$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa File: 2f724fc4-af92-4f6e-9781-835f37854eec.roa (raw, json) Hash identifier: y1L57uvvWeIyIKi/iFTiHXFizjYa1GCQ9cDT7jhRfXw= Subject key identifier: 01:2C:A0:28:46:71:DB:54:F3:1B:39:70:5E:70:EE:CA:CC:10:2F:4C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 02C5320AE0D277BF456694A0D08CD6A83768AD98 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa Signing time: Mon 07 Jul 2025 15:50:42 +0000 ROA not before: Mon 07 Jul 2025 15:50:42 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1f:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c5:32:0a:e0:d2:77:bf:45:66:94:a0:d0:8c:d6:a8:37:68:ad:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:50:42 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=aef1acf645fb1e5068a6687d106d8aea90b47297d327fcb3a007a3917d7998ba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:88:03:c5:be:03:59:5c:5a:62:78:a9:11:2b: 38:8b:e8:f9:d2:88:dd:60:de:e6:d4:2b:a0:f4:57: 4c:d5:5d:81:fd:b7:4c:f6:a1:10:0e:99:e3:f0:47: d0:32:c7:f3:74:48:ed:d2:af:ce:a8:f4:82:b9:c7: ac:77:c6:40:62:66:cd:1f:ed:24:cd:3f:7f:05:cf: 8a:ef:dc:6c:37:f5:98:2f:6e:aa:bf:0d:60:71:15: 41:76:8c:01:d6:86:82:5d:e8:1c:4a:77:5f:c0:d8: 58:10:3e:39:e7:45:d3:37:a7:44:09:36:82:ed:fd: a8:de:0f:37:0e:7e:3e:0d:ae:5f:63:6f:61:ce:2b: 8a:54:f0:a9:a7:c3:eb:2c:e6:9a:26:d1:34:fe:d0: 27:83:bc:2f:86:16:54:a9:19:11:63:07:0c:04:d9: c0:b9:64:3a:aa:a4:5e:87:5b:ec:6a:1a:3f:a3:f9: cf:d2:ef:16:31:90:d0:89:6c:be:a0:fd:3a:e4:61: 0b:67:57:1e:e8:ac:f2:be:ff:43:1f:4f:7b:dd:2c: 20:0c:d3:37:a4:d3:67:a0:33:15:c2:63:e7:b7:c4: f9:1b:77:48:75:56:f1:ba:3a:ea:ac:7e:35:70:02: d1:06:a1:5f:2b:7d:b7:94:37:20:f2:eb:29:54:39: 59:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2C:A0:28:46:71:DB:54:F3:1B:39:70:5E:70:EE:CA:CC:10:2F:4C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1f:c00::/38 Signature Algorithm: sha256WithRSAEncryption 66:1d:68:f4:c1:7d:99:12:ff:dd:5f:50:4d:e4:bd:4d:c1:e5: ff:9c:9c:9c:8c:60:4f:c1:43:24:22:12:aa:c9:0b:2d:b2:0f: 91:5f:fd:d1:ae:40:54:ee:04:a4:3c:c8:eb:73:44:ec:8d:55: 45:02:4c:9a:80:08:76:a7:58:21:78:4e:9c:8a:92:8e:d7:f3: 1b:35:bb:56:a0:2e:b1:fd:9b:31:92:55:13:24:d3:18:3e:28: 55:dc:87:17:5a:32:00:52:5f:3a:08:f1:0c:95:40:0b:26:3b: 2f:a0:d9:5d:a7:03:65:ad:45:8a:58:d0:aa:c5:82:c3:61:5f: a6:67:ae:d8:ca:34:b8:12:79:06:56:28:fc:e2:8d:86:dc:46: 02:1d:d7:0e:f8:3f:14:c1:d4:c2:3d:9e:92:6b:9a:29:ba:6a: c5:20:22:5e:ff:91:b3:3b:bf:23:39:57:38:f2:8c:f6:1b:e0: 57:fc:7c:fd:ad:f1:00:22:7f:98:7a:28:13:9e:0a:11:d8:1b: b9:7d:89:01:aa:b6:3f:82:ce:18:58:8d:4e:89:29:5f:ba:40: 52:89:9d:18:84:aa:09:f1:05:4e:bd:2d:30:61:f2:cc:93:7e: 59:0e:08:7a:9b:ea:94:e2:28:08:6d:81:ee:50:2d:b0:ce:84: 80:d5:14:f4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAsUyCuDSd79FZpSg0IzWqDdorZgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1NTA0MloX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAYWVmMWFjZjY0NWZiMWU1MDY4YTY2 ODdkMTA2ZDhhZWE5MGI0NzI5N2QzMjdmY2IzYTAwN2EzOTE3ZDc5OThiYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4gDxb4DWVxaYnipESs4i+j50ojd YN7m1Cug9FdM1V2B/bdM9qEQDpnj8EfQMsfzdEjt0q/OqPSCucesd8ZAYmbNH+0k zT9/Bc+K79xsN/WYL26qvw1gcRVBdowB1oaCXegcSndfwNhYED4550XTN6dECTaC 7f2o3g83Dn4+Da5fY29hziuKVPCpp8PrLOaaJtE0/tAng7wvhhZUqRkRYwcMBNnA uWQ6qqReh1vsaho/o/nP0u8WMZDQiWy+oP065GELZ1ce6Kzyvv9DH0973SwgDNM3 pNNnoDMVwmPnt8T5G3dIdVbxujrqrH41cALRBqFfK323lDcg8uspVDlZMQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAEsoChGcdtU8xs5cF5w7srMEC9MMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmNzI0ZmM0LWFmOTItNGY2ZS05NzgxLTgzNWYzNzg1NGVlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHwwwDQYJKoZIhvcNAQELBQADggEBAGYdaPTBfZkS/91fUE3k vU3B5f+cnJyMYE/BQyQiEqrJCy2yD5Ff/dGuQFTuBKQ8yOtzROyNVUUCTJqACHan WCF4TpyKko7X8xs1u1agLrH9mzGSVRMk0xg+KFXchxdaMgBSXzoI8QyVQAsmOy+g 2V2nA2WtRYpY0KrFgsNhX6ZnrtjKNLgSeQZWKPzijYbcRgId1w74PxTB1MI9npJr mim6asUgIl7/kbM7vyM5VzjyjPYb4Ff8fP2t8QAif5h6KBOeChHYG7l9iQGqtj+C zhhYjU6JKV+6QFKJnRiEqgnxBU69LTBh8syTflkOCHqb6pTiKAhtge5QLbDOhIDV FPQ= -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:49 2025 by rpki-client