$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2ea0cd-d973-4275-9369-5ee22936d9da.roa File: fa2ea0cd-d973-4275-9369-5ee22936d9da.roa (raw, json) Hash identifier: UFI4S01SKa7cP0ChEC2jUI7t+PqLAf4mnG0mzLVN3ZA= Subject key identifier: 5A:80:FB:EB:66:C1:A3:8B:F3:B0:EE:73:1A:0F:EE:28:A0:F5:E5:C4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 30E198FD5886FE308C9FE600B79D70C4724DCA44 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2ea0cd-d973-4275-9369-5ee22936d9da.roa Signing time: Fri 15 Aug 2025 00:10:48 +0000 ROA not before: Fri 15 Aug 2025 00:10:48 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e1:98:fd:58:86:fe:30:8c:9f:e6:00:b7:9d:70:c4:72:4d:ca:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:10:48 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=24e3e20e570646a406287dbda3f06fea10bd8baeb66186f25d3b7c0ff042b187, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:27:2a:84:79:b9:02:e0:23:15:15:53:39: 3f:36:d8:ea:aa:25:4c:a1:b6:af:f5:3e:da:36:5b: 7b:6b:f0:5e:92:d4:02:72:cb:5a:91:2d:a2:b2:c9: 35:4a:ce:0e:50:d2:80:b6:31:e9:9c:53:96:b4:19: 0c:4e:a3:51:62:93:3c:cc:5b:d2:14:06:e1:9f:64: 47:c6:56:e5:4a:d3:d6:79:53:36:b7:89:ea:1e:1b: 17:9c:ba:28:9c:f7:28:c2:2e:90:9a:e2:46:20:84: b6:9b:85:a7:e8:04:88:55:e5:e2:bd:5a:cf:07:39: 43:c1:4b:24:6d:80:d5:01:98:16:fd:9b:da:e7:84: d8:b1:44:59:cd:36:8a:8c:58:6d:c8:d3:22:91:68: 4e:87:31:15:1e:18:29:d6:82:53:30:66:3b:19:f0: de:19:70:c3:ad:f5:3b:69:47:36:e6:53:e6:e7:59: c9:11:e3:4b:91:2f:9e:8f:3a:6b:21:00:3a:bf:4f: d9:53:60:44:12:39:7b:12:c4:21:14:04:84:4b:d8: 97:6a:8e:d7:b2:df:80:c3:ed:51:4c:02:d2:7c:1d: f7:22:b5:f2:ab:82:15:e2:90:7d:65:ae:8a:47:6d: 93:dd:a9:50:00:04:49:e3:ad:d5:f0:16:72:60:83: d5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:80:FB:EB:66:C1:A3:8B:F3:B0:EE:73:1A:0F:EE:28:A0:F5:E5:C4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2ea0cd-d973-4275-9369-5ee22936d9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:1000::/40 Signature Algorithm: sha256WithRSAEncryption 95:c9:55:75:29:1a:12:dd:2c:8d:4d:f4:fb:bd:a5:c8:c8:25: 3c:12:fd:84:a0:38:e8:12:ef:90:f7:7d:27:6e:f6:56:4e:09: 40:6e:10:b3:1a:57:48:f4:ea:b2:2d:4a:f5:81:e0:4d:38:35: 0c:31:98:ff:a5:1e:3e:d1:46:ba:98:42:b0:70:52:7e:bf:e6: f5:ef:3d:8b:b9:e0:cd:12:61:f2:48:90:c9:db:b1:eb:8a:db: e7:1f:e1:49:73:71:d9:be:e3:0b:e9:9a:d3:be:4c:b0:54:9c: bf:cf:b0:fd:70:80:11:c5:d8:a7:b7:90:70:23:7f:67:2e:fc: 2b:fc:fa:48:51:d6:f3:3b:59:fc:b1:0a:38:cb:3e:48:ab:79: 86:4d:46:ea:4f:d9:3a:97:4c:8c:1c:fb:9e:b7:7e:2d:35:60: 18:ff:05:86:c4:fe:d1:88:fc:53:f4:ce:9d:9c:82:e3:5a:f1: 40:ad:bc:dd:2a:1c:ba:ef:63:0f:24:56:55:57:04:2d:ac:91: 40:36:48:34:9b:28:96:a9:92:78:86:c5:a9:57:c1:ec:a3:1a: 38:81:bb:0b:fe:e6:74:c4:e3:a9:0b:cd:be:54:dd:49:67:de: de:2f:84:bb:26:44:23:30:e1:81:43:50:c8:63:d0:4f:ac:c9: ed:1b:ee:85 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMOGY/ViG/jCMn+YAt51wxHJNykQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTA0OFoX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNAMjRlM2UyMGU1NzA2NDZhNDA2Mjg3 ZGJkYTNmMDZmZWExMGJkOGJhZWI2NjE4NmYyNWQzYjdjMGZmMDQyYjE4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyYnKoR5uQLgIxUVUzk/NtjqqiVM obav9T7aNlt7a/BektQCcstakS2issk1Ss4OUNKAtjHpnFOWtBkMTqNRYpM8zFvS FAbhn2RHxlblStPWeVM2t4nqHhsXnLoonPcowi6QmuJGIIS2m4Wn6ASIVeXivVrP BzlDwUskbYDVAZgW/Zva54TYsURZzTaKjFhtyNMikWhOhzEVHhgp1oJTMGY7GfDe GXDDrfU7aUc25lPm51nJEeNLkS+ejzprIQA6v0/ZU2BEEjl7EsQhFASES9iXao7X st+Aw+1RTALSfB33IrXyq4IV4pB9Za6KR22T3alQAARJ463V8BZyYIPVDwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFqA++tmwaOL87DucxoP7iig9eXEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZhMmVhMGNkLWQ5NzMtNDI3NS05MzY5LTVlZTIyOTM2ZDlkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8xAwDQYJKoZIhvcNAQELBQADggEBAJXJVXUpGhLdLI1N9Pu9 pcjIJTwS/YSgOOgS75D3fSdu9lZOCUBuELMaV0j06rItSvWB4E04NQwxmP+lHj7R RrqYQrBwUn6/5vXvPYu54M0SYfJIkMnbseuK2+cf4Ulzcdm+4wvpmtO+TLBUnL/P sP1wgBHF2Ke3kHAjf2cu/Cv8+khR1vM7WfyxCjjLPkireYZNRupP2TqXTIwc+563 fi01YBj/BYbE/tGI/FP0zp2cguNa8UCtvN0qHLrvYw8kVlVXBC2skUA2SDSbKJap kniGxalXweyjGjiBuwv+5nTE46kLzb5U3Uln3t4vhLsmRCMw4YFDUMhj0E+sye0b 7oU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:19 2025 by rpki-client