$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/37101188-5633-4c45-bcef-282cba7950d2.roa File: 37101188-5633-4c45-bcef-282cba7950d2.roa (raw, json) Hash identifier: IVXNU4twosv+vlMaUUchVHO4Q/dSHp3IZTUmrqDyBDE= Subject key identifier: A8:BF:A2:55:E8:40:B0:18:D4:B3:12:A7:52:20:97:29:40:67:2B:FC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7BAF41C44CAE22F71711324C9A97A954D2D38FA6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/37101188-5633-4c45-bcef-282cba7950d2.roa Signing time: Tue 29 Jul 2025 00:20:12 +0000 ROA not before: Tue 29 Jul 2025 00:20:12 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:f040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:af:41:c4:4c:ae:22:f7:17:11:32:4c:9a:97:a9:54:d2:d3:8f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:20:12 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=9be8fc257b04354521d1484a15eb5bb2a1d5f4a8077e3f02bd839fcb82b4097f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:1c:4f:03:82:5e:fd:c6:c1:47:12:1d:62: de:57:da:69:b3:21:b5:f8:24:f5:16:ee:48:a9:38: ed:c5:ce:ae:c4:85:72:06:10:54:df:46:19:d9:a2: c5:57:14:a0:c5:3d:ff:55:8b:a4:f3:fa:94:a8:48: 10:40:57:80:32:fe:68:ce:20:a9:bf:e9:36:6d:80: c3:b2:43:a6:32:0e:a4:1d:bf:03:be:53:6a:2b:87: 83:a9:1b:42:46:b0:e2:88:7e:39:76:b9:55:9a:8a: 28:46:52:77:b9:2d:2d:be:24:14:ad:c0:9e:b4:64: 12:a3:b9:e9:c8:4d:37:31:9c:a9:96:fd:b9:4b:3c: b7:cc:43:06:03:46:e9:8d:2f:d9:c2:99:a7:11:6d: 52:9d:94:00:a2:09:0a:6f:99:52:28:48:16:b8:e4: f6:9e:db:94:d0:ff:ac:e5:16:44:a0:9a:4b:cc:f0: ee:95:24:26:5b:23:63:e7:66:6b:3f:a5:54:93:a1: 9a:12:ea:95:51:6e:98:4e:69:f2:33:90:07:b7:fc: 8b:c9:2b:ce:f4:9d:73:85:ff:1b:98:8f:bc:2f:a8: f2:e2:64:8c:35:dc:4f:0b:b7:17:8f:d7:a5:4b:90: d7:5c:ad:ea:a7:31:27:83:40:03:0b:07:4e:ee:0b: 9d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BF:A2:55:E8:40:B0:18:D4:B3:12:A7:52:20:97:29:40:67:2B:FC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/37101188-5633-4c45-bcef-282cba7950d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:f040::/48 Signature Algorithm: sha256WithRSAEncryption 0a:4a:d1:0a:44:cb:d5:e5:0e:e3:68:04:d9:42:fa:fd:ed:b9: ad:bd:24:51:57:12:41:fe:ee:e3:c3:b7:fb:f0:0d:b9:fb:94: f1:61:b2:8f:b4:42:1c:8a:e2:03:55:49:17:22:04:20:c7:e5: ed:05:2e:b8:42:f9:c0:33:c8:62:62:ed:95:c2:08:ae:66:d8: fd:6b:1a:f6:3d:91:28:d7:0b:a4:55:e6:2e:44:8d:7d:d6:25: 14:9d:49:12:3a:29:7f:eb:3f:a0:73:c6:1a:1c:94:2a:32:9d: cc:9a:3c:51:e3:6b:64:5d:0d:71:d9:79:bd:3a:6b:c1:b9:ed: b2:d0:8b:5d:43:a5:cb:41:e5:c8:17:19:ab:bb:c0:89:77:49: 47:59:f3:6b:95:6d:a9:ed:95:88:08:fc:2a:e2:3f:1a:e1:7d: 11:c0:bf:7e:0b:2e:fd:b6:5c:ab:a0:ff:2b:e2:89:50:da:e8: 54:8f:26:25:ee:4b:51:4d:51:fa:e1:b0:2d:e0:c1:94:7c:0a: c0:e3:46:36:e1:9b:b5:87:44:5c:7f:98:de:05:23:9a:4b:57: 9d:93:46:b3:53:c3:51:a6:f2:f0:1f:71:e7:b5:21:2f:d9:75: 16:f1:c0:25:fe:11:5d:65:7e:e8:81:8e:2b:71:3f:44:2d:14: 74:9a:6c:c4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUe69BxEyuIvcXETJMmpepVNLTj6YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMjAxMloX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAOWJlOGZjMjU3YjA0MzU0NTIxZDE0 ODRhMTVlYjViYjJhMWQ1ZjRhODA3N2UzZjAyYmQ4MzlmY2I4MmI0MDk3ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPkcTwOCXv3GwUcSHWLeV9ppsyG1 +CT1Fu5IqTjtxc6uxIVyBhBU30YZ2aLFVxSgxT3/VYuk8/qUqEgQQFeAMv5oziCp v+k2bYDDskOmMg6kHb8DvlNqK4eDqRtCRrDiiH45drlVmoooRlJ3uS0tviQUrcCe tGQSo7npyE03MZyplv25Szy3zEMGA0bpjS/ZwpmnEW1SnZQAogkKb5lSKEgWuOT2 ntuU0P+s5RZEoJpLzPDulSQmWyNj52ZrP6VUk6GaEuqVUW6YTmnyM5AHt/yLySvO 9J1zhf8bmI+8L6jy4mSMNdxPC7cXj9elS5DXXK3qpzEng0ADCwdO7gudvwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKi/olXoQLAY1LMSp1IglylAZyv8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM3MTAxMTg4LTU2MzMtNGM0NS1iY2VmLTI4MmNiYTc5NTBkMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba//BAMA0GCSqGSIb3DQEBCwUAA4IBAQAKStEKRMvV5Q7jaATZ Qvr97bmtvSRRVxJB/u7jw7f78A25+5TxYbKPtEIciuIDVUkXIgQgx+XtBS64QvnA M8hiYu2VwgiuZtj9axr2PZEo1wukVeYuRI191iUUnUkSOil/6z+gc8YaHJQqMp3M mjxR42tkXQ1x2Xm9OmvBue2y0ItdQ6XLQeXIFxmru8CJd0lHWfNrlW2p7ZWICPwq 4j8a4X0RwL9+Cy79tlyroP8r4olQ2uhUjyYl7ktRTVH64bAt4MGUfArA40Y24Zu1 h0Rcf5jeBSOaS1edk0azU8NRpvLwH3HntSEv2XUW8cAl/hFdZX7ogY4rcT9ELRR0 mmzE -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:47 2025 by rpki-client