$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/94244cb0-158e-46d4-8af4-e50dc14db808.roa File: 94244cb0-158e-46d4-8af4-e50dc14db808.roa (raw, json) Hash identifier: PP6V4cV4jZz84BjvSffOal1xVr9LOBS0FeF7TjIIYOs= Subject key identifier: DA:4C:66:FA:0E:04:B8:4A:78:2B:88:16:07:01:F6:B3:80:A5:3F:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 357891C4E78CE9D7954749E68F7E88D50EC16892 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/94244cb0-158e-46d4-8af4-e50dc14db808.roa Signing time: Mon 18 Aug 2025 15:01:32 +0000 ROA not before: Mon 18 Aug 2025 15:01:32 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:78:91:c4:e7:8c:e9:d7:95:47:49:e6:8f:7e:88:d5:0e:c1:68:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 15:01:32 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=2b6682189061d6d9ace235354dada2573b6aa71918d29c8b91c5ce0be5bf7512, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ec:0b:30:3e:34:66:12:fd:23:8f:b4:d9:3b: 82:bd:67:37:0a:be:35:5a:51:88:2e:8d:77:b1:40: 6c:30:83:37:a4:31:6e:39:41:2d:4b:0d:8c:97:7b: 7a:e3:dc:c1:bf:e6:5b:a2:98:88:34:4a:f6:ba:7f: 79:3c:2a:a9:cc:56:e8:5d:85:61:5e:5a:59:e9:f4: c9:cf:9d:6e:c5:81:5f:d2:79:aa:13:60:85:37:c5: a5:85:0f:68:09:f7:69:40:ad:13:2c:ae:d5:37:65: 94:9e:78:97:d3:60:5a:e4:7f:9f:59:ff:96:e1:63: 9c:d3:1b:50:ed:05:bc:79:60:fc:82:6d:92:d2:3e: 15:cb:9a:f3:56:d1:09:d3:df:d4:c5:20:02:67:22: b4:d1:54:fc:17:fb:20:90:58:02:3a:c9:db:15:94: 98:a6:f3:63:2b:13:55:b0:24:fb:34:af:f5:64:c9: 89:82:74:b6:cb:a0:31:60:39:1a:13:0d:d6:89:6d: f0:9d:c3:b8:6c:1d:48:01:80:61:84:cf:92:33:19: b1:2d:e8:63:e0:02:68:d6:fc:b1:9a:81:66:b4:c0: 65:2b:87:b2:2f:6a:81:46:5c:8a:3f:6d:db:94:55: 0c:91:11:30:ae:c0:9d:84:8d:86:e1:96:b8:06:28: ea:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4C:66:FA:0E:04:B8:4A:78:2B:88:16:07:01:F6:B3:80:A5:3F:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/94244cb0-158e-46d4-8af4-e50dc14db808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:2800::/40 Signature Algorithm: sha256WithRSAEncryption b8:cd:5c:40:8b:8f:5b:18:2b:27:2f:ef:23:b7:dd:b6:d7:48: e7:ff:17:f5:f6:7c:81:cf:78:ee:08:1f:49:4f:c9:c2:d2:81: b1:ee:4f:a4:08:74:67:a2:42:63:32:a9:4e:0e:e4:5a:f9:cc: b0:77:06:a8:ca:51:5f:cf:6c:c9:57:ab:c1:de:2f:95:8b:f2: 44:1f:45:0d:fb:54:91:a2:64:02:71:b3:be:ed:40:4b:14:46: 25:37:5b:8f:71:23:22:1a:7f:4c:aa:29:56:93:52:4e:cd:c3: 0f:d9:83:a9:26:40:75:e2:84:ef:64:9a:8d:eb:b3:98:3f:91: a1:1a:1a:f9:4c:b5:bc:39:01:ee:c7:3a:4b:e9:77:28:80:1f: b1:16:fd:ef:b3:bb:f3:03:d5:8a:01:46:6a:a1:61:39:35:43: 00:a3:1e:1a:fa:df:c7:bb:a9:f4:9b:4b:fd:38:1e:b2:54:61: 4c:47:63:fa:ab:cb:25:dd:83:fc:5c:3c:06:b0:60:ec:7f:a2: 08:85:c0:19:b4:59:73:30:11:f6:eb:e5:9c:c2:98:4d:cb:f8: 44:64:bb:0a:6b:b8:65:74:65:da:2e:b7:b9:c1:f4:f4:90:eb: d9:4e:64:d1:6f:a2:29:b8:99:e8:b8:e6:6e:75:0b:db:75:b7: 38:9e:a7:c4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNXiRxOeM6deVR0nmj36I1Q7BaJIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE1MDEzMloX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNAMmI2NjgyMTg5MDYxZDZkOWFjZTIz NTM1NGRhZGEyNTczYjZhYTcxOTE4ZDI5YzhiOTFjNWNlMGJlNWJmNzUxMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ewLMD40ZhL9I4+02TuCvWc3Cr41 WlGILo13sUBsMIM3pDFuOUEtSw2Ml3t649zBv+ZbopiINEr2un95PCqpzFboXYVh XlpZ6fTJz51uxYFf0nmqE2CFN8WlhQ9oCfdpQK0TLK7VN2WUnniX02Ba5H+fWf+W 4WOc0xtQ7QW8eWD8gm2S0j4Vy5rzVtEJ09/UxSACZyK00VT8F/sgkFgCOsnbFZSY pvNjKxNVsCT7NK/1ZMmJgnS2y6AxYDkaEw3WiW3wncO4bB1IAYBhhM+SMxmxLehj 4AJo1vyxmoFmtMBlK4eyL2qBRlyKP23blFUMkREwrsCdhI2G4Za4BijqqQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNpMZvoOBLhKeCuIFgcB9rOApT+ZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk0MjQ0Y2IwLTE1OGUtNDZkNC04YWY0LWU1MGRjMTRkYjgwOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauSgwDQYJKoZIhvcNAQELBQADggEBALjNXECLj1sYKycv7yO3 3bbXSOf/F/X2fIHPeO4IH0lPycLSgbHuT6QIdGeiQmMyqU4O5Fr5zLB3BqjKUV/P bMlXq8HeL5WL8kQfRQ37VJGiZAJxs77tQEsURiU3W49xIyIaf0yqKVaTUk7Nww/Z g6kmQHXihO9kmo3rs5g/kaEaGvlMtbw5Ae7HOkvpdyiAH7EW/e+zu/MD1YoBRmqh YTk1QwCjHhr638e7qfSbS/04HrJUYUxHY/qryyXdg/xcPAawYOx/ogiFwBm0WXMw Efbr5ZzCmE3L+ERkuwpruGV0Zdout7nB9PSQ69lOZNFvoim4mei45m51C9t1tzie p8Q= -----END CERTIFICATE-----Generated at Sat Aug 23 10:17:11 2025 by rpki-client