$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a97cdb74-6034-404c-9242-94c95c3bb581.roa File: a97cdb74-6034-404c-9242-94c95c3bb581.roa (raw, json) Hash identifier: kBidAYNATf97NbMqAjDyUgj69PZB3WEZRQgoW5nAszY= Subject key identifier: 79:B4:73:C0:97:15:47:A7:1C:18:A6:EC:5D:81:9D:C0:F5:D6:A4:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24F4A18D4FAA0EC56988A0BAC5A9DB300A9FFBE7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a97cdb74-6034-404c-9242-94c95c3bb581.roa Signing time: Fri 15 Aug 2025 00:11:11 +0000 ROA not before: Fri 15 Aug 2025 00:11:11 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f4:a1:8d:4f:aa:0e:c5:69:88:a0:ba:c5:a9:db:30:0a:9f:fb:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:11:11 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=3acf7c1fda0b3df05145e8097b70cf13cba38003fd2b98e39f4670e46eb28c2b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:90:b5:dd:2c:ea:7e:18:1d:35:95:dc:32: b7:73:1d:4d:a8:4b:f1:fc:2b:2e:77:6c:fb:2d:ad: 0f:d1:13:51:48:51:ef:98:90:ea:f5:31:4b:ba:ea: 9d:03:f7:9d:24:72:01:f1:c4:9c:52:bc:dc:d0:90: f9:63:7e:37:92:69:a7:51:a1:75:ea:11:ca:94:9b: d2:1d:5a:f6:00:11:f4:16:62:0a:0b:36:9d:0a:96: 40:55:27:76:70:19:da:c6:29:d3:d1:95:f1:89:8a: 57:9d:b4:3e:ca:e5:7e:4d:78:9b:b5:8c:0e:a6:c7: 98:a3:7f:38:8e:3e:85:77:8a:9b:21:1c:c1:21:45: 4b:ab:cc:60:ea:21:95:12:10:16:7c:ac:09:92:02: 9f:ff:ec:07:5e:92:8f:c3:ab:43:da:e3:14:23:11: f3:16:f5:a8:91:76:fd:35:d6:10:37:34:41:37:b5: aa:94:84:cb:8f:c3:f7:ab:24:66:c0:eb:af:40:6b: 00:e4:86:5b:98:41:66:a4:f6:84:57:0a:6e:5a:c1: b5:fd:f4:dc:01:de:32:10:ac:42:55:30:73:73:c0: d5:23:22:28:f2:73:32:97:8e:b3:62:e0:53:53:c5: a1:7a:4c:0c:b6:ed:d3:9d:98:30:f4:99:95:6f:c0: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B4:73:C0:97:15:47:A7:1C:18:A6:EC:5D:81:9D:C0:F5:D6:A4:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a97cdb74-6034-404c-9242-94c95c3bb581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:b000::/40 Signature Algorithm: sha256WithRSAEncryption 99:42:fb:7d:03:cd:92:78:60:ae:19:25:56:a7:fb:15:52:92: 86:e7:64:6c:7a:a1:59:30:12:9c:b6:79:fa:d8:68:0e:07:15: 06:bd:bd:b9:73:f8:28:50:fb:ce:50:1e:e9:e5:18:ed:ae:df: 88:29:3a:34:78:73:b7:06:4f:03:1a:15:77:81:a0:72:7a:2c: e4:69:1a:e7:34:65:04:46:dd:40:aa:cb:9a:7d:65:0f:0a:69: 3b:80:99:23:80:2d:43:92:1d:31:de:95:43:5c:ae:ba:b7:e0: 2d:4d:41:92:fd:fb:92:ed:51:9e:60:d7:32:5e:c4:be:9b:cc: fe:d7:e9:a8:15:59:13:f5:06:49:f5:46:85:88:b7:df:a2:6d: e8:5a:a2:1c:da:81:4c:fa:35:69:8a:f5:42:ee:15:5e:e1:e0: 77:ee:53:38:4a:be:ee:93:0d:ae:8f:95:4c:ee:2a:b1:4a:20: 2a:d9:9c:bd:8c:c3:96:c9:3e:5e:1d:ee:86:4f:4e:f2:01:c2: 23:ed:41:fe:6d:96:7b:46:77:59:39:4b:42:1a:e5:07:88:73: b3:72:bb:59:90:36:a1:9b:ae:31:35:71:05:66:26:28:bb:0e: c5:4d:aa:a9:ab:e0:57:07:cf:c3:bd:7f:db:01:e4:a0:55:63: 6e:75:cd:fc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJPShjU+qDsVpiKC6xanbMAqf++cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTExMVoX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNAM2FjZjdjMWZkYTBiM2RmMDUxNDVl ODA5N2I3MGNmMTNjYmEzODAwM2ZkMmI5OGUzOWY0NjcwZTQ2ZWIyOGMyYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5uQtd0s6n4YHTWV3DK3cx1NqEvx /Csud2z7La0P0RNRSFHvmJDq9TFLuuqdA/edJHIB8cScUrzc0JD5Y343kmmnUaF1 6hHKlJvSHVr2ABH0FmIKCzadCpZAVSd2cBnaxinT0ZXxiYpXnbQ+yuV+TXibtYwO pseYo384jj6Fd4qbIRzBIUVLq8xg6iGVEhAWfKwJkgKf/+wHXpKPw6tD2uMUIxHz FvWokXb9NdYQNzRBN7WqlITLj8P3qyRmwOuvQGsA5IZbmEFmpPaEVwpuWsG1/fTc Ad4yEKxCVTBzc8DVIyIo8nMyl46zYuBTU8WhekwMtu3TnZgw9JmVb8Dd7QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHm0c8CXFUenHBim7F2BncD11qQUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5N2NkYjc0LTYwMzQtNDA0Yy05MjQyLTk0Yzk1YzNiYjU4MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba87AwDQYJKoZIhvcNAQELBQADggEBAJlC+30DzZJ4YK4ZJVan +xVSkobnZGx6oVkwEpy2efrYaA4HFQa9vblz+ChQ+85QHunlGO2u34gpOjR4c7cG TwMaFXeBoHJ6LORpGuc0ZQRG3UCqy5p9ZQ8KaTuAmSOALUOSHTHelUNcrrq34C1N QZL9+5LtUZ5g1zJexL6bzP7X6agVWRP1Bkn1RoWIt9+ibehaohzagUz6NWmK9ULu FV7h4HfuUzhKvu6TDa6PlUzuKrFKICrZnL2Mw5bJPl4d7oZPTvIBwiPtQf5tlntG d1k5S0Ia5QeIc7Nyu1mQNqGbrjE1cQVmJii7DsVNqqmr4FcHz8O9f9sB5KBVY251 zfw= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:25 2025 by rpki-client