$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa File: 2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa (raw, json) Hash identifier: gfDFqo10uJ1KKDny/HDfVOS4ze+VtEaImcklreglFs8= Subject key identifier: 0A:A6:4A:E8:D8:CC:8A:FA:58:CC:EE:69:D6:EA:1F:B8:ED:0F:41:FA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 18BEF777DAF90054E179CF9D1738F23DD6A1269D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa Signing time: Mon 28 Jul 2025 15:20:53 +0000 ROA not before: Mon 28 Jul 2025 15:20:53 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:be:f7:77:da:f9:00:54:e1:79:cf:9d:17:38:f2:3d:d6:a1:26:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 15:20:53 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=cebcda28e3c532cbc39c146e79ddbbd6521817a63d3a2b993eb2d562b0b38d78, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:07:6f:1b:58:c5:86:0e:fc:f9:3f:8b:16:ef: 3e:2d:86:49:04:9f:ff:93:d6:54:30:42:b9:29:f1: 19:df:6e:c3:71:4f:5a:e3:87:36:53:5e:b1:9a:21: 46:90:9d:ed:98:c8:ca:17:87:6c:b9:d8:f9:83:79: 69:c6:09:55:2e:2d:b5:6d:40:5e:c6:56:01:9d:fd: 84:e0:8d:d0:8b:0c:70:b7:dd:03:1d:00:bb:4a:7e: 28:fc:59:b4:f4:f7:e6:a5:23:87:32:2a:b6:69:e6: 45:e9:8b:f6:3e:2c:de:44:d5:94:40:a8:4e:70:c6: 3a:29:98:b1:ef:1d:ae:48:6f:1d:96:b8:3c:ba:47: 69:29:a2:df:21:8e:9e:09:8b:e2:20:aa:ca:85:cc: 73:72:ae:39:23:84:9e:80:9b:75:67:7c:07:42:2f: b4:2c:f9:fb:35:63:31:ac:98:8f:bf:3f:a5:73:7c: ee:35:cc:79:51:1b:43:ef:f2:f7:6c:2b:18:76:6e: 5b:24:af:b8:42:2b:ed:5b:56:7c:23:ce:ac:1b:1e: 79:7e:ae:55:e3:bf:95:3c:17:2f:95:36:50:dc:18: 81:5a:2d:f3:9d:db:d2:be:e0:25:5f:cb:20:bf:c3: c0:b9:f9:9d:79:ce:17:37:aa:a6:fd:1e:84:0d:02: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A6:4A:E8:D8:CC:8A:FA:58:CC:EE:69:D6:EA:1F:B8:ED:0F:41:FA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:a080::/48 Signature Algorithm: sha256WithRSAEncryption 8d:a2:9b:36:5e:41:46:0a:49:b3:17:b5:de:f9:ca:17:9e:80: 05:08:76:16:09:16:7f:64:03:68:a1:a1:96:4c:24:74:6c:36: ac:bd:0f:04:a2:47:f5:6c:62:5c:d3:d1:63:76:f1:4b:ce:46: e5:cb:0c:ce:53:93:7c:bd:e7:5a:3a:5d:af:11:cc:4a:a4:a2: 6b:1a:2f:99:68:e9:47:d0:07:fb:47:7f:42:aa:4d:93:11:99: 31:a4:c9:c9:ff:0a:0a:1d:cc:85:78:e8:54:e9:2c:c4:2b:32: a2:c0:3d:b9:13:9c:07:39:52:ad:79:8d:03:d9:f1:28:ba:fa: 9f:b6:31:ac:5e:33:5a:46:e5:b5:1d:ca:81:d3:28:c0:d8:85: 9a:6b:c4:79:f8:70:25:4a:fe:6a:86:a2:e7:3a:67:40:83:c4: c2:e8:c9:30:1c:4f:13:bb:15:2d:c8:a8:68:94:ca:50:f5:ad: 33:ca:49:7a:b8:bb:79:1d:36:ba:3a:0b:2a:07:fc:01:a2:5a: 2f:11:0e:18:a6:5a:38:eb:59:3d:de:d8:15:ca:47:c1:c1:2d: 65:40:d4:13:5f:82:4c:1d:7d:4b:3d:14:36:a8:ce:29:06:c3: ce:52:01:f0:b1:27:88:7b:ae:da:72:be:d1:d0:31:d3:c4:0d: 84:08:ec:79 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGL73d9r5AFThec+dFzjyPdahJp0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyODE1MjA1M1oX DTI1MDkwMTIzNTk1OVowejFJMEcGA1UEBRNAY2ViY2RhMjhlM2M1MzJjYmMzOWMx NDZlNzlkZGJiZDY1MjE4MTdhNjNkM2EyYjk5M2ViMmQ1NjJiMGIzOGQ3ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gdvG1jFhg78+T+LFu8+LYZJBJ// k9ZUMEK5KfEZ327DcU9a44c2U16xmiFGkJ3tmMjKF4dsudj5g3lpxglVLi21bUBe xlYBnf2E4I3Qiwxwt90DHQC7Sn4o/Fm09PfmpSOHMiq2aeZF6Yv2PizeRNWUQKhO cMY6KZix7x2uSG8dlrg8ukdpKaLfIY6eCYviIKrKhcxzcq45I4SegJt1Z3wHQi+0 LPn7NWMxrJiPvz+lc3zuNcx5URtD7/L3bCsYdm5bJK+4QivtW1Z8I86sGx55fq5V 47+VPBcvlTZQ3BiBWi3zndvSvuAlX8sgv8PAufmdec4XN6qm/R6EDQLxgwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAqmSujYzIr6WMzuadbqH7jtD0H6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlYmRjMWU5LTBlNGItNDJmZi05YTI3LTgwMGI3Mzk4OTdhNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAKCAMA0GCSqGSIb3DQEBCwUAA4IBAQCNops2XkFGCkmzF7Xe +coXnoAFCHYWCRZ/ZANooaGWTCR0bDasvQ8Eokf1bGJc09FjdvFLzkblywzOU5N8 vedaOl2vEcxKpKJrGi+ZaOlH0Af7R39Cqk2TEZkxpMnJ/woKHcyFeOhU6SzEKzKi wD25E5wHOVKteY0D2fEouvqftjGsXjNaRuW1HcqB0yjA2IWaa8R5+HAlSv5qhqLn OmdAg8TC6MkwHE8TuxUtyKholMpQ9a0zykl6uLt5HTa6OgsqB/wBolovEQ4Yplo4 61k93tgVykfBwS1lQNQTX4JMHX1LPRQ2qM4pBsPOUgHwsSeIe67acr7R0DHTxA2E COx5 -----END CERTIFICATE-----Generated at Thu Jul 31 00:59:19 2025 by rpki-client