$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6029da1d-7ade-4067-b6f0-551ead7b37a6.roa File: 6029da1d-7ade-4067-b6f0-551ead7b37a6.roa (raw, json) Hash identifier: sBalzFi6HpQjlvCwo13ojhwoYyy6oOzxQUtBhpDIh90= Subject key identifier: 0C:4B:6A:EC:2E:DE:CB:7F:2B:48:C8:82:D4:32:B6:79:9C:3C:71:24 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 10A9F7F6D657E768B890099F0E13468E81254D46 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6029da1d-7ade-4067-b6f0-551ead7b37a6.roa Signing time: Mon 18 Aug 2025 15:01:33 +0000 ROA not before: Mon 18 Aug 2025 15:01:33 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a9:f7:f6:d6:57:e7:68:b8:90:09:9f:0e:13:46:8e:81:25:4d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 15:01:33 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=ca64ea9c6539acf7bdafc33f30e3b27ddc22087b4658c887970b8d486ad61443, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8c:1b:c6:dd:86:16:bf:e3:f2:4b:c3:c7:2a: b6:fe:e7:89:bf:26:32:51:6f:82:19:7c:82:b9:61: 0a:00:fd:fc:8f:55:d6:2c:1f:2a:d4:ea:0a:ef:aa: 9d:42:04:78:19:63:57:f6:f4:5f:57:a9:3a:1c:1c: 12:ed:80:8f:8c:18:5e:25:a7:90:05:3f:90:b3:4a: eb:96:bb:a1:8a:41:fb:84:b3:ba:fb:20:44:c4:74: 43:9c:92:16:18:6c:5b:6a:00:79:60:40:8c:c9:fb: 31:3d:a9:42:86:2b:69:be:00:36:d6:07:25:41:f1: 11:a0:10:4e:dd:d3:56:ab:33:38:68:15:68:47:64: ff:24:ba:e2:5a:00:b2:ad:8b:6d:c1:4a:26:6e:23: ea:f0:e7:c5:b3:aa:f5:16:00:0a:72:1e:91:64:11: fc:5f:6a:9c:45:8e:6f:ee:da:8d:6d:74:67:4c:d4: 8a:35:74:a2:5e:5c:67:26:ee:9e:81:0f:1a:cc:40: aa:f9:81:cf:63:97:df:43:51:e1:a4:c4:03:55:f4: 17:68:e6:f7:d0:d8:27:b1:f6:e8:2f:4d:06:07:dc: 10:0e:32:ee:79:42:d1:eb:92:70:0c:27:39:30:93: b4:bf:8e:be:fd:3b:1c:23:27:bb:5b:0c:06:4e:5b: aa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4B:6A:EC:2E:DE:CB:7F:2B:48:C8:82:D4:32:B6:79:9C:3C:71:24 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6029da1d-7ade-4067-b6f0-551ead7b37a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:2800::/40 Signature Algorithm: sha256WithRSAEncryption be:86:0a:ad:bc:52:34:5a:2d:57:9f:44:35:c5:18:aa:8d:09: 53:5a:46:38:e0:9d:f3:92:a4:06:9f:c8:fb:70:25:98:34:0d: f1:61:eb:a3:5a:ee:6e:3f:53:dd:d5:a2:8c:a0:dd:f4:79:3b: f4:1a:fc:44:b8:b5:fe:e6:78:2e:c0:24:27:92:a3:61:65:e1: 72:44:ca:5a:f4:f5:03:49:95:80:fa:4c:0f:9e:05:30:56:ac: dd:cc:d0:5b:a8:5f:f7:d2:c5:39:99:9a:c5:d1:d1:5c:09:8b: 07:44:9b:99:80:b5:03:6d:64:fd:6f:83:94:07:a0:e2:7a:9e: 3b:89:7b:de:76:ca:7b:07:d9:00:ca:2d:f5:d5:20:f8:3b:e8: a9:50:31:de:41:d6:17:d3:79:ce:80:4c:06:11:38:15:e9:2d: d8:71:8e:d5:39:cc:8f:65:b6:05:a3:81:33:2e:da:d4:7e:ea: df:67:12:14:cf:a6:bc:3b:6f:46:88:1e:94:1f:09:62:25:22: a9:59:f0:0b:de:fd:83:6d:9b:d1:3a:27:7b:12:0c:b0:e4:31: 4a:7c:6c:02:41:5b:0d:dd:b8:20:6d:9c:7f:8e:5e:04:3a:d0: 5c:e1:82:1c:5b:0d:e2:40:28:88:ff:af:35:4e:93:99:5d:4d: 00:c5:ec:39 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEKn39tZX52i4kAmfDhNGjoElTUYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE1MDEzM1oX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNAY2E2NGVhOWM2NTM5YWNmN2JkYWZj MzNmMzBlM2IyN2RkYzIyMDg3YjQ2NThjODg3OTcwYjhkNDg2YWQ2MTQ0MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14wbxt2GFr/j8kvDxyq2/ueJvyYy UW+CGXyCuWEKAP38j1XWLB8q1OoK76qdQgR4GWNX9vRfV6k6HBwS7YCPjBheJaeQ BT+Qs0rrlruhikH7hLO6+yBExHRDnJIWGGxbagB5YECMyfsxPalChitpvgA21gcl QfERoBBO3dNWqzM4aBVoR2T/JLriWgCyrYttwUombiPq8OfFs6r1FgAKch6RZBH8 X2qcRY5v7tqNbXRnTNSKNXSiXlxnJu6egQ8azECq+YHPY5ffQ1HhpMQDVfQXaOb3 0NgnsfboL00GB9wQDjLueULR65JwDCc5MJO0v46+/TscIye7WwwGTluquQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAxLauwu3st/K0jIgtQytnmcPHEkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYwMjlkYTFkLTdhZGUtNDA2Ny1iNmYwLTU1MWVhZDdiMzdhNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauSgwDQYJKoZIhvcNAQELBQADggEBAL6GCq28UjRaLVefRDXF GKqNCVNaRjjgnfOSpAafyPtwJZg0DfFh66Na7m4/U93Vooyg3fR5O/Qa/ES4tf7m eC7AJCeSo2Fl4XJEylr09QNJlYD6TA+eBTBWrN3M0FuoX/fSxTmZmsXR0VwJiwdE m5mAtQNtZP1vg5QHoOJ6njuJe952ynsH2QDKLfXVIPg76KlQMd5B1hfTec6ATAYR OBXpLdhxjtU5zI9ltgWjgTMu2tR+6t9nEhTPprw7b0aIHpQfCWIlIqlZ8Ave/YNt m9E6J3sSDLDkMUp8bAJBWw3duCBtnH+OXgQ60FzhghxbDeJAKIj/rzVOk5ldTQDF 7Dk= -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:37 2025 by rpki-client