$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa File: d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa (raw, json) Hash identifier: r7R5clr6aAAZ0jdC1+KUou+4YkqmpYcb7Vw9TD1aAKU= Subject key identifier: 40:1C:40:6E:43:E5:5B:F4:30:A8:8F:6E:45:C0:CA:D4:65:AE:9A:04 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 33153995BAE1B60F865475895BCC4D771A460600 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa Signing time: Sat 23 Aug 2025 00:01:42 +0000 ROA not before: Sat 23 Aug 2025 00:01:42 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c0a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:15:39:95:ba:e1:b6:0f:86:54:75:89:5b:cc:4d:77:1a:46:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:01:42 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=f203c8dd6884586e3d9bb211f2166600c4374fe9594f65e507a3414079159db5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d9:cf:f5:25:d0:63:ec:f7:2d:b8:9b:f1:4d: 78:c5:3b:5e:74:b3:97:f7:a6:2a:4c:c0:23:d2:68: 8d:3e:cc:d0:58:d2:63:63:8f:4e:0e:39:31:0c:2f: 0c:83:80:35:58:3c:88:bf:89:1c:15:81:f8:a5:48: 08:48:31:bd:00:e7:d6:7f:38:24:4d:d7:3c:ae:b8: 0d:90:c3:06:c7:b5:2d:6a:17:51:67:74:aa:70:59: 49:f1:1d:05:7a:3a:ba:4f:68:0e:b1:32:9a:87:0c: fe:2c:30:3f:80:aa:0c:89:13:5f:c6:78:5f:86:d2: 33:1e:51:7e:18:74:54:f1:78:74:4b:ea:2c:f9:1f: 69:9b:1e:73:ea:c8:fd:0a:2e:ab:83:9a:26:8d:f5: 70:68:23:a0:f1:83:fe:4c:fd:e0:b7:df:7e:3d:86: 54:30:f3:95:36:74:09:9e:f1:b7:cb:64:5b:62:de: 0c:cb:66:ad:75:fb:3b:ff:dd:f1:fd:b6:de:61:8b: 26:4e:94:2f:d8:04:5a:e3:e0:b7:12:be:0a:91:ce: 65:9a:8f:0e:1a:45:33:70:3e:b4:96:72:d2:9e:bc: 2a:5f:dc:a9:80:c9:a6:b5:70:64:db:45:1c:61:37: 14:30:9f:42:a9:c1:f2:31:34:f0:63:a9:c1:d6:7d: 29:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1C:40:6E:43:E5:5B:F4:30:A8:8F:6E:45:C0:CA:D4:65:AE:9A:04 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c0a0::/48 Signature Algorithm: sha256WithRSAEncryption 1c:96:02:b2:1e:f9:7a:28:b1:c2:32:f7:8c:2e:91:ae:4e:fd: b2:97:18:8d:c2:9e:17:6b:93:5b:ab:b7:a5:58:8c:64:84:a0: 1b:bb:0e:60:61:55:25:98:9b:e2:37:71:ff:9a:b2:9a:02:6c: 37:19:e3:67:62:8d:84:a3:4d:11:f6:6c:c8:c8:f8:4b:c2:f1: f3:c9:6f:96:7b:e7:b4:42:b6:a7:d6:c7:e4:90:d8:7c:1e:28: be:26:60:dc:72:c6:6d:65:20:e3:72:40:23:82:1a:f0:4f:e5: c2:88:bd:23:81:f2:df:c5:fd:74:48:78:bb:76:d5:93:2b:99: 7d:a8:58:7d:6e:b2:5e:1a:fd:a1:43:21:6f:81:6f:37:dc:13: 28:9e:10:61:8b:37:7a:10:ca:09:ac:54:bd:a3:27:4f:0f:d6: 60:c3:c4:9c:9d:59:f8:31:9a:f7:01:d6:83:f8:1d:29:f1:92: c1:e9:76:91:0b:84:0b:d2:6f:9b:05:c8:39:97:db:c5:4d:d0: 3c:fe:4a:ca:91:9a:be:52:26:e8:44:12:12:e8:93:c2:aa:6f: 2e:6a:19:97:e3:db:a1:d5:25:72:31:e9:4a:6e:44:8d:aa:50: 79:e1:6a:dd:43:da:7b:99:15:ac:b4:c8:e3:ec:ff:e5:23:45: 6c:08:c6:e4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMxU5lbrhtg+GVHWJW8xNdxpGBgAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMDE0MloX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAZjIwM2M4ZGQ2ODg0NTg2ZTNkOWJi MjExZjIxNjY2MDBjNDM3NGZlOTU5NGY2NWU1MDdhMzQxNDA3OTE1OWRiNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtnP9SXQY+z3Lbib8U14xTtedLOX 96YqTMAj0miNPszQWNJjY49ODjkxDC8Mg4A1WDyIv4kcFYH4pUgISDG9AOfWfzgk Tdc8rrgNkMMGx7UtahdRZ3SqcFlJ8R0Fejq6T2gOsTKahwz+LDA/gKoMiRNfxnhf htIzHlF+GHRU8Xh0S+os+R9pmx5z6sj9Ci6rg5omjfVwaCOg8YP+TP3gt99+PYZU MPOVNnQJnvG3y2RbYt4My2atdfs7/93x/bbeYYsmTpQv2ARa4+C3Er4Kkc5lmo8O GkUzcD60lnLSnrwqX9ypgMmmtXBk20UcYTcUMJ9CqcHyMTTwY6nB1n0pdQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEAcQG5D5Vv0MKiPbkXAytRlrpoEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzNDM1ZGJiLTVkMWUtNDk0OC04MDI3LWU2NDMzZjcyYmZjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8CgMA0GCSqGSIb3DQEBCwUAA4IBAQAclgKyHvl6KLHCMveM LpGuTv2ylxiNwp4Xa5Nbq7elWIxkhKAbuw5gYVUlmJviN3H/mrKaAmw3GeNnYo2E o00R9mzIyPhLwvHzyW+We+e0Qran1sfkkNh8Hii+JmDccsZtZSDjckAjghrwT+XC iL0jgfLfxf10SHi7dtWTK5l9qFh9brJeGv2hQyFvgW833BMonhBhizd6EMoJrFS9 oydPD9Zgw8ScnVn4MZr3AdaD+B0p8ZLB6XaRC4QL0m+bBcg5l9vFTdA8/krKkZq+ UiboRBIS6JPCqm8uahmX49uh1SVyMelKbkSNqlB54WrdQ9p7mRWstMjj7P/lI0Vs CMbk -----END CERTIFICATE-----Generated at Sat Aug 23 06:38:11 2025 by rpki-client