$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa File: 3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa (raw, json) Hash identifier: v/kfZZ6FBUpShXqbJ/oMsfJTObpKi9sm4UCXTCo5uSw= Subject key identifier: 81:AC:34:A5:E6:0E:21:44:4A:9E:3F:47:02:B3:27:B3:91:FB:E7:45 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 03D10F7E3D77CF26A665B12FB4C25471C738D0B6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa Signing time: Tue 29 Jul 2025 00:40:13 +0000 ROA not before: Tue 29 Jul 2025 00:40:13 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d1:0f:7e:3d:77:cf:26:a6:65:b1:2f:b4:c2:54:71:c7:38:d0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:40:13 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=218fea4fe6b7ce3f451fe73d4c8eba5848c39d8ae301c5a20c6099b531490f55, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:1a:c6:8d:ca:50:88:48:92:ba:10:78:2b: 4d:b7:54:77:cd:0f:8d:99:0d:5e:2e:3d:75:0e:38: bd:a3:43:7d:4a:e3:43:c6:d5:e5:67:8b:1d:dc:14: 0b:01:54:da:d2:4a:40:6f:5a:67:7c:e3:b1:ae:fd: 37:1a:82:df:f4:07:2f:6e:a9:89:b6:c8:23:a1:81: ae:1b:59:cf:06:f0:7b:93:4c:9c:4a:c3:c9:02:65: 4d:08:19:d0:7f:c4:55:11:c6:2c:25:43:a8:68:83: 94:cb:08:96:f7:70:a4:6f:1b:5c:fa:cb:5a:a8:8a: a6:3f:07:17:f3:0a:ba:57:ea:e1:01:a5:d4:f0:dc: ef:b6:56:59:2d:15:b1:51:a4:79:3b:65:4e:78:e1: 45:01:f7:4f:bb:ff:00:11:43:19:de:08:f7:41:6f: f8:6b:c1:80:6a:09:c6:f5:2d:05:bf:43:6a:b2:2e: c0:5e:29:a8:24:e9:ec:63:bb:62:42:e2:c9:3b:d5: 6e:4e:63:e7:03:8d:e0:7c:66:db:f6:9c:c1:80:d4: 18:2f:fe:23:eb:61:d4:c0:6c:f6:52:11:f4:93:b5: fc:04:ab:eb:8f:cd:c1:3b:0d:42:d5:04:09:a4:8c: da:2c:84:6b:23:fa:4b:54:fb:b9:1c:b5:cc:50:85: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AC:34:A5:E6:0E:21:44:4A:9E:3F:47:02:B3:27:B3:91:FB:E7:45 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8000::/40 Signature Algorithm: sha256WithRSAEncryption 01:8b:8c:af:48:4c:d6:26:eb:bd:48:1d:84:cb:56:8b:2e:c9: ec:e1:e3:b8:90:de:9f:0b:b0:e6:a5:cd:b2:62:63:4b:61:b4: 5d:8c:67:d9:40:a0:fe:ca:d0:b5:f9:ad:2d:e3:e2:48:b4:16: c9:13:a8:57:75:49:6d:12:9d:5b:19:d6:5d:1f:f3:0f:e4:58: 04:49:7b:85:3a:70:a8:52:dc:91:06:1e:e1:5d:c3:dd:14:83: 4a:43:ad:99:1f:f4:7e:e1:e4:9f:80:39:fd:cb:03:ec:e3:ff: 93:7e:81:88:eb:aa:77:a0:a7:b3:6f:37:bd:9b:da:92:6c:2d: 90:be:e9:6d:97:68:16:eb:b6:95:69:1c:85:7e:6d:1b:43:4b: 65:5c:3d:e1:04:35:1d:b5:79:1c:a6:21:a9:28:ba:9e:18:a4: d9:76:b6:82:65:49:67:23:03:57:69:da:ee:05:ff:28:8d:ec: bc:bf:83:99:27:34:62:39:6e:16:4f:bb:60:12:bf:bf:2e:cf: 06:95:20:c0:bc:11:68:f5:c3:ea:8a:5a:69:bf:a1:43:d7:48: 8f:36:e2:10:f3:d6:41:5e:5a:46:4c:0d:85:9a:8c:c6:28:85: e2:f5:3a:39:87:2e:96:33:14:08:f8:28:6b:0e:33:2e:a0:e3: e8:78:94:27 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUA9EPfj13zyamZbEvtMJUccc40LYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwNDAxM1oX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAMjE4ZmVhNGZlNmI3Y2UzZjQ1MWZl NzNkNGM4ZWJhNTg0OGMzOWQ4YWUzMDFjNWEyMGM2MDk5YjUzMTQ5MGY1NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutIaxo3KUIhIkroQeCtNt1R3zQ+N mQ1eLj11Dji9o0N9SuNDxtXlZ4sd3BQLAVTa0kpAb1pnfOOxrv03GoLf9AcvbqmJ tsgjoYGuG1nPBvB7k0ycSsPJAmVNCBnQf8RVEcYsJUOoaIOUywiW93Ckbxtc+sta qIqmPwcX8wq6V+rhAaXU8NzvtlZZLRWxUaR5O2VOeOFFAfdPu/8AEUMZ3gj3QW/4 a8GAagnG9S0Fv0Nqsi7AXimoJOnsY7tiQuLJO9VuTmPnA43gfGbb9pzBgNQYL/4j 62HUwGz2UhH0k7X8BKvrj83BOw1C1QQJpIzaLIRrI/pLVPu5HLXMUIWkUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIGsNKXmDiFESp4/RwKzJ7OR++dFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNjMmZkMjg0LWE3MWMtNDNjYy1hMGFiLWEyNmMwYjY0ZjQ3NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/4AwDQYJKoZIhvcNAQELBQADggEBAAGLjK9ITNYm671IHYTL Vosuyezh47iQ3p8LsOalzbJiY0thtF2MZ9lAoP7K0LX5rS3j4ki0FskTqFd1SW0S nVsZ1l0f8w/kWARJe4U6cKhS3JEGHuFdw90Ug0pDrZkf9H7h5J+AOf3LA+zj/5N+ gYjrqnegp7NvN72b2pJsLZC+6W2XaBbrtpVpHIV+bRtDS2VcPeEENR21eRymIako up4YpNl2toJlSWcjA1dp2u4F/yiN7Ly/g5knNGI5bhZPu2ASv78uzwaVIMC8EWj1 w+qKWmm/oUPXSI824hDz1kFeWkZMDYWajMYoheL1OjmHLpYzFAj4KGsOMy6g4+h4 lCc= -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:28 2025 by rpki-client