$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/199e7f05-a6e2-4894-bef4-a2d943a718e7.roa File: 199e7f05-a6e2-4894-bef4-a2d943a718e7.roa (raw, json) Hash identifier: 1N4snMGyCeBn2VuBgk25bEbZMEWDXArv6aOHxH845DU= Subject key identifier: 7C:04:D2:32:B2:8D:56:22:8C:16:A6:00:7E:A1:3D:AF:CB:1F:3E:BB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12CCB4D2CFE7B468A2EE020CEAD6E34CC015E9E1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/199e7f05-a6e2-4894-bef4-a2d943a718e7.roa Signing time: Wed 30 Jul 2025 17:38:28 +0000 ROA not before: Wed 30 Jul 2025 17:38:28 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cc:b4:d2:cf:e7:b4:68:a2:ee:02:0c:ea:d6:e3:4c:c0:15:e9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 17:38:28 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=52b79b496f59d1bb515c82cf514b0a75c639cf50b1a00315ce9d445990233cb6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:d1:ee:31:f7:d7:b0:67:b2:b2:15:81:b5: 69:bd:72:b8:2e:c8:37:21:e7:68:96:c3:35:89:40: d2:ba:ed:eb:b9:5e:e0:de:1c:af:1d:2b:87:b5:23: 77:30:aa:76:b1:ad:74:5c:af:91:0b:47:d7:a0:22: 53:e8:4f:a0:dc:80:64:66:80:1d:01:87:96:17:b4: f8:42:59:66:7b:3a:c7:11:c7:8d:55:95:04:82:1f: 31:28:d1:0e:76:16:a2:89:c6:3f:bd:6b:1b:3e:f4: 64:9e:97:91:81:24:5c:85:4f:8e:bf:8b:3d:80:b0: 8f:26:9c:ac:db:1f:05:0e:6f:75:de:ef:26:2e:05: 08:b3:9d:5e:69:3e:e6:5b:7f:e7:ec:db:af:35:b4: 9b:88:55:94:a2:7f:54:6c:83:d4:62:14:30:28:c6: 2f:cc:fe:d7:ae:5f:e5:f9:f2:5d:a7:d0:bd:14:e4: d0:36:ce:4e:0e:1f:ee:e4:be:1e:35:0d:3c:3d:ad: 08:63:b1:30:c8:00:70:9a:3f:3d:8f:b1:ca:b5:6c: 84:7b:4e:22:88:f2:cf:c1:2a:35:88:26:7a:13:f7: 91:7c:0f:57:e2:aa:30:4e:72:bd:a3:1d:8b:6c:9e: 31:6c:d7:e7:77:05:62:d3:b9:49:27:74:0f:80:4f: 8a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:04:D2:32:B2:8D:56:22:8C:16:A6:00:7E:A1:3D:AF:CB:1F:3E:BB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/199e7f05-a6e2-4894-bef4-a2d943a718e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:2800::/40 Signature Algorithm: sha256WithRSAEncryption 10:3a:7d:42:a1:3b:cf:51:d7:ba:03:69:f7:35:f2:76:7a:09: cd:6d:14:06:37:3c:9a:07:57:89:f4:69:3b:21:35:09:57:0f: 56:89:ad:5b:e2:4c:13:86:e3:5f:c5:d9:55:f1:88:8f:2c:fa: c2:0b:27:87:39:a7:04:63:02:70:3f:49:cf:c9:e6:0b:10:dc: f2:90:27:78:dc:79:4c:df:0c:84:1f:19:ac:78:fc:21:97:73: 7c:6e:9d:6f:5a:be:1c:eb:6e:60:15:5e:e9:a6:4b:26:d9:28: 29:3d:81:39:3c:9f:c9:e7:64:32:b4:0b:9c:53:3f:38:c0:19: c2:a3:63:03:65:e6:e0:8f:54:4e:72:79:8e:e4:0e:68:0b:46: 1f:b3:50:e5:42:92:f0:14:b5:fd:85:e4:01:e5:ab:f3:28:3b: 35:d6:86:d0:63:45:a9:6a:d5:92:72:db:5e:57:9c:3f:8c:a1: a3:77:99:64:21:a2:32:5c:53:7a:10:18:9d:87:dc:b8:97:92: 86:8c:49:2c:bc:67:74:b9:5c:d5:40:41:42:fc:4c:f7:1c:2a: a9:a5:32:fa:2f:36:aa:98:9a:98:30:f4:44:d5:f7:7a:7d:d4: 6f:04:fd:3b:08:3e:67:11:a1:6e:81:4a:3d:55:f1:e0:fb:85: 79:ff:2e:43 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEsy00s/ntGii7gIM6tbjTMAV6eEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDE3MzgyOFoX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNANTJiNzliNDk2ZjU5ZDFiYjUxNWM4 MmNmNTE0YjBhNzVjNjM5Y2Y1MGIxYTAwMzE1Y2U5ZDQ0NTk5MDIzM2NiNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZTR7jH317BnsrIVgbVpvXK4Lsg3 IedolsM1iUDSuu3ruV7g3hyvHSuHtSN3MKp2sa10XK+RC0fXoCJT6E+g3IBkZoAd AYeWF7T4QllmezrHEceNVZUEgh8xKNEOdhaiicY/vWsbPvRknpeRgSRchU+Ov4s9 gLCPJpys2x8FDm913u8mLgUIs51eaT7mW3/n7NuvNbSbiFWUon9UbIPUYhQwKMYv zP7Xrl/l+fJdp9C9FOTQNs5ODh/u5L4eNQ08Pa0IY7EwyABwmj89j7HKtWyEe04i iPLPwSo1iCZ6E/eRfA9X4qowTnK9ox2LbJ4xbNfndwVi07lJJ3QPgE+KiQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHwE0jKyjVYijBamAH6hPa/LHz67MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE5OWU3ZjA1LWE2ZTItNDg5NC1iZWY0LWEyZDk0M2E3MThlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaSgwDQYJKoZIhvcNAQELBQADggEBABA6fUKhO89R17oDafc1 8nZ6Cc1tFAY3PJoHV4n0aTshNQlXD1aJrVviTBOG41/F2VXxiI8s+sILJ4c5pwRj AnA/Sc/J5gsQ3PKQJ3jceUzfDIQfGax4/CGXc3xunW9avhzrbmAVXummSybZKCk9 gTk8n8nnZDK0C5xTPzjAGcKjYwNl5uCPVE5yeY7kDmgLRh+zUOVCkvAUtf2F5AHl q/MoOzXWhtBjRalq1ZJy215XnD+MoaN3mWQhojJcU3oQGJ2H3LiXkoaMSSy8Z3S5 XNVAQUL8TPccKqmlMvovNqqYmpgw9ETV93p91G8E/TsIPmcRoW6BSj1V8eD7hXn/ LkM= -----END CERTIFICATE-----Generated at Mon Aug 4 13:59:13 2025 by rpki-client