$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa File: 2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa (raw, json) Hash identifier: qMXXggm0QuliEhNe9Zo2PMThSRou8pDCnVo3GBoUL24= Subject key identifier: 4F:1B:D7:EB:5A:78:1A:69:E8:74:16:25:CB:77:08:38:06:F9:D1:C3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 25B4D4203954500E02D85CC511E06C0FEA74D6A8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa Signing time: Mon 07 Jul 2025 15:20:11 +0000 ROA not before: Mon 07 Jul 2025 15:20:11 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b4:d4:20:39:54:50:0e:02:d8:5c:c5:11:e0:6c:0f:ea:74:d6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:20:11 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=640ae3c12e25cc97bdf5453f25e170501685f4579b0d81de8a49a751e6dce64d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:96:1d:5b:cc:4d:c7:8a:e9:de:4a:2a:1a: ce:04:82:b9:9a:42:e0:c8:5d:4f:aa:27:0c:f5:3f: 11:1f:54:86:42:c7:aa:f6:43:24:31:73:c4:c2:5d: 2f:63:f9:3d:73:5a:7a:b1:91:b7:12:5d:3b:70:8b: e9:b1:78:a2:8d:1e:c4:61:10:df:8d:e5:c7:a5:3e: cc:c5:84:e4:2f:b7:86:d9:ba:1f:99:72:5f:b3:c9: 24:36:d9:11:50:43:01:7d:40:d8:4a:14:87:23:57: ce:f6:d8:62:87:66:54:09:45:46:29:57:38:42:f0: 43:61:19:5d:49:73:23:e5:b3:1f:d9:04:d4:02:4d: 92:48:40:fa:de:f7:0a:70:f6:0c:1f:b4:44:0f:75: 60:81:eb:75:6a:8a:a6:55:54:55:1d:8b:01:16:16: 46:69:c4:e4:12:07:7a:2f:24:f6:96:76:cd:28:ae: 67:84:b5:ab:00:0e:13:03:a7:3e:44:7e:6c:10:10: d6:d7:7a:75:64:9f:55:52:4d:0d:df:38:9d:bf:29: 23:e7:93:24:33:18:ce:21:55:42:f1:ef:65:c2:5c: c6:2d:6d:fd:89:16:85:77:00:6d:a6:f1:01:6d:d9: d3:c8:f5:15:85:c7:db:bf:12:42:b7:28:ed:0b:ce: 23:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1B:D7:EB:5A:78:1A:69:E8:74:16:25:CB:77:08:38:06:F9:D1:C3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:6000::/40 Signature Algorithm: sha256WithRSAEncryption 60:63:b5:f9:ad:6a:bb:2a:4f:83:f1:24:38:77:5d:d1:b1:a5: bd:c6:ef:71:bf:c5:be:5f:e7:d5:8a:e1:5a:93:2f:6b:e9:9a: bc:43:74:a8:85:99:ab:d3:75:a5:0c:3e:22:36:29:6d:31:f6: 8e:36:4b:4f:a3:e8:68:bb:5c:03:42:da:32:7f:8b:50:82:8c: 7b:e6:eb:8e:ba:cb:1a:9a:58:16:c9:76:b2:52:a7:21:4f:8d: 79:38:3a:00:55:71:e3:df:e2:66:57:04:af:40:06:e0:d0:68: dc:dd:d2:7d:a1:cd:c9:35:31:0a:81:1a:69:87:b3:d4:91:f6: 07:bc:f4:c9:7c:42:3a:3d:a5:83:63:7e:b6:86:98:53:86:ce: 23:5a:38:62:4d:75:56:e7:45:1c:5e:01:b1:43:48:c5:5a:5e: 1c:29:33:93:f9:26:1c:1d:3d:e9:e3:89:50:ff:f3:cc:e2:a6: 62:0b:7e:cc:60:7c:5c:c2:6f:54:c1:67:c5:e2:04:9c:10:78: 2a:fa:0e:33:37:f2:85:b9:f6:9f:5b:6a:e5:0b:6b:c7:33:fe: ff:b5:4b:a5:02:56:d8:2c:91:de:98:03:b1:c6:db:23:d1:ca: 08:59:b9:57:ab:62:c8:8d:36:af:08:32:48:72:9c:e3:c8:b8: 60:06:de:07 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJbTUIDlUUA4C2FzFEeBsD+p01qgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1MjAxMVoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNANjQwYWUzYzEyZTI1Y2M5N2JkZjU0 NTNmMjVlMTcwNTAxNjg1ZjQ1NzliMGQ4MWRlOGE0OWE3NTFlNmRjZTY0ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3qWHVvMTceK6d5KKhrOBIK5mkLg yF1PqicM9T8RH1SGQseq9kMkMXPEwl0vY/k9c1p6sZG3El07cIvpsXiijR7EYRDf jeXHpT7MxYTkL7eG2bofmXJfs8kkNtkRUEMBfUDYShSHI1fO9thih2ZUCUVGKVc4 QvBDYRldSXMj5bMf2QTUAk2SSED63vcKcPYMH7RED3Vgget1aoqmVVRVHYsBFhZG acTkEgd6LyT2lnbNKK5nhLWrAA4TA6c+RH5sEBDW13p1ZJ9VUk0N3zidvykj55Mk MxjOIVVC8e9lwlzGLW39iRaFdwBtpvEBbdnTyPUVhcfbvxJCtyjtC84jCQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE8b1+taeBpp6HQWJct3CDgG+dHDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlN2ZmZTI3LWJiOWYtNDAyZS04ZjkwLTA4OTQ1YTRkOTFlZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNmAwDQYJKoZIhvcNAQELBQADggEBAGBjtfmtarsqT4PxJDh3 XdGxpb3G73G/xb5f59WK4VqTL2vpmrxDdKiFmavTdaUMPiI2KW0x9o42S0+j6Gi7 XANC2jJ/i1CCjHvm6466yxqaWBbJdrJSpyFPjXk4OgBVcePf4mZXBK9ABuDQaNzd 0n2hzck1MQqBGmmHs9SR9ge89Ml8Qjo9pYNjfraGmFOGziNaOGJNdVbnRRxeAbFD SMVaXhwpM5P5JhwdPenjiVD/88zipmILfsxgfFzCb1TBZ8XiBJwQeCr6DjM38oW5 9p9bauULa8cz/v+1S6UCVtgskd6YA7HG2yPRyghZuVerYsiNNq8IMkhynOPIuGAG 3gc= -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:27 2025 by rpki-client