$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/442fee67-f3d9-4889-94d4-2a3b8bb5cfac.roa File: 442fee67-f3d9-4889-94d4-2a3b8bb5cfac.roa (raw, json) Hash identifier: 9KK4WyUdIogaim2mbAqz1UZ5ZNhPN/XnjV2gryI1Srw= Subject key identifier: 0E:71:70:20:40:41:F1:12:B6:BD:B7:6D:CF:C1:52:D9:9F:9C:70:DF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C937F64876EBACF8D6F5A9B50E724290B0E4C05 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/442fee67-f3d9-4889-94d4-2a3b8bb5cfac.roa Signing time: Mon 07 Jul 2025 15:00:33 +0000 ROA not before: Mon 07 Jul 2025 15:00:33 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:93:7f:64:87:6e:ba:cf:8d:6f:5a:9b:50:e7:24:29:0b:0e:4c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:00:33 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=7d47360d6940f1932ada8b6b5af13a0bec3b00197b8890308526511c07a954b2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:76:63:04:15:bb:96:c6:b9:da:63:b8:e3:3a: ff:ec:45:a6:10:3d:32:e8:5b:34:cd:d2:5b:d9:bd: 15:72:0a:b5:d3:ca:75:ae:be:69:01:4f:4d:40:02: ee:5e:a4:65:17:2a:83:e1:ac:18:e9:a9:6f:e2:05: cf:11:7c:d6:08:8a:cc:db:20:3e:cc:4a:72:95:6f: d0:4f:1e:22:08:3c:57:f2:8d:23:5b:92:49:a7:67: 74:f7:a2:c8:80:d7:46:43:bf:a7:9e:75:dc:43:d1: 6b:a7:6c:d2:f7:db:1e:50:a5:22:93:43:d1:54:72: f7:a8:ac:aa:00:0c:59:b1:54:d7:2d:04:d3:f0:da: 19:bc:99:38:16:f6:a0:98:38:b2:51:c4:53:39:10: 7b:8f:c1:04:2a:59:70:61:06:25:30:89:9b:5f:56: ae:b2:83:64:26:1b:19:43:66:1f:ca:e8:52:97:1c: ae:1b:d2:0c:4f:34:f3:15:71:b9:20:7a:a6:d4:10: 54:f8:34:2e:91:c0:12:e6:8a:d0:bc:d7:47:69:ff: 17:e3:d5:1d:45:ec:50:10:f2:af:4b:cb:56:b6:67: d4:af:ce:67:8d:98:e9:e4:28:5f:4c:08:37:13:48: 91:70:48:58:7d:9a:3c:44:e5:25:08:e1:b1:ac:fa: c1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:71:70:20:40:41:F1:12:B6:BD:B7:6D:CF:C1:52:D9:9F:9C:70:DF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/442fee67-f3d9-4889-94d4-2a3b8bb5cfac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:8800::/40 Signature Algorithm: sha256WithRSAEncryption 2c:58:65:34:06:d6:2a:5a:8a:f5:82:5e:cd:90:9f:22:00:87: 64:1c:99:17:5e:9d:f4:31:8b:9f:b2:6e:57:e9:76:ed:10:96: 1f:06:60:2f:bc:6a:fa:a1:dc:50:5d:37:16:75:69:8c:e7:5d: d1:84:cc:a6:6b:cc:9d:1f:85:26:1d:51:64:f6:10:dd:10:0d: 26:fb:fc:b4:d4:6c:44:2c:d3:92:a4:2e:f4:0b:ff:e3:5b:cc: 47:2c:09:63:9f:f4:05:63:9e:f8:6b:02:14:c3:8c:05:f6:52: 06:db:7d:84:93:d3:e0:5c:2f:26:18:90:7f:95:f0:16:c7:a6: 9b:01:e0:e1:0f:87:46:91:4f:99:ad:3a:63:6e:db:a6:81:e6: 05:57:ae:c6:61:1f:6d:2a:69:d5:f2:93:40:69:c4:53:d2:7a: ec:cb:30:76:99:58:30:7c:fa:af:33:82:60:b6:21:39:e5:5e: ff:be:94:8d:8f:2a:6c:f2:03:90:a1:73:97:ce:8e:e8:dd:2c: e3:32:61:39:85:e7:e7:e0:a0:ec:f7:61:5b:ff:6c:4c:22:10: 1e:a6:3c:84:22:4c:3b:c3:cb:b2:f4:b7:21:61:0e:62:1a:ac: 19:ac:da:8d:4c:bc:09:de:dc:86:86:18:34:33:e8:bf:51:4c: ef:3f:21:48 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHJN/ZIduus+Nb1qbUOckKQsOTAUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1MDAzM1oX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAN2Q0NzM2MGQ2OTQwZjE5MzJhZGE4 YjZiNWFmMTNhMGJlYzNiMDAxOTdiODg5MDMwODUyNjUxMWMwN2E5NTRiMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3ZjBBW7lsa52mO44zr/7EWmED0y 6Fs0zdJb2b0Vcgq108p1rr5pAU9NQALuXqRlFyqD4awY6alv4gXPEXzWCIrM2yA+ zEpylW/QTx4iCDxX8o0jW5JJp2d096LIgNdGQ7+nnnXcQ9Frp2zS99seUKUik0PR VHL3qKyqAAxZsVTXLQTT8NoZvJk4FvagmDiyUcRTORB7j8EEKllwYQYlMImbX1au soNkJhsZQ2YfyuhSlxyuG9IMTzTzFXG5IHqm1BBU+DQukcAS5orQvNdHaf8X49Ud RexQEPKvS8tWtmfUr85njZjp5ChfTAg3E0iRcEhYfZo8ROUlCOGxrPrBMwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA5xcCBAQfEStr23bc/BUtmfnHDfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0MmZlZTY3LWYzZDktNDg4OS05NGQ0LTJhM2I4YmI1Y2ZhYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8YgwDQYJKoZIhvcNAQELBQADggEBACxYZTQG1ipaivWCXs2Q nyIAh2QcmRdenfQxi5+yblfpdu0Qlh8GYC+8avqh3FBdNxZ1aYznXdGEzKZrzJ0f hSYdUWT2EN0QDSb7/LTUbEQs05KkLvQL/+NbzEcsCWOf9AVjnvhrAhTDjAX2Ugbb fYST0+BcLyYYkH+V8BbHppsB4OEPh0aRT5mtOmNu26aB5gVXrsZhH20qadXyk0Bp xFPSeuzLMHaZWDB8+q8zgmC2ITnlXv++lI2PKmzyA5Chc5fOjujdLOMyYTmF5+fg oOz3YVv/bEwiEB6mPIQiTDvDy7L0tyFhDmIarBms2o1MvAne3IaGGDQz6L9RTO8/ IUg= -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:20 2025 by rpki-client