$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c27b2338-5ab9-4430-8cc1-8132801f76eb.roa File: c27b2338-5ab9-4430-8cc1-8132801f76eb.roa (raw, json) Hash identifier: UL7VXUwpTvXfulEDOCOK/ljSEsCEURUt0jYm6tN6GgU= Subject key identifier: 8E:C2:BC:97:FE:15:25:F2:23:F4:A8:7F:AD:01:D2:3A:4A:4F:B7:75 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 128ED662842A8D801DF6E011DCDF2BEABEB65AC9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c27b2338-5ab9-4430-8cc1-8132801f76eb.roa Signing time: Sat 16 Aug 2025 00:00:12 +0000 ROA not before: Sat 16 Aug 2025 00:00:12 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8e:d6:62:84:2a:8d:80:1d:f6:e0:11:dc:df:2b:ea:be:b6:5a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 16 00:00:12 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=2586dfecf43c60a81ffc39cb0cda81338674412ea14f241608937bc85c2ace60, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:94:25:0d:47:89:fb:2e:e2:99:a6:e0:6a: 16:44:fc:81:d2:46:75:85:97:1c:e9:ee:33:5b:87: ba:65:07:fc:41:61:ed:1f:f9:b1:cd:1a:78:38:42: 4c:a6:85:12:a6:bf:61:c8:6d:9f:14:2c:7b:f2:a0: 0a:29:1f:b8:b2:2b:01:16:cc:f9:0e:38:45:7e:f1: 96:25:23:4d:e6:0b:03:ce:68:d2:28:29:db:f6:ae: 9d:bd:c1:72:22:a1:83:59:ba:de:86:f3:d0:60:55: 81:40:e7:e3:a5:e0:dd:d7:dc:4a:e7:82:c3:63:0c: 2c:99:02:cb:bc:2b:f3:9e:a0:ac:6b:aa:4b:63:95: bb:7d:0f:a5:f8:89:07:1c:fc:82:f2:f9:ff:33:21: df:cf:f1:63:4d:8f:65:d6:f2:a0:67:eb:a6:59:f2: 91:fb:43:76:aa:2a:c3:4e:f7:61:f3:e9:90:93:96: 5d:22:2d:ca:0e:47:da:f4:bb:5b:61:ca:78:72:54: b6:f7:e7:f4:91:17:ed:e4:fe:4b:76:14:a7:fc:e4: 05:bd:a2:ee:6d:a0:6a:7d:55:13:87:34:94:04:28: 38:7a:92:9b:d3:c3:24:ee:c1:60:19:85:ce:c0:fd: 05:ee:48:d1:aa:ca:10:91:9a:07:ab:c4:3d:e0:28: 45:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C2:BC:97:FE:15:25:F2:23:F4:A8:7F:AD:01:D2:3A:4A:4F:B7:75 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c27b2338-5ab9-4430-8cc1-8132801f76eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2c::/36 Signature Algorithm: sha256WithRSAEncryption 88:26:80:86:05:ff:53:b3:23:14:40:b9:37:e4:3e:13:56:87: b0:b3:84:f1:a3:e8:fb:8b:6f:9e:83:d0:bf:48:02:21:f6:e4: 11:4e:c2:42:af:e7:47:c8:fe:d1:bd:70:c6:2e:4e:b2:ad:21: 28:8c:47:2e:37:86:ab:f4:75:d0:b8:6d:b0:c8:f9:e7:2c:e9: 1e:36:a1:dc:f0:89:5f:f0:b5:b2:bb:46:73:25:61:4d:66:b8: 3b:48:93:87:68:d8:24:a2:31:51:18:49:e3:3e:af:53:ae:51: 23:d2:6b:90:80:4f:06:dc:c2:a1:ab:5c:eb:ca:4d:65:4b:cd: 5b:5f:82:ef:c0:b7:0c:c6:1f:08:38:f4:aa:1c:c3:d7:89:0b: 1a:2d:3e:63:ee:66:2c:94:9d:0b:b6:ac:7b:84:e3:8d:78:bf: 3b:21:86:92:e5:48:c0:0e:76:02:7f:74:1d:9e:40:ac:ad:3b: d9:f9:46:72:63:02:ca:e2:7b:38:85:79:2a:20:68:1a:af:68: 12:08:66:61:3b:ca:23:c7:01:3d:09:6b:31:2d:73:7e:51:7e: e8:82:6c:29:ac:3b:b4:a0:52:f4:3d:b8:43:ff:94:7d:70:5a: b6:b4:9f:e7:89:e7:04:f5:9a:69:d9:df:66:e4:0f:22:09:83: 63:13:1f:09 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEo7WYoQqjYAd9uAR3N8r6r62WskwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNjAwMDAxMloX DTI1MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAMjU4NmRmZWNmNDNjNjBhODFmZmMz OWNiMGNkYTgxMzM4Njc0NDEyZWExNGYyNDE2MDg5MzdiYzg1YzJhY2U2MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU2UJQ1Hifsu4pmm4GoWRPyB0kZ1 hZcc6e4zW4e6ZQf8QWHtH/mxzRp4OEJMpoUSpr9hyG2fFCx78qAKKR+4sisBFsz5 DjhFfvGWJSNN5gsDzmjSKCnb9q6dvcFyIqGDWbrehvPQYFWBQOfjpeDd19xK54LD YwwsmQLLvCvznqCsa6pLY5W7fQ+l+IkHHPyC8vn/MyHfz/FjTY9l1vKgZ+umWfKR +0N2qirDTvdh8+mQk5ZdIi3KDkfa9LtbYcp4clS29+f0kRft5P5LdhSn/OQFvaLu baBqfVUThzSUBCg4epKb08Mk7sFgGYXOwP0F7kjRqsoQkZoHq8Q94ChFVQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI7CvJf+FSXyI/Sof60B0jpKT7d1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyN2IyMzM4LTVhYjktNDQzMC04Y2MxLTgxMzI4MDFmNzZlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLAAwDQYJKoZIhvcNAQELBQADggEBAIgmgIYF/1OzIxRAuTfk PhNWh7CzhPGj6PuLb56D0L9IAiH25BFOwkKv50fI/tG9cMYuTrKtISiMRy43hqv0 ddC4bbDI+ecs6R42odzwiV/wtbK7RnMlYU1muDtIk4do2CSiMVEYSeM+r1OuUSPS a5CATwbcwqGrXOvKTWVLzVtfgu/AtwzGHwg49Kocw9eJCxotPmPuZiyUnQu2rHuE 4414vzshhpLlSMAOdgJ/dB2eQKytO9n5RnJjAsrieziFeSogaBqvaBIIZmE7yiPH AT0JazEtc35RfuiCbCmsO7SgUvQ9uEP/lH1wWra0n+eJ5wT1mmnZ32bkDyIJg2MT Hwk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:05 2025 by rpki-client