$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa File: c8788082-9bee-454b-a32c-e6d016b76179.roa (raw, json) Hash identifier: RrrKsU2UMxPhlaRlHPzezHiWqn76+wa/E4V9e2TeSP4= Subject key identifier: 33:40:AA:8F:F4:94:98:DB:B5:94:22:70:F1:D0:21:A4:5F:9A:4C:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2D6B13DF68C9BBB6D99800358E875C5019EEF2B2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa Signing time: Wed 27 Aug 2025 00:00:53 +0000 ROA not before: Wed 27 Aug 2025 00:00:53 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da20:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6b:13:df:68:c9:bb:b6:d9:98:00:35:8e:87:5c:50:19:ee:f2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 27 00:00:53 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=de77313634259c5596089ec726cb5f724c7ce14514feb9bf1ddd635ca5489070, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fa:98:ff:e9:07:c4:75:98:bc:59:2a:fc:49: 66:a7:aa:e4:6b:03:d9:2b:06:81:2e:8d:39:59:e5: 42:51:2b:31:3c:2c:01:38:e7:aa:55:1d:7c:8c:c6: 11:00:6f:2f:4f:07:fb:72:4c:11:a4:77:fb:e7:b1: ab:95:65:17:52:ab:24:44:ee:15:af:a0:83:c5:0a: 39:e6:3a:b2:19:2a:b8:85:76:0b:15:86:df:53:4a: cd:da:92:2d:8f:b7:0c:db:e0:cf:eb:6d:0c:39:45: 51:4f:60:be:2f:8d:89:fe:86:f2:0c:59:64:f3:cb: 86:92:58:0d:f8:f8:0b:3e:16:d4:dc:1a:28:dd:70: 03:d2:dc:10:a2:f3:9c:04:40:07:23:79:c3:e5:80: ca:f7:b4:ea:68:83:90:d9:d4:ff:09:77:45:e1:2d: 12:42:7c:0d:f7:a6:be:12:64:2e:35:bf:f9:bf:08: 75:34:32:6f:67:92:42:f6:2c:cb:4f:9f:32:1a:eb: 9a:e5:90:34:49:09:12:f0:99:a4:03:75:6c:06:83: dc:5e:76:8f:9a:ad:ce:dd:21:b0:92:a7:4c:7a:7a: 6e:0c:25:6e:72:a5:ac:14:45:c2:19:31:5f:b9:6b: 47:f7:3a:7a:36:66:9a:b1:39:0f:21:07:84:24:d7: e8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:40:AA:8F:F4:94:98:DB:B5:94:22:70:F1:D0:21:A4:5F:9A:4C:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da20:8000::/36 Signature Algorithm: sha256WithRSAEncryption 92:61:05:7d:55:8e:35:cd:0a:3a:3f:c1:f4:34:fd:30:c2:77: 0b:a9:76:41:a5:d7:7e:9e:6e:32:be:d6:ca:d4:60:c4:ef:93: 60:73:b3:95:ae:e6:38:be:b8:d7:ed:a0:18:8c:57:90:68:ab: 95:06:62:df:c5:fa:d5:77:44:40:86:16:72:0c:30:8d:a5:4d: 3e:92:6b:27:87:a6:5c:90:32:3a:7d:0e:56:1a:c1:0f:d6:02: 02:39:a9:f3:54:a4:01:e2:80:c5:88:7a:f8:d4:ac:04:75:69: 1a:5a:5f:fb:5b:72:36:26:3d:71:0c:bb:75:cb:75:af:be:1c: 84:27:29:06:49:ba:4f:e1:dc:ae:48:d7:16:e9:ed:86:d0:ac: 52:ae:a7:d7:04:c2:32:16:c4:6d:ef:0d:7d:60:f0:2d:6c:4b: 62:04:0e:2e:f6:1a:37:3e:b8:af:e9:66:0e:5c:6e:41:5d:1f: 6e:f0:b5:5d:4d:e7:5f:6c:ae:ca:33:a1:78:1c:a3:9a:f6:51: 1e:0e:8b:48:b6:fd:9d:00:4b:9d:56:8e:c9:7c:9e:22:7d:86: d0:10:6c:cf:3a:d6:90:56:ac:c8:d8:3c:fc:a0:c6:85:b4:5b: 06:f4:ef:6d:50:62:90:3d:a7:b5:aa:43:f9:98:2f:4d:01:7f: 54:7a:88:ea -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULWsT32jJu7bZmAA1jodcUBnu8rIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyNzAwMDA1M1oX DTI1MTAwMTIzNTk1OVowejFJMEcGA1UEBRNAZGU3NzMxMzYzNDI1OWM1NTk2MDg5 ZWM3MjZjYjVmNzI0YzdjZTE0NTE0ZmViOWJmMWRkZDYzNWNhNTQ4OTA3MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfqY/+kHxHWYvFkq/Elmp6rkawPZ KwaBLo05WeVCUSsxPCwBOOeqVR18jMYRAG8vTwf7ckwRpHf757GrlWUXUqskRO4V r6CDxQo55jqyGSq4hXYLFYbfU0rN2pItj7cM2+DP620MOUVRT2C+L42J/obyDFlk 88uGklgN+PgLPhbU3Boo3XAD0twQovOcBEAHI3nD5YDK97TqaIOQ2dT/CXdF4S0S QnwN96a+EmQuNb/5vwh1NDJvZ5JC9izLT58yGuua5ZA0SQkS8JmkA3VsBoPcXnaP mq3O3SGwkqdMenpuDCVucqWsFEXCGTFfuWtH9zp6NmaasTkPIQeEJNfofwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDNAqo/0lJjbtZQicPHQIaRfmkwgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M4Nzg4MDgyLTliZWUtNDU0Yi1hMzJjLWU2ZDAxNmI3NjE3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaIIAwDQYJKoZIhvcNAQELBQADggEBAJJhBX1VjjXNCjo/wfQ0 /TDCdwupdkGl136ebjK+1srUYMTvk2Bzs5Wu5ji+uNftoBiMV5Boq5UGYt/F+tV3 RECGFnIMMI2lTT6SayeHplyQMjp9DlYawQ/WAgI5qfNUpAHigMWIevjUrAR1aRpa X/tbcjYmPXEMu3XLda++HIQnKQZJuk/h3K5I1xbp7YbQrFKup9cEwjIWxG3vDX1g 8C1sS2IEDi72Gjc+uK/pZg5cbkFdH27wtV1N519srsozoXgco5r2UR4Oi0i2/Z0A S51Wjsl8niJ9htAQbM861pBWrMjYPPygxoW0Wwb0721QYpA9p7WqQ/mYL00Bf1R6 iOo= -----END CERTIFICATE-----Generated at Fri Sep 19 03:30:34 2025 by rpki-client