$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa File: e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa (raw, json) Hash identifier: 3oFIcGJdsTfD5NuJAcWgKt4n1k0xuh9Ra/H9NIHJ0UM= Subject key identifier: C3:5B:8E:C1:7B:96:D0:F0:A0:94:2C:4B:8A:F5:39:7B:99:1F:A5:75 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 27316292A9CDB082B2238E3C45C646262482A31E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa Signing time: Sat 23 Aug 2025 00:31:39 +0000 ROA not before: Sat 23 Aug 2025 00:31:39 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:31:62:92:a9:cd:b0:82:b2:23:8e:3c:45:c6:46:26:24:82:a3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:31:39 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=2bb64d5042f07d82ef8a26b555a7d559cead12da38b65e102cc93a77ba70d60c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:6b:6b:2a:61:b0:06:ab:66:13:f5:f7:18: 63:e3:52:b4:d3:4d:a4:3a:99:11:dd:96:d9:68:3e: 3e:80:e1:2f:41:fc:e4:78:7e:b6:d8:04:3e:53:90: fd:a3:eb:4c:b3:f1:7b:8c:ed:9c:bd:03:ef:5d:ac: b4:ae:bd:01:2f:84:50:a2:f2:c5:1f:c6:ac:9c:63: f7:b6:58:e3:93:66:8e:50:33:0e:e2:ef:0e:99:76: 24:2f:ae:6f:a7:56:df:18:68:55:78:d7:5d:f4:71: 2d:3f:88:af:25:8b:b3:4c:3a:ce:6f:60:fc:63:c7: 4d:c4:26:7b:92:89:10:e3:53:ac:0a:ae:d5:07:0d: 2f:0d:fb:e8:a7:17:7a:76:5d:8c:26:54:cf:d9:0c: 9f:40:d6:a9:c7:7c:5d:05:0e:96:7a:f4:0d:f5:86: a1:47:77:35:0f:75:75:d8:30:8d:9c:4c:97:86:1d: 58:42:0c:09:08:46:fb:47:7f:6d:30:b5:72:45:97: 9b:09:3a:27:1f:cb:1a:94:75:25:69:a8:99:4b:62: 1a:77:b5:11:6e:81:3e:fa:c9:cd:06:a9:d5:27:a0: 03:d9:3e:2d:b1:37:58:3a:a0:dd:e4:ed:98:22:d3: 4c:f3:d7:b5:f9:7c:7f:69:ab:8d:30:dc:6c:b9:24: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5B:8E:C1:7B:96:D0:F0:A0:94:2C:4B:8A:F5:39:7B:99:1F:A5:75 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c000::/40 Signature Algorithm: sha256WithRSAEncryption 99:b9:d8:75:c2:de:db:db:2d:f8:e8:d3:d1:23:d2:de:24:f9: 48:2b:3c:cb:84:5e:6e:be:25:4e:b6:91:23:10:42:8e:f3:84: c7:f6:59:7a:06:e3:c2:f6:8d:5c:d0:aa:dc:2d:a8:30:f3:71: 25:e6:ff:37:ec:75:68:48:72:bd:bf:37:f9:d9:de:fc:8f:1a: 07:0a:23:f4:3d:fd:d5:b4:92:3f:10:93:98:19:90:e6:69:89: b3:df:50:dc:52:53:a7:a7:02:06:34:cd:12:7e:8f:2d:c2:25: ce:18:42:95:c4:d2:05:fd:73:e1:e8:d0:f9:ca:01:0e:fd:90: f9:54:40:95:65:6d:4d:6f:a7:40:24:5b:51:64:e8:2e:90:32: a5:db:b2:5d:b9:d6:26:36:20:ac:e9:e6:56:b2:c3:13:8c:ad: 57:66:52:a2:fd:0a:22:e6:ff:51:74:c3:8a:6c:e4:2a:56:3e: 95:4a:ae:31:a1:f3:92:52:d2:f0:4d:13:99:99:03:a7:c2:83: de:7c:9f:b7:21:14:6e:bf:a4:55:7d:1c:e5:d3:4a:b1:61:07: 74:40:7b:00:a7:5b:b9:ee:be:28:2c:9d:2d:85:c0:e8:63:42: 4e:c1:cb:31:c8:30:b6:20:f4:f9:4b:4e:f3:a0:75:61:23:6c: f9:57:f8:c7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJzFikqnNsIKyI448RcZGJiSCox4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMzEzOVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAMmJiNjRkNTA0MmYwN2Q4MmVmOGEy NmI1NTVhN2Q1NTljZWFkMTJkYTM4YjY1ZTEwMmNjOTNhNzdiYTcwZDYwYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo1rayphsAarZhP19xhj41K0002k OpkR3ZbZaD4+gOEvQfzkeH622AQ+U5D9o+tMs/F7jO2cvQPvXay0rr0BL4RQovLF H8asnGP3tljjk2aOUDMO4u8OmXYkL65vp1bfGGhVeNdd9HEtP4ivJYuzTDrOb2D8 Y8dNxCZ7kokQ41OsCq7VBw0vDfvopxd6dl2MJlTP2QyfQNapx3xdBQ6WevQN9Yah R3c1D3V12DCNnEyXhh1YQgwJCEb7R39tMLVyRZebCTonH8salHUlaaiZS2Iad7UR boE++snNBqnVJ6AD2T4tsTdYOqDd5O2YItNM89e1+Xx/aauNMNxsuST8uwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMNbjsF7ltDwoJQsS4r1OXuZH6V1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzZjQ2ZDdhLTFhNjUtNDgxYi04MGZmLWEzYTkwMzZhNWU4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYcAwDQYJKoZIhvcNAQELBQADggEBAJm52HXC3tvbLfjo09Ej 0t4k+UgrPMuEXm6+JU62kSMQQo7zhMf2WXoG48L2jVzQqtwtqDDzcSXm/zfsdWhI cr2/N/nZ3vyPGgcKI/Q9/dW0kj8Qk5gZkOZpibPfUNxSU6enAgY0zRJ+jy3CJc4Y QpXE0gX9c+Ho0PnKAQ79kPlUQJVlbU1vp0AkW1Fk6C6QMqXbsl251iY2IKzp5lay wxOMrVdmUqL9CiLm/1F0w4ps5CpWPpVKrjGh85JS0vBNE5mZA6fCg958n7chFG6/ pFV9HOXTSrFhB3RAewCnW7nuvigsnS2FwOhjQk7ByzHIMLYg9PlLTvOgdWEjbPlX +Mc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:26 2025 by rpki-client