$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa File: 652666fe-aad6-4cd8-8e35-91322c742337.roa (raw, json) Hash identifier: f/sLIuY/KA/wV1GOxXTl+wzrDUtk/jmchWIyHqWEOOg= Subject key identifier: 4D:51:C1:F3:30:A0:A7:B6:E6:33:8B:10:57:65:9B:21:54:84:15:A1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7CBB1AFC1A31C7C7BF448CD5CF8919A04CF213F5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa Signing time: Tue 29 Jul 2025 00:21:30 +0000 ROA not before: Tue 29 Jul 2025 00:21:30 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bb:1a:fc:1a:31:c7:c7:bf:44:8c:d5:cf:89:19:a0:4c:f2:13:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:21:30 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=4e165684a4bb98fa5fb358e128f66bd5a82c66266b6bd82484c02009782f4352, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:c6:5f:e7:2c:7b:64:28:00:ae:c5:80:20: 9c:44:e7:e1:43:ef:a7:f9:89:32:c1:6e:91:a6:6a: c8:45:20:c0:88:d2:ab:46:e8:b7:22:d4:d4:f6:8c: 7e:f4:83:0e:1f:5c:16:3f:64:81:65:af:8a:e6:cf: 06:2a:43:e4:62:b4:7d:dd:10:b1:ec:fb:c9:0d:e8: 72:d1:fd:a8:4c:76:fa:c0:59:91:8e:72:11:84:9b: 13:c4:ee:d0:88:3c:98:87:a8:4a:15:0d:8f:5c:9d: 6c:33:30:4c:17:a5:76:29:b3:92:a2:db:82:c6:c4: da:06:0a:8d:d5:b7:e5:1b:b9:66:3f:12:3d:6e:6e: 41:d8:df:89:c7:4e:b5:5a:7d:2f:92:8e:a1:35:44: 2f:24:60:87:38:21:a4:89:23:25:a0:df:71:93:5b: 11:8e:07:ff:9c:78:a0:d6:16:44:99:29:b6:ee:0f: c7:6e:d9:4d:fa:b9:42:e6:8c:21:ae:ca:af:41:6a: a8:3a:6b:e5:f5:17:ae:4b:f1:0b:82:2e:c8:8b:3f: 87:69:45:7c:58:f1:c6:42:a3:ee:24:12:18:ba:af: 1c:7f:e0:f8:27:78:b1:25:7f:03:32:5e:10:c8:c9: 73:ff:a0:60:f1:0d:76:eb:f2:51:c6:cb:ad:63:55: 24:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:51:C1:F3:30:A0:A7:B6:E6:33:8B:10:57:65:9B:21:54:84:15:A1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9000::/40 Signature Algorithm: sha256WithRSAEncryption ab:3e:0d:0d:10:ae:e9:79:ed:14:55:02:17:68:09:84:47:97: c5:9c:99:b4:fd:3d:cd:d9:c4:02:3e:f5:21:a1:ec:81:cf:76: 1f:27:a9:4c:0c:fc:c5:09:65:f2:38:06:0f:10:40:2c:0c:fa: 83:81:56:b7:08:84:a8:27:5e:a3:51:13:ef:ca:30:6c:57:51: a4:0e:87:4f:f0:1e:3d:1b:f6:ad:b4:cf:85:9e:c1:a1:a9:e3: 2c:9e:87:71:52:9a:3f:b8:d1:8a:dc:bc:50:a5:e1:7c:ac:0a: 95:d1:9a:97:9a:48:9e:17:4b:8c:a0:5a:b2:54:5f:5c:4e:8a: 75:0d:c6:7e:e9:ec:84:f3:61:51:e5:78:fe:99:4f:23:4d:46: 28:55:73:ae:a1:d6:d4:f9:e9:ac:9c:88:ba:9e:c6:20:1a:cb: e4:cf:df:e2:1b:2b:4c:6e:25:d6:8a:2d:70:e1:36:1e:0e:c9: a6:af:fc:33:23:23:b8:31:e3:61:cd:52:89:bd:b6:c2:ca:d8: 36:3a:33:9d:c8:d3:9f:1b:60:16:54:4b:7d:69:a0:b2:55:cd: 05:f0:9b:e6:64:d8:13:38:0e:1c:cc:c6:d2:86:e1:c7:d6:e1: d5:0b:22:ab:ee:3d:f3:12:23:16:3f:c3:36:91:0a:23:d8:44: 70:4d:11:77 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfLsa/Boxx8e/RIzVz4kZoEzyE/UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMjEzMFoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNANGUxNjU2ODRhNGJiOThmYTVmYjM1 OGUxMjhmNjZiZDVhODJjNjYyNjZiNmJkODI0ODRjMDIwMDk3ODJmNDM1MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDTGX+cse2QoAK7FgCCcROfhQ++n +YkywW6RpmrIRSDAiNKrRui3ItTU9ox+9IMOH1wWP2SBZa+K5s8GKkPkYrR93RCx 7PvJDehy0f2oTHb6wFmRjnIRhJsTxO7QiDyYh6hKFQ2PXJ1sMzBMF6V2KbOSotuC xsTaBgqN1bflG7lmPxI9bm5B2N+Jx061Wn0vko6hNUQvJGCHOCGkiSMloN9xk1sR jgf/nHig1hZEmSm27g/HbtlN+rlC5owhrsqvQWqoOmvl9ReuS/ELgi7Iiz+HaUV8 WPHGQqPuJBIYuq8cf+D4J3ixJX8DMl4QyMlz/6Bg8Q126/JRxsutY1UkqQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE1RwfMwoKe25jOLEFdlmyFUhBWhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY1MjY2NmZlLWFhZDYtNGNkOC04ZTM1LTkxMzIyYzc0MjMzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/5AwDQYJKoZIhvcNAQELBQADggEBAKs+DQ0Qrul57RRVAhdo CYRHl8WcmbT9Pc3ZxAI+9SGh7IHPdh8nqUwM/MUJZfI4Bg8QQCwM+oOBVrcIhKgn XqNRE+/KMGxXUaQOh0/wHj0b9q20z4WewaGp4yyeh3FSmj+40YrcvFCl4XysCpXR mpeaSJ4XS4ygWrJUX1xOinUNxn7p7ITzYVHleP6ZTyNNRihVc66h1tT56ayciLqe xiAay+TP3+IbK0xuJdaKLXDhNh4Oyaav/DMjI7gx42HNUom9tsLK2DY6M53I058b YBZUS31poLJVzQXwm+Zk2BM4DhzMxtKG4cfW4dULIqvuPfMSIxY/wzaRCiPYRHBN EXc= -----END CERTIFICATE-----Generated at Thu Jul 31 01:04:08 2025 by rpki-client