4-cbc4b4860346.roa File: 75997448-5993-4bc5-85e4-cbc4b4860346.roa (raw, json) Hash identifier: IbkFlM243bDDGSL2AUc/VxVKXJPL0rIhr/1caI625pY= Subject key identifier: 2F:C2:E7:A7:A0:A7:37:23:95:C7:98:80:5B:AD:B7:7C:44:0F:59:78 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2ACAB98E5139CC7B546BB1CFAC1E50A8999B0000 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75997448-5993-4bc5-85e4-cbc4b4860346.roa Signing time: Mon 18 Aug 2025 15:01:31 +0000 ROA not before: Mon 18 Aug 2025 15:01:31 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ca:b9:8e:51:39:cc:7b:54:6b:b1:cf:ac:1e:50:a8:99:9b:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 15:01:31 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=a98147a0c242fbbdb4e29581a55a1ddf3042a28d44174b50750586376f3291cc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:8c:e2:77:87:83:dc:42:90:09:a6:00:c1: e0:d6:23:d9:0d:38:cd:51:f0:30:5a:40:7d:dd:e4: 9f:d6:57:6c:3a:c3:fe:4e:75:64:5e:49:4e:e2:e5: 70:7c:81:7b:72:18:08:5a:ae:aa:09:d8:08:bf:68: a4:50:65:c2:71:c4:c3:5f:b9:a4:74:79:7d:68:17: c8:ee:84:f8:96:08:f9:af:71:5b:5b:5a:b4:28:2d: 7d:f2:12:cd:1e:2f:b1:5f:6a:ff:28:d1:ba:11:b2: b1:2a:cc:cd:37:89:5f:92:53:d9:13:8f:1b:aa:36: 1a:e0:c5:90:f7:b4:5a:b6:e0:38:9c:ed:00:eb:ea: c6:9d:f1:2c:63:6b:1f:1a:3a:d0:2e:c4:60:55:5b: 69:9a:f4:bc:df:ca:44:9a:b4:98:3e:ab:b3:51:1f: 7b:d1:01:47:28:6b:e3:3e:62:e5:40:6e:23:c3:62: 29:9b:dd:b5:e1:74:3c:17:24:20:88:47:e5:30:aa: d0:26:8e:23:08:82:24:1d:eb:6d:50:38:0f:b8:1c: af:27:07:23:8f:9c:b5:1c:91:70:ef:b1:59:78:4c: a5:cb:60:9b:f0:d1:51:40:8b:ff:45:ea:f1:3a:fc: 76:d0:b4:f2:f9:95:ad:c3:b1:f3:f9:e2:84:b0:1e: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C2:E7:A7:A0:A7:37:23:95:C7:98:80:5B:AD:B7:7C:44:0F:59:78 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75997448-5993-4bc5-85e4-cbc4b4860346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:f000::/40 Signature Algorithm: sha256WithRSAEncryption 55:8f:55:0a:68:bf:76:e6:ae:eb:1e:0e:17:dc:25:a3:9c:7c: 20:34:df:4c:30:22:79:b1:99:c3:75:fd:b1:9f:3b:83:24:14: c9:c5:59:41:b6:67:72:71:4f:c4:69:ce:fa:c1:00:31:98:8c: a0:0d:90:10:e3:ee:98:5b:17:ac:90:b1:d7:bc:d3:33:5d:63: bd:f1:ac:c0:76:22:27:2a:5b:8a:4f:c1:ec:95:70:3a:e4:36: b2:de:61:e5:fa:58:6d:65:f1:f3:e6:c8:df:6b:8d:45:ee:c7: c8:b9:73:ec:81:c3:b9:d3:e5:67:d6:48:e2:b2:b8:60:57:ba: 31:e9:64:2f:bd:57:50:74:63:7a:30:7e:d7:26:d3:10:b1:6f: 7b:6e:d2:f3:71:e1:92:3c:b8:f4:23:b7:37:d4:0a:21:0d:88: f5:f7:7a:b0:2c:81:a4:c8:f8:67:ee:1b:85:0a:47:32:5a:8d: b3:b1:e9:e4:9e:9f:1d:b3:f1:f0:af:04:4f:1c:ce:3b:5a:28: fb:45:0d:f7:b3:a6:54:30:bf:66:51:65:64:6b:f8:a1:01:81: 15:ce:dc:30:45:e0:b6:54:d5:fe:c4:66:c0:6d:14:c8:03:90: 2d:b6:3f:9a:28:c7:65:b8:cd:76:ad:bf:cf:7e:80:66:dc:40: 9f:9b:2e:fc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKsq5jlE5zHtUa7HPrB5QqJmbAAAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE1MDEzMVoX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNAYTk4MTQ3YTBjMjQyZmJiZGI0ZTI5 NTgxYTU1YTFkZGYzMDQyYTI4ZDQ0MTc0YjUwNzUwNTg2Mzc2ZjMyOTFjYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvmM4neHg9xCkAmmAMHg1iPZDTjN UfAwWkB93eSf1ldsOsP+TnVkXklO4uVwfIF7chgIWq6qCdgIv2ikUGXCccTDX7mk dHl9aBfI7oT4lgj5r3FbW1q0KC198hLNHi+xX2r/KNG6EbKxKszNN4lfklPZE48b qjYa4MWQ97RatuA4nO0A6+rGnfEsY2sfGjrQLsRgVVtpmvS838pEmrSYPquzUR97 0QFHKGvjPmLlQG4jw2Ipm9214XQ8FyQgiEflMKrQJo4jCIIkHettUDgPuByvJwcj j5y1HJFw77FZeEyly2Cb8NFRQIv/RerxOvx20LTy+ZWtw7Hz+eKEsB7UuwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC/C56egpzcjlceYgFutt3xED1l4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc1OTk3NDQ4LTU5OTMtNGJjNS04NWU0LWNiYzRiNDg2MDM0Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9PAwDQYJKoZIhvcNAQELBQADggEBAFWPVQpov3bmruseDhfc JaOcfCA030wwInmxmcN1/bGfO4MkFMnFWUG2Z3JxT8RpzvrBADGYjKANkBDj7phb F6yQsde80zNdY73xrMB2IicqW4pPweyVcDrkNrLeYeX6WG1l8fPmyN9rjUXux8i5 c+yBw7nT5WfWSOKyuGBXujHpZC+9V1B0Y3owftcm0xCxb3tu0vNx4ZI8uPQjtzfU CiENiPX3erAsgaTI+GfuG4UKRzJajbOx6eSenx2z8fCvBE8czjtaKPtFDfezplQw v2ZRZWRr+KEBgRXO3DBF4LZU1f7EZsBtFMgDkC22P5oox2W4zXatv89+gGbcQJ+b Lvw= -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:26 2025 by rpki-client