$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa File: 403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa (raw, json) Hash identifier: aJ6rIS/bBctGGtzx7V5wi0gg+gi0F3DobPHxxbOmzxg= Subject key identifier: 2F:0D:F1:5B:6A:72:D0:A3:A7:07:9D:1E:2D:9C:12:CD:F1:A3:D6:A5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 606E295CA961ADA8F79CE7766D8B7435D07F7CA7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa Signing time: Wed 30 Jul 2025 00:00:23 +0000 ROA not before: Wed 30 Jul 2025 00:00:23 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:4060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:6e:29:5c:a9:61:ad:a8:f7:9c:e7:76:6d:8b:74:35:d0:7f:7c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:00:23 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=b4e6110b72e7e95fccae36e395a281f5ea730bc05a49c30f5cbd2b73a4730e36, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9a:15:29:df:0a:0b:c5:2e:dd:f5:3b:00:bd: 56:63:fe:98:65:04:b9:8a:1c:97:f7:40:6b:c2:d5: 72:60:39:0f:be:f4:21:ec:b5:0f:fe:88:6f:c5:80: 57:ea:88:ea:15:25:82:20:56:89:4e:56:a4:98:12: a5:bb:76:c7:30:45:69:c5:60:90:9e:3e:e2:6e:3a: 56:87:a1:06:af:df:9f:c2:33:54:85:d8:5e:ed:47: e1:e4:f8:52:d2:59:b5:ca:a4:ba:a0:61:50:e3:b8: f1:9b:5d:14:77:90:8e:51:d4:f7:12:29:ea:17:73: a5:ee:c7:05:9b:d6:ac:5f:c2:89:66:cc:07:1b:f5: 51:53:19:4f:2a:81:c8:77:92:61:1f:fc:9c:79:e4: 8a:ce:c8:2f:fe:88:c2:60:72:65:51:8f:3c:22:67: 0b:d2:ff:02:3e:15:0b:f8:f7:4a:3b:a1:fc:f3:c2: 27:ce:67:ad:26:ed:46:f5:c3:be:17:5c:62:3b:46: 0e:43:42:5a:bc:ff:eb:c9:00:f9:2c:57:d2:74:2d: 9b:4d:73:c9:3b:e8:9d:05:85:10:d1:57:7d:97:1f: 0c:e6:74:d4:53:4e:31:88:46:cd:bd:74:d3:e3:68: 74:b9:16:67:38:c2:e3:6a:02:a6:b3:79:40:2a:2f: 45:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0D:F1:5B:6A:72:D0:A3:A7:07:9D:1E:2D:9C:12:CD:F1:A3:D6:A5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:4060::/48 Signature Algorithm: sha256WithRSAEncryption 93:95:4a:cd:18:9d:8e:b9:97:75:0a:a5:7a:7a:59:3e:37:a5: 60:ee:c6:4d:de:bf:bf:1a:0c:0a:23:d9:97:56:f8:ae:4b:2c: 9c:13:1f:ec:ed:00:89:e0:51:99:a9:b1:72:54:c6:bd:f4:95: e9:ed:52:00:f1:74:a7:47:ad:50:f3:08:ba:85:e6:2e:38:59: 8e:cf:05:bc:81:5a:90:f6:26:e7:16:94:bc:b5:56:de:67:4b: 05:2b:ad:be:8e:bd:f4:0d:b3:bc:bf:91:c2:f4:68:a8:5b:bb: 1c:0b:7b:7c:62:16:3e:4f:e9:9d:4d:b5:95:01:69:9b:f2:c7: 62:47:c1:f3:22:9d:e7:28:da:2d:e7:02:07:a1:d6:b1:02:d5: 0a:dd:5f:ef:1e:72:d9:fb:ff:79:48:a0:2f:40:99:3b:5a:be: d5:fd:8f:09:50:20:75:73:96:4d:65:d0:59:d5:95:0e:b9:a8: ab:a2:e5:18:8e:38:66:55:48:88:5c:d8:d3:09:de:01:3f:52: 9f:cf:41:c1:06:11:5a:32:b3:d4:d6:b6:4b:9f:c6:40:f3:3d: e4:16:60:1c:c5:4e:c6:5f:c8:bc:8c:85:6b:03:b8:0e:69:6f: ec:bd:9b:b5:8f:45:c8:36:c9:97:8b:1c:b4:66:32:d4:a5:99: af:04:75:4b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYG4pXKlhraj3nOd2bYt0NdB/fKcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwMDAyM1oX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAYjRlNjExMGI3MmU3ZTk1ZmNjYWUz NmUzOTVhMjgxZjVlYTczMGJjMDVhNDljMzBmNWNiZDJiNzNhNDczMGUzNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJoVKd8KC8Uu3fU7AL1WY/6YZQS5 ihyX90BrwtVyYDkPvvQh7LUP/ohvxYBX6ojqFSWCIFaJTlakmBKlu3bHMEVpxWCQ nj7ibjpWh6EGr9+fwjNUhdhe7Ufh5PhS0lm1yqS6oGFQ47jxm10Ud5COUdT3Einq F3Ol7scFm9asX8KJZswHG/VRUxlPKoHId5JhH/yceeSKzsgv/ojCYHJlUY88ImcL 0v8CPhUL+PdKO6H888InzmetJu1G9cO+F1xiO0YOQ0JavP/ryQD5LFfSdC2bTXPJ O+idBYUQ0Vd9lx8M5nTUU04xiEbNvXTT42h0uRZnOMLjagKms3lAKi9F0wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFC8N8VtqctCjpwedHi2cEs3xo9alMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQwM2NkYzI2LTFhZGYtNGU4Yy1hNDBjLTZjYzMxZWZlOWZiOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAEBgMA0GCSqGSIb3DQEBCwUAA4IBAQCTlUrNGJ2OuZd1CqV6 elk+N6Vg7sZN3r+/GgwKI9mXVviuSyycEx/s7QCJ4FGZqbFyVMa99JXp7VIA8XSn R61Q8wi6heYuOFmOzwW8gVqQ9ibnFpS8tVbeZ0sFK62+jr30DbO8v5HC9GioW7sc C3t8YhY+T+mdTbWVAWmb8sdiR8HzIp3nKNot5wIHodaxAtUK3V/vHnLZ+/95SKAv QJk7Wr7V/Y8JUCB1c5ZNZdBZ1ZUOuairouUYjjhmVUiIXNjTCd4BP1Kfz0HBBhFa MrPU1rZLn8ZA8z3kFmAcxU7GX8i8jIVrA7gOaW/svZu1j0XINsmXixy0ZjLUpZmv BHVL -----END CERTIFICATE-----Generated at Thu Jul 31 00:57:26 2025 by rpki-client