$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/841d2e32-ec89-44ad-8f86-21aa458e7070.roa File: 841d2e32-ec89-44ad-8f86-21aa458e7070.roa (raw, json) Hash identifier: +XI+T544DdJ94kTZnnXOLXnAvn5i2f6IDhT5Igc2y2I= Subject key identifier: 86:CC:5E:E1:E2:47:FF:BC:46:04:FC:DE:CE:C1:91:AF:50:16:30:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0138CF96863DD05BF5EB7629FC905C1A5CB495B8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/841d2e32-ec89-44ad-8f86-21aa458e7070.roa Signing time: Wed 30 Jul 2025 17:38:31 +0000 ROA not before: Wed 30 Jul 2025 17:38:31 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:38:cf:96:86:3d:d0:5b:f5:eb:76:29:fc:90:5c:1a:5c:b4:95:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 17:38:31 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=798018d98a4b354f51a1adfa24675a82fba9295ede6c40c36ea2da97500a2b5d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:2e:7b:0b:8b:09:e9:8a:2c:f4:73:32:d1: 88:04:1f:31:b0:23:28:ef:6b:1d:cd:cb:b4:97:8f: 6a:10:c6:24:94:ff:2e:c3:30:78:60:b7:30:41:b2: 7a:0c:8f:12:8b:95:d0:39:5b:6b:ad:74:44:33:ba: 3b:49:da:c8:5c:cc:09:db:29:6a:15:9e:89:6f:93: 4b:34:43:1c:0a:b4:49:13:aa:ed:e6:c3:17:04:58: ae:93:f4:fa:83:3d:57:78:eb:d0:e1:ea:fa:ee:f1: 98:a8:f2:4b:38:6b:b6:27:ec:55:7b:ba:fe:74:b2: 09:7e:3e:6d:dd:0c:72:52:9a:ed:bf:56:59:90:f4: ef:3f:ba:55:a6:7a:a0:64:26:10:79:79:b7:e6:80: 58:9b:9a:7e:bf:3a:d8:2c:48:54:8b:bd:09:2f:c8: f5:1c:4f:0f:7a:75:a2:59:41:81:cc:91:eb:cd:22: 52:04:53:4c:31:fe:52:d5:e2:76:ef:30:44:81:70: 2f:60:40:3d:49:25:1f:3a:bf:31:03:d7:78:30:01: 4e:98:b8:e4:7f:96:f7:12:c0:7f:00:a5:b8:e0:80: f6:89:7d:03:ca:d0:ba:b8:d6:2f:ba:40:f0:c8:5b: 7a:e7:c3:2d:67:19:98:7a:41:5f:6e:41:ee:8a:86: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CC:5E:E1:E2:47:FF:BC:46:04:FC:DE:CE:C1:91:AF:50:16:30:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/841d2e32-ec89-44ad-8f86-21aa458e7070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:6000::/40 Signature Algorithm: sha256WithRSAEncryption 58:e0:10:fe:b2:19:2f:76:a2:c7:73:0e:ef:e2:89:fc:c8:37: 0a:97:9b:f1:d0:a4:2e:12:98:0b:fd:0f:1b:eb:2e:60:67:6e: 1f:39:c3:78:b5:28:28:53:0f:f8:8d:94:f1:90:93:99:16:28: a7:08:16:ab:79:8a:e4:89:a9:af:e2:7f:31:d3:5f:4a:d2:44: 71:08:f9:b7:c0:cc:f8:6f:f2:15:c3:1a:b7:8c:ca:a6:6e:e8: 7b:f7:bd:dc:36:bd:6f:2e:ca:c2:80:fc:47:4d:4f:16:4d:a0: 3e:3a:3e:c0:f5:50:85:3d:14:51:ff:48:79:43:17:53:19:9a: 3b:2e:df:85:50:8e:1d:a0:ea:a1:c3:3f:d9:43:8e:cd:bd:70: 6d:da:cb:23:9d:75:8e:6c:73:a8:f3:f0:5c:fb:78:9b:8c:f3: 11:be:62:7b:d7:c4:7f:2d:08:99:a2:54:48:5d:24:54:75:77: b8:86:5b:ce:40:05:82:6c:11:5d:b3:68:17:d5:f0:8b:eb:01: 8d:6b:d6:40:c9:8b:ab:d3:11:d5:2c:e1:63:e0:70:63:41:c0: 9a:38:d1:c9:93:4b:2e:12:f7:6f:31:ca:55:98:8f:16:5a:28: 03:90:92:f0:2a:7c:2a:3d:36:31:3a:b3:ea:f6:5f:8b:3c:a3: f4:0c:2b:21 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUATjPloY90Fv163Yp/JBcGly0lbgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDE3MzgzMVoX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNANzk4MDE4ZDk4YTRiMzU0ZjUxYTFh ZGZhMjQ2NzVhODJmYmE5Mjk1ZWRlNmM0MGMzNmVhMmRhOTc1MDBhMmI1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKIuewuLCemKLPRzMtGIBB8xsCMo 72sdzcu0l49qEMYklP8uwzB4YLcwQbJ6DI8Si5XQOVtrrXREM7o7SdrIXMwJ2ylq FZ6Jb5NLNEMcCrRJE6rt5sMXBFiuk/T6gz1XeOvQ4er67vGYqPJLOGu2J+xVe7r+ dLIJfj5t3QxyUprtv1ZZkPTvP7pVpnqgZCYQeXm35oBYm5p+vzrYLEhUi70JL8j1 HE8PenWiWUGBzJHrzSJSBFNMMf5S1eJ27zBEgXAvYEA9SSUfOr8xA9d4MAFOmLjk f5b3EsB/AKW44ID2iX0DytC6uNYvukDwyFt658MtZxmYekFfbkHuioa6KQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIbMXuHiR/+8RgT83s7Bka9QFjDLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0MWQyZTMyLWVjODktNDRhZC04Zjg2LTIxYWE0NThlNzA3MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaWAwDQYJKoZIhvcNAQELBQADggEBAFjgEP6yGS92osdzDu/i ifzINwqXm/HQpC4SmAv9DxvrLmBnbh85w3i1KChTD/iNlPGQk5kWKKcIFqt5iuSJ qa/ifzHTX0rSRHEI+bfAzPhv8hXDGreMyqZu6Hv3vdw2vW8uysKA/EdNTxZNoD46 PsD1UIU9FFH/SHlDF1MZmjsu34VQjh2g6qHDP9lDjs29cG3ayyOddY5sc6jz8Fz7 eJuM8xG+YnvXxH8tCJmiVEhdJFR1d7iGW85ABYJsEV2zaBfV8IvrAY1r1kDJi6vT EdUs4WPgcGNBwJo40cmTSy4S928xylWYjxZaKAOQkvAqfCo9NjE6s+r2X4s8o/QM KyE= -----END CERTIFICATE-----Generated at Wed Aug 6 00:55:19 2025 by rpki-client