$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f5f7c96-cbf6-4cd7-a2da-6c86ff029673.roa File: 2f5f7c96-cbf6-4cd7-a2da-6c86ff029673.roa (raw, json) Hash identifier: AEjwF0jptGh4HDuM+MkO6Cs6rFRmWu+SSTRnvgVXcwA= Subject key identifier: 8B:EC:84:E9:95:49:FA:DF:D2:53:10:0F:B8:47:01:C2:CD:AC:50:70 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A3D6A23201CACAB4B29F58C710D1E79765D5DA8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f5f7c96-cbf6-4cd7-a2da-6c86ff029673.roa Signing time: Tue 29 Jul 2025 00:21:26 +0000 ROA not before: Tue 29 Jul 2025 00:21:26 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3d:6a:23:20:1c:ac:ab:4b:29:f5:8c:71:0d:1e:79:76:5d:5d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:21:26 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=ab733f71c490db3d08b460515710789d96a706e6bd2167d70abc2c09df62997b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:42:9b:f8:f5:57:e0:43:45:4d:66:16:be:56: 35:b1:24:16:46:91:4d:25:4e:a9:bb:5a:8d:04:08: 28:07:43:7f:77:c1:5a:1a:8d:83:84:88:0d:a6:db: 10:44:23:61:b7:ca:b5:a5:6a:9f:5c:95:43:68:bc: c4:aa:12:df:9a:88:03:0b:8d:aa:89:3a:98:ce:94: ad:83:70:dc:cc:b4:41:71:ce:eb:a5:c4:e0:41:47: 54:3b:fd:06:a0:d4:73:5c:e8:5d:86:aa:c4:8a:c1: a8:78:c2:61:54:fe:91:23:4e:68:91:67:87:ca:29: ba:df:68:f5:67:a8:e1:0a:0e:9d:4c:ec:47:3d:33: 0b:48:98:0d:44:9d:5b:b9:eb:46:36:47:9a:12:04: a7:89:9f:ac:c1:1d:23:0e:94:64:64:37:34:5c:e2: 52:1b:b9:3d:7a:f8:65:07:d2:36:b1:0e:49:6c:2b: 05:4f:90:b5:d6:4d:56:27:af:a9:ab:a1:e0:23:a5: 4e:e4:87:6b:38:64:b1:7c:64:20:08:51:8c:98:5b: d8:76:3b:d2:12:8f:c9:a1:ec:c0:7b:89:ec:ba:77: 1d:b5:70:ba:6c:06:08:a2:32:d4:68:3a:4f:76:fa: 5d:00:74:17:be:96:81:a4:d6:ff:c4:dd:56:80:04: e1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EC:84:E9:95:49:FA:DF:D2:53:10:0F:B8:47:01:C2:CD:AC:50:70 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f5f7c96-cbf6-4cd7-a2da-6c86ff029673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c840::/48 Signature Algorithm: sha256WithRSAEncryption 43:13:ee:7c:96:25:b0:4a:1e:bf:b6:ea:2a:76:b4:b3:d3:53: fb:65:11:46:73:5d:84:fd:b3:72:6d:a1:4b:0f:1c:f1:c8:d7: b6:16:3a:9b:2d:7d:e7:69:09:df:11:72:2b:ad:08:35:15:3f: cd:c9:1e:7c:03:11:48:0b:d2:b6:32:26:1d:0d:ba:98:f5:54: 2d:4f:75:cc:52:52:98:99:79:e9:ad:a3:61:31:ce:14:eb:80: c1:eb:1c:bc:55:64:f8:0a:28:fc:b4:e3:8a:41:c0:b7:6d:57: 1a:b7:09:91:7f:00:40:2b:10:ee:d1:61:bf:73:d8:86:83:85: 8b:d2:fb:a1:04:9d:dd:92:4d:c7:d8:e9:aa:c7:47:1e:d0:08: 0b:80:30:2b:d7:0e:27:bb:97:ea:30:fc:4d:8e:de:97:f8:0c: 9e:b9:d7:2e:41:c3:5b:2f:49:3a:34:ec:ac:cc:bd:14:60:fc: dd:3e:a2:bc:02:05:77:49:d9:0a:65:73:73:25:13:aa:36:a1: bb:aa:7c:01:53:5c:e9:34:03:31:86:40:ab:46:d3:2e:db:f2: b5:30:3c:19:ba:99:4b:48:7e:95:db:80:ff:55:40:40:6e:71: e6:cf:21:b1:82:79:bf:e2:cf:cf:84:01:50:50:af:fa:b8:bc: 56:2d:07:a8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKj1qIyAcrKtLKfWMcQ0eeXZdXagwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMjEyNloX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAYWI3MzNmNzFjNDkwZGIzZDA4YjQ2 MDUxNTcxMDc4OWQ5NmE3MDZlNmJkMjE2N2Q3MGFiYzJjMDlkZjYyOTk3YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UKb+PVX4ENFTWYWvlY1sSQWRpFN JU6pu1qNBAgoB0N/d8FaGo2DhIgNptsQRCNht8q1pWqfXJVDaLzEqhLfmogDC42q iTqYzpStg3DczLRBcc7rpcTgQUdUO/0GoNRzXOhdhqrEisGoeMJhVP6RI05okWeH yim632j1Z6jhCg6dTOxHPTMLSJgNRJ1buetGNkeaEgSniZ+swR0jDpRkZDc0XOJS G7k9evhlB9I2sQ5JbCsFT5C11k1WJ6+pq6HgI6VO5IdrOGSxfGQgCFGMmFvYdjvS Eo/JoezAe4nsuncdtXC6bAYIojLUaDpPdvpdAHQXvpaBpNb/xN1WgAThoQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIvshOmVSfrf0lMQD7hHAcLNrFBwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmNWY3Yzk2LWNiZjYtNGNkNy1hMmRhLTZjODZmZjAyOTY3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8hAMA0GCSqGSIb3DQEBCwUAA4IBAQBDE+58liWwSh6/tuoq drSz01P7ZRFGc12E/bNybaFLDxzxyNe2FjqbLX3naQnfEXIrrQg1FT/NyR58AxFI C9K2MiYdDbqY9VQtT3XMUlKYmXnpraNhMc4U64DB6xy8VWT4Cij8tOOKQcC3bVca twmRfwBAKxDu0WG/c9iGg4WL0vuhBJ3dkk3H2Omqx0ce0AgLgDAr1w4nu5fqMPxN jt6X+AyeudcuQcNbL0k6NOyszL0UYPzdPqK8AgV3SdkKZXNzJROqNqG7qnwBU1zp NAMxhkCrRtMu2/K1MDwZuplLSH6V24D/VUBAbnHmzyGxgnm/4s/PhAFQUK/6uLxW LQeo -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:23 2025 by rpki-client