$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/858ae285-51c9-48c9-be09-17df643aafc4.roa File: 858ae285-51c9-48c9-be09-17df643aafc4.roa (raw, json) Hash identifier: r7crjq95PABfioCtdVyNr4mPKk39nhW1ykyCDTNSz6o= Subject key identifier: 13:41:96:AA:BB:50:A8:8C:BB:86:E5:C6:EE:D8:9A:15:C0:9E:43:73 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 794456A5B9E318532A0148369F6B296CA0D963B4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/858ae285-51c9-48c9-be09-17df643aafc4.roa Signing time: Tue 29 Jul 2025 00:41:43 +0000 ROA not before: Tue 29 Jul 2025 00:41:43 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:44:56:a5:b9:e3:18:53:2a:01:48:36:9f:6b:29:6c:a0:d9:63:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:41:43 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=902eedc4fb62da7258db80bbf69c93917ece6914a774deb70dff28930563624a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:ad:7a:3c:99:35:a2:91:9d:f3:0b:65:d5: 08:e5:94:b3:d5:43:b5:a6:1c:3b:37:e1:ba:ee:55: 52:0e:d0:f5:2d:56:87:08:e1:0f:50:32:f6:b4:f7: bb:a5:2f:1e:c9:90:2e:ac:69:cd:3c:7b:c9:c5:f9: 92:41:5d:e8:6d:3b:82:7f:1e:7b:30:56:59:63:e4: 34:2a:c8:ad:d5:82:a2:42:6a:0a:6c:69:76:a6:47: 83:33:63:f8:7e:43:4c:0c:2a:6b:42:c4:6b:4c:77: c6:93:7b:ac:dd:8c:53:1a:ac:b5:b0:b1:77:e2:07: 35:b7:75:17:46:07:ef:98:f9:0a:9b:a7:c5:6d:bb: a0:f9:23:e4:67:c2:d9:3d:81:cd:5a:a0:ab:e0:a0: 81:8c:3f:93:99:b7:dd:49:95:7d:5f:12:78:93:35: 2e:b5:6d:cf:8f:d5:20:c2:95:b8:b2:9a:92:0b:d4: 95:b9:46:00:40:c1:d8:3e:63:b3:96:3a:1a:8a:30: e3:25:1f:1e:e9:1c:e4:d1:dc:e9:69:fe:70:54:c7: e9:75:e4:81:aa:4e:c5:42:07:dc:9d:35:01:a4:c8: 8e:81:dd:2f:a5:e4:c3:0c:4e:97:cf:79:92:af:ff: 6b:f9:73:b8:c4:76:a9:7f:9a:37:4b:3f:dc:72:35: 6b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:41:96:AA:BB:50:A8:8C:BB:86:E5:C6:EE:D8:9A:15:C0:9E:43:73 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/858ae285-51c9-48c9-be09-17df643aafc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:6000::/40 Signature Algorithm: sha256WithRSAEncryption 75:0d:c1:c1:bd:dd:9c:89:1a:e1:02:82:92:93:f8:c7:af:dc: 81:37:a5:1d:b7:71:63:09:23:be:83:3e:9e:bf:31:63:3d:42: b7:2b:09:c9:8e:12:2a:9a:18:cb:a6:40:e8:07:c3:79:aa:98: 74:24:42:de:cf:2d:c7:c8:6e:6a:07:bf:fa:8d:d0:52:7d:fa: c8:d6:d7:1c:9a:6e:e1:75:9b:a6:91:2a:e7:03:14:64:71:23: d3:23:a3:a9:84:81:c9:a5:75:a2:3e:84:e8:7a:e4:9b:8b:31: b0:05:34:c6:0e:ee:18:e8:c7:4f:bc:d1:b5:4b:18:19:48:7a: 59:82:16:3a:5d:cc:8b:68:b7:69:a4:64:3a:77:85:61:18:d6: 98:01:2d:cd:81:14:e8:a1:7e:7d:ed:9d:90:fe:33:28:0c:52: bf:46:c6:16:5b:6e:65:53:27:11:02:2b:d9:b4:a8:0c:3e:1b: f3:28:3d:46:40:3e:39:0c:52:3b:42:0f:7d:9f:22:4e:c6:20: b3:e5:87:03:6d:a7:2b:6f:bf:05:e5:d7:b8:48:f2:37:da:f5: 96:2a:aa:76:c8:b2:a6:b1:42:b1:dc:53:9d:23:84:ad:c3:fd: ae:61:d6:b2:35:0f:43:c1:e0:a0:2f:af:83:3f:8f:27:aa:82: 7a:98:4c:56 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeURWpbnjGFMqAUg2n2spbKDZY7QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwNDE0M1oX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAOTAyZWVkYzRmYjYyZGE3MjU4ZGI4 MGJiZjY5YzkzOTE3ZWNlNjkxNGE3NzRkZWI3MGRmZjI4OTMwNTYzNjI0YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL+tejyZNaKRnfMLZdUI5ZSz1UO1 phw7N+G67lVSDtD1LVaHCOEPUDL2tPe7pS8eyZAurGnNPHvJxfmSQV3obTuCfx57 MFZZY+Q0Ksit1YKiQmoKbGl2pkeDM2P4fkNMDCprQsRrTHfGk3us3YxTGqy1sLF3 4gc1t3UXRgfvmPkKm6fFbbug+SPkZ8LZPYHNWqCr4KCBjD+TmbfdSZV9XxJ4kzUu tW3Pj9UgwpW4spqSC9SVuUYAQMHYPmOzljoaijDjJR8e6Rzk0dzpaf5wVMfpdeSB qk7FQgfcnTUBpMiOgd0vpeTDDE6Xz3mSr/9r+XO4xHapf5o3Sz/ccjVrdQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBNBlqq7UKiMu4blxu7YmhXAnkNzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg1OGFlMjg1LTUxYzktNDhjOS1iZTA5LTE3ZGY2NDNhYWZjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAGAwDQYJKoZIhvcNAQELBQADggEBAHUNwcG93ZyJGuECgpKT +Mev3IE3pR23cWMJI76DPp6/MWM9QrcrCcmOEiqaGMumQOgHw3mqmHQkQt7PLcfI bmoHv/qN0FJ9+sjW1xyabuF1m6aRKucDFGRxI9Mjo6mEgcmldaI+hOh65JuLMbAF NMYO7hjox0+80bVLGBlIelmCFjpdzItot2mkZDp3hWEY1pgBLc2BFOihfn3tnZD+ MygMUr9GxhZbbmVTJxECK9m0qAw+G/MoPUZAPjkMUjtCD32fIk7GILPlhwNtpytv vwXl17hI8jfa9ZYqqnbIsqaxQrHcU50jhK3D/a5h1rI1D0PB4KAvr4M/jyeqgnqY TFY= -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:12 2025 by rpki-client