$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80f286b3-4a79-4e70-a311-4b9c3c54436f.roa File: 80f286b3-4a79-4e70-a311-4b9c3c54436f.roa (raw, json) Hash identifier: MwDtEh4yORHKTLNlohf3JDLzviJujTbHPwoFPSkciy8= Subject key identifier: FA:EC:3B:46:1E:48:3B:D8:50:EF:DE:10:B0:F0:0B:37:4B:78:27:93 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 71C1BB6F45FFDEDC920647855164A07ED5405BF9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80f286b3-4a79-4e70-a311-4b9c3c54436f.roa Signing time: Fri 01 Aug 2025 00:31:20 +0000 ROA not before: Fri 01 Aug 2025 00:31:20 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c1:bb:6f:45:ff:de:dc:92:06:47:85:51:64:a0:7e:d5:40:5b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:31:20 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=8b7e19021d1f4bc61b9d4b0458a8fb2dfe94e8e498627844f73b962277ef37eb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:21:40:ce:8d:c1:5d:3f:fb:75:17:85:7b: 6a:44:6c:0f:72:d2:bc:a6:ce:17:b1:9a:37:a9:5d: 21:4b:e2:13:c8:54:4e:85:02:8e:48:cc:0e:60:0d: 3d:ca:c2:81:5c:bb:52:ca:0a:3e:37:54:68:2b:82: 47:31:77:f5:bb:d9:38:6f:1a:f3:cc:0b:cf:9c:13: 69:91:8c:85:c9:7e:1c:bc:d4:a8:32:b5:6f:be:d7: 2c:93:e5:99:2d:86:ba:e4:84:d5:e8:8e:d7:fa:87: c4:94:46:2f:95:cf:27:0f:8e:1a:03:a6:9d:a4:40: 9d:d6:73:ff:43:b2:62:0f:dd:27:ef:90:64:dd:3e: 58:0f:8f:76:f5:a3:62:3e:b2:c9:95:50:01:73:96: b0:d4:9e:2b:4e:04:dc:af:a5:af:45:df:8e:67:1a: 5f:0e:55:1a:16:a2:5c:11:6d:3e:92:8b:cf:e1:fa: ba:a3:c0:f3:3b:42:19:44:1d:d7:53:3e:2d:8d:14: 16:ba:3e:ca:d3:95:55:cd:8b:62:15:cd:89:1b:3c: c3:89:36:9a:9b:cf:52:7b:f3:c1:b1:5c:ef:36:ef: 2c:7d:39:52:d1:e6:a9:fa:59:d0:aa:01:67:49:a0: bc:18:be:49:a8:64:be:cb:d6:a7:5e:2c:3e:8b:79: e3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EC:3B:46:1E:48:3B:D8:50:EF:DE:10:B0:F0:0B:37:4B:78:27:93 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80f286b3-4a79-4e70-a311-4b9c3c54436f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:400::/38 Signature Algorithm: sha256WithRSAEncryption 0a:02:12:38:45:34:95:0e:dc:81:92:d9:61:ef:7a:6d:36:63: ca:7a:8e:c1:64:98:1d:ee:ce:8c:ec:fe:c7:cb:f9:af:a9:60: 10:00:ce:60:4b:86:f9:bf:52:d6:d8:dd:20:8b:4f:3b:1d:fa: e4:12:a6:16:b6:21:b1:55:60:ca:31:04:29:52:7f:c8:ef:63: 80:fa:b3:48:01:d2:00:00:61:db:be:5f:1a:7c:ea:39:83:65: 8d:7e:84:8c:c0:ce:d2:4b:50:e0:2e:33:c0:49:6e:46:f2:c5: 54:bf:71:52:a2:45:d2:bd:e3:e7:1f:4f:ca:68:41:5e:ee:0f: 4e:e8:5f:85:8a:6a:1d:0c:49:78:ab:52:ed:c1:90:b4:5d:50: de:f8:41:14:70:a4:2e:37:4f:90:ad:e6:08:10:0e:8e:8c:32: 44:aa:a3:49:bc:41:ad:ee:2f:25:cf:4a:4d:56:43:fd:fa:a9: d0:45:ec:ef:e7:1c:db:dc:f7:8b:c4:e9:0c:7c:20:e0:b2:1d: b9:46:fb:79:29:14:eb:08:08:de:82:f0:a2:28:0a:4c:3e:f8: 74:9e:12:25:69:5a:67:36:33:ff:7b:8b:e7:88:fc:b9:b7:e9: aa:1f:cb:02:55:21:ab:c5:e2:99:5e:06:94:6f:71:1d:c8:03: 56:63:1d:45 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUccG7b0X/3tySBkeFUWSgftVAW/kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMzEyMFoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAOGI3ZTE5MDIxZDFmNGJjNjFiOWQ0 YjA0NThhOGZiMmRmZTk0ZThlNDk4NjI3ODQ0ZjczYjk2MjI3N2VmMzdlYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8IhQM6NwV0/+3UXhXtqRGwPctK8 ps4XsZo3qV0hS+ITyFROhQKOSMwOYA09ysKBXLtSygo+N1RoK4JHMXf1u9k4bxrz zAvPnBNpkYyFyX4cvNSoMrVvvtcsk+WZLYa65ITV6I7X+ofElEYvlc8nD44aA6ad pECd1nP/Q7JiD90n75Bk3T5YD4929aNiPrLJlVABc5aw1J4rTgTcr6WvRd+OZxpf DlUaFqJcEW0+kovP4fq6o8DzO0IZRB3XUz4tjRQWuj7K05VVzYtiFc2JGzzDiTaa m89Se/PBsVzvNu8sfTlS0eap+lnQqgFnSaC8GL5JqGS+y9anXiw+i3njvQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPrsO0YeSDvYUO/eELDwCzdLeCeTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwZjI4NmIzLTRhNzktNGU3MC1hMzExLTRiOWMzYzU0NDM2Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFAQwDQYJKoZIhvcNAQELBQADggEBAAoCEjhFNJUO3IGS2WHv em02Y8p6jsFkmB3uzozs/sfL+a+pYBAAzmBLhvm/UtbY3SCLTzsd+uQSpha2IbFV YMoxBClSf8jvY4D6s0gB0gAAYdu+Xxp86jmDZY1+hIzAztJLUOAuM8BJbkbyxVS/ cVKiRdK94+cfT8poQV7uD07oX4WKah0MSXirUu3BkLRdUN74QRRwpC43T5Ct5ggQ Do6MMkSqo0m8Qa3uLyXPSk1WQ/36qdBF7O/nHNvc94vE6Qx8IOCyHblG+3kpFOsI CN6C8KIoCkw++HSeEiVpWmc2M/97i+eI/Lm36aofywJVIavF4pleBpRvcR3IA1Zj HUU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:41:52 2025 by rpki-client