$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/809f0c96-bf0f-41ef-a664-a5509c777eb1.roa File: 809f0c96-bf0f-41ef-a664-a5509c777eb1.roa (raw, json) Hash identifier: v5oSq4jVABvKmzhIzr87lfeuK3vBxRt4jIQlHf1fPzo= Subject key identifier: 19:21:71:6F:86:4B:28:4A:75:AA:F9:10:7C:9F:9D:40:FF:EE:CA:47 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 173C935AD6E79E018256556BF70C2D9C0875602E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/809f0c96-bf0f-41ef-a664-a5509c777eb1.roa Signing time: Fri 15 Aug 2025 00:11:15 +0000 ROA not before: Fri 15 Aug 2025 00:11:15 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3c:93:5a:d6:e7:9e:01:82:56:55:6b:f7:0c:2d:9c:08:75:60:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:11:15 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=1f238804d56ed603bad3d9b6bbf91155cb113bea6ff08d84d23ffece12ebc09a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:63:8f:a6:8a:cf:2c:9f:91:ec:6e:01:69: 5e:d9:1f:8a:d8:b7:1d:5e:42:aa:69:8a:0a:a9:cb: e3:2d:36:53:dc:8f:00:2b:ad:05:6f:62:5b:4f:3b: fe:73:7f:83:2b:62:4c:bd:de:4d:03:05:f9:84:00: 44:0e:24:87:6e:ad:04:69:f9:86:dc:49:52:35:a8: 7b:6e:e1:e0:fc:15:77:7d:ba:72:e3:ad:a9:f0:e8: 9c:c7:af:35:4d:75:40:7b:41:e0:41:73:4c:32:ef: 9a:01:7a:bf:ba:08:7b:bb:c1:eb:1d:3e:01:8a:99: 9d:ef:6f:d9:4b:9d:09:8d:2d:67:3f:76:87:46:e5: 40:0c:f5:67:6e:0d:0c:7d:4c:8d:ab:b5:72:7a:5e: 22:83:fe:ed:a0:a0:c0:30:e6:22:d5:2a:d7:b9:bb: 1c:a1:92:d8:3b:93:ca:60:90:47:10:71:7c:0d:0b: 98:af:c8:1b:7f:cd:9e:83:31:61:b9:eb:a2:8e:d4: dc:c0:61:37:9a:9b:df:9f:69:a9:39:57:49:37:12: 36:9a:60:d1:7b:da:e1:46:ad:75:49:dc:15:e5:60: c6:c3:56:25:76:87:2b:0c:5f:cf:c2:ff:85:fe:d4: d6:f7:06:47:04:d1:44:a4:1c:ca:ee:1e:59:55:9f: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:21:71:6F:86:4B:28:4A:75:AA:F9:10:7C:9F:9D:40:FF:EE:CA:47 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/809f0c96-bf0f-41ef-a664-a5509c777eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:6000::/40 Signature Algorithm: sha256WithRSAEncryption c7:36:3a:2c:d5:3f:88:58:73:dd:c4:b5:a1:f7:15:6e:a3:54: 2b:79:dd:85:5a:32:4f:aa:53:c4:1f:4e:26:b3:df:44:2c:89: de:5e:52:f9:e2:9b:4f:ec:16:21:f5:b6:4d:ea:aa:e0:df:c3: 19:cd:a1:5d:b0:8e:2d:36:bf:9f:da:06:a8:d7:1c:ce:0b:be: 47:80:2a:4e:a6:7b:6c:4a:09:a3:ec:cc:c2:31:a0:7d:96:76: 5f:bf:b8:4d:75:ad:54:ae:09:c8:2d:bd:5b:22:38:ac:cf:a2: c6:54:0b:38:f4:c0:61:1f:ce:95:ff:1a:a1:af:f0:ed:ed:5b: c8:ce:66:f5:07:33:02:19:18:09:69:57:0e:0d:49:bd:3e:65: 07:1b:a9:04:23:7f:31:08:6c:00:c4:48:9c:0e:95:d1:4c:a4: 30:58:c3:f3:05:80:a0:a2:0e:d8:d9:62:c1:fc:13:48:35:99: ff:37:57:6a:20:46:0c:83:54:9b:9d:7f:4d:97:ef:75:71:e3: b2:0e:00:a6:92:2a:8d:e6:27:33:e2:1f:d3:9a:12:d8:23:2e: 6a:a2:91:87:21:0b:85:09:e7:54:4b:6a:f4:66:a3:97:57:60: b9:8f:bb:2c:99:fe:cb:19:b7:ac:c4:9c:bf:32:e0:58:2d:8c: 00:aa:b0:92 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFzyTWtbnngGCVlVr9wwtnAh1YC4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTExNVoX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNAMWYyMzg4MDRkNTZlZDYwM2JhZDNk OWI2YmJmOTExNTVjYjExM2JlYTZmZjA4ZDg0ZDIzZmZlY2UxMmViYzA5YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4djj6aKzyyfkexuAWle2R+K2Lcd XkKqaYoKqcvjLTZT3I8AK60Fb2JbTzv+c3+DK2JMvd5NAwX5hABEDiSHbq0EafmG 3ElSNah7buHg/BV3fbpy462p8Oicx681TXVAe0HgQXNMMu+aAXq/ugh7u8HrHT4B ipmd72/ZS50JjS1nP3aHRuVADPVnbg0MfUyNq7Vyel4ig/7toKDAMOYi1SrXubsc oZLYO5PKYJBHEHF8DQuYr8gbf82egzFhueuijtTcwGE3mpvfn2mpOVdJNxI2mmDR e9rhRq11SdwV5WDGw1YldocrDF/Pwv+F/tTW9wZHBNFEpBzK7h5ZVZ8gxwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBkhcW+GSyhKdar5EHyfnUD/7spHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwOWYwYzk2LWJmMGYtNDFlZi1hNjY0LWE1NTA5Yzc3N2ViMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9WAwDQYJKoZIhvcNAQELBQADggEBAMc2OizVP4hYc93EtaH3 FW6jVCt53YVaMk+qU8QfTiaz30Qsid5eUvnim0/sFiH1tk3qquDfwxnNoV2wji02 v5/aBqjXHM4LvkeAKk6me2xKCaPszMIxoH2Wdl+/uE11rVSuCcgtvVsiOKzPosZU Czj0wGEfzpX/GqGv8O3tW8jOZvUHMwIZGAlpVw4NSb0+ZQcbqQQjfzEIbADESJwO ldFMpDBYw/MFgKCiDtjZYsH8E0g1mf83V2ogRgyDVJudf02X73Vx47IOAKaSKo3m JzPiH9OaEtgjLmqikYchC4UJ51RLavRmo5dXYLmPuyyZ/ssZt6zEnL8y4FgtjACq sJI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:08:51 2025 by rpki-client