$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/386d354b-b333-4d2d-95e1-ce56676d00ec.roa File: 386d354b-b333-4d2d-95e1-ce56676d00ec.roa (raw, json) Hash identifier: Nebp55W2tFcbMlypny5haSe8RHAt1b+JjrcwYiv/DSg= Subject key identifier: 0E:37:AC:DB:68:22:60:7F:61:28:05:B8:AE:0D:F2:93:B1:73:49:3E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 01A04B1A72F8C30EA8ED8FACF68E5E450F762547 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/386d354b-b333-4d2d-95e1-ce56676d00ec.roa Signing time: Fri 01 Aug 2025 00:50:38 +0000 ROA not before: Fri 01 Aug 2025 00:50:38 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da22:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:4b:1a:72:f8:c3:0e:a8:ed:8f:ac:f6:8e:5e:45:0f:76:25:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:50:38 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=9a7a2936dd738436c0963700bb09ed19f490dad5268df2709c2bcfd3b4eaf05c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:12:99:0f:35:bd:8e:7c:26:f1:e6:17:42: 2b:82:22:8f:62:95:5c:15:c4:65:40:a4:38:f4:39: ed:78:25:8f:4f:57:51:c2:97:70:22:6f:a2:c5:b5: a5:34:b4:bd:2b:9e:0c:99:cd:39:1b:03:ec:5a:55: 42:96:2e:08:eb:40:8d:12:3f:87:d0:81:84:dd:7b: 35:f2:29:99:6a:5b:c6:23:e0:90:40:b3:1b:a4:2f: c1:dd:7c:08:be:79:ea:38:ed:ab:28:ba:23:55:45: 84:6c:ca:65:1c:89:7c:01:e4:ed:1e:57:fe:67:12: af:a0:92:b1:51:1d:44:f4:3a:33:68:0a:65:ba:51: e9:94:4c:80:ed:6c:d4:89:55:a4:44:2f:0e:3c:53: 7c:db:ad:3a:0e:e1:9b:83:58:b1:fb:a9:df:97:5c: ee:2f:75:8e:9a:8f:8a:cd:4e:b3:e6:46:6b:fa:33: 24:e1:eb:de:f3:cc:1e:3d:46:47:2d:e3:2f:b7:c7: c2:f8:3f:83:5d:32:6b:f6:e9:61:b6:23:cd:0d:23: 32:4c:3c:81:51:83:b7:33:78:6d:a4:fd:5e:3c:79: 7a:c9:24:7e:fa:9b:05:d5:44:c0:b7:16:7d:6b:9f: 33:99:02:a8:bc:f7:93:2b:98:a2:d1:0b:cd:f4:c1: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:37:AC:DB:68:22:60:7F:61:28:05:B8:AE:0D:F2:93:B1:73:49:3E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/386d354b-b333-4d2d-95e1-ce56676d00ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da22:8000::/36 Signature Algorithm: sha256WithRSAEncryption a6:10:ca:d1:9a:d6:34:57:a6:60:2c:c5:42:27:7b:1d:7e:fd: 41:33:56:04:45:72:de:6c:9d:c8:4c:65:55:b8:90:34:b7:24: e7:1b:52:a5:6a:d3:e2:57:49:c8:57:7d:1a:ab:e6:24:52:07: 5c:98:69:58:e1:f7:1a:6f:d5:ba:63:02:b5:63:2f:5e:f0:ed: 9e:d7:e7:8e:3b:69:ce:29:6f:31:17:b3:38:54:86:c0:c5:c3: 01:57:d4:de:32:a2:27:ec:a5:f2:29:eb:86:40:50:78:8b:06: f1:1b:75:a2:70:a3:2e:2e:88:49:47:34:19:36:9d:44:d5:23: 44:65:e1:b1:ee:64:a7:15:7c:56:44:6f:48:1a:8a:7c:0d:89: 8d:69:dc:1a:8c:89:ef:ba:3b:18:b9:41:65:e3:c9:37:b6:4a: 59:7a:08:7b:98:c8:b5:ff:c3:ba:5d:81:f1:24:fb:3c:8b:ef: 81:06:9d:4b:ba:24:69:f3:e2:07:7b:49:c5:30:05:7f:7c:db: 02:75:f6:9b:d5:9c:b7:a7:82:d4:7f:08:06:bc:0e:98:14:42: dc:40:c5:91:7f:e2:ab:16:88:bb:4f:82:80:60:c8:af:96:73: ee:da:a6:ef:e7:e5:bb:a7:71:f3:70:04:7f:25:cc:39:0a:2f: 3f:f9:05:b1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAaBLGnL4ww6o7Y+s9o5eRQ92JUcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwNTAzOFoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAOWE3YTI5MzZkZDczODQzNmMwOTYz NzAwYmIwOWVkMTlmNDkwZGFkNTI2OGRmMjcwOWMyYmNmZDNiNGVhZjA1YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpcSmQ81vY58JvHmF0IrgiKPYpVc FcRlQKQ49DnteCWPT1dRwpdwIm+ixbWlNLS9K54Mmc05GwPsWlVCli4I60CNEj+H 0IGE3Xs18imZalvGI+CQQLMbpC/B3XwIvnnqOO2rKLojVUWEbMplHIl8AeTtHlf+ ZxKvoJKxUR1E9DozaAplulHplEyA7WzUiVWkRC8OPFN82606DuGbg1ix+6nfl1zu L3WOmo+KzU6z5kZr+jMk4eve88wePUZHLeMvt8fC+D+DXTJr9ulhtiPNDSMyTDyB UYO3M3htpP1ePHl6ySR++psF1UTAtxZ9a58zmQKovPeTK5ii0QvN9MHS6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA43rNtoImB/YSgFuK4N8pOxc0k+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM4NmQzNTRiLWIzMzMtNGQyZC05NWUxLWNlNTY2NzZkMDBlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaIoAwDQYJKoZIhvcNAQELBQADggEBAKYQytGa1jRXpmAsxUIn ex1+/UEzVgRFct5snchMZVW4kDS3JOcbUqVq0+JXSchXfRqr5iRSB1yYaVjh9xpv 1bpjArVjL17w7Z7X5447ac4pbzEXszhUhsDFwwFX1N4yoifspfIp64ZAUHiLBvEb daJwoy4uiElHNBk2nUTVI0Rl4bHuZKcVfFZEb0gainwNiY1p3BqMie+6Oxi5QWXj yTe2Sll6CHuYyLX/w7pdgfEk+zyL74EGnUu6JGnz4gd7ScUwBX982wJ19pvVnLen gtR/CAa8DpgUQtxAxZF/4qsWiLtPgoBgyK+Wc+7apu/n5buncfNwBH8lzDkKLz/5 BbE= -----END CERTIFICATE-----Generated at Wed Aug 6 11:17:41 2025 by rpki-client