$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa File: 92488c39-e92d-4c20-9728-7956e83ecf4e.roa (raw, json) Hash identifier: ao6Hp5Sk17uSPc/k9OfducyDVJZ0mvECx61jGEZjAmo= Subject key identifier: AE:3E:14:F3:E9:61:2F:33:CC:9F:E4:40:B8:74:03:D2:59:87:BA:BD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A543FC9A98120611AF548D023C6D96933384EDB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa Signing time: Mon 07 Jul 2025 15:50:46 +0000 ROA not before: Mon 07 Jul 2025 15:50:46 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da19:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:54:3f:c9:a9:81:20:61:1a:f5:48:d0:23:c6:d9:69:33:38:4e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:50:46 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=88d807207bc95469f824591a3f375bf5b8cddcac3e657e214517c7f7c2b32d8c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:72:7e:38:c6:3f:7f:3b:b1:1f:00:94:19:fb: d1:33:7d:77:15:2e:43:fa:2f:12:7d:8e:5b:8a:6b: fa:f3:fa:83:2a:93:39:d8:e1:fb:b6:38:b0:83:c6: 67:2b:c3:1a:26:ca:c2:70:74:c0:47:d9:b0:0b:00: 99:34:17:4a:d6:f1:69:be:86:f6:73:d0:a9:5a:85: 1b:fe:1e:ef:a9:d2:97:35:01:27:e3:81:29:99:3a: 1b:a8:7d:29:31:c4:f8:1f:74:36:cb:13:b5:4c:b1: a4:62:cb:7e:90:10:1e:07:a1:de:6a:87:cd:7a:52: 1a:0c:4a:d9:36:d4:ce:c7:30:2c:a3:ee:82:49:7d: b0:7c:6f:1a:b8:1b:3c:83:56:99:22:42:f3:34:fd: 9f:40:1b:bc:c0:cf:d7:d8:21:c8:68:91:a9:f4:3d: be:d8:cc:6f:23:7d:40:7b:cb:0a:4b:4a:d4:be:b6: c2:df:e1:cd:17:9e:eb:a1:58:56:6e:01:5e:16:5d: 75:20:c1:68:d1:54:4f:87:a6:a8:bf:14:19:85:da: 06:2f:b1:c9:9d:eb:93:b5:95:d2:46:ac:05:fe:5c: 21:13:03:4a:be:9a:59:93:c9:f8:16:e8:3d:2c:47: f6:60:be:f5:67:15:dc:0d:10:f7:95:14:ad:04:48: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3E:14:F3:E9:61:2F:33:CC:9F:E4:40:B8:74:03:D2:59:87:BA:BD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da19:400::/38 Signature Algorithm: sha256WithRSAEncryption 2a:96:5c:e4:64:76:a9:9d:63:8a:0d:d5:44:59:f4:77:88:1a: b5:52:31:f9:62:38:e4:1f:ba:67:3b:82:38:43:b7:f6:58:85: be:47:fb:9f:5e:87:86:7b:75:cb:65:2a:b7:2d:d2:2e:2a:be: 29:9d:fc:42:30:6f:99:50:bb:d6:6e:a3:e4:3d:e0:64:7b:78: b5:43:32:c1:53:18:3a:d6:b7:ae:00:5f:9f:4d:e0:3d:f8:b2: 3b:41:33:c3:62:a4:32:6c:5b:01:90:77:03:a9:fd:c9:9a:44: 32:29:13:fd:82:14:3a:ad:5f:71:44:11:09:98:f7:99:fa:b1: 99:6b:69:f9:f9:36:f9:89:f8:20:94:5f:17:dd:20:9a:6c:f3: 90:93:3b:af:25:8e:ea:99:09:7e:04:e4:52:62:36:fc:ad:1e: da:18:0f:2a:d0:25:ec:90:3e:5d:08:4d:7f:46:f8:35:d2:10: 10:42:8f:1c:09:03:f9:89:30:49:c8:2b:5e:92:14:16:93:af: 8b:b3:6f:47:61:ee:8e:48:96:6e:36:99:0c:5f:e4:e3:61:c2: 21:3f:01:1c:bc:e4:23:49:53:a6:b0:2d:a3:2a:ec:14:b4:bf: fe:77:59:60:06:a7:26:ed:b0:e6:0b:e6:f2:d3:04:98:69:1b: 87:fc:f3:16 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOlQ/yamBIGEa9UjQI8bZaTM4TtswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1NTA0NloX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAODhkODA3MjA3YmM5NTQ2OWY4MjQ1 OTFhM2YzNzViZjViOGNkZGNhYzNlNjU3ZTIxNDUxN2M3ZjdjMmIzMmQ4YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XJ+OMY/fzuxHwCUGfvRM313FS5D +i8SfY5bimv68/qDKpM52OH7tjiwg8ZnK8MaJsrCcHTAR9mwCwCZNBdK1vFpvob2 c9CpWoUb/h7vqdKXNQEn44EpmTobqH0pMcT4H3Q2yxO1TLGkYst+kBAeB6HeaofN elIaDErZNtTOxzAso+6CSX2wfG8auBs8g1aZIkLzNP2fQBu8wM/X2CHIaJGp9D2+ 2MxvI31Ae8sKS0rUvrbC3+HNF57roVhWbgFeFl11IMFo0VRPh6aovxQZhdoGL7HJ neuTtZXSRqwF/lwhEwNKvppZk8n4Fug9LEf2YL71ZxXcDRD3lRStBEiNbQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK4+FPPpYS8zzJ/kQLh0A9JZh7q9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkyNDg4YzM5LWU5MmQtNGMyMC05NzI4LTc5NTZlODNlY2Y0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGQQwDQYJKoZIhvcNAQELBQADggEBACqWXORkdqmdY4oN1URZ 9HeIGrVSMfliOOQfumc7gjhDt/ZYhb5H+59eh4Z7dctlKrct0i4qvimd/EIwb5lQ u9Zuo+Q94GR7eLVDMsFTGDrWt64AX59N4D34sjtBM8NipDJsWwGQdwOp/cmaRDIp E/2CFDqtX3FEEQmY95n6sZlrafn5NvmJ+CCUXxfdIJps85CTO68ljuqZCX4E5FJi NvytHtoYDyrQJeyQPl0ITX9G+DXSEBBCjxwJA/mJMEnIK16SFBaTr4uzb0dh7o5I lm42mQxf5ONhwiE/ARy85CNJU6awLaMq7BS0v/53WWAGpybtsOYL5vLTBJhpG4f8 8xY= -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:26 2025 by rpki-client