$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aad75788-f501-4250-9f37-16adba579de4.roa File: aad75788-f501-4250-9f37-16adba579de4.roa (raw, json) Hash identifier: Gk8cvSGUos/oJyXttsfeqAyA0Dq+jHPounuHw4TvgpQ= Subject key identifier: FA:BF:84:46:E8:56:C0:7D:EC:F4:B9:A9:75:98:CE:3D:3A:FD:C2:C5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4AC722CFAE764B336B5F597C963E569F266198E2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aad75788-f501-4250-9f37-16adba579de4.roa Signing time: Wed 30 Jul 2025 17:52:12 +0000 ROA not before: Wed 30 Jul 2025 17:52:12 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c7:22:cf:ae:76:4b:33:6b:5f:59:7c:96:3e:56:9f:26:61:98:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 17:52:12 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=43b01d0dd806a021e11ccaa84f77e310e6143432ef04daadd6487b96588d6bf8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:77:40:cd:99:32:a8:f3:9a:bf:b3:df:d2: 4f:af:4c:2f:2f:f1:43:e9:91:13:1e:ab:93:00:8e: 8c:92:f7:d9:65:3c:30:d0:00:19:3c:03:c9:aa:b0: 3d:0d:2c:75:8f:bf:c6:e9:be:6c:f8:f0:b7:64:87: 8c:83:95:e7:7f:4c:88:18:62:32:8b:1b:78:67:a4: 76:d1:80:01:b4:4d:99:a7:94:be:b3:02:f8:29:91: 8a:10:ae:0a:b0:91:cf:1e:45:10:e3:33:fe:7d:4c: 0b:8c:cf:b0:44:fe:0c:59:72:1a:21:c6:fb:ae:03: d3:ee:5e:ee:5d:04:cf:c8:19:ea:1c:87:38:34:07: 18:1d:d9:4f:ac:98:df:71:aa:c1:8a:7c:ca:d2:c3: 9f:32:d9:a9:78:9b:14:3e:f1:d2:46:f2:ed:f7:0a: 6f:12:32:e6:f6:56:9a:af:26:4b:9f:7c:07:2b:c5: 3c:ce:2e:8b:20:08:b4:47:f8:cc:53:21:1b:53:83: 16:1e:bd:c3:2a:02:31:cb:d2:c3:9d:97:a0:14:c2: 10:e7:87:38:72:cc:2a:04:25:35:ec:33:fa:bf:4d: 4b:a2:92:17:f3:a7:83:a8:bc:8e:fa:d4:ff:0b:03: 0e:91:56:6e:4d:54:2a:4a:bf:8a:56:64:c8:74:0c: 39:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:84:46:E8:56:C0:7D:EC:F4:B9:A9:75:98:CE:3D:3A:FD:C2:C5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aad75788-f501-4250-9f37-16adba579de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:8000::/40 Signature Algorithm: sha256WithRSAEncryption 7c:6f:19:da:93:e3:38:0d:8e:f5:c8:bf:9f:5d:b3:57:70:66: c6:47:69:78:a4:57:86:e6:3d:3f:e6:a0:2a:b0:9e:6a:dd:cc: c3:6d:26:a1:a7:f7:fe:b8:e2:97:6c:0a:83:06:3e:53:59:91: fe:64:66:64:76:0b:0c:e4:40:3c:b0:79:f6:33:6e:2d:90:cf: 19:ad:61:f5:50:df:fb:dd:f2:42:15:5d:25:c6:22:f0:f9:13: e3:cb:2a:1f:c9:b1:56:a1:e5:a9:a8:57:8a:28:50:34:0b:cf: 1c:8a:73:8d:06:d1:97:d5:a7:11:3f:19:f4:98:4d:e2:af:de: bb:31:a5:9c:45:64:92:9a:3f:9f:98:39:8f:47:38:3d:2c:6a: 14:3d:f3:09:eb:58:54:2f:28:7d:47:80:88:05:7c:0f:40:dd: 7d:ae:49:38:58:8e:c2:30:9f:a5:cc:df:15:35:3d:a3:9f:3b: ba:fa:c2:68:4a:38:63:d4:42:c9:c7:11:96:09:0f:f0:a3:b9: d4:8e:e8:1b:18:87:70:1e:e6:07:93:eb:2d:d0:71:b0:57:88: 8c:19:86:c3:40:5a:5d:77:01:e7:fe:dc:eb:33:43:2f:ec:83: 41:01:02:92:a8:9a:63:d0:41:28:21:8b:34:71:6b:af:99:4e: e5:96:4c:a0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSsciz652SzNrX1l8lj5WnyZhmOIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDE3NTIxMloX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNANDNiMDFkMGRkODA2YTAyMWUxMWNj YWE4NGY3N2UzMTBlNjE0MzQzMmVmMDRkYWFkZDY0ODdiOTY1ODhkNmJmODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyZ3QM2ZMqjzmr+z39JPr0wvL/FD 6ZETHquTAI6MkvfZZTww0AAZPAPJqrA9DSx1j7/G6b5s+PC3ZIeMg5Xnf0yIGGIy ixt4Z6R20YABtE2Zp5S+swL4KZGKEK4KsJHPHkUQ4zP+fUwLjM+wRP4MWXIaIcb7 rgPT7l7uXQTPyBnqHIc4NAcYHdlPrJjfcarBinzK0sOfMtmpeJsUPvHSRvLt9wpv EjLm9laaryZLn3wHK8U8zi6LIAi0R/jMUyEbU4MWHr3DKgIxy9LDnZegFMIQ54c4 cswqBCU17DP6v01LopIX86eDqLyO+tT/CwMOkVZuTVQqSr+KVmTIdAw5nwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPq/hEboVsB97PS5qXWYzj06/cLFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FhZDc1Nzg4LWY1MDEtNDI1MC05ZjM3LTE2YWRiYTU3OWRlNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+4AwDQYJKoZIhvcNAQELBQADggEBAHxvGdqT4zgNjvXIv59d s1dwZsZHaXikV4bmPT/moCqwnmrdzMNtJqGn9/644pdsCoMGPlNZkf5kZmR2Cwzk QDywefYzbi2QzxmtYfVQ3/vd8kIVXSXGIvD5E+PLKh/JsVah5amoV4ooUDQLzxyK c40G0ZfVpxE/GfSYTeKv3rsxpZxFZJKaP5+YOY9HOD0sahQ98wnrWFQvKH1HgIgF fA9A3X2uSThYjsIwn6XM3xU1PaOfO7r6wmhKOGPUQsnHEZYJD/CjudSO6BsYh3Ae 5geT6y3QcbBXiIwZhsNAWl13Aef+3OszQy/sg0EBApKommPQQSghizRxa6+ZTuWW TKA= -----END CERTIFICATE-----Generated at Sat Aug 9 01:12:22 2025 by rpki-client