$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ce112-c2bb-4af9-8e57-271d2038e059.roa File: d47ce112-c2bb-4af9-8e57-271d2038e059.roa (raw, json) Hash identifier: e832yU69phz8igRrp89ACc7BnsMLJHTUSWfAgUwhAMs= Subject key identifier: A4:4A:CB:DD:3E:6A:53:E6:B0:0F:4E:55:9B:BA:1C:26:FA:FE:77:2F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 38535BCE95875E4D51B4D58CC9743CBCC05B2FC4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ce112-c2bb-4af9-8e57-271d2038e059.roa Signing time: Mon 18 Aug 2025 15:00:04 +0000 ROA not before: Mon 18 Aug 2025 15:00:04 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:53:5b:ce:95:87:5e:4d:51:b4:d5:8c:c9:74:3c:bc:c0:5b:2f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 15:00:04 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=8ac8089e0fb5a0c3b5de51b335e1f755b3e1849623cd9ec2e70821031e2511c2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:03:56:b2:63:95:44:99:d4:ee:fe:c9:10:de: 70:0b:0d:2f:63:3c:fd:76:b3:ee:af:bc:70:e0:08: b9:0f:7f:55:00:6e:a7:6a:63:ca:56:0a:a9:d9:61: 56:e9:76:1d:be:06:e7:7d:f4:c1:f8:d3:8e:5d:39: 44:8e:00:f3:6c:0c:29:b7:f8:f9:a2:71:ec:2e:e9: 97:89:30:43:61:6f:14:93:d8:28:7f:c1:44:80:e7: 50:0b:8e:1e:73:d5:72:e7:4c:a9:ca:c7:53:45:9d: 76:ef:4f:4f:31:d1:26:6d:06:33:81:29:6d:2a:f5: cc:0a:c7:1c:48:56:be:c4:c3:50:14:e9:4b:32:06: 15:5a:88:1f:98:dc:79:31:f1:39:b9:59:58:da:75: b7:aa:ef:fa:9d:9d:1a:a8:4b:52:44:9d:66:d6:8d: 74:3a:f1:b4:73:8a:6d:a3:f1:15:ab:14:a1:c3:af: 88:06:48:f7:fb:7c:8b:77:f8:e3:55:c2:cd:cb:8e: 68:93:db:57:d7:5e:6d:35:f7:f3:6a:92:81:b7:f8: 89:3b:b7:6a:1f:bb:92:da:2e:96:9d:62:bc:7c:2c: 57:69:bf:ac:3f:65:07:ed:82:b9:23:f8:8e:0a:9b: be:11:9f:f0:b8:fc:e1:1e:b7:35:0f:53:3a:97:49: 0d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4A:CB:DD:3E:6A:53:E6:B0:0F:4E:55:9B:BA:1C:26:FA:FE:77:2F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ce112-c2bb-4af9-8e57-271d2038e059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:2800::/40 Signature Algorithm: sha256WithRSAEncryption 4e:0a:ae:ef:07:a6:4b:c8:8b:dd:e8:65:59:04:40:2f:a6:fc: f9:f7:2a:a4:1a:6d:4b:95:39:18:e1:4a:09:7f:40:2e:df:13: b2:d5:34:ae:f2:e4:33:98:30:cf:5a:04:0a:97:7e:60:e4:6a: 11:f3:cf:42:c7:4d:0e:4f:a6:85:42:69:23:5e:3c:42:0d:13: 68:f1:49:b9:68:29:ce:82:29:fc:16:16:ab:ea:17:77:6f:bd: ac:81:b0:8f:39:9d:32:f1:d2:d9:53:ba:af:30:17:90:7a:0a: 9f:83:a6:43:f8:f8:42:ea:b5:9f:69:62:5f:05:1f:e0:13:67: 63:59:8b:ce:8c:fb:58:54:6d:99:d8:f3:d3:64:33:4e:0e:ea: a3:aa:a1:82:f5:e7:d6:02:d0:48:72:82:c2:60:d5:a3:be:63: 84:79:18:51:6d:c2:4d:5c:45:eb:a3:90:94:d4:c4:50:a4:3b: 32:35:4f:46:73:44:08:9a:47:77:f3:74:73:61:6a:80:ab:89: 60:0b:21:22:b0:cc:10:77:d0:db:a9:4a:73:c9:1c:f4:f8:e9: 7e:ed:ca:0d:3a:72:63:85:c4:2e:60:f7:54:2d:92:67:5a:1a: 59:85:9d:62:4a:68:5a:69:56:b3:c5:23:e9:73:59:e3:b6:c1: bf:4d:13:5b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOFNbzpWHXk1RtNWMyXQ8vMBbL8QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE1MDAwNFoX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNAOGFjODA4OWUwZmI1YTBjM2I1ZGU1 MWIzMzVlMWY3NTViM2UxODQ5NjIzY2Q5ZWMyZTcwODIxMDMxZTI1MTFjMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQNWsmOVRJnU7v7JEN5wCw0vYzz9 drPur7xw4Ai5D39VAG6namPKVgqp2WFW6XYdvgbnffTB+NOOXTlEjgDzbAwpt/j5 onHsLumXiTBDYW8Uk9gof8FEgOdQC44ec9Vy50ypysdTRZ12709PMdEmbQYzgSlt KvXMCsccSFa+xMNQFOlLMgYVWogfmNx5MfE5uVlY2nW3qu/6nZ0aqEtSRJ1m1o10 OvG0c4pto/EVqxShw6+IBkj3+3yLd/jjVcLNy45ok9tX115tNffzapKBt/iJO7dq H7uS2i6WnWK8fCxXab+sP2UH7YK5I/iOCpu+EZ/wuPzhHrc1D1M6l0kNDQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKRKy90+alPmsA9OVZu6HCb6/ncvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q0N2NlMTEyLWMyYmItNGFmOS04ZTU3LTI3MWQyMDM4ZTA1OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9CgwDQYJKoZIhvcNAQELBQADggEBAE4Kru8HpkvIi93oZVkE QC+m/Pn3KqQabUuVORjhSgl/QC7fE7LVNK7y5DOYMM9aBAqXfmDkahHzz0LHTQ5P poVCaSNePEINE2jxSbloKc6CKfwWFqvqF3dvvayBsI85nTLx0tlTuq8wF5B6Cp+D pkP4+ELqtZ9pYl8FH+ATZ2NZi86M+1hUbZnY89NkM04O6qOqoYL159YC0EhygsJg 1aO+Y4R5GFFtwk1cReujkJTUxFCkOzI1T0ZzRAiaR3fzdHNhaoCriWALISKwzBB3 0NupSnPJHPT46X7tyg06cmOFxC5g91QtkmdaGlmFnWJKaFppVrPFI+lzWeO2wb9N E1s= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:35 2025 by rpki-client