$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84292d65-2b01-4a5c-9515-02cb05bc483c.roa File: 84292d65-2b01-4a5c-9515-02cb05bc483c.roa (raw, json) Hash identifier: S5dCqE+LbliP6D59XDo8IiGMAKFtqDIqI6ix5Szu2KM= Subject key identifier: 94:0B:69:D2:71:A2:4F:40:49:C7:6E:D8:8F:1A:63:3C:EC:C5:9D:84 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4827B58A75014247E73A5BD292B20857145D11E2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84292d65-2b01-4a5c-9515-02cb05bc483c.roa Signing time: Tue 26 Aug 2025 00:10:17 +0000 ROA not before: Tue 26 Aug 2025 00:10:17 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Sep 2025 00:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:27:b5:8a:75:01:42:47:e7:3a:5b:d2:92:b2:08:57:14:5d:11:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 26 00:10:17 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=e175bfd3619bb60615d83d54dbddc0df38fb5db208357ca2ad3712ca51018353, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:0a:60:83:75:00:01:89:0a:9f:f9:eb:e7: e7:df:b0:1f:1d:e9:64:bb:fe:b6:5b:bc:f3:d9:1d: fd:91:9a:58:35:ee:79:17:15:95:b7:2b:da:e8:8d: c9:76:a4:e1:86:5f:1e:c3:95:ce:97:fd:ae:0f:07: 5c:22:49:fa:21:32:68:74:31:07:d3:a6:69:f5:53: e9:ce:b6:e8:eb:06:bd:61:db:23:fa:4a:5a:b4:e7: c4:8c:96:9c:72:b9:b9:d1:fe:68:4f:fb:b9:d9:67: a5:74:3d:f2:d1:e4:46:19:6a:09:9d:6d:1f:f3:8b: 06:3f:a2:a8:38:84:19:7a:3d:b8:cf:80:69:e1:55: fa:33:28:56:8a:cb:63:6a:b9:46:20:03:a5:2e:eb: 54:11:4c:e2:97:c8:fb:07:91:e5:52:d9:00:ec:6a: da:70:9d:55:49:25:3a:b1:f3:67:63:cb:45:15:3b: 1c:1f:1d:df:37:e6:ec:23:13:85:ee:a0:4d:7d:ed: c7:70:f1:2e:1f:d6:c1:68:a2:42:6c:cb:a8:3d:23: ab:a7:91:55:f4:a9:bb:b6:f2:c1:6c:24:ab:76:64: 1a:ca:b1:32:47:de:28:9b:b7:4c:ec:63:f3:ae:1e: 82:ac:e8:fb:e6:ba:57:12:68:44:d8:33:72:3d:21: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0B:69:D2:71:A2:4F:40:49:C7:6E:D8:8F:1A:63:3C:EC:C5:9D:84 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84292d65-2b01-4a5c-9515-02cb05bc483c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:8000::/40 Signature Algorithm: sha256WithRSAEncryption 63:45:e0:3b:fb:9a:39:e2:b2:78:c5:25:20:5e:11:fd:b1:8b: f3:0c:8c:35:e1:54:a9:9f:ca:fd:e8:14:27:ff:14:f6:28:58: ba:24:a1:7c:87:c7:6b:01:73:1f:a6:66:97:5b:6b:71:bb:bc: c2:6f:80:f3:36:b2:3a:25:63:62:e5:27:2d:85:80:cb:20:46: 24:84:d1:24:ca:a2:3d:48:24:1a:3f:be:1a:07:89:9f:47:ba: 73:09:12:8f:a0:ef:88:d0:fa:76:d7:f7:07:fc:3c:3b:1a:e1: ac:a2:51:7c:77:91:58:df:ad:18:d0:79:59:20:fe:54:84:e9: c7:eb:36:22:44:59:d3:9a:7e:d2:f9:09:5f:00:10:fd:a7:59: 48:28:bc:40:9c:1a:9d:f9:9a:c3:8b:10:7c:29:84:19:28:38: 91:93:2e:0c:0d:95:71:03:a1:ea:12:55:92:14:02:3e:dc:45: d9:1c:bc:19:4c:a9:34:00:02:21:86:52:ec:7d:8d:95:f7:3f: 1e:8a:de:1a:d4:20:f0:01:e9:79:23:9b:62:b0:fb:12:2e:90: cf:b1:48:47:76:af:d3:0f:50:8b:76:3b:82:b4:21:c8:ef:03: 8f:35:49:51:45:e7:03:db:34:57:90:68:d2:99:8d:06:e9:09: 59:69:8b:72 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSCe1inUBQkfnOlvSkrIIVxRdEeIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyNjAwMTAxN1oX DTI1MDkzMDIzNTk1OVowejFJMEcGA1UEBRNAZTE3NWJmZDM2MTliYjYwNjE1ZDgz ZDU0ZGJkZGMwZGYzOGZiNWRiMjA4MzU3Y2EyYWQzNzEyY2E1MTAxODM1MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowkKYIN1AAGJCp/56+fn37AfHelk u/62W7zz2R39kZpYNe55FxWVtyva6I3JdqThhl8ew5XOl/2uDwdcIkn6ITJodDEH 06Zp9VPpzrbo6wa9Ydsj+kpatOfEjJaccrm50f5oT/u52WeldD3y0eRGGWoJnW0f 84sGP6KoOIQZej24z4Bp4VX6MyhWistjarlGIAOlLutUEUzil8j7B5HlUtkA7Gra cJ1VSSU6sfNnY8tFFTscHx3fN+bsIxOF7qBNfe3HcPEuH9bBaKJCbMuoPSOrp5FV 9Km7tvLBbCSrdmQayrEyR94om7dM7GPzrh6CrOj75rpXEmhE2DNyPSHelwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJQLadJxok9AScdu2I8aYzzsxZ2EMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0MjkyZDY1LTJiMDEtNGE1Yy05NTE1LTAyY2IwNWJjNDgzYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8YAwDQYJKoZIhvcNAQELBQADggEBAGNF4Dv7mjnisnjFJSBe Ef2xi/MMjDXhVKmfyv3oFCf/FPYoWLokoXyHx2sBcx+mZpdba3G7vMJvgPM2sjol Y2LlJy2FgMsgRiSE0STKoj1IJBo/vhoHiZ9HunMJEo+g74jQ+nbX9wf8PDsa4ayi UXx3kVjfrRjQeVkg/lSE6cfrNiJEWdOaftL5CV8AEP2nWUgovECcGp35msOLEHwp hBkoOJGTLgwNlXEDoeoSVZIUAj7cRdkcvBlMqTQAAiGGUux9jZX3Px6K3hrUIPAB 6Xkjm2Kw+xIukM+xSEd2r9MPUIt2O4K0IcjvA481SVFF5wPbNFeQaNKZjQbpCVlp i3I= -----END CERTIFICATE-----Generated at Wed Sep 17 21:25:16 2025 by rpki-client