$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67b122dd-c584-4c2f-ac76-fb1a660b79da.roa File: 67b122dd-c584-4c2f-ac76-fb1a660b79da.roa (raw, json) Hash identifier: bnubTnMZopEGkQD6STvNmpou7AGAMf0Pov8Smaf/ScU= Subject key identifier: 46:04:EA:15:94:79:60:B8:23:5A:5F:9C:44:5C:0A:07:5C:52:45:9E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 38AA24DE93BB311C59A983501F0BF774D1743A58 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67b122dd-c584-4c2f-ac76-fb1a660b79da.roa Signing time: Tue 22 Jul 2025 00:00:10 +0000 ROA not before: Tue 22 Jul 2025 00:00:10 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da28::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:aa:24:de:93:bb:31:1c:59:a9:83:50:1f:0b:f7:74:d1:74:3a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 22 00:00:10 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=6d962cff1effc385e3ebf62df88192b738a0ee1a904ba623d9e07f3bb7159df5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:28:d9:59:1d:23:5c:03:d5:57:c7:6e:4a:e9: 1e:c2:4b:3b:6b:5e:32:b5:4f:28:ae:f1:7f:20:63: 19:7b:3a:c4:65:ce:fa:d1:d0:56:9a:df:45:73:98: 67:b7:fd:21:37:42:0a:22:b1:ab:9a:bd:ae:ef:23: 56:89:b2:27:31:2c:f0:41:f8:12:ca:e9:72:cc:14: 8b:f9:5f:19:45:9c:66:5c:73:0d:e1:cf:99:7c:c0: 42:5a:70:31:63:af:92:dc:1e:2b:7a:eb:18:45:e1: 3d:71:7b:72:f8:c6:75:c0:9d:f1:28:86:9f:d0:31: b7:30:55:45:0e:a4:b8:09:0a:9f:73:4f:4b:03:a6: 48:68:cd:f0:1b:58:bd:8b:e3:20:4e:68:38:68:c7: 8e:6f:08:f6:75:7a:f2:81:e1:7b:0c:10:e6:7b:4b: 4d:4d:35:0a:38:ee:4a:be:0d:e0:ed:5e:45:37:4f: 7d:75:54:cd:84:a5:c6:cd:d7:1c:e4:f9:12:47:0e: 18:7b:64:e4:aa:fc:72:6b:1a:0d:3f:8a:4a:8a:0b: 3c:35:ce:14:87:2f:7f:0b:01:ee:cf:4f:4a:48:ea: f8:61:d2:70:bd:54:d2:f2:89:81:2c:44:fa:7d:bd: b8:47:86:d0:8f:2c:e6:54:c2:7a:ba:ab:dd:0b:e8: 52:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:04:EA:15:94:79:60:B8:23:5A:5F:9C:44:5C:0A:07:5C:52:45:9E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67b122dd-c584-4c2f-ac76-fb1a660b79da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da28::/36 Signature Algorithm: sha256WithRSAEncryption 15:7e:ff:0e:1b:8b:31:8e:1b:e5:4d:8e:fa:23:cd:8d:c8:bf: 50:2f:93:0f:bf:5e:bf:4e:94:44:17:77:2f:48:00:46:bb:a2: 91:10:12:52:b9:ad:1f:24:77:cf:f1:68:8b:0f:94:d3:30:3c: e7:de:fe:c9:74:25:6e:ba:21:d4:2b:bb:cf:ea:22:b0:41:c9: 0c:fb:b5:63:02:0e:ea:87:62:09:f5:33:fa:8f:92:0b:08:cb: b0:80:af:13:4c:0d:04:d5:f9:53:ae:ab:b6:e7:a9:8c:11:bd: 6e:84:66:3f:89:21:9d:5e:47:cb:27:f3:53:86:1a:13:1b:3a: c2:86:b5:02:d7:4d:9f:85:1b:ef:75:13:ae:9c:a6:ee:ff:a4: f3:6b:7a:c3:99:f5:78:cb:3c:92:5e:6d:1d:0d:34:37:c4:4d: d7:b2:e5:f2:43:4f:3b:90:38:51:4f:dc:34:14:cf:03:55:84: e4:b5:b1:bf:03:da:fe:82:79:39:8e:c5:18:fd:61:56:b9:12: d7:88:f1:11:80:07:05:6e:d7:f7:7a:8e:41:0b:1f:cc:70:22: 84:63:34:70:27:96:73:94:73:b5:24:df:bd:f8:be:78:64:a6: 88:d3:1b:27:98:32:1c:9b:52:36:15:e0:c9:15:e6:d2:39:cb: b3:8c:e9:c5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOKok3pO7MRxZqYNQHwv3dNF0OlgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMjAwMDAxMFoX DTI1MDgyNjIzNTk1OVowejFJMEcGA1UEBRNANmQ5NjJjZmYxZWZmYzM4NWUzZWJm NjJkZjg4MTkyYjczOGEwZWUxYTkwNGJhNjIzZDllMDdmM2JiNzE1OWRmNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SjZWR0jXAPVV8duSukewks7a14y tU8orvF/IGMZezrEZc760dBWmt9Fc5hnt/0hN0IKIrGrmr2u7yNWibInMSzwQfgS yulyzBSL+V8ZRZxmXHMN4c+ZfMBCWnAxY6+S3B4reusYReE9cXty+MZ1wJ3xKIaf 0DG3MFVFDqS4CQqfc09LA6ZIaM3wG1i9i+MgTmg4aMeObwj2dXrygeF7DBDme0tN TTUKOO5Kvg3g7V5FN099dVTNhKXGzdcc5PkSRw4Ye2TkqvxyaxoNP4pKigs8Nc4U hy9/CwHuz09KSOr4YdJwvVTS8omBLET6fb24R4bQjyzmVMJ6uqvdC+hS7QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEYE6hWUeWC4I1pfnERcCgdcUkWeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY3YjEyMmRkLWM1ODQtNGMyZi1hYzc2LWZiMWE2NjBiNzlkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaKAAwDQYJKoZIhvcNAQELBQADggEBABV+/w4bizGOG+VNjvoj zY3Iv1Avkw+/Xr9OlEQXdy9IAEa7opEQElK5rR8kd8/xaIsPlNMwPOfe/sl0JW66 IdQru8/qIrBByQz7tWMCDuqHYgn1M/qPkgsIy7CArxNMDQTV+VOuq7bnqYwRvW6E Zj+JIZ1eR8sn81OGGhMbOsKGtQLXTZ+FG+91E66cpu7/pPNresOZ9XjLPJJebR0N NDfETdey5fJDTzuQOFFP3DQUzwNVhOS1sb8D2v6CeTmOxRj9YVa5EteI8RGABwVu 1/d6jkELH8xwIoRjNHAnlnOUc7Uk3734vnhkpojTGyeYMhybUjYV4MkV5tI5y7OM 6cU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:09 2025 by rpki-client