$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8322159e-0198-4b52-b8d1-6bbc4fa019e1.roa File: 8322159e-0198-4b52-b8d1-6bbc4fa019e1.roa (raw, json) Hash identifier: oNQlAecEqVuGbIFnrvCVfZwyTqgrU7VBzv8teh833y8= Subject key identifier: 9D:32:06:58:4C:FE:D5:3F:39:26:CA:70:DD:8E:AB:1B:12:93:9F:F2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 40FD2964E1A4B57F17EB722A505347CD2D6C86EA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8322159e-0198-4b52-b8d1-6bbc4fa019e1.roa Signing time: Mon 21 Jul 2025 15:10:55 +0000 ROA not before: Mon 21 Jul 2025 15:10:55 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fd:29:64:e1:a4:b5:7f:17:eb:72:2a:50:53:47:cd:2d:6c:86:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 15:10:55 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=2e676f709bc84bb1433a31f0ef88957024c522b2a529ebeadb1a8416ce881731, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c6:de:e5:df:60:e7:a5:98:41:51:17:16:e8: bd:7d:8c:2d:0d:3c:82:36:dc:ce:56:73:2d:db:67: 89:b2:3f:c1:1c:a2:fd:af:3f:63:ae:a3:2f:b6:3f: d7:f1:95:81:fd:3b:46:35:14:01:29:44:5c:a8:a8: 6c:32:b5:47:90:94:9b:51:00:c2:88:bf:9a:1b:27: cb:b0:2b:02:41:aa:9b:36:9c:29:dc:c2:35:7d:00: ea:9d:ad:c3:76:71:aa:5b:87:55:26:15:54:d7:fd: 02:9f:45:e6:eb:64:41:3b:68:08:a4:c5:00:1e:02: 02:74:f2:3a:99:d1:fe:1c:59:85:40:ee:76:53:59: 23:2f:0d:c5:99:8a:c4:5c:e6:8a:08:5f:ea:1e:44: 79:f6:0f:86:b2:22:3a:ed:bb:1c:eb:a8:6b:d1:3a: 3f:63:42:05:88:87:c4:87:cc:c3:75:1f:1e:10:66: db:26:7d:a2:25:b6:86:5a:06:05:84:4d:db:2a:50: 1a:a6:81:0c:87:4a:29:86:b4:62:f5:5a:e2:29:8e: 0d:07:19:b6:04:84:7b:da:10:a8:fa:78:fb:5c:78: 43:35:a4:fd:72:51:c2:b6:c5:45:ee:e1:d5:fa:c7: 8b:f0:dc:fb:67:bb:a1:c4:a3:d3:b0:3f:a3:7f:f6: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:32:06:58:4C:FE:D5:3F:39:26:CA:70:DD:8E:AB:1B:12:93:9F:F2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8322159e-0198-4b52-b8d1-6bbc4fa019e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:6000::/40 Signature Algorithm: sha256WithRSAEncryption af:72:87:b2:91:8f:84:56:a4:6b:19:37:1d:bd:77:f8:e9:af: 11:23:fb:56:d9:04:1e:60:34:22:8f:b4:41:b9:65:fe:10:f7: bf:9b:d0:da:98:2d:9a:01:24:5a:8b:e9:00:85:dc:be:74:60: 1b:6c:80:73:24:d9:3e:ea:71:e7:50:b9:d2:e7:b3:69:23:cb: ee:c9:b2:2e:c3:51:45:ab:75:bf:fa:1d:25:7d:92:d5:aa:52: 9e:de:da:15:5a:31:8d:f6:b9:e2:bd:33:48:58:e7:70:ba:e8: 40:da:85:9f:28:69:33:c8:28:be:dd:90:04:e0:04:db:7f:ef: f6:e9:25:1c:ee:ad:fe:21:c1:d6:ac:6a:42:c4:ab:c6:8d:f3: e7:00:39:a6:17:15:52:6f:a6:89:c0:0f:34:ad:3a:15:07:a8: cc:cd:88:fb:d0:40:46:de:b1:4b:ae:a7:3f:8f:8e:a7:1c:dc: 81:b8:4c:19:bc:6b:76:e1:ce:cc:c4:f6:66:4d:3f:95:31:6b: 6c:87:4b:b9:00:c9:6e:33:32:c1:7a:0e:68:f8:e2:24:5b:f7: a8:8b:12:77:6e:30:77:25:c1:01:28:80:ee:a8:b0:96:16:c9: 90:15:0b:a6:37:c9:42:fe:7a:dc:90:7d:39:fb:ba:df:46:3d: 48:1c:76:9f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQP0pZOGktX8X63IqUFNHzS1shuowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMTE1MTA1NVoX DTI1MDgyNTIzNTk1OVowejFJMEcGA1UEBRNAMmU2NzZmNzA5YmM4NGJiMTQzM2Ez MWYwZWY4ODk1NzAyNGM1MjJiMmE1MjllYmVhZGIxYTg0MTZjZTg4MTczMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMbe5d9g56WYQVEXFui9fYwtDTyC NtzOVnMt22eJsj/BHKL9rz9jrqMvtj/X8ZWB/TtGNRQBKURcqKhsMrVHkJSbUQDC iL+aGyfLsCsCQaqbNpwp3MI1fQDqna3DdnGqW4dVJhVU1/0Cn0Xm62RBO2gIpMUA HgICdPI6mdH+HFmFQO52U1kjLw3FmYrEXOaKCF/qHkR59g+GsiI67bsc66hr0To/ Y0IFiIfEh8zDdR8eEGbbJn2iJbaGWgYFhE3bKlAapoEMh0ophrRi9VriKY4NBxm2 BIR72hCo+nj7XHhDNaT9clHCtsVF7uHV+seL8Nz7Z7uhxKPTsD+jf/YxowIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJ0yBlhM/tU/OSbKcN2OqxsSk5/yMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMjIxNTllLTAxOTgtNGI1Mi1iOGQxLTZiYmM0ZmEwMTllMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba82AwDQYJKoZIhvcNAQELBQADggEBAK9yh7KRj4RWpGsZNx29 d/jprxEj+1bZBB5gNCKPtEG5Zf4Q97+b0NqYLZoBJFqL6QCF3L50YBtsgHMk2T7q cedQudLns2kjy+7Jsi7DUUWrdb/6HSV9ktWqUp7e2hVaMY32ueK9M0hY53C66EDa hZ8oaTPIKL7dkATgBNt/7/bpJRzurf4hwdasakLEq8aN8+cAOaYXFVJvponADzSt OhUHqMzNiPvQQEbesUuupz+Pjqcc3IG4TBm8a3bhzszE9mZNP5Uxa2yHS7kAyW4z MsF6Dmj44iRb96iLEnduMHclwQEogO6osJYWyZAVC6Y3yUL+etyQfTn7ut9GPUgc dp8= -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:02 2025 by rpki-client