$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a3cc8748-96a9-452c-8dd1-2c8700ec038b.roa File: a3cc8748-96a9-452c-8dd1-2c8700ec038b.roa (raw, json) Hash identifier: 07R5BoKPMBUoaDjOksQ7oSBT8hyofAWkdU9Yl28a5AA= Subject key identifier: 80:D7:55:82:CC:35:A6:A9:7F:1E:7A:CF:84:C6:33:95:A4:D1:96:AC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 30A0D2D6129A8EB46A0A43E4C0E87FF8345E3BF8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a3cc8748-96a9-452c-8dd1-2c8700ec038b.roa Signing time: Tue 29 Jul 2025 00:40:05 +0000 ROA not before: Tue 29 Jul 2025 00:40:05 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a0:d2:d6:12:9a:8e:b4:6a:0a:43:e4:c0:e8:7f:f8:34:5e:3b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:40:05 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=c8ff726d9620b803645b910f48c8b8973f977b09f5107923a9e25560e9eb23cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bc:01:c4:e4:ce:46:80:33:2a:60:aa:6c:bb: 6e:2d:6c:7d:02:72:66:48:ed:37:1b:70:e4:80:d8: 90:9c:0c:5d:c0:67:bb:f3:40:df:a1:e0:f5:4c:63: cb:3e:25:0e:20:67:2e:c4:4a:6b:b7:ae:cb:fd:ab: 03:57:48:d2:c9:54:75:87:d9:31:40:cb:47:26:61: a0:b6:c6:38:30:9c:c4:c8:64:36:b2:37:43:3e:78: df:e8:ef:ae:48:69:ef:b7:06:42:50:8a:f2:86:c0: 60:93:b1:ed:de:fb:a4:17:35:5d:ac:e9:63:7b:42: e3:89:d6:98:63:82:1b:ab:ad:53:4b:b4:90:5a:b5: b2:b6:fa:cb:de:1f:89:e5:7a:cb:af:82:43:d9:c4: 4a:9f:ae:70:2a:71:04:42:6b:2a:56:f4:da:15:e5: 8e:bd:91:14:6b:0b:c9:c2:7c:d5:da:fb:cf:c7:04: 8f:dd:02:9c:cd:87:6a:37:e8:f8:2c:68:1c:34:ab: ea:db:b2:9b:0f:ab:23:da:91:69:c9:1e:dc:35:25: 48:6e:6f:96:ce:43:c2:13:7d:fd:75:05:a3:01:4c: 50:9b:75:fb:58:60:dd:3c:c4:64:62:30:fb:80:cf: dc:ee:b8:0c:a5:78:63:b9:e9:d0:99:4e:2d:77:13: 3b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D7:55:82:CC:35:A6:A9:7F:1E:7A:CF:84:C6:33:95:A4:D1:96:AC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a3cc8748-96a9-452c-8dd1-2c8700ec038b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4080::/48 Signature Algorithm: sha256WithRSAEncryption c1:2f:68:0d:ec:29:ae:d3:31:63:8d:f4:22:8f:18:4e:1d:80: 04:39:aa:e3:57:28:a2:92:e0:a7:b7:35:51:6a:74:6f:7f:87: 0d:28:58:d3:f3:c1:5a:97:63:04:4b:65:e5:7b:f8:b2:94:8d: 49:5a:06:10:de:33:16:fb:c8:b5:ca:cc:41:82:8b:d9:14:f7: 6b:38:bd:bb:88:ee:99:5a:66:74:82:db:f1:d7:e1:25:41:6f: d5:57:9f:d9:9c:13:97:29:d1:37:40:a6:dd:38:a4:e8:79:b4: 62:47:aa:8b:1b:da:58:dc:4c:a6:83:e5:c0:2c:bd:0b:7b:38: 8a:95:af:b6:68:2b:ed:ab:4e:fc:8c:65:6d:b6:f7:3b:2e:2e: a0:40:d7:8c:b8:4e:ad:b3:84:e4:b0:be:91:cb:6c:96:d3:20: 2f:0a:21:6e:92:c8:40:66:86:97:59:0a:70:92:75:f3:99:55: d6:52:bd:de:04:63:72:38:82:e6:62:55:f8:75:87:39:f3:88: b9:86:f7:9c:0b:01:47:a4:e8:e3:60:59:89:cc:54:24:7e:a9: 87:94:30:11:11:4d:07:5c:4a:a9:ab:ce:fc:d3:5f:e1:9a:c4: 67:44:91:af:99:90:9b:d7:42:4d:cd:07:da:d6:61:26:c2:cb: 9f:65:97:62 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMKDS1hKajrRqCkPkwOh/+DReO/gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwNDAwNVoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAYzhmZjcyNmQ5NjIwYjgwMzY0NWI5 MTBmNDhjOGI4OTczZjk3N2IwOWY1MTA3OTIzYTllMjU1NjBlOWViMjNjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrwBxOTORoAzKmCqbLtuLWx9AnJm SO03G3DkgNiQnAxdwGe780DfoeD1TGPLPiUOIGcuxEprt67L/asDV0jSyVR1h9kx QMtHJmGgtsY4MJzEyGQ2sjdDPnjf6O+uSGnvtwZCUIryhsBgk7Ht3vukFzVdrOlj e0LjidaYY4Ibq61TS7SQWrWytvrL3h+J5XrLr4JD2cRKn65wKnEEQmsqVvTaFeWO vZEUawvJwnzV2vvPxwSP3QKczYdqN+j4LGgcNKvq27KbD6sj2pFpyR7cNSVIbm+W zkPCE339dQWjAUxQm3X7WGDdPMRkYjD7gM/c7rgMpXhjuenQmU4tdxM7kQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIDXVYLMNaapfx56z4TGM5Wk0ZasMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EzY2M4NzQ4LTk2YTktNDUyYy04ZGQxLTJjODcwMGVjMDM4Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUCAMA0GCSqGSIb3DQEBCwUAA4IBAQDBL2gN7Cmu0zFjjfQi jxhOHYAEOarjVyiikuCntzVRanRvf4cNKFjT88Fal2MES2Xle/iylI1JWgYQ3jMW +8i1ysxBgovZFPdrOL27iO6ZWmZ0gtvx1+ElQW/VV5/ZnBOXKdE3QKbdOKToebRi R6qLG9pY3Eymg+XALL0LeziKla+2aCvtq078jGVttvc7Li6gQNeMuE6ts4TksL6R y2yW0yAvCiFukshAZoaXWQpwknXzmVXWUr3eBGNyOILmYlX4dYc584i5hvecCwFH pOjjYFmJzFQkfqmHlDAREU0HXEqpq87801/hmsRnRJGvmZCb10JNzQfa1mEmwsuf ZZdi -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:27 2025 by rpki-client