$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/140a2854-efc4-48df-ac69-85d6d5a2e8cb.roa File: 140a2854-efc4-48df-ac69-85d6d5a2e8cb.roa (raw, json) Hash identifier: 0eaxvsEZK8iMvXqSS16v1VzrN386OuXmbwo9uUTBOhM= Subject key identifier: 20:40:58:8E:6D:90:E2:5D:A0:13:56:83:29:2B:16:87:AD:C5:F9:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5744B31795C702982689A3FD2D572FD40DD10DA7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/140a2854-efc4-48df-ac69-85d6d5a2e8cb.roa Signing time: Tue 29 Jul 2025 00:11:12 +0000 ROA not before: Tue 29 Jul 2025 00:11:12 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:44:b3:17:95:c7:02:98:26:89:a3:fd:2d:57:2f:d4:0d:d1:0d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:11:12 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=c7f9c47d0e91adff689a5558bc920c767e8c5d62f79714f112a84cf079a7319d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:91:f5:16:fb:2d:9a:6f:b5:4b:03:d1:d2:d7: f8:a8:cd:43:c5:bb:35:f6:95:d5:f1:9a:8a:3b:58: 0e:3f:69:e2:8e:a8:13:ad:37:9c:15:98:76:5a:22: 8e:88:c9:4e:68:db:e3:60:42:8d:8c:c2:48:b7:e0: e0:94:6d:ba:95:ed:de:77:52:f0:1d:ab:f8:7b:20: f5:93:59:17:d3:32:a5:a3:6b:c9:ba:c3:66:cc:50: ef:92:8e:16:29:03:d2:38:13:ea:b6:5b:29:83:9c: 51:f5:81:9f:25:42:6b:08:69:c1:5d:ce:14:e0:19: b6:1a:4c:14:94:9a:93:f0:ad:4a:04:05:79:eb:cc: 01:f0:d1:9d:77:e6:b7:b3:20:9d:95:cc:9a:97:ed: a9:68:cb:d1:d1:d6:db:7e:8f:14:88:eb:17:7e:6c: 77:1d:54:33:e4:a4:3e:94:fa:98:e1:88:8f:33:72: ca:c6:78:f3:25:78:37:3d:ed:98:9a:89:c0:d5:fa: 9c:f4:26:5a:8e:54:01:ce:e6:8d:e5:a7:55:1e:27: 19:78:38:37:2a:26:c7:84:60:1f:76:c9:86:e7:93: c6:32:6d:93:78:5b:c7:74:5c:75:ac:4a:c9:a7:c2: 05:7f:c8:ef:24:be:c1:29:31:94:fc:70:fb:4a:29: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:40:58:8E:6D:90:E2:5D:A0:13:56:83:29:2B:16:87:AD:C5:F9:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/140a2854-efc4-48df-ac69-85d6d5a2e8cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:4880::/48 Signature Algorithm: sha256WithRSAEncryption 22:97:e9:f8:33:3c:64:cf:7c:66:68:d3:db:65:b3:a2:9d:87: 3a:08:bc:06:b7:47:67:df:4d:43:20:15:9e:16:9b:b3:9a:35: 58:93:ff:3c:2e:52:2a:c0:ac:e1:c7:8c:ef:9e:11:4b:fc:25: ba:1b:14:25:c4:25:eb:39:0c:ab:45:46:d6:34:44:f1:4d:11: 22:b3:51:33:76:0a:25:f7:b6:c4:ad:f1:e4:79:9e:17:ad:94: d6:72:1a:ed:e8:07:fe:38:3d:1b:0f:65:be:7c:b6:76:c3:ea: dc:a1:50:e4:58:c8:ad:c5:a4:cb:00:8c:52:df:8d:ba:07:62: 19:85:9b:6e:13:76:fe:88:bd:96:2a:c1:97:45:b9:35:45:c3: ef:68:66:4d:b5:24:b7:3c:e8:ac:c1:03:36:01:a1:64:0f:5d: a9:11:8f:60:27:24:5c:bf:ee:c2:9a:58:b1:2e:70:8c:09:1c: e7:6f:52:95:86:1d:a9:da:50:f7:db:33:6f:ef:e2:f2:d1:aa: cd:8f:13:7d:11:15:52:7b:f7:49:15:93:98:73:40:44:3b:cd: 27:d7:6d:bd:5f:62:7b:ca:be:81:5a:eb:63:25:6a:0b:45:b2: a1:6b:8d:d0:0a:2d:75:79:bf:2d:6a:9c:cc:94:02:ac:14:89: 26:64:d0:8b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUV0SzF5XHApgmiaP9LVcv1A3RDacwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMTExMloX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAYzdmOWM0N2QwZTkxYWRmZjY4OWE1 NTU4YmM5MjBjNzY3ZThjNWQ2MmY3OTcxNGYxMTJhODRjZjA3OWE3MzE5ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJH1Fvstmm+1SwPR0tf4qM1Dxbs1 9pXV8ZqKO1gOP2nijqgTrTecFZh2WiKOiMlOaNvjYEKNjMJIt+DglG26le3ed1Lw Hav4eyD1k1kX0zKlo2vJusNmzFDvko4WKQPSOBPqtlspg5xR9YGfJUJrCGnBXc4U 4Bm2GkwUlJqT8K1KBAV568wB8NGdd+a3syCdlcyal+2paMvR0dbbfo8UiOsXfmx3 HVQz5KQ+lPqY4YiPM3LKxnjzJXg3Pe2YmonA1fqc9CZajlQBzuaN5adVHicZeDg3 KibHhGAfdsmG55PGMm2TeFvHdFx1rErJp8IFf8jvJL7BKTGU/HD7SinNHQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCBAWI5tkOJdoBNWgykrFoetxfnLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE0MGEyODU0LWVmYzQtNDhkZi1hYzY5LTg1ZDZkNWEyZThjYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEiAMA0GCSqGSIb3DQEBCwUAA4IBAQAil+n4Mzxkz3xmaNPb ZbOinYc6CLwGt0dn301DIBWeFpuzmjVYk/88LlIqwKzhx4zvnhFL/CW6GxQlxCXr OQyrRUbWNETxTREis1Ezdgol97bErfHkeZ4XrZTWchrt6Af+OD0bD2W+fLZ2w+rc oVDkWMitxaTLAIxS3426B2IZhZtuE3b+iL2WKsGXRbk1RcPvaGZNtSS3POiswQM2 AaFkD12pEY9gJyRcv+7CmlixLnCMCRznb1KVhh2p2lD32zNv7+Ly0arNjxN9ERVS e/dJFZOYc0BEO80n1229X2J7yr6BWutjJWoLRbKha43QCi11eb8tapzMlAKsFIkm ZNCL -----END CERTIFICATE-----Generated at Thu Jul 31 01:04:11 2025 by rpki-client