$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31f81ea6-74ce-4274-9ac4-8387da206374.roa File: 31f81ea6-74ce-4274-9ac4-8387da206374.roa (raw, json) Hash identifier: 2q4rT7ar66YoofT37BQjh0fCYIgTy9RwU21N/t1s+l8= Subject key identifier: 46:FA:AE:DF:7D:4D:75:4D:EC:17:1A:B5:D6:F1:C2:F5:DA:98:2A:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5F14E3F8D5F1BA2487A52AD397BE7A16D15E6D7C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31f81ea6-74ce-4274-9ac4-8387da206374.roa Signing time: Tue 29 Jul 2025 00:21:25 +0000 ROA not before: Tue 29 Jul 2025 00:21:25 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:14:e3:f8:d5:f1:ba:24:87:a5:2a:d3:97:be:7a:16:d1:5e:6d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:21:25 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=51190edbed3a4b1bf98640d904b2f07e079ab3bab475e17335ad56671aaff571, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:3a:88:62:75:c7:8e:6c:03:f7:5e:95:ab: 38:43:48:76:eb:ea:cc:e3:9e:81:2b:fe:d0:fe:67: 38:ca:a4:91:76:ed:df:83:d7:53:49:6d:6a:40:cd: 17:d7:f9:e5:8e:c3:30:db:9f:7b:27:ec:aa:d9:14: d3:7a:48:4d:b7:75:97:7b:a2:71:18:3d:3b:fe:03: fa:05:3f:73:01:87:4c:7f:ad:1b:df:d6:18:6f:95: 61:4b:66:6b:fb:10:10:3b:f7:9f:8b:a4:ba:a5:d1: 54:3f:57:72:95:dd:96:d5:e2:aa:59:4c:d0:4e:17: 0a:b1:e1:d7:85:bc:48:7f:18:d6:a3:02:96:2d:72: 90:69:bb:11:d0:8d:e7:35:a0:42:e3:0f:76:50:eb: 33:7e:2f:a9:be:2c:39:de:06:a6:e7:ea:19:b9:be: f0:a7:d5:b1:aa:79:8c:5a:5f:99:09:ca:1e:47:bf: 33:b1:45:0c:c9:be:25:f9:a9:9b:32:37:cf:9a:08: 61:b8:13:59:57:88:51:34:b1:1c:eb:4a:0e:07:15: c3:2d:b6:a6:4a:c9:45:b9:66:e5:31:d3:a7:8c:e9: b9:24:61:2a:69:29:0a:dd:1f:1b:48:17:31:54:1c: 59:f8:46:38:25:9a:9a:04:52:ae:eb:2d:81:f9:6d: d3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FA:AE:DF:7D:4D:75:4D:EC:17:1A:B5:D6:F1:C2:F5:DA:98:2A:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31f81ea6-74ce-4274-9ac4-8387da206374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8040::/48 Signature Algorithm: sha256WithRSAEncryption ab:9b:02:24:a3:6a:b6:ac:89:3d:33:44:a9:13:33:71:34:5c: fa:86:3d:89:2f:65:10:b3:34:e3:79:43:88:89:db:74:0b:f0: 8e:9a:1d:9e:fd:23:22:5b:49:62:5f:00:93:e2:40:11:71:fa: ab:dc:91:e8:35:b8:bf:ee:9f:4a:b7:9c:ce:dd:18:68:dc:fa: 8e:29:64:4d:9e:b2:4a:b9:f9:44:68:db:d2:9d:a4:65:d9:a2: b9:e9:be:8e:51:5a:d6:f5:f7:c3:4b:57:48:43:4c:22:6f:58: c8:20:7e:65:9b:96:12:50:e3:eb:07:26:01:b1:c3:22:ff:0f: 52:58:35:e5:ec:82:b8:87:0b:17:27:b3:b5:2c:eb:f0:d4:e2: c2:ff:21:79:96:1a:90:ea:20:94:32:0f:6f:6f:ec:9e:06:e3: 30:65:f3:bb:8d:32:a5:95:0c:b7:ec:50:c1:e5:44:f3:cd:99: 3d:38:33:67:19:ab:bc:34:7e:06:e2:d6:c6:ce:48:45:97:ec: e6:f1:6a:95:f7:5b:ea:6d:70:e9:70:0a:42:84:1f:82:61:e7: 2b:6d:79:7d:6c:9e:5c:65:2d:dc:e7:e9:15:47:f2:11:eb:37: e2:35:f7:9d:fb:16:e1:09:1c:06:40:65:96:ca:08:5e:8d:12: e1:34:d8:fd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXxTj+NXxuiSHpSrTl756FtFebXwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMjEyNVoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNANTExOTBlZGJlZDNhNGIxYmY5ODY0 MGQ5MDRiMmYwN2UwNzlhYjNiYWI0NzVlMTczMzVhZDU2NjcxYWFmZjU3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaE6iGJ1x45sA/delas4Q0h26+rM 456BK/7Q/mc4yqSRdu3fg9dTSW1qQM0X1/nljsMw2597J+yq2RTTekhNt3WXe6Jx GD07/gP6BT9zAYdMf60b39YYb5VhS2Zr+xAQO/efi6S6pdFUP1dyld2W1eKqWUzQ ThcKseHXhbxIfxjWowKWLXKQabsR0I3nNaBC4w92UOszfi+pviw53gam5+oZub7w p9WxqnmMWl+ZCcoeR78zsUUMyb4l+ambMjfPmghhuBNZV4hRNLEc60oOBxXDLbam SslFuWblMdOnjOm5JGEqaSkK3R8bSBcxVBxZ+EY4JZqaBFKu6y2B+W3TtQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEb6rt99TXVN7BcatdbxwvXamCoPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxZjgxZWE2LTc0Y2UtNDI3NC05YWM0LTgzODdkYTIwNjM3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYBAMA0GCSqGSIb3DQEBCwUAA4IBAQCrmwIko2q2rIk9M0Sp EzNxNFz6hj2JL2UQszTjeUOIidt0C/COmh2e/SMiW0liXwCT4kARcfqr3JHoNbi/ 7p9Kt5zO3Rho3PqOKWRNnrJKuflEaNvSnaRl2aK56b6OUVrW9ffDS1dIQ0wib1jI IH5lm5YSUOPrByYBscMi/w9SWDXl7IK4hwsXJ7O1LOvw1OLC/yF5lhqQ6iCUMg9v b+yeBuMwZfO7jTKllQy37FDB5UTzzZk9ODNnGau8NH4G4tbGzkhFl+zm8WqV91vq bXDpcApChB+CYecrbXl9bJ5cZS3c5+kVR/IR6zfiNfed+xbhCRwGQGWWyghejRLh NNj9 -----END CERTIFICATE-----Generated at Thu Jul 31 01:03:59 2025 by rpki-client