$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38953cd-42bb-4366-8bc6-17e1a01d2f4a.roa File: f38953cd-42bb-4366-8bc6-17e1a01d2f4a.roa (raw, json) Hash identifier: xypgmRDD/clF6E3jkjdhmXAL2n+mkdStgqqF2tgXDKs= Subject key identifier: B3:06:06:ED:72:1F:03:38:30:A5:75:0B:1D:64:7C:5D:D0:C8:89:B3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0D646D3AE96F6FC29F27D4DE2D3DE2646EAEB216 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38953cd-42bb-4366-8bc6-17e1a01d2f4a.roa Signing time: Tue 19 Aug 2025 00:01:09 +0000 ROA not before: Tue 19 Aug 2025 00:01:09 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:64:6d:3a:e9:6f:6f:c2:9f:27:d4:de:2d:3d:e2:64:6e:ae:b2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:01:09 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=a9806be949878f48e379de0f8c352146d4bc6b70e7a30fc80f9332e921e1fb2f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:11:45:ff:8d:af:5d:94:14:3a:6c:ee:da: 26:6e:73:18:b8:e1:b7:b0:c7:f7:f6:ec:b3:dc:bb: db:f6:f8:f8:88:98:31:86:c2:9b:7a:76:2a:46:e0: 11:5a:79:88:cc:40:a8:20:6d:dd:96:64:07:e6:90: 3a:a9:ae:d4:aa:69:1a:01:ea:64:bc:7a:c5:b5:15: 1e:c3:3b:dd:f9:5a:1d:f2:27:6a:69:f4:e9:34:7f: 33:7a:0c:3d:7f:58:db:44:5f:3f:f9:d6:6d:d5:38: 8b:21:a2:b6:f1:00:be:1a:dc:07:61:c2:6d:48:06: fa:a5:ff:6d:fb:d0:6e:60:c5:ae:cc:02:39:57:a8: b2:af:fa:10:25:fe:1c:c3:4f:4a:84:1b:6f:b4:7c: eb:78:69:b6:10:74:02:f8:99:3d:ee:3e:e2:f9:3e: 76:00:08:73:7e:da:4f:73:7c:04:1b:dc:57:7c:03: 9a:e2:15:9f:f8:f9:8f:cb:36:79:9a:bd:3f:42:a9: 4a:3a:9d:11:74:1b:32:d1:6f:24:e3:18:10:ce:dd: 3c:40:ac:52:17:df:31:f2:c0:8d:fb:34:6b:2a:62: a0:1b:48:08:5b:e9:47:b1:20:01:3a:26:aa:c3:08: d4:45:cb:ce:1e:ae:f6:b8:f9:78:8d:88:26:eb:72: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:06:06:ED:72:1F:03:38:30:A5:75:0B:1D:64:7C:5D:D0:C8:89:B3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38953cd-42bb-4366-8bc6-17e1a01d2f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:7000::/40 Signature Algorithm: sha256WithRSAEncryption 7b:41:fa:54:4f:f0:b0:2a:12:ed:c0:b7:e2:fa:eb:57:1e:88: ee:23:74:7b:05:14:f6:00:a4:15:d0:dc:f7:6e:3f:22:cd:b6: 70:9b:9b:7b:82:a3:e8:bf:8d:65:bb:22:08:d1:9e:fd:35:39: 15:42:da:16:ca:90:e9:52:c7:f5:e5:3b:45:03:6b:9f:97:cc: ee:5f:f4:f0:24:b9:d1:d6:fe:b3:13:d3:db:db:6f:98:7f:6a: 2d:e4:27:22:f8:a1:d7:4b:7a:96:f9:c1:bd:49:dd:47:2b:90: 0b:99:50:e1:e6:9c:17:0e:af:92:81:8f:a8:22:4a:1d:e8:e6: f9:fa:a0:fa:16:77:8d:29:50:67:86:c8:72:d5:fd:fe:0b:14: 9b:70:2d:a7:e5:f9:d6:8e:47:14:33:dc:ad:a4:8e:2a:97:bb: 2c:ce:a3:e5:23:87:2e:5b:57:03:85:29:34:14:0f:5d:ce:bb: 68:50:62:59:de:f1:f2:2c:8d:56:a9:b0:b4:e8:9e:bd:a6:76: 89:87:95:d5:47:c4:26:84:cd:71:96:4a:3c:01:1c:3c:93:96: 68:f5:84:48:d3:52:2a:7c:ae:5a:cf:9e:7c:42:5b:85:48:47: 48:fc:b2:09:21:ee:fd:9d:e9:74:93:9c:7a:88:0e:70:e7:38: e6:92:01:4b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDWRtOulvb8KfJ9TeLT3iZG6ushYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxOTAwMDEwOVoX DTI1MDkyMzIzNTk1OVowejFJMEcGA1UEBRNAYTk4MDZiZTk0OTg3OGY0OGUzNzlk ZTBmOGMzNTIxNDZkNGJjNmI3MGU3YTMwZmM4MGY5MzMyZTkyMWUxZmIyZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFcRRf+Nr12UFDps7tombnMYuOG3 sMf39uyz3Lvb9vj4iJgxhsKbenYqRuARWnmIzECoIG3dlmQH5pA6qa7UqmkaAepk vHrFtRUewzvd+Vod8idqafTpNH8zegw9f1jbRF8/+dZt1TiLIaK28QC+GtwHYcJt SAb6pf9t+9BuYMWuzAI5V6iyr/oQJf4cw09KhBtvtHzreGm2EHQC+Jk97j7i+T52 AAhzftpPc3wEG9xXfAOa4hWf+PmPyzZ5mr0/QqlKOp0RdBsy0W8k4xgQzt08QKxS F98x8sCN+zRrKmKgG0gIW+lHsSABOiaqwwjURcvOHq72uPl4jYgm63JQKQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLMGBu1yHwM4MKV1Cx1kfF3QyImzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YzODk1M2NkLTQyYmItNDM2Ni04YmM2LTE3ZTFhMDFkMmY0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYHAwDQYJKoZIhvcNAQELBQADggEBAHtB+lRP8LAqEu3At+L6 61ceiO4jdHsFFPYApBXQ3PduPyLNtnCbm3uCo+i/jWW7IgjRnv01ORVC2hbKkOlS x/XlO0UDa5+XzO5f9PAkudHW/rMT09vbb5h/ai3kJyL4oddLepb5wb1J3UcrkAuZ UOHmnBcOr5KBj6giSh3o5vn6oPoWd40pUGeGyHLV/f4LFJtwLafl+daORxQz3K2k jiqXuyzOo+Ujhy5bVwOFKTQUD13Ou2hQYlne8fIsjVapsLTonr2mdomHldVHxCaE zXGWSjwBHDyTlmj1hEjTUip8rlrPnnxCW4VIR0j8sgkh7v2d6XSTnHqIDnDnOOaS AUs= -----END CERTIFICATE-----Generated at Sat Aug 23 06:46:30 2025 by rpki-client