$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa File: dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa (raw, json) Hash identifier: urJvPadecXNVC6RNvTWCYZUu9V5QmGuyvdaBXN589tU= Subject key identifier: 53:50:9E:02:E5:EF:1B:09:E3:DB:EC:80:03:33:97:D0:2F:2C:CD:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 53FAFA704955226AB30A2091A86D9DCFB773EB32 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa Signing time: Sat 23 Aug 2025 00:10:18 +0000 ROA not before: Sat 23 Aug 2025 00:10:18 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:fa:fa:70:49:55:22:6a:b3:0a:20:91:a8:6d:9d:cf:b7:73:eb:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:10:18 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=28eedaf8b632e84682edcb1bf33a68248482d7133dc491bd94caead37dbac279, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:40:97:7e:ea:2a:63:91:d2:28:0e:31:37: 56:ba:3d:e2:7c:19:f6:dc:24:e5:d0:be:a5:ab:82: b7:d9:1e:7a:7e:21:c8:8a:19:71:e2:55:23:7f:91: 7b:a1:8c:de:ea:1c:e3:5b:c5:c8:27:5e:3d:e5:1d: b7:5e:f5:97:ef:f3:58:9f:84:1b:19:26:48:c4:ae: a9:71:aa:6a:0a:4c:ed:f6:98:db:d2:50:08:e1:7e: d0:72:6b:e4:55:98:6e:c9:ff:89:c8:08:97:d4:65: 0c:e4:98:2a:d8:01:78:a9:63:9b:c2:3f:d7:0d:e8: 66:ce:38:9b:4c:60:5d:52:57:43:c5:74:9a:ff:1d: 60:50:4b:25:de:c6:58:47:b3:8a:d2:0d:8b:85:fb: 1d:91:64:1f:ac:e3:40:9b:46:f2:92:17:2d:55:df: 76:e2:70:f7:ae:c4:c8:39:25:5c:61:7b:8a:f3:cf: 01:eb:e7:21:5c:8e:38:46:32:91:a7:86:2b:ee:c1: 0b:cc:ea:3c:45:82:96:0f:ec:d6:e1:9d:49:96:fb: 32:25:d0:f3:89:70:1d:b5:94:4f:3d:fe:71:73:65: 29:57:b9:54:85:87:16:36:f2:69:87:d3:24:e3:40: 22:be:ae:0c:4a:80:38:76:44:f1:d7:30:3a:d6:01: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:50:9E:02:E5:EF:1B:09:E3:DB:EC:80:03:33:97:D0:2F:2C:CD:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:2080::/48 Signature Algorithm: sha256WithRSAEncryption 28:0b:93:73:38:c0:09:76:65:cf:35:4f:84:56:0c:93:a8:1c: 66:e3:42:a8:b7:ce:09:a6:61:bc:5b:15:61:71:39:4c:1e:e1: c0:33:1e:3e:e1:3c:22:a8:0e:96:2a:76:b8:e1:d8:2e:6d:64: 24:97:85:60:27:1e:d3:69:8d:eb:fa:ee:e0:ba:b5:69:b7:be: af:a9:bf:5a:2c:0c:80:56:f3:cd:68:a3:66:8b:7a:76:a2:b5: d5:e4:b2:aa:d2:0a:95:28:06:e0:9d:92:90:c6:12:07:2f:c7: ac:77:8c:35:0b:02:6e:9d:01:a2:fa:0c:75:a9:bc:1a:85:47: 29:92:1e:7e:7c:df:58:df:be:ce:ef:84:1e:fe:0b:38:89:59: 60:e3:37:2a:e8:34:d7:6c:39:ac:9a:5d:21:21:94:23:4b:16: 57:16:96:02:bb:c5:4d:8a:23:fa:14:46:72:85:fd:8e:e6:85: 5f:5c:a6:4a:be:17:60:62:b3:26:fd:a5:b9:01:da:9c:f1:6d: 55:fe:ec:aa:5a:9a:a2:a2:09:a3:af:19:3a:e9:cc:58:ee:8c: f2:f3:97:39:6f:ca:92:7a:2c:5c:47:7a:d6:aa:bb:b3:81:a1: 1d:2e:a9:5d:b8:1a:59:3b:d9:d8:31:b7:1d:38:f1:1d:26:82: b8:28:3b:3c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUU/r6cElVImqzCiCRqG2dz7dz6zIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMTAxOFoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAMjhlZWRhZjhiNjMyZTg0NjgyZWRj YjFiZjMzYTY4MjQ4NDgyZDcxMzNkYzQ5MWJkOTRjYWVhZDM3ZGJhYzI3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw5Al37qKmOR0igOMTdWuj3ifBn2 3CTl0L6lq4K32R56fiHIihlx4lUjf5F7oYze6hzjW8XIJ1495R23XvWX7/NYn4Qb GSZIxK6pcapqCkzt9pjb0lAI4X7QcmvkVZhuyf+JyAiX1GUM5Jgq2AF4qWObwj/X DehmzjibTGBdUldDxXSa/x1gUEsl3sZYR7OK0g2LhfsdkWQfrONAm0bykhctVd92 4nD3rsTIOSVcYXuK888B6+chXI44RjKRp4Yr7sELzOo8RYKWD+zW4Z1JlvsyJdDz iXAdtZRPPf5xc2UpV7lUhYcWNvJph9Mk40Aivq4MSoA4dkTx1zA61gH4oQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFNQngLl7xsJ49vsgAMzl9AvLM3gMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjYWYyMTJhLTQzMDAtNGNmNi04Y2RhLWVlMmQ0NzRhYTVhYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8iCAMA0GCSqGSIb3DQEBCwUAA4IBAQAoC5NzOMAJdmXPNU+E VgyTqBxm40Kot84JpmG8WxVhcTlMHuHAMx4+4TwiqA6WKna44dgubWQkl4VgJx7T aY3r+u7gurVpt76vqb9aLAyAVvPNaKNmi3p2orXV5LKq0gqVKAbgnZKQxhIHL8es d4w1CwJunQGi+gx1qbwahUcpkh5+fN9Y377O74Qe/gs4iVlg4zcq6DTXbDmsml0h IZQjSxZXFpYCu8VNiiP6FEZyhf2O5oVfXKZKvhdgYrMm/aW5Adqc8W1V/uyqWpqi ogmjrxk66cxY7ozy85c5b8qSeixcR3rWqruzgaEdLqlduBpZO9nYMbcdOPEdJoK4 KDs8 -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:41 2025 by rpki-client