$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0455dd06-6363-446d-beab-2728280200d6.roa File: 0455dd06-6363-446d-beab-2728280200d6.roa (raw, json) Hash identifier: pPpjPnF0UXHLVSCMIwUhQsrLh4q3kCRJdZNZ+jAd7z8= Subject key identifier: DC:89:B8:88:96:87:06:7C:D1:6B:06:B6:60:9D:08:AC:70:FA:D4:EC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14C5B71BB74F6EE28582994F384118D1F64FB992 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0455dd06-6363-446d-beab-2728280200d6.roa Signing time: Fri 15 Aug 2025 00:11:14 +0000 ROA not before: Fri 15 Aug 2025 00:11:14 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c5:b7:1b:b7:4f:6e:e2:85:82:99:4f:38:41:18:d1:f6:4f:b9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:11:14 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=187e093c1d940412c65fabadc9d70863b573ca564b533c8f51d73c4ec5e2971a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:56:ed:bc:a0:a8:4e:a0:f3:42:08:b1:dc:6d: d4:05:ff:b7:cc:1e:cf:2f:9e:c4:94:02:0a:3d:27: eb:bd:4d:c4:db:4b:7d:0f:74:bb:44:29:a6:56:03: 97:d3:bc:35:01:5f:06:42:37:ca:c2:25:3c:9a:cb: b6:55:60:0c:2b:4b:a9:6e:08:87:a3:de:62:4e:20: af:84:bb:62:28:e5:0a:61:46:3f:ed:01:6a:7e:7f: cd:4e:3e:8e:4e:7d:b0:7e:8d:48:82:41:ea:ab:c2: 88:d1:51:b4:de:2d:78:5b:63:03:4c:35:c5:1e:74: 09:33:76:69:6c:d7:dd:5d:54:8b:7f:7b:88:0b:3b: 98:94:b0:bd:ab:3b:04:eb:16:13:a9:df:43:03:bc: e1:d8:aa:b3:9b:86:40:4e:c3:0f:44:5b:93:41:45: 90:02:55:d9:07:27:6d:5a:f4:e4:0b:46:3e:72:b7: fd:d1:e7:12:6d:86:46:a8:36:86:3b:b4:38:f6:2e: ca:df:1d:97:91:e6:c3:f8:1e:26:b3:b3:63:c7:2e: ad:df:7b:ec:4d:76:46:65:2e:cc:33:7f:ac:54:67: 28:f8:01:2b:8e:90:3d:62:3c:fb:26:db:e0:a3:8b: 7e:39:48:c0:b7:2c:ad:aa:e0:8f:a9:5a:a3:c0:33: a0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:89:B8:88:96:87:06:7C:D1:6B:06:B6:60:9D:08:AC:70:FA:D4:EC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0455dd06-6363-446d-beab-2728280200d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:e000::/40 Signature Algorithm: sha256WithRSAEncryption c5:76:0e:13:96:0a:84:79:9b:6c:e6:cb:71:df:83:74:ff:e5: 1e:05:f4:72:63:0a:41:bf:7e:6b:a1:6b:e4:bd:21:a8:c8:92: ae:8e:fc:2c:01:58:5d:ab:d2:0a:f0:5d:e7:e3:62:84:7b:ea: 23:13:37:09:db:62:19:9a:e6:c8:bd:3d:38:83:ff:3e:dd:62: 4c:93:37:72:c5:1f:0b:2a:44:39:23:36:df:ad:9a:58:7e:e6: 54:c1:6b:ad:dc:c9:0e:be:5b:5a:38:d0:f2:6c:1e:c4:21:75: d1:70:10:19:12:2b:33:0b:9d:03:c9:1a:f8:56:56:17:ec:34: b9:86:c0:9e:98:8a:ae:f0:35:5e:0d:9b:82:de:02:11:62:3b: 28:b9:2c:ee:db:b2:35:45:2e:57:96:42:c6:aa:1b:16:13:32: ee:61:ab:2f:88:e7:82:c8:fb:44:07:ea:d3:44:5f:92:99:5c: 07:22:0d:0c:75:43:7b:9b:8b:6d:1e:94:c8:df:63:1f:32:7c: cd:1a:0d:db:de:5e:1a:61:4c:e7:b4:55:58:9f:b3:0f:d8:1b: f2:f1:44:8e:57:87:5c:3e:ea:67:57:e1:54:ce:8a:9e:aa:e0: d6:0f:9b:4a:fc:5c:68:db:36:29:5c:a1:b3:c7:d5:a5:10:59: b1:05:90:ca -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFMW3G7dPbuKFgplPOEEY0fZPuZIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTExNFoX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNAMTg3ZTA5M2MxZDk0MDQxMmM2NWZh YmFkYzlkNzA4NjNiNTczY2E1NjRiNTMzYzhmNTFkNzNjNGVjNWUyOTcxYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFbtvKCoTqDzQgix3G3UBf+3zB7P L57ElAIKPSfrvU3E20t9D3S7RCmmVgOX07w1AV8GQjfKwiU8msu2VWAMK0upbgiH o95iTiCvhLtiKOUKYUY/7QFqfn/NTj6OTn2wfo1IgkHqq8KI0VG03i14W2MDTDXF HnQJM3ZpbNfdXVSLf3uICzuYlLC9qzsE6xYTqd9DA7zh2Kqzm4ZATsMPRFuTQUWQ AlXZBydtWvTkC0Y+crf90ecSbYZGqDaGO7Q49i7K3x2XkebD+B4ms7Njxy6t33vs TXZGZS7MM3+sVGco+AErjpA9Yjz7Jtvgo4t+OUjAtyytquCPqVqjwDOgCwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNyJuIiWhwZ80WsGtmCdCKxw+tTsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA0NTVkZDA2LTYzNjMtNDQ2ZC1iZWFiLTI3MjgyODAyMDBkNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8+AwDQYJKoZIhvcNAQELBQADggEBAMV2DhOWCoR5m2zmy3Hf g3T/5R4F9HJjCkG/fmuha+S9IajIkq6O/CwBWF2r0grwXefjYoR76iMTNwnbYhma 5si9PTiD/z7dYkyTN3LFHwsqRDkjNt+tmlh+5lTBa63cyQ6+W1o40PJsHsQhddFw EBkSKzMLnQPJGvhWVhfsNLmGwJ6Yiq7wNV4Nm4LeAhFiOyi5LO7bsjVFLleWQsaq GxYTMu5hqy+I54LI+0QH6tNEX5KZXAciDQx1Q3ubi20elMjfYx8yfM0aDdveXhph TOe0VVifsw/YG/LxRI5Xh1w+6mdX4VTOip6q4NYPm0r8XGjbNilcobPH1aUQWbEF kMo= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:25 2025 by rpki-client