$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/38ae37ad-50db-4547-8df2-8cdcc56e5ca1.roa File: 38ae37ad-50db-4547-8df2-8cdcc56e5ca1.roa (raw, json) Hash identifier: 6/wFN16HpAFsD4xonZCio3FedsHmoAjdPijG/zlhiig= Subject key identifier: 4C:4D:A1:4D:AD:CE:E6:36:BB:4F:0C:10:FB:3B:B4:38:89:F7:A4:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 26046C9B6E400913465368FC8C6375420F55013D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/38ae37ad-50db-4547-8df2-8cdcc56e5ca1.roa Signing time: Sat 19 Jul 2025 00:00:07 +0000 ROA not before: Sat 19 Jul 2025 00:00:07 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:04:6c:9b:6e:40:09:13:46:53:68:fc:8c:63:75:42:0f:55:01:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 19 00:00:07 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=09664065ecca0b112e523d9ced1b473dbbf2bce44fa0068edaf4b9bef6c53daf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:b8:dd:18:65:8f:0d:44:0c:a2:43:36:e7: 25:69:aa:2e:56:03:0c:b5:c1:f4:32:db:06:dd:aa: f2:e0:de:3a:ae:1b:26:2d:f5:be:33:84:1d:79:ad: d1:be:68:09:67:01:3f:45:76:73:dc:c3:b8:c0:f1: 30:98:6e:b5:a3:a9:c9:09:8f:3a:ff:dd:10:f8:65: df:39:6a:9c:f6:ab:a2:7d:30:c6:a2:fd:b2:ee:eb: ef:dd:b2:e1:17:bf:e8:08:d1:d9:c8:5f:0a:2b:da: 99:11:41:63:eb:ac:ca:72:f7:b7:98:df:51:c8:d6: 3d:db:16:6c:1f:fa:4e:f8:92:26:16:a9:99:81:55: ee:83:36:11:1f:e5:c7:e6:15:97:5c:e0:6c:83:cd: 98:0f:9a:f9:ee:d8:e4:b1:d3:1e:5d:01:56:ba:d1: a2:61:72:08:55:de:9d:2a:20:c3:84:2b:90:ba:7d: ec:70:a7:40:93:ac:c8:16:a5:de:de:1d:a7:32:97: 9a:69:21:41:50:d7:7b:7b:8d:9d:9a:3e:d8:da:3a: c3:2c:1e:e3:e9:de:37:bb:3d:75:d7:7e:23:c0:fd: 70:c7:af:e5:ea:fd:b8:b9:f8:1f:0f:ef:98:93:c8: 3d:32:26:51:b5:cd:d8:74:f7:68:b6:a2:a9:dc:0e: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4D:A1:4D:AD:CE:E6:36:BB:4F:0C:10:FB:3B:B4:38:89:F7:A4:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/38ae37ad-50db-4547-8df2-8cdcc56e5ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32::/32 Signature Algorithm: sha256WithRSAEncryption 6d:3f:1f:04:5a:9d:ba:33:43:4a:6f:dc:56:7c:9e:56:61:c5: 74:28:a3:d9:da:c6:80:49:0d:65:d0:18:f0:d9:fe:29:ef:9c: d7:89:05:ff:df:17:88:84:08:33:8e:b3:5c:d6:95:64:24:a3: af:da:72:19:1a:f5:56:bc:86:c3:81:ca:48:29:fa:c1:92:9e: 26:5c:46:43:ef:c9:48:55:b0:d1:2b:d1:51:b9:18:62:29:c0: 43:cb:16:fe:60:7c:1e:2b:2c:f8:84:df:b6:54:32:b9:55:1a: 19:06:12:a7:40:33:e0:62:6d:0b:98:37:df:c2:eb:f2:19:ea: a4:d9:64:3e:08:7d:8d:24:36:4b:71:8e:cb:eb:10:79:b7:92: 68:0a:00:ac:c5:bb:6d:16:b7:ef:84:00:37:bb:bf:5a:c9:af: f4:e6:fb:eb:1c:8c:16:47:63:9b:b3:c0:89:e2:de:51:2a:ba: e5:58:1d:2d:c4:54:cd:e8:45:b0:c3:10:b2:5c:f2:37:cd:32: d7:4c:28:7c:ff:ea:14:d9:81:ed:02:bb:7a:26:f5:9e:39:42: 0b:15:c7:4f:be:d9:0c:26:75:bb:e7:c6:e1:2c:fe:5f:ab:e5: 52:21:57:e4:82:65:bf:3d:22:ea:e1:c8:4b:9e:61:a3:d7:23: 1f:a0:cb:42 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUJgRsm25ACRNGU2j8jGN1Qg9VAT0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcxOTAwMDAwN1oX DTI1MDgyMzIzNTk1OVowejFJMEcGA1UEBRNAMDk2NjQwNjVlY2NhMGIxMTJlNTIz ZDljZWQxYjQ3M2RiYmYyYmNlNDRmYTAwNjhlZGFmNGI5YmVmNmM1M2RhZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+i43Rhljw1EDKJDNuclaaouVgMM tcH0MtsG3ary4N46rhsmLfW+M4Qdea3RvmgJZwE/RXZz3MO4wPEwmG61o6nJCY86 /90Q+GXfOWqc9quifTDGov2y7uvv3bLhF7/oCNHZyF8KK9qZEUFj66zKcve3mN9R yNY92xZsH/pO+JImFqmZgVXugzYRH+XH5hWXXOBsg82YD5r57tjksdMeXQFWutGi YXIIVd6dKiDDhCuQun3scKdAk6zIFqXe3h2nMpeaaSFBUNd7e42dmj7Y2jrDLB7j 6d43uz11134jwP1wx6/l6v24ufgfD++Yk8g9MiZRtc3YdPdotqKp3A5sGQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFExNoU2tzuY2u08MEPs7tDiJ96TLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM4YWUzN2FkLTUwZGItNDU0Ny04ZGYyLThjZGNjNTZlNWNhMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaMjANBgkqhkiG9w0BAQsFAAOCAQEAbT8fBFqdujNDSm/cVnye VmHFdCij2drGgEkNZdAY8Nn+Ke+c14kF/98XiIQIM46zXNaVZCSjr9pyGRr1VryG w4HKSCn6wZKeJlxGQ+/JSFWw0SvRUbkYYinAQ8sW/mB8Hiss+ITftlQyuVUaGQYS p0Az4GJtC5g338Lr8hnqpNlkPgh9jSQ2S3GOy+sQebeSaAoArMW7bRa374QAN7u/ Wsmv9Ob76xyMFkdjm7PAieLeUSq65VgdLcRUzehFsMMQslzyN80y10wofP/qFNmB 7QK7eib1njlCCxXHT77ZDCZ1u+fG4Sz+X6vlUiFX5IJlvz0i6uHIS55ho9cjH6DL Qg== -----END CERTIFICATE-----Generated at Thu Jul 31 00:57:21 2025 by rpki-client