$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a98280ac-f6cb-4ddb-87c8-1ff6f5054f79.roa File: a98280ac-f6cb-4ddb-87c8-1ff6f5054f79.roa (raw, json) Hash identifier: OoKjAzcTIB0Afb/MOdTElxZpH25bzvnS4C4gq/b2XZQ= Subject key identifier: EF:E0:06:83:D8:F2:1E:DF:55:D2:91:CD:88:9B:8F:91:67:5F:24:96 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58E4F1F51D3AF64C4D0EA3EC25F544391BC9373B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a98280ac-f6cb-4ddb-87c8-1ff6f5054f79.roa Signing time: Mon 18 Aug 2025 15:00:09 +0000 ROA not before: Mon 18 Aug 2025 15:00:09 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e4:f1:f5:1d:3a:f6:4c:4d:0e:a3:ec:25:f5:44:39:1b:c9:37:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 15:00:09 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=4fc4f82e71a36b5263b39ce1fdde4c5c62496901eb24ca514fb2d8d1c015861e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ba:63:ec:95:f4:2d:66:ae:43:e6:3e:45:37: 68:e3:70:7f:5a:5f:1d:7f:a0:0e:ac:c7:93:2d:ee: 9e:19:e2:63:dd:33:08:b8:7e:b4:85:d2:d7:80:f1: d6:5f:01:58:2a:6f:e8:13:d1:d4:0f:33:5f:61:32: c7:46:88:ee:e8:b0:0b:bf:bf:59:7c:7b:d3:ad:9b: da:23:f9:d9:da:e2:c3:85:37:c5:99:c7:39:fb:06: 52:3f:8a:27:5d:c4:ef:1b:6e:bf:de:5f:4d:54:56: 9c:e9:c7:a6:ee:f4:0a:9a:6d:3a:33:3e:67:5b:7b: 23:08:86:c5:b7:bf:1c:f0:48:f8:a6:85:d8:97:96: 26:c3:47:50:1f:6e:f9:ce:25:4e:e4:a0:85:03:ff: 68:4f:04:09:90:40:00:95:6e:f0:d2:d2:20:e8:fe: 34:6b:a6:bd:41:a6:5a:a4:38:81:06:28:a3:65:19: 4a:a1:dd:b5:62:53:92:7c:28:78:a5:2c:69:25:42: 98:cc:47:b7:c7:54:35:7c:9b:a2:b2:66:15:cd:d5: cd:bf:37:e8:a4:d0:fc:ca:82:7f:5f:1d:8c:2a:33: 37:f6:76:c4:a1:48:f0:65:15:f1:10:e6:65:d8:2c: 46:e4:a3:e4:d2:44:ba:01:62:6b:69:9d:2e:eb:69: c1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E0:06:83:D8:F2:1E:DF:55:D2:91:CD:88:9B:8F:91:67:5F:24:96 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a98280ac-f6cb-4ddb-87c8-1ff6f5054f79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:4800::/40 Signature Algorithm: sha256WithRSAEncryption 6a:2d:6a:61:9b:5d:39:ff:3a:c3:93:15:bf:16:7b:d3:47:4c: 10:1d:d0:f8:97:96:50:ae:d3:41:14:06:c5:12:07:6a:4e:27: 3d:ed:b5:27:cf:99:8a:c6:bb:41:c3:9c:91:1a:12:3a:55:02: cb:3e:39:10:78:4d:f6:63:01:e9:83:88:43:fd:8a:96:b8:3b: 42:d8:ea:66:36:c5:1c:19:d2:40:d7:c3:d3:dc:7d:42:12:37: 2f:8d:7d:59:e0:75:7e:d7:99:94:2b:66:d1:c2:01:8b:d6:9a: 30:79:f7:0b:18:90:13:92:30:65:3a:3a:0c:24:83:e4:0b:2b: 64:5f:a6:99:f3:19:eb:74:99:7e:55:8b:3e:39:6e:db:bc:df: 3c:be:1b:80:5a:d1:18:0d:8c:7b:f5:47:8a:fe:36:45:6e:9a: f6:c4:00:18:d1:9a:13:7f:f8:1b:6b:55:5c:17:20:7d:c7:a9: ab:52:c4:73:ef:cc:11:44:8e:ea:81:71:89:e5:6e:a7:26:81: 46:c4:23:34:54:fe:d8:41:f0:dc:b8:48:ac:60:52:5b:e8:f5: e1:c3:34:da:b7:c9:b5:b5:18:3d:2d:06:1c:11:aa:d4:56:74: d5:dc:04:6c:25:4e:b9:0f:b1:f5:59:09:cd:8f:c9:1b:07:89: a4:ce:5c:6b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWOTx9R069kxNDqPsJfVEORvJNzswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE1MDAwOVoX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNANGZjNGY4MmU3MWEzNmI1MjYzYjM5 Y2UxZmRkZTRjNWM2MjQ5NjkwMWViMjRjYTUxNGZiMmQ4ZDFjMDE1ODYxZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbpj7JX0LWauQ+Y+RTdo43B/Wl8d f6AOrMeTLe6eGeJj3TMIuH60hdLXgPHWXwFYKm/oE9HUDzNfYTLHRoju6LALv79Z fHvTrZvaI/nZ2uLDhTfFmcc5+wZSP4onXcTvG26/3l9NVFac6cem7vQKmm06Mz5n W3sjCIbFt78c8Ej4poXYl5Ymw0dQH275ziVO5KCFA/9oTwQJkEAAlW7w0tIg6P40 a6a9QaZapDiBBiijZRlKod21YlOSfCh4pSxpJUKYzEe3x1Q1fJuismYVzdXNvzfo pND8yoJ/Xx2MKjM39nbEoUjwZRXxEOZl2CxG5KPk0kS6AWJraZ0u62nBgQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO/gBoPY8h7fVdKRzYibj5FnXySWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5ODI4MGFjLWY2Y2ItNGRkYi04N2M4LTFmZjZmNTA1NGY3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9EgwDQYJKoZIhvcNAQELBQADggEBAGotamGbXTn/OsOTFb8W e9NHTBAd0PiXllCu00EUBsUSB2pOJz3ttSfPmYrGu0HDnJEaEjpVAss+ORB4TfZj AemDiEP9ipa4O0LY6mY2xRwZ0kDXw9PcfUISNy+NfVngdX7XmZQrZtHCAYvWmjB5 9wsYkBOSMGU6Ogwkg+QLK2RfppnzGet0mX5Viz45btu83zy+G4Ba0RgNjHv1R4r+ NkVumvbEABjRmhN/+BtrVVwXIH3HqatSxHPvzBFEjuqBcYnlbqcmgUbEIzRU/thB 8Ny4SKxgUlvo9eHDNNq3ybW1GD0tBhwRqtRWdNXcBGwlTrkPsfVZCc2PyRsHiaTO XGs= -----END CERTIFICATE-----Generated at Sat Aug 23 10:14:16 2025 by rpki-client