$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa File: 1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa (raw, json) Hash identifier: iatIavg1NXZPLB9pKRgrKK6c+syryx3tLy6Vfa5aLUQ= Subject key identifier: E4:01:B8:F1:6E:40:5F:77:A7:E8:3F:24:7D:91:EB:CB:82:B7:03:F9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 646898BB26078820713919F7E41214E53B997C39 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa Signing time: Mon 28 Jul 2025 15:00:07 +0000 ROA not before: Mon 28 Jul 2025 15:00:07 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:68:98:bb:26:07:88:20:71:39:19:f7:e4:12:14:e5:3b:99:7c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 15:00:07 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=ec4243cae122708747ed4843b37ddc1130888babb78f8a4e0fa61b8243e06233, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:86:92:ab:16:19:7a:c5:11:a1:3d:a7:4f: 18:bf:f6:89:0b:67:a4:dc:af:3d:4a:64:2f:7c:95: 5e:26:b8:54:6b:a7:78:1a:36:e5:68:ff:79:66:47: 17:73:85:cf:ee:cf:e9:9a:06:a3:e7:a8:e2:8f:d2: 87:80:d6:73:be:5e:b5:0c:de:7b:79:09:26:a5:28: cd:4b:63:b9:55:27:29:fe:38:d6:04:ae:a2:68:ba: 37:e4:e4:ed:f5:31:4b:88:f5:c5:fa:4f:6f:cd:8c: e9:f8:c7:67:f6:19:b1:35:23:05:ab:ab:e8:26:51: b8:2a:97:c4:1d:90:3d:c5:9d:6b:21:fb:21:51:58: a1:98:45:98:89:b6:81:de:c2:77:77:99:04:f9:4b: 70:c6:e7:75:65:b1:0a:ed:71:c2:9d:9e:4e:b9:77: 06:7d:84:0e:82:6f:98:b5:b6:37:03:75:76:35:92: 71:78:08:04:4e:82:c0:0b:e7:e6:9a:81:23:3c:58: 98:c9:47:2a:06:37:9c:3e:6a:95:7a:34:91:7d:58: 9a:45:6d:70:f2:12:8e:90:14:ec:52:cf:10:cd:ac: 07:67:2b:4e:50:9e:65:fc:c4:80:ca:50:90:82:72: 2f:b9:b2:95:2b:84:12:5a:45:e0:8f:a6:86:4b:a5: 70:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:01:B8:F1:6E:40:5F:77:A7:E8:3F:24:7D:91:EB:CB:82:B7:03:F9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f040::/48 Signature Algorithm: sha256WithRSAEncryption 8d:be:ca:2d:b5:94:b1:56:5e:4a:93:3f:dc:5d:8f:28:4d:0c: 48:d0:e1:bb:f1:45:31:22:71:c7:fb:ad:9f:d1:59:99:69:da: 12:ed:31:bf:c6:8b:01:94:9b:38:2b:ab:a9:fc:63:36:14:c4: e4:65:71:75:3e:77:4e:94:80:7d:10:f6:9d:ce:6f:2f:bc:0c: 1f:0c:66:66:5d:fb:94:86:0d:9f:37:b7:3c:77:8a:d1:6e:70: 80:57:1d:db:d4:fe:80:f3:07:8b:78:9d:c6:c7:95:0b:ac:fb: f1:6a:6f:11:00:83:be:87:c6:ea:7c:d5:a5:b9:cd:71:23:93: 2f:ed:19:46:ba:72:a8:d1:dc:a7:aa:39:ea:64:07:79:6a:dd: fe:16:42:ff:05:35:44:d5:a9:17:fc:bf:74:fc:83:39:32:35: 7f:8e:46:ba:e5:fe:2b:78:fc:09:a6:ff:e9:03:05:98:6f:1c: 4f:00:1e:3f:41:f8:7e:c4:95:74:36:b1:fa:f0:0a:9a:4a:c3: 0f:2e:73:5e:40:8a:2c:c8:06:85:47:94:8b:fe:90:ce:aa:c7: 96:0b:05:db:80:6c:96:4b:1a:35:40:9c:61:63:c4:d5:5b:6c: 39:89:7d:9e:55:d2:b0:69:de:3f:b7:98:d3:ac:65:f5:78:ca: 08:5a:a2:f2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZGiYuyYHiCBxORn35BIU5TuZfDkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyODE1MDAwN1oX DTI1MDkwMTIzNTk1OVowejFJMEcGA1UEBRNAZWM0MjQzY2FlMTIyNzA4NzQ3ZWQ0 ODQzYjM3ZGRjMTEzMDg4OGJhYmI3OGY4YTRlMGZhNjFiODI0M2UwNjIzMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrqGkqsWGXrFEaE9p08Yv/aJC2ek 3K89SmQvfJVeJrhUa6d4GjblaP95ZkcXc4XP7s/pmgaj56jij9KHgNZzvl61DN57 eQkmpSjNS2O5VScp/jjWBK6iaLo35OTt9TFLiPXF+k9vzYzp+Mdn9hmxNSMFq6vo JlG4KpfEHZA9xZ1rIfshUVihmEWYibaB3sJ3d5kE+Utwxud1ZbEK7XHCnZ5OuXcG fYQOgm+YtbY3A3V2NZJxeAgEToLAC+fmmoEjPFiYyUcqBjecPmqVejSRfViaRW1w 8hKOkBTsUs8QzawHZytOUJ5l/MSAylCQgnIvubKVK4QSWkXgj6aGS6VwKwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOQBuPFuQF93p+g/JH2R68uCtwP5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlYWU0YzRmLTQ0NWItNGJmNS1hZTdlLTE3NTZkODdkZWExNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAPBAMA0GCSqGSIb3DQEBCwUAA4IBAQCNvsottZSxVl5Kkz/c XY8oTQxI0OG78UUxInHH+62f0VmZadoS7TG/xosBlJs4K6up/GM2FMTkZXF1PndO lIB9EPadzm8vvAwfDGZmXfuUhg2fN7c8d4rRbnCAVx3b1P6A8weLeJ3Gx5ULrPvx am8RAIO+h8bqfNWluc1xI5Mv7RlGunKo0dynqjnqZAd5at3+FkL/BTVE1akX/L90 /IM5MjV/jka65f4rePwJpv/pAwWYbxxPAB4/Qfh+xJV0NrH68AqaSsMPLnNeQIos yAaFR5SL/pDOqseWCwXbgGyWSxo1QJxhY8TVW2w5iX2eVdKwad4/t5jTrGX1eMoI WqLy -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:16 2025 by rpki-client