$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27ffe405-af5c-4562-aa96-cff0cf796a1c.roa File: 27ffe405-af5c-4562-aa96-cff0cf796a1c.roa (raw, json) Hash identifier: ObSl1RcbzOM4342z9v0ZV0COIyp4RdjbDnaxu4Sn+JM= Subject key identifier: 94:37:CA:00:9F:15:21:0E:E9:30:5A:5D:5C:47:7E:D7:7E:EC:FF:EC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 05AC0367864FC6567D439379E09DA27258130604 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27ffe405-af5c-4562-aa96-cff0cf796a1c.roa Signing time: Tue 29 Jul 2025 00:40:10 +0000 ROA not before: Tue 29 Jul 2025 00:40:10 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:6020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ac:03:67:86:4f:c6:56:7d:43:93:79:e0:9d:a2:72:58:13:06:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:40:10 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=74f3df9939311553524af9fb7d6a9c49eceec9fa3ff4264e10f90807638b7a1c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:20:91:f5:eb:7a:ef:ce:df:7c:f0:b4:84: b7:65:ae:33:09:c0:55:e3:bf:45:c4:5c:02:a7:72: fa:e5:56:51:26:12:61:85:85:4b:d4:43:57:f8:0b: 86:d4:ac:f6:01:1f:d6:21:29:6a:ab:22:6c:db:21: 7d:aa:c4:8b:39:7d:c5:07:93:d4:3c:b6:bb:e1:4a: 62:8c:ba:2b:2f:53:73:1c:19:51:46:ba:7a:36:34: c9:c4:ca:4e:ce:be:c1:b9:7b:f4:45:3f:b5:00:3c: a8:29:2b:2a:30:67:fe:85:3c:c9:59:d5:33:91:4d: ec:13:c7:df:c3:85:59:19:33:e8:49:66:69:c8:65: f7:f1:a3:fa:9b:cb:dc:83:7a:62:7a:ba:4c:72:1e: 8a:de:e4:9e:86:4c:e6:85:3f:aa:86:cb:10:6b:e0: 3c:97:99:9d:75:00:c0:c3:0c:d5:dc:5f:eb:4d:92: bc:c1:92:67:1a:9a:2c:dc:23:90:22:79:89:0d:35: a9:40:82:e3:1b:24:32:b1:38:bb:ad:52:11:84:9e: 1d:a0:38:75:14:95:15:96:84:5f:21:2e:6c:71:9b: 18:f6:5a:d8:5b:d6:64:45:dc:34:d5:b3:47:8f:f4: 6e:c7:7c:64:83:ba:b2:8e:25:ae:2b:da:47:92:93: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:37:CA:00:9F:15:21:0E:E9:30:5A:5D:5C:47:7E:D7:7E:EC:FF:EC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27ffe405-af5c-4562-aa96-cff0cf796a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:6020::/48 Signature Algorithm: sha256WithRSAEncryption 54:a4:25:89:65:91:ab:45:29:71:d9:62:42:68:f8:43:0c:ed: bd:a7:04:25:ea:6d:1a:45:fd:83:fb:1f:01:60:83:b4:f8:55: 7d:6b:3a:69:bc:c2:4a:67:02:33:a4:97:14:d0:45:19:94:6a: 73:81:0c:b6:74:5f:cc:a6:d7:82:3a:2e:e9:8d:c9:57:db:60: b1:26:25:5b:c9:e6:3f:b0:ba:a9:89:27:0d:a4:7a:18:67:7d: 74:c9:15:df:c2:18:e0:c0:46:74:f3:da:32:8a:15:50:13:80: 46:12:5f:b3:33:40:16:ec:1e:83:2a:42:09:88:43:ea:f4:b1: 6d:15:a9:0e:16:d0:e3:2c:cb:92:1d:b6:78:65:3f:c2:e5:c8: de:8a:ec:70:bf:4e:ab:96:eb:04:c6:70:23:08:2c:e3:52:d0: b0:dd:79:82:32:2d:53:78:77:15:56:fb:4f:37:5f:5d:32:5c: 12:fe:b2:eb:f5:15:9c:fb:f7:f4:17:32:74:2e:f6:32:7d:f0: af:58:56:de:7f:a0:21:47:43:56:1e:4f:95:07:2b:aa:c8:2f: 11:a7:5d:55:ea:cb:47:dd:d1:ec:44:19:46:e0:f3:05:89:17: ab:8a:e2:f7:d1:3d:ec:f4:54:ab:d3:07:dc:5f:d5:bd:9c:b4: 95:4c:0f:db -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBawDZ4ZPxlZ9Q5N54J2iclgTBgQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwNDAxMFoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNANzRmM2RmOTkzOTMxMTU1MzUyNGFm OWZiN2Q2YTljNDllY2VlYzlmYTNmZjQyNjRlMTBmOTA4MDc2MzhiN2ExYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SIgkfXreu/O33zwtIS3Za4zCcBV 479FxFwCp3L65VZRJhJhhYVL1ENX+AuG1Kz2AR/WISlqqyJs2yF9qsSLOX3FB5PU PLa74UpijLorL1NzHBlRRrp6NjTJxMpOzr7BuXv0RT+1ADyoKSsqMGf+hTzJWdUz kU3sE8ffw4VZGTPoSWZpyGX38aP6m8vcg3pierpMch6K3uSehkzmhT+qhssQa+A8 l5mddQDAwwzV3F/rTZK8wZJnGpos3COQInmJDTWpQILjGyQysTi7rVIRhJ4doDh1 FJUVloRfIS5scZsY9lrYW9ZkRdw01bNHj/Rux3xkg7qyjiWuK9pHkpMx0QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJQ3ygCfFSEO6TBaXVxHftd+7P/sMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI3ZmZlNDA1LWFmNWMtNDU2Mi1hYTk2LWNmZjBjZjc5NmExYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/2AgMA0GCSqGSIb3DQEBCwUAA4IBAQBUpCWJZZGrRSlx2WJC aPhDDO29pwQl6m0aRf2D+x8BYIO0+FV9azppvMJKZwIzpJcU0EUZlGpzgQy2dF/M pteCOi7pjclX22CxJiVbyeY/sLqpiScNpHoYZ310yRXfwhjgwEZ089oyihVQE4BG El+zM0AW7B6DKkIJiEPq9LFtFakOFtDjLMuSHbZ4ZT/C5cjeiuxwv06rlusExnAj CCzjUtCw3XmCMi1TeHcVVvtPN19dMlwS/rLr9RWc+/f0FzJ0LvYyffCvWFbef6Ah R0NWHk+VByuqyC8Rp11V6stH3dHsRBlG4PMFiReriuL30T3s9FSr0wfcX9W9nLSV TA/b -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:16 2025 by rpki-client