$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e254d4e-c057-4a72-b7c3-e714097585e7.roa File: 2e254d4e-c057-4a72-b7c3-e714097585e7.roa (raw, json) Hash identifier: oCh9NKZ4aoLlQCETTnLxyLtmlyEBZjvfnJGbUiDHy/M= Subject key identifier: AD:D8:80:F7:1A:4B:7E:4F:0D:69:BC:48:1A:8C:BC:9C:0C:11:07:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 596FAF03BAB7E79C9E46EF5E17CC26F9F927E81F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e254d4e-c057-4a72-b7c3-e714097585e7.roa Signing time: Fri 15 Aug 2025 00:11:12 +0000 ROA not before: Fri 15 Aug 2025 00:11:12 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:e0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6f:af:03:ba:b7:e7:9c:9e:46:ef:5e:17:cc:26:f9:f9:27:e8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:11:12 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=42f4c074986ecf88b8344c4565a6eede0b0b33b4e047ed520f2b6e6e2bfd512a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:33:75:d3:3d:8f:97:77:ec:d6:a8:86:a4: 17:1d:87:4f:f8:f5:14:72:6a:e8:ea:53:c0:b6:08: 41:88:7f:1c:f1:ad:db:52:e2:31:c3:7a:22:db:20: 12:7b:20:f4:0b:32:3d:82:5c:e8:54:98:f6:ca:aa: 43:ff:0a:2e:9d:aa:59:d5:7d:4e:ee:50:29:3a:3c: df:70:85:21:ad:e6:84:fe:a0:cb:4c:3a:1f:8e:3c: 9c:24:81:d0:5f:98:9b:4b:20:34:c0:d6:79:05:41: 85:09:c7:c8:32:47:e5:7d:29:fc:33:b0:fd:d3:36: ca:18:2b:ed:88:6e:44:ea:9a:68:9b:32:84:24:88: 68:b8:0a:f4:4b:9b:34:77:c6:f2:3f:04:a6:6e:b0: c3:e4:ef:44:73:4f:cb:f4:2c:59:09:b5:fb:a9:a2: 36:c4:6a:3d:ef:97:f5:2a:93:48:82:73:f7:98:8e: e1:f5:dc:ad:dd:bf:2b:df:af:e1:6b:d5:df:9a:67: ce:fe:04:df:5f:eb:30:09:4e:ef:63:9c:2a:18:7a: 35:ff:06:bc:a9:92:70:44:dd:bc:61:bb:0d:ed:bf: 65:62:ad:24:4d:a6:bc:f1:57:5f:a5:60:16:81:ad: 23:36:9f:94:31:9a:05:c3:4d:40:66:b5:d6:14:2b: 42:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D8:80:F7:1A:4B:7E:4F:0D:69:BC:48:1A:8C:BC:9C:0C:11:07:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e254d4e-c057-4a72-b7c3-e714097585e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:e0c0::/46 Signature Algorithm: sha256WithRSAEncryption bc:e3:68:3a:be:41:4c:51:c6:eb:18:1a:85:85:1e:56:dc:a7: 30:f1:7c:62:e1:8b:eb:be:1f:d6:74:f5:b3:7c:5f:a3:cb:ac: 78:9f:31:1c:b9:8b:70:a9:a6:56:8d:b6:35:56:c0:91:f8:79: 7a:c8:96:bb:45:1d:b7:6d:c9:c7:84:97:03:8d:b9:73:b4:06: 35:61:f3:05:9f:f4:75:1e:17:eb:0e:7c:67:6f:43:48:1e:bb: ad:1d:76:5e:1f:4c:44:db:be:c6:a0:47:b3:ed:5b:4c:46:fe: ed:29:d2:95:7f:3f:0a:e3:23:7e:96:05:8f:79:c5:5f:36:f2: be:d8:8f:ec:05:9f:05:b9:7d:3d:16:f1:14:d6:66:e2:f4:84: e6:91:1a:ca:41:56:8c:ee:61:f3:a0:ba:e2:21:a0:a2:96:78: eb:dc:b8:0b:fd:4d:96:6e:61:5d:4a:4a:4e:ad:15:a8:b0:5a: c1:c3:42:ec:e1:af:e2:bd:c9:e7:ca:48:4f:96:11:a1:3e:ee: fc:d0:0c:60:7d:aa:21:47:9e:c9:43:46:95:46:32:7a:33:70: e4:b1:5f:24:19:43:ee:ed:d8:39:4b:a0:c9:02:46:8f:f6:29: 3b:23:c3:c4:40:48:f3:e3:1d:5a:12:1e:a7:48:d0:66:fb:f6: 61:06:50:07 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWW+vA7q355yeRu9eF8wm+fkn6B8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTExMloX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNANDJmNGMwNzQ5ODZlY2Y4OGI4MzQ0 YzQ1NjVhNmVlZGUwYjBiMzNiNGUwNDdlZDUyMGYyYjZlNmUyYmZkNTEyYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKMzddM9j5d37NaohqQXHYdP+PUU cmro6lPAtghBiH8c8a3bUuIxw3oi2yASeyD0CzI9glzoVJj2yqpD/wounapZ1X1O 7lApOjzfcIUhreaE/qDLTDofjjycJIHQX5ibSyA0wNZ5BUGFCcfIMkflfSn8M7D9 0zbKGCvtiG5E6ppomzKEJIhouAr0S5s0d8byPwSmbrDD5O9Ec0/L9CxZCbX7qaI2 xGo975f1KpNIgnP3mI7h9dyt3b8r36/ha9XfmmfO/gTfX+swCU7vY5wqGHo1/wa8 qZJwRN28YbsN7b9lYq0kTaa88VdfpWAWga0jNp+UMZoFw01AZrXWFCtCkwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFK3YgPcaS35PDWm8SBqMvJwMEQeOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlMjU0ZDRlLWMwNTctNGE3Mi1iN2MzLWU3MTQwOTc1ODVlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8+DAMA0GCSqGSIb3DQEBCwUAA4IBAQC842g6vkFMUcbrGBqF hR5W3Kcw8Xxi4Yvrvh/WdPWzfF+jy6x4nzEcuYtwqaZWjbY1VsCR+Hl6yJa7RR23 bcnHhJcDjblztAY1YfMFn/R1HhfrDnxnb0NIHrutHXZeH0xE277GoEez7VtMRv7t KdKVfz8K4yN+lgWPecVfNvK+2I/sBZ8FuX09FvEU1mbi9ITmkRrKQVaM7mHzoLri IaCilnjr3LgL/U2WbmFdSkpOrRWosFrBw0Ls4a/ivcnnykhPlhGhPu780Axgfaoh R57JQ0aVRjJ6M3DksV8kGUPu7dg5S6DJAkaP9ik7I8PEQEjz4x1aEh6nSNBm+/Zh BlAH -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:14 2025 by rpki-client