$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/081949ef-b682-4232-9db6-20569b93a5bb.roa File: 081949ef-b682-4232-9db6-20569b93a5bb.roa (raw, json) Hash identifier: wxjlCkZ7WV0pJL9PorPHp4+8zFWxUdy+xlh0bGXqtnw= Subject key identifier: C0:AC:0E:D8:38:A5:9B:D9:EC:0F:29:4A:95:67:3D:24:E0:D1:BD:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4583469685DBFF527F1321648F38341FBF8E5E08 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/081949ef-b682-4232-9db6-20569b93a5bb.roa Signing time: Mon 18 Aug 2025 14:51:58 +0000 ROA not before: Mon 18 Aug 2025 14:51:58 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:a880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:83:46:96:85:db:ff:52:7f:13:21:64:8f:38:34:1f:bf:8e:5e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 14:51:58 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=d8e42b5dc0d8e24629cc95989b07732e0909ea5e52597093b4528106382b41f5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:37:28:f5:23:9e:69:d0:3a:4f:7f:af:13: e8:26:1b:ec:f7:9f:38:d3:f9:14:a8:8e:1a:8e:98: 3e:d4:15:b7:69:fe:49:e6:71:4e:89:30:a3:d8:1f: 1a:11:35:ac:3a:be:99:8c:54:df:67:e0:75:fb:b0: a2:05:4f:db:85:02:f7:30:24:c4:cd:a7:79:ae:ef: b8:1f:c8:ac:47:ce:da:59:97:29:ae:82:74:2e:6c: 32:7b:d3:cb:b6:a7:0c:0a:cf:6f:f1:e0:72:aa:f3: 36:ea:ac:90:eb:4e:69:6d:50:8a:dc:48:1d:ea:83: b0:b5:4f:87:41:4b:6d:f3:77:f5:b8:96:64:42:6b: a6:b1:16:ff:f2:37:29:bf:c0:38:88:46:ba:c1:d3: 22:49:23:97:32:01:a3:2c:5f:9b:e1:6a:f4:71:b9: 1e:dd:02:b8:e9:92:86:fd:cb:77:3b:63:49:03:64: b3:1b:ad:33:a2:f4:ac:54:19:c5:d3:78:b6:b4:f8: 34:cc:4b:28:52:03:45:03:ee:82:52:ac:46:09:94: 84:d0:5a:e1:1a:e1:f6:f1:82:3f:e9:15:f5:6e:c3: b2:7d:f0:19:ca:dc:70:8a:8d:51:91:f2:74:13:90: 35:e4:db:63:25:0e:e9:a6:eb:14:ac:c3:8c:54:20: 56:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AC:0E:D8:38:A5:9B:D9:EC:0F:29:4A:95:67:3D:24:E0:D1:BD:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/081949ef-b682-4232-9db6-20569b93a5bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:a880::/48 Signature Algorithm: sha256WithRSAEncryption 33:30:a2:cf:c6:4e:83:d5:99:25:ec:86:30:59:39:34:11:c5: ce:52:fd:43:e0:a7:7d:1e:a8:41:c0:49:79:e3:1b:3f:fb:f5: 86:fc:24:f9:7c:31:28:68:65:7a:02:ca:13:28:68:58:52:ed: 84:41:54:02:a6:bc:c1:c9:c8:8f:d3:7f:b2:a0:e9:da:6a:fc: 5e:92:39:4e:c6:91:2c:b4:af:d4:11:d7:17:dd:f7:be:3e:07: c9:76:3b:be:48:b4:a4:9f:b3:c8:d3:87:75:35:08:44:70:89: 19:e3:36:56:27:15:2c:50:2f:6e:c2:51:ce:dc:31:2f:22:96: 79:f3:53:87:1a:b1:20:42:5e:37:c5:19:60:68:96:43:ca:02: 82:4c:57:55:73:6a:9a:68:b3:66:a9:5d:b9:60:f3:aa:3c:df: b6:78:89:d0:17:fd:1f:78:4d:a6:dc:83:69:b5:76:de:8f:24: c0:17:dd:c1:2d:e0:54:06:b0:cc:91:ca:63:ce:f0:75:ed:77: c0:6d:f0:f0:5a:68:54:38:a2:5b:b9:4c:3f:8d:f4:49:5e:6d: d4:a8:45:bd:33:c6:18:6a:3e:d2:e7:88:6c:74:46:cb:5d:2e: e5:8f:46:00:5d:fe:85:18:b5:a0:28:92:8f:83:40:78:7a:a0: c1:cb:90:c3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURYNGloXb/1J/EyFkjzg0H7+OXggwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE0NTE1OFoX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNAZDhlNDJiNWRjMGQ4ZTI0NjI5Y2M5 NTk4OWIwNzczMmUwOTA5ZWE1ZTUyNTk3MDkzYjQ1MjgxMDYzODJiNDFmNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxU3KPUjnmnQOk9/rxPoJhvs9584 0/kUqI4ajpg+1BW3af5J5nFOiTCj2B8aETWsOr6ZjFTfZ+B1+7CiBU/bhQL3MCTE zad5ru+4H8isR87aWZcproJ0Lmwye9PLtqcMCs9v8eByqvM26qyQ605pbVCK3Egd 6oOwtU+HQUtt83f1uJZkQmumsRb/8jcpv8A4iEa6wdMiSSOXMgGjLF+b4Wr0cbke 3QK46ZKG/ct3O2NJA2SzG60zovSsVBnF03i2tPg0zEsoUgNFA+6CUqxGCZSE0Frh GuH28YI/6RX1bsOyffAZytxwio1RkfJ0E5A15NtjJQ7ppusUrMOMVCBWsQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMCsDtg4pZvZ7A8pSpVnPSTg0b10MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4MTk0OWVmLWI2ODItNDIzMi05ZGI2LTIwNTY5YjkzYTViYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/6iAMA0GCSqGSIb3DQEBCwUAA4IBAQAzMKLPxk6D1Zkl7IYw WTk0EcXOUv1D4Kd9HqhBwEl54xs/+/WG/CT5fDEoaGV6AsoTKGhYUu2EQVQCprzB yciP03+yoOnaavxekjlOxpEstK/UEdcX3fe+PgfJdju+SLSkn7PI04d1NQhEcIkZ 4zZWJxUsUC9uwlHO3DEvIpZ581OHGrEgQl43xRlgaJZDygKCTFdVc2qaaLNmqV25 YPOqPN+2eInQF/0feE2m3INptXbejyTAF93BLeBUBrDMkcpjzvB17XfAbfDwWmhU OKJbuUw/jfRJXm3UqEW9M8YYaj7S54hsdEbLXS7lj0YAXf6FGLWgKJKPg0B4eqDB y5DD -----END CERTIFICATE-----Generated at Wed Aug 20 10:50:03 2025 by rpki-client