$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e6aad24-fc90-4e21-97ec-c3ba61440554.roa File: 7e6aad24-fc90-4e21-97ec-c3ba61440554.roa (raw, json) Hash identifier: ah/n9kBdx9FXcjDIUtZHcK+gPuUwTODfco40VWIPrII= Subject key identifier: D7:EE:92:00:01:81:BA:1D:74:38:52:AA:EE:17:30:34:51:D5:9C:B6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 04C134DC6938E589F38D929CDDFFFB3EE3FC040B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e6aad24-fc90-4e21-97ec-c3ba61440554.roa Signing time: Mon 07 Jul 2025 15:11:14 +0000 ROA not before: Mon 07 Jul 2025 15:11:14 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c1:34:dc:69:38:e5:89:f3:8d:92:9c:dd:ff:fb:3e:e3:fc:04:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:11:14 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=d660ef4c6db201fffc07b00baa917112704ba8039ed4a8d5152bf0106dc8a0fd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:94:4f:f3:db:8d:01:f9:e3:1f:7a:47:05: d4:f4:e0:5f:2c:a1:a0:67:62:5d:5f:24:c8:66:5f: 4a:b3:d5:77:7d:ff:63:1f:9f:37:59:de:66:1d:09: da:1c:b7:9e:bb:67:a2:93:e6:17:65:1b:6e:2f:bd: f9:1b:a0:4c:c3:d5:09:84:5f:51:46:5b:27:0d:49: d0:68:39:c4:3b:4f:63:95:83:e3:f6:1b:17:fe:ef: 09:f9:51:12:8f:02:ea:2c:f4:5a:c9:52:a8:e6:7b: e2:2b:7e:49:03:1b:8d:a8:0e:da:e3:14:23:7d:75: ce:cd:f1:fc:b3:97:9b:e3:32:8c:e3:e1:83:a5:1e: cb:0e:c7:f9:7a:60:cb:7c:e5:34:eb:bf:e8:c4:62: 06:c1:e8:20:8e:eb:62:06:6b:b9:fd:4c:aa:30:7a: 64:21:61:65:d7:8e:dc:4b:be:f0:19:0b:a0:9b:4f: 09:b6:88:c9:18:b4:43:01:ed:06:0d:cd:e8:b4:5b: e1:7b:f0:52:75:50:5d:3d:fe:b9:14:dc:fd:40:3d: 3d:1e:af:c8:41:d3:69:3e:e0:ad:59:ad:4f:ca:ab: e3:9d:6b:dd:5a:72:fd:ea:da:1d:df:8e:cf:43:4b: cd:dc:67:cd:e4:b1:10:b7:7c:ab:91:88:29:74:e3: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EE:92:00:01:81:BA:1D:74:38:52:AA:EE:17:30:34:51:D5:9C:B6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e6aad24-fc90-4e21-97ec-c3ba61440554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:2800::/40 Signature Algorithm: sha256WithRSAEncryption 2d:0c:6e:1b:07:ac:55:a1:17:e1:11:47:23:97:e2:59:55:b5: a7:b0:c2:f8:d5:fe:96:3a:14:35:31:59:52:6a:c0:fc:3e:b9: c0:e4:05:dc:fc:cb:7c:df:08:3f:bd:1b:89:bc:54:2d:a7:be: 28:42:f5:92:de:87:7c:79:f2:20:ac:7c:fc:87:70:87:e7:a0: 66:c1:dc:7a:09:f8:ad:90:e8:3f:f1:36:0c:da:1e:51:ba:78: 41:c7:e5:68:37:c7:70:39:04:e8:23:e6:64:ae:6a:1e:4e:1e: 06:9b:d7:ea:09:3a:78:16:f8:13:e3:45:6e:d6:f0:62:75:10: fd:19:95:48:ca:8c:19:be:25:3e:a2:c1:96:df:11:8c:e2:9e: 3a:5e:42:e3:3b:6a:ca:f1:19:7c:f6:25:5a:95:d7:3d:53:4f: 04:c1:51:3c:af:db:d0:e3:7c:cb:79:90:76:6e:e3:58:c2:80: 8e:07:b8:34:32:2f:e7:eb:5e:93:88:53:42:ef:fd:43:6e:3f: 8c:0d:a9:9d:32:69:a8:ac:4f:be:8b:3a:67:ff:0a:ab:45:65: c5:c3:f6:65:d2:bb:e8:4d:4d:69:19:e4:b4:d5:99:e6:1e:23: cd:14:1a:47:b0:66:68:b5:87:e1:f5:cc:d8:38:3f:4f:a9:db: 2b:8e:36:1b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBME03Gk45YnzjZKc3f/7PuP8BAswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1MTExNFoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAZDY2MGVmNGM2ZGIyMDFmZmZjMDdi MDBiYWE5MTcxMTI3MDRiYTgwMzllZDRhOGQ1MTUyYmYwMTA2ZGM4YTBmZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoOUT/PbjQH54x96RwXU9OBfLKGg Z2JdXyTIZl9Ks9V3ff9jH583Wd5mHQnaHLeeu2eik+YXZRtuL735G6BMw9UJhF9R RlsnDUnQaDnEO09jlYPj9hsX/u8J+VESjwLqLPRayVKo5nviK35JAxuNqA7a4xQj fXXOzfH8s5eb4zKM4+GDpR7LDsf5emDLfOU067/oxGIGweggjutiBmu5/UyqMHpk IWFl147cS77wGQugm08JtojJGLRDAe0GDc3otFvhe/BSdVBdPf65FNz9QD09Hq/I QdNpPuCtWa1PyqvjnWvdWnL96tod347PQ0vN3GfN5LEQt3yrkYgpdOOx4QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNfukgABgboddDhSqu4XMDRR1Zy2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdlNmFhZDI0LWZjOTAtNGUyMS05N2VjLWMzYmE2MTQ0MDU1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/igwDQYJKoZIhvcNAQELBQADggEBAC0MbhsHrFWhF+ERRyOX 4llVtaewwvjV/pY6FDUxWVJqwPw+ucDkBdz8y3zfCD+9G4m8VC2nvihC9ZLeh3x5 8iCsfPyHcIfnoGbB3HoJ+K2Q6D/xNgzaHlG6eEHH5Wg3x3A5BOgj5mSuah5OHgab 1+oJOngW+BPjRW7W8GJ1EP0ZlUjKjBm+JT6iwZbfEYzinjpeQuM7asrxGXz2JVqV 1z1TTwTBUTyv29DjfMt5kHZu41jCgI4HuDQyL+frXpOIU0Lv/UNuP4wNqZ0yaais T76LOmf/CqtFZcXD9mXSu+hNTWkZ5LTVmeYeI80UGkewZmi1h+H1zNg4P0+p2yuO Nhs= -----END CERTIFICATE-----Generated at Thu Jul 31 01:04:09 2025 by rpki-client