$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/558bbfc5-2ba2-4940-97a7-299b91f181e3.roa File: 558bbfc5-2ba2-4940-97a7-299b91f181e3.roa (raw, json) Hash identifier: 1g5ZZcN2mqM56LinJaVNN97Ui6KdEw7X4U1fX4uAl7c= Subject key identifier: C2:11:F5:D7:83:C8:0B:6D:44:80:E0:C5:0F:32:BE:7B:0F:EB:F4:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 21EC1F680D7570077BD46AB8BC491109F3C3D0E5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/558bbfc5-2ba2-4940-97a7-299b91f181e3.roa Signing time: Fri 11 Jul 2025 00:00:14 +0000 ROA not before: Fri 11 Jul 2025 00:00:14 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ec:1f:68:0d:75:70:07:7b:d4:6a:b8:bc:49:11:09:f3:c3:d0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 11 00:00:14 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=85a308423f30d0a71972b965737d3bbc68475ae10a5afc1968f883ea41c8d5a4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c7:bc:45:16:f1:27:e7:4e:ea:8f:87:8e:1f: e7:32:fe:99:81:9e:28:22:7e:5a:65:50:1b:32:70: 52:84:c9:d9:93:87:92:91:b0:bb:5d:a2:a1:aa:f7: 1e:d1:21:b9:05:af:a7:bf:d7:dd:35:07:b7:07:98: 9f:67:26:0c:2d:be:f8:5b:0a:bb:96:60:b4:e6:3e: f3:45:d2:20:56:95:49:18:16:04:af:bf:4c:ce:58: 1e:8e:2e:4c:9a:30:1a:d4:4d:5a:a9:46:35:12:02: c1:e3:eb:35:e6:8f:d1:e3:10:2a:2d:aa:5b:26:db: 7f:6f:a3:02:73:49:29:88:6f:4e:c6:a5:ca:e6:4c: 13:41:b1:9b:d9:58:f7:b4:38:ff:cc:83:a2:bf:39: 7b:23:3d:07:c4:cc:76:57:74:c0:1a:5d:b5:99:80: 2d:ca:78:af:c1:4a:28:ed:d3:7a:a3:a1:07:b0:b6: 7b:fb:04:ca:f2:7f:58:22:d6:11:c6:aa:c3:8c:01: 53:2f:3f:0b:c9:fc:93:5f:de:21:fe:7b:4a:ba:63: af:57:97:a7:a7:f4:24:ee:e8:3b:f0:f2:69:9b:32: 62:a6:3f:26:3c:e8:6a:83:7a:2d:39:9c:a7:ae:c2: ee:e0:0d:65:7e:51:64:83:59:8b:0a:be:d1:c6:c3: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:11:F5:D7:83:C8:0B:6D:44:80:E0:C5:0F:32:BE:7B:0F:EB:F4:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/558bbfc5-2ba2-4940-97a7-299b91f181e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:c000::/40 Signature Algorithm: sha256WithRSAEncryption 23:38:de:40:6c:05:4e:1b:61:e8:95:ed:12:8d:5c:ee:eb:22: 46:ac:03:a3:e6:f3:5b:9c:27:b2:3a:d1:bf:3a:32:d6:f3:7e: 45:87:de:64:19:e4:a3:46:a1:51:4b:17:79:ef:7f:22:5a:72: 17:bb:22:7d:d1:a0:73:95:a9:2e:86:14:6a:9a:6a:8a:bc:89: 26:d5:05:f8:0b:91:e2:9c:4d:5d:d7:de:27:6d:92:31:3a:a4: ae:e7:8d:bc:20:42:5b:f7:15:6e:1c:da:5f:ab:e8:72:06:84: d7:e8:1d:3d:f7:9f:55:70:f8:ae:6c:8d:f4:d9:9c:0b:ac:17: e2:c6:c5:03:c7:22:95:f8:35:03:9b:7e:42:7e:29:5f:3e:9d: 56:1c:0f:38:3a:a0:75:a5:c9:85:74:23:7b:4a:a2:5f:05:de: 79:89:1c:74:22:ad:ef:a4:6b:47:c7:12:49:8e:6d:bd:35:7e: 51:bb:b4:96:fc:6c:3d:b4:07:c5:26:aa:aa:75:f0:19:04:7a: c0:24:7f:72:cc:4d:6d:2f:3a:ff:53:3e:3a:dd:93:5a:a3:ee: 02:9f:1e:9f:b8:80:8b:53:f1:d8:63:2b:c0:51:ea:76:97:89: c6:cb:8e:b5:71:ee:ed:c0:c8:89:3a:09:ad:9b:9a:77:4d:bf: 02:3c:f2:30 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIewfaA11cAd71Gq4vEkRCfPD0OUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcxMTAwMDAxNFoX DTI1MDgxNTIzNTk1OVowejFJMEcGA1UEBRNAODVhMzA4NDIzZjMwZDBhNzE5NzJi OTY1NzM3ZDNiYmM2ODQ3NWFlMTBhNWFmYzE5NjhmODgzZWE0MWM4ZDVhNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ce8RRbxJ+dO6o+Hjh/nMv6ZgZ4o In5aZVAbMnBShMnZk4eSkbC7XaKhqvce0SG5Ba+nv9fdNQe3B5ifZyYMLb74Wwq7 lmC05j7zRdIgVpVJGBYEr79Mzlgeji5MmjAa1E1aqUY1EgLB4+s15o/R4xAqLapb Jtt/b6MCc0kpiG9OxqXK5kwTQbGb2Vj3tDj/zIOivzl7Iz0HxMx2V3TAGl21mYAt ynivwUoo7dN6o6EHsLZ7+wTK8n9YItYRxqrDjAFTLz8LyfyTX94h/ntKumOvV5en p/Qk7ug78PJpmzJipj8mPOhqg3otOZynrsLu4A1lflFkg1mLCr7RxsNObQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMIR9deDyAttRIDgxQ8yvnsP6/QUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1OGJiZmM1LTJiYTItNDk0MC05N2E3LTI5OWI5MWYxODFlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7cAwDQYJKoZIhvcNAQELBQADggEBACM43kBsBU4bYeiV7RKN XO7rIkasA6Pm81ucJ7I60b86MtbzfkWH3mQZ5KNGoVFLF3nvfyJache7In3RoHOV qS6GFGqaaoq8iSbVBfgLkeKcTV3X3idtkjE6pK7njbwgQlv3FW4c2l+r6HIGhNfo HT33n1Vw+K5sjfTZnAusF+LGxQPHIpX4NQObfkJ+KV8+nVYcDzg6oHWlyYV0I3tK ol8F3nmJHHQire+ka0fHEkmObb01flG7tJb8bD20B8Umqqp18BkEesAkf3LMTW0v Ov9TPjrdk1qj7gKfHp+4gItT8dhjK8BR6naXicbLjrVx7u3AyIk6Ca2bmndNvwI8 8jA= -----END CERTIFICATE-----Generated at Thu Jul 31 00:59:16 2025 by rpki-client