$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f786bf17-4339-4d18-ad69-ea5d340bdc7d.roa File: f786bf17-4339-4d18-ad69-ea5d340bdc7d.roa (raw, json) Hash identifier: 94UZAVg+ojskL6F91MEKnianKbuKoVfxZpQNr6s6/9A= Subject key identifier: A2:63:6A:65:3B:09:DB:2C:CE:5D:F2:D8:03:D6:C9:2D:80:FE:0B:A4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73D547D54E8AD84D93EB3A5C606421B664E6BB24 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f786bf17-4339-4d18-ad69-ea5d340bdc7d.roa Signing time: Mon 21 Jul 2025 15:00:09 +0000 ROA not before: Mon 21 Jul 2025 15:00:09 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:1040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d5:47:d5:4e:8a:d8:4d:93:eb:3a:5c:60:64:21:b6:64:e6:bb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 15:00:09 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=39ae2c9840540f0248f27feb9461c823a33d582c2fb82cae697eaa388ffb6439, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a8:b0:c9:98:61:89:a1:90:d2:a9:13:89:a7: af:81:1b:80:c0:86:72:3a:06:fc:0e:74:3c:00:a1: 35:34:b3:b3:7f:72:77:f7:9c:37:fc:70:ff:8f:ad: e2:09:12:01:93:e9:34:0b:8a:03:66:75:fe:3f:c1: 2b:eb:7d:08:b8:63:4f:e4:08:d1:b1:92:b9:0a:03: a1:57:f8:e1:c1:55:19:55:11:cd:da:18:47:94:da: c6:ca:cf:9b:33:60:9a:6b:f6:9a:65:5c:bb:5c:d7: 71:bb:fd:17:9c:4d:40:d2:98:fb:06:5b:3d:48:0e: c8:e1:3d:fd:74:f2:84:fc:ac:6a:c9:1d:e0:0f:27: 4b:d1:58:39:86:1c:94:1c:c4:04:5c:af:66:28:77: 94:36:10:80:54:13:3f:a5:06:c8:2c:b4:22:03:0d: 0f:4f:3e:6d:72:d2:23:64:de:33:2f:f9:0a:eb:c1: a5:83:29:d3:7e:1c:31:27:45:a4:d8:62:ea:c1:95: f5:5e:fe:f7:ef:f7:c4:cd:b4:73:69:1a:67:c2:27: b2:b1:0f:4c:a6:31:a8:3e:62:37:87:54:39:60:07: 4a:8a:65:dd:a4:f7:a7:d3:be:de:c2:a0:b3:d3:ec: 95:ab:a9:9b:4f:f2:58:17:96:58:f1:c9:9f:1c:f8: e2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:63:6A:65:3B:09:DB:2C:CE:5D:F2:D8:03:D6:C9:2D:80:FE:0B:A4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f786bf17-4339-4d18-ad69-ea5d340bdc7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:1040::/46 Signature Algorithm: sha256WithRSAEncryption ad:82:7d:25:88:e4:0c:01:43:21:f7:08:7c:ef:23:aa:dc:fb: 50:e7:8d:74:f2:0b:00:f0:a3:33:08:7d:92:75:21:e6:5c:67: 3b:8f:a1:a2:27:5a:de:00:4a:72:f7:df:5c:3e:09:32:73:72: a8:1b:68:99:da:60:b4:b5:0e:15:00:0c:0a:24:7e:ac:cf:29: 39:cd:23:b0:17:b5:48:c1:62:fd:17:5a:89:90:ed:4b:c5:f3: b2:97:66:ad:ac:8f:96:c3:3c:01:aa:30:27:7e:4d:2a:b8:d3: b0:ca:08:b5:0a:f7:c2:76:31:62:fa:3c:30:70:14:a5:da:b8: fb:f6:29:b7:36:2c:26:26:6a:30:d1:c4:79:bf:29:fe:c8:3b: 98:de:64:c5:bb:01:16:5f:96:a0:a6:22:22:6d:9e:8f:65:78: 5c:de:05:0b:1f:43:39:a8:e2:1c:fb:5a:7e:c4:21:de:ee:db: 46:84:eb:af:b3:1b:a2:f5:ec:93:dc:21:90:82:e2:17:a3:21: 2f:75:81:74:bd:31:7d:0a:29:48:77:34:79:00:6c:e8:17:d1: 3f:8c:db:c5:97:e7:a0:cc:f5:07:38:d3:75:e7:2e:2b:7e:e5: 40:6b:12:d6:9d:54:0c:46:b0:67:25:1c:26:62:fc:a2:82:88: d8:7b:be:91 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUc9VH1U6K2E2T6zpcYGQhtmTmuyQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMTE1MDAwOVoX DTI1MDgyNTIzNTk1OVowejFJMEcGA1UEBRNAMzlhZTJjOTg0MDU0MGYwMjQ4ZjI3 ZmViOTQ2MWM4MjNhMzNkNTgyYzJmYjgyY2FlNjk3ZWFhMzg4ZmZiNjQzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKiwyZhhiaGQ0qkTiaevgRuAwIZy Ogb8DnQ8AKE1NLOzf3J395w3/HD/j63iCRIBk+k0C4oDZnX+P8Er630IuGNP5AjR sZK5CgOhV/jhwVUZVRHN2hhHlNrGys+bM2Caa/aaZVy7XNdxu/0XnE1A0pj7Bls9 SA7I4T39dPKE/KxqyR3gDydL0Vg5hhyUHMQEXK9mKHeUNhCAVBM/pQbILLQiAw0P Tz5tctIjZN4zL/kK68GlgynTfhwxJ0Wk2GLqwZX1Xv737/fEzbRzaRpnwieysQ9M pjGoPmI3h1Q5YAdKimXdpPen077ewqCz0+yVq6mbT/JYF5ZY8cmfHPjifwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKJjamU7Cdsszl3y2APWyS2A/gukMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3ODZiZjE3LTQzMzktNGQxOC1hZDY5LWVhNWQzNDBiZGM3ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8xBAMA0GCSqGSIb3DQEBCwUAA4IBAQCtgn0liOQMAUMh9wh8 7yOq3PtQ54108gsA8KMzCH2SdSHmXGc7j6GiJ1reAEpy999cPgkyc3KoG2iZ2mC0 tQ4VAAwKJH6szyk5zSOwF7VIwWL9F1qJkO1LxfOyl2atrI+WwzwBqjAnfk0quNOw ygi1CvfCdjFi+jwwcBSl2rj79im3NiwmJmow0cR5vyn+yDuY3mTFuwEWX5agpiIi bZ6PZXhc3gULH0M5qOIc+1p+xCHe7ttGhOuvsxui9eyT3CGQguIXoyEvdYF0vTF9 CilIdzR5AGzoF9E/jNvFl+egzPUHONN15y4rfuVAaxLWnVQMRrBnJRwmYvyigojY e76R -----END CERTIFICATE-----Generated at Mon Aug 4 15:26:58 2025 by rpki-client