$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ef497a8-abd3-4d49-af13-215841ac320f.roa File: 1ef497a8-abd3-4d49-af13-215841ac320f.roa (raw, json) Hash identifier: zMGcg7CQKXFV8McwesM+ThccjUEPYSEpM0ZyV05QreU= Subject key identifier: 83:64:AD:BF:F4:A9:7D:34:22:F8:B7:2A:3D:F6:63:2B:BB:0E:43:80 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 019B542E8C799A35E4301AAEDC530806829A37DC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ef497a8-abd3-4d49-af13-215841ac320f.roa Signing time: Wed 09 Jul 2025 00:00:14 +0000 ROA not before: Wed 09 Jul 2025 00:00:14 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:2e:8c:79:9a:35:e4:30:1a:ae:dc:53:08:06:82:9a:37:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 9 00:00:14 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=f490817a77a84f9614228bd6d6a7850158f83833f3fc53c9f2bac9ad3a2396fc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:e5:1a:60:83:c7:4d:3c:66:28:e9:ea:7c: e4:96:3b:e2:05:20:f5:12:96:88:36:a2:09:cd:bd: 64:47:b1:dd:b4:b2:cc:fc:f3:18:84:21:b9:2a:d1: 1b:1d:7a:b7:a5:66:8d:89:d5:e0:5a:3f:32:93:51: ce:8d:21:d8:08:e4:18:d2:60:93:15:9a:52:b4:8e: ab:00:63:6d:9a:1c:83:f3:ca:b0:af:da:04:0d:3f: fc:b0:a4:0d:34:05:6c:82:07:92:87:66:49:aa:fd: 07:99:5f:43:c0:92:79:3c:3d:e5:e2:79:4f:c3:70: 33:7d:ec:3c:fc:05:7e:26:85:a8:1d:39:cb:4b:92: 3c:c1:ec:a6:ee:4e:3b:e8:f3:34:78:32:49:78:cc: 32:8d:4f:db:65:65:1a:28:85:98:7f:6b:4d:f3:c5: 0f:80:a3:fc:84:78:30:c9:fc:93:33:be:e8:aa:0b: f9:a3:b5:59:64:8a:ff:75:44:68:25:0f:37:87:54: 75:c8:86:a4:2d:5d:be:77:c4:cf:fe:c3:de:b1:77: 98:68:4c:01:d9:cc:91:dd:b2:64:12:f3:a8:04:46: 6b:a5:07:8e:60:6a:07:2c:10:0a:9f:f8:28:c3:bf: 7c:ce:8a:b0:42:c5:0c:31:dc:a6:ab:4e:56:d2:85: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:64:AD:BF:F4:A9:7D:34:22:F8:B7:2A:3D:F6:63:2B:BB:0E:43:80 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ef497a8-abd3-4d49-af13-215841ac320f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:4000::/40 Signature Algorithm: sha256WithRSAEncryption 3d:bd:27:95:b2:2c:8b:e9:ab:61:66:b2:b4:76:af:e8:d0:ba: ca:6d:09:a1:fb:06:5e:4e:19:85:3b:e0:19:b0:81:62:7d:01: 5d:df:96:5d:16:1c:b0:01:b5:c3:48:a6:3e:76:07:96:0e:e0: dd:5b:4c:b7:9d:e1:ee:93:92:7f:89:d4:0d:da:a4:a3:ff:ce: 2a:55:ad:6c:5f:1c:3f:50:fb:c7:6a:0c:79:a3:dd:57:e0:74: 8c:12:2c:9f:62:3b:3c:5c:ff:ee:ca:d0:38:2f:5c:51:e1:cf: dc:89:12:05:8e:ce:0e:0e:2c:d8:88:ac:60:cf:db:8b:cd:d2: 03:01:ff:24:17:68:30:0c:5b:de:56:ee:83:ed:c2:c4:6d:62: 51:44:8b:10:6a:7d:8b:de:5b:3a:a0:13:fd:64:54:1c:97:f4: 8d:70:fc:8e:66:72:ad:88:9e:db:19:35:f0:68:db:21:45:97: 7b:3e:96:e5:f2:a6:61:7e:b0:b7:13:56:10:45:fb:fd:4d:17: e8:4f:89:fd:41:50:4f:8a:fd:6f:19:5f:b4:8e:7e:97:04:a6: ab:16:d8:06:6f:22:ef:19:06:da:da:5f:8c:52:8c:ee:9a:83: 81:1a:33:20:b0:aa:ae:39:38:38:f6:07:a8:44:53:8b:63:3f: 5d:1b:6a:2a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAZtULox5mjXkMBqu3FMIBoKaN9wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwOTAwMDAxNFoX DTI1MDgxMzIzNTk1OVowejFJMEcGA1UEBRNAZjQ5MDgxN2E3N2E4NGY5NjE0MjI4 YmQ2ZDZhNzg1MDE1OGY4MzgzM2YzZmM1M2M5ZjJiYWM5YWQzYTIzOTZmYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK3lGmCDx008Zijp6nzkljviBSD1 EpaINqIJzb1kR7HdtLLM/PMYhCG5KtEbHXq3pWaNidXgWj8yk1HOjSHYCOQY0mCT FZpStI6rAGNtmhyD88qwr9oEDT/8sKQNNAVsggeSh2ZJqv0HmV9DwJJ5PD3l4nlP w3Azfew8/AV+JoWoHTnLS5I8weym7k476PM0eDJJeMwyjU/bZWUaKIWYf2tN88UP gKP8hHgwyfyTM77oqgv5o7VZZIr/dURoJQ83h1R1yIakLV2+d8TP/sPesXeYaEwB 2cyR3bJkEvOoBEZrpQeOYGoHLBAKn/gow798zoqwQsUMMdymq05W0oXM6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFINkrb/0qX00Ivi3Kj32Yyu7DkOAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlZjQ5N2E4LWFiZDMtNGQ0OS1hZjEzLTIxNTg0MWFjMzIwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNkAwDQYJKoZIhvcNAQELBQADggEBAD29J5WyLIvpq2FmsrR2 r+jQusptCaH7Bl5OGYU74BmwgWJ9AV3fll0WHLABtcNIpj52B5YO4N1bTLed4e6T kn+J1A3apKP/zipVrWxfHD9Q+8dqDHmj3VfgdIwSLJ9iOzxc/+7K0DgvXFHhz9yJ EgWOzg4OLNiIrGDP24vN0gMB/yQXaDAMW95W7oPtwsRtYlFEixBqfYveWzqgE/1k VByX9I1w/I5mcq2IntsZNfBo2yFFl3s+luXypmF+sLcTVhBF+/1NF+hPif1BUE+K /W8ZX7SOfpcEpqsW2AZvIu8ZBtraX4xSjO6ag4EaMyCwqq45ODj2B6hEU4tjP10b aio= -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:16 2025 by rpki-client