$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa File: 95769528-fe79-42fd-bbc3-1d9507dfe45c.roa (raw, json) Hash identifier: HspyORc0an6MHg66qH/giuv7XQVNQrUube46dlMDEOw= Subject key identifier: FD:E1:26:C1:54:9F:F7:63:9A:AE:58:CC:1E:AE:88:F1:C0:E9:F5:D9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 544DA010DDA12CA9447F59987AA38942CADC3741 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa Signing time: Sat 23 Aug 2025 00:01:11 +0000 ROA not before: Sat 23 Aug 2025 00:01:11 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4d:a0:10:dd:a1:2c:a9:44:7f:59:98:7a:a3:89:42:ca:dc:37:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:01:11 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=9bffb2b903ff0024514ef1c8589ad7ade71b719de45d3d839866efa3c440a95e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:42:c7:35:4c:8a:65:a5:93:9c:a7:a6:98:5d: d0:82:0a:d7:8b:0a:a7:4c:c0:d7:73:df:0c:1b:0f: 95:26:e8:32:2e:fc:81:98:08:28:45:ac:57:64:2f: bb:9e:60:8a:9d:3c:72:9c:0e:ec:d4:4c:84:76:17: 6d:87:a5:85:3d:e2:dd:3a:86:45:86:01:03:e4:0d: e3:99:09:ae:2e:cc:9d:82:49:5c:4f:f6:db:cf:95: ad:38:c8:37:11:f2:2b:12:54:83:2e:fb:8c:e1:1c: 03:2b:9c:4b:3c:da:25:4e:b1:5e:78:20:8c:89:5c: 98:ca:72:88:1a:5e:36:15:4d:ec:31:82:11:54:7a: 63:9e:cd:54:ae:12:28:e9:bd:aa:e8:a2:bc:8b:ee: e0:1a:36:db:8c:8e:2e:e3:a5:30:7d:fe:d5:bb:b1: 59:9a:5d:5f:f9:c5:28:66:01:ad:44:2c:b4:79:3c: b6:1d:93:d5:5a:bf:0d:c0:cd:65:65:69:09:53:d0: dc:f7:88:92:72:d4:77:0d:00:cd:4b:e4:5c:98:7a: a2:fb:02:9a:1b:60:b2:52:f5:3a:64:ea:95:d4:f6: fc:9c:2b:b0:b5:11:ce:64:7a:7e:d4:98:07:d2:e2: 5a:8c:6c:eb:dc:74:a8:17:86:97:8a:48:92:54:7a: 72:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E1:26:C1:54:9F:F7:63:9A:AE:58:CC:1E:AE:88:F1:C0:E9:F5:D9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:800::/40 Signature Algorithm: sha256WithRSAEncryption 72:06:3a:b1:68:83:25:8a:90:0c:f8:7a:15:af:95:dc:8a:8b: f9:54:0c:53:b4:3c:a6:80:d5:4e:d0:69:ea:80:ce:0d:2c:80: 41:f9:58:f4:ca:f3:44:39:d2:e4:0e:0f:d2:a8:7e:0c:1f:81: ec:43:98:af:91:46:5d:ab:0a:7b:e2:19:a2:6a:5f:31:88:ec: eb:4e:00:4a:84:8c:52:3d:8a:17:fd:7d:62:eb:49:a0:59:53: 61:41:e3:81:2f:7a:a5:e8:5d:16:21:d8:a3:23:d5:4d:40:79: 71:e7:80:98:f1:9c:55:c8:58:2b:b9:bd:27:75:99:47:8d:22: d8:c3:48:0a:f1:c9:cf:83:38:41:4c:e5:b8:49:91:5f:30:64: e0:d2:fa:b8:26:7c:fd:64:a8:1e:1c:cc:33:95:25:31:a3:45: 03:90:11:96:76:f5:2e:5c:3b:49:22:a3:26:6d:cc:0f:46:fc: 6c:5e:c6:83:a6:41:90:6e:ed:b6:3e:af:c0:86:d3:0b:2a:08: 36:dd:c4:af:96:58:a2:68:41:da:23:ad:e5:35:f2:7f:31:6c: bf:83:9f:e9:a3:a4:f7:1e:08:33:a1:fb:fe:af:49:ef:ec:a4: 09:c5:78:f9:23:d2:ca:ba:30:c2:2d:7b:9a:71:2b:94:a1:2d: fb:4b:10:03 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVE2gEN2hLKlEf1mYeqOJQsrcN0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMDExMVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAOWJmZmIyYjkwM2ZmMDAyNDUxNGVm MWM4NTg5YWQ3YWRlNzFiNzE5ZGU0NWQzZDgzOTg2NmVmYTNjNDQwYTk1ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50LHNUyKZaWTnKemmF3QggrXiwqn TMDXc98MGw+VJugyLvyBmAgoRaxXZC+7nmCKnTxynA7s1EyEdhdth6WFPeLdOoZF hgED5A3jmQmuLsydgklcT/bbz5WtOMg3EfIrElSDLvuM4RwDK5xLPNolTrFeeCCM iVyYynKIGl42FU3sMYIRVHpjns1UrhIo6b2q6KK8i+7gGjbbjI4u46Uwff7Vu7FZ ml1f+cUoZgGtRCy0eTy2HZPVWr8NwM1lZWkJU9Dc94iSctR3DQDNS+RcmHqi+wKa G2CyUvU6ZOqV1Pb8nCuwtRHOZHp+1JgH0uJajGzr3HSoF4aXikiSVHpyMQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP3hJsFUn/djmq5YzB6uiPHA6fXZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk1NzY5NTI4LWZlNzktNDJmZC1iYmMzLTFkOTUwN2RmZTQ1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/wgwDQYJKoZIhvcNAQELBQADggEBAHIGOrFogyWKkAz4ehWv ldyKi/lUDFO0PKaA1U7QaeqAzg0sgEH5WPTK80Q50uQOD9KofgwfgexDmK+RRl2r CnviGaJqXzGI7OtOAEqEjFI9ihf9fWLrSaBZU2FB44EveqXoXRYh2KMj1U1AeXHn gJjxnFXIWCu5vSd1mUeNItjDSArxyc+DOEFM5bhJkV8wZODS+rgmfP1kqB4czDOV JTGjRQOQEZZ29S5cO0kioyZtzA9G/GxexoOmQZBu7bY+r8CG0wsqCDbdxK+WWKJo QdojreU18n8xbL+Dn+mjpPceCDOh+/6vSe/spAnFePkj0sq6MMIte5pxK5ShLftL EAM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:15 2025 by rpki-client