$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66a48a3e-0a14-46cf-b462-510f93c82988.roa File: 66a48a3e-0a14-46cf-b462-510f93c82988.roa (raw, json) Hash identifier: JYiIOZ+C9wDJ2OX0wjY57+qA8e6uim5vfZT0HyCPZj4= Subject key identifier: 8A:B8:04:71:9B:16:A0:6A:BF:40:22:89:A4:65:B3:96:B4:1E:C0:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 536C6F1AA6C7E0823192EFF31D25FFCF8F7CD5A4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66a48a3e-0a14-46cf-b462-510f93c82988.roa Signing time: Fri 01 Aug 2025 00:30:11 +0000 ROA not before: Fri 01 Aug 2025 00:30:11 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6c:6f:1a:a6:c7:e0:82:31:92:ef:f3:1d:25:ff:cf:8f:7c:d5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:30:11 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=a128dc5ad8e7e2156c1e950bc8c9f081b17fcf2ecdf22ebf18d68da8ab845e82, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:5f:89:d1:59:81:dc:6d:72:1d:ae:a5:87: f7:01:55:e1:9d:d4:53:e7:bc:ac:d0:2b:48:34:dc: 0e:25:4e:89:65:b5:3a:69:d5:91:31:24:31:dc:4a: 33:2a:46:92:3e:5d:d9:a3:d4:b8:29:79:b7:13:89: b3:98:2d:45:eb:b4:ef:45:0d:49:7f:bf:a9:a9:47: 29:94:5b:e0:46:45:24:a4:02:66:a4:a8:14:4d:12: d7:54:a3:43:e8:97:d4:bf:4a:09:be:9b:21:05:7d: aa:03:09:b7:85:b8:e0:12:09:7a:9e:80:d6:8f:8a: e0:85:09:cd:95:07:bf:75:e7:12:22:60:43:92:a4: 20:bb:b1:9a:07:d1:36:fe:be:1b:2f:0b:34:87:d6: 44:e5:63:77:07:1b:f6:61:75:57:3b:a0:4b:7a:d2: 48:95:6b:41:a4:c6:3c:74:af:5b:04:b1:1d:9a:f4: cc:8e:b5:a2:06:fc:09:c0:0a:b7:1a:b1:7c:7d:30: 4a:6d:81:c3:2a:5a:2a:0e:ce:7f:f0:7f:d3:53:44: de:d5:b3:77:e9:8c:22:99:0d:0a:63:a8:3b:55:98: 23:6e:9a:7e:0e:92:42:d6:7e:d0:8d:9f:47:5a:73: bf:a9:51:cb:08:86:28:ef:61:28:1a:8c:f0:6c:f7: 42:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B8:04:71:9B:16:A0:6A:BF:40:22:89:A4:65:B3:96:B4:1E:C0:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66a48a3e-0a14-46cf-b462-510f93c82988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:c00::/38 Signature Algorithm: sha256WithRSAEncryption a1:3a:08:cb:df:a6:90:76:c0:c8:1d:dd:37:82:28:a7:3f:9f: c6:dc:f5:4c:59:f4:49:a9:ec:88:e5:30:44:a4:ce:5b:68:56: 7d:e0:26:f4:d8:27:eb:06:7c:41:1e:da:79:29:4d:4c:dd:27: d0:82:65:a0:ae:81:21:e6:ac:88:3d:23:10:2a:e2:4d:b9:03: bd:ce:80:8a:6a:70:6e:45:24:77:f2:d2:0d:eb:ef:e0:98:77: db:a8:ac:71:15:6f:bf:bb:31:3f:f2:37:c4:e2:03:a8:70:f1: a2:2b:91:59:60:85:eb:3b:7d:c3:3a:cc:e1:47:79:1a:be:d2: 22:8d:8c:38:fe:02:83:bd:15:ca:5d:99:b4:cc:56:c2:1b:41: ba:56:ae:66:a6:68:6b:a6:41:7f:7c:5d:c4:4d:b6:a4:98:d3: e9:5e:db:e1:9e:de:75:96:07:15:f2:ce:77:78:b5:e5:2b:db: 6f:28:66:a3:07:3d:bd:e8:41:52:48:ee:1a:8e:ef:be:8c:b3: dc:64:9a:2c:a6:83:5d:ef:dd:7c:b3:e8:78:0d:6e:cc:88:e5: 6f:52:fe:94:13:66:83:bb:e2:9e:2d:71:42:ee:ba:85:20:ff: 18:00:bf:1c:e3:30:42:5b:f1:73:ae:79:a4:de:02:fe:ee:0c: 5f:c5:65:20 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUU2xvGqbH4IIxku/zHSX/z4981aQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMzAxMVoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAYTEyOGRjNWFkOGU3ZTIxNTZjMWU5 NTBiYzhjOWYwODFiMTdmY2YyZWNkZjIyZWJmMThkNjhkYThhYjg0NWU4MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdxfidFZgdxtch2upYf3AVXhndRT 57ys0CtINNwOJU6JZbU6adWRMSQx3EozKkaSPl3Zo9S4KXm3E4mzmC1F67TvRQ1J f7+pqUcplFvgRkUkpAJmpKgUTRLXVKND6JfUv0oJvpshBX2qAwm3hbjgEgl6noDW j4rghQnNlQe/decSImBDkqQgu7GaB9E2/r4bLws0h9ZE5WN3Bxv2YXVXO6BLetJI lWtBpMY8dK9bBLEdmvTMjrWiBvwJwAq3GrF8fTBKbYHDKloqDs5/8H/TU0Te1bN3 6YwimQ0KY6g7VZgjbpp+DpJC1n7QjZ9HWnO/qVHLCIYo72EoGozwbPdCTwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIq4BHGbFqBqv0AiiaRls5a0HsBEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY2YTQ4YTNlLTBhMTQtNDZjZi1iNDYyLTUxMGY5M2M4Mjk4OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEgwwDQYJKoZIhvcNAQELBQADggEBAKE6CMvfppB2wMgd3TeC KKc/n8bc9UxZ9Emp7IjlMESkzltoVn3gJvTYJ+sGfEEe2nkpTUzdJ9CCZaCugSHm rIg9IxAq4k25A73OgIpqcG5FJHfy0g3r7+CYd9uorHEVb7+7MT/yN8TiA6hw8aIr kVlghes7fcM6zOFHeRq+0iKNjDj+AoO9FcpdmbTMVsIbQbpWrmamaGumQX98XcRN tqSY0+le2+Ge3nWWBxXyznd4teUr228oZqMHPb3oQVJI7hqO776Ms9xkmiymg13v 3Xyz6HgNbsyI5W9S/pQTZoO74p4tcULuuoUg/xgAvxzjMEJb8XOueaTeAv7uDF/F ZSA= -----END CERTIFICATE-----Generated at Wed Aug 6 00:56:36 2025 by rpki-client