$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f22e1b8-adb1-42d2-8c89-7ceb3d7cecb8.roa File: 8f22e1b8-adb1-42d2-8c89-7ceb3d7cecb8.roa (raw, json) Hash identifier: r4oHQJghNZtm/MK04TT4vbSuFg4/08SXdPtTqQtyTR4= Subject key identifier: 91:0F:91:5E:55:96:62:5D:42:D0:F9:78:C6:CE:34:6D:2E:AA:03:FA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 08C741CC4839E655BD8BDB7AD681F163836FF2AA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f22e1b8-adb1-42d2-8c89-7ceb3d7cecb8.roa Signing time: Tue 08 Jul 2025 00:00:11 +0000 ROA not before: Tue 08 Jul 2025 00:00:11 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c7:41:cc:48:39:e6:55:bd:8b:db:7a:d6:81:f1:63:83:6f:f2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 8 00:00:11 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=c33b4d7ba81f28b1543d09559528b9180c7d33f7f3a1c3521f53705ae0bc66d3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:b8:f4:73:23:05:dc:60:11:0a:62:84:b4: 83:85:e1:4c:32:05:92:0f:37:45:43:92:2d:a4:a1: 07:9b:f0:0d:5d:93:f9:36:02:98:57:43:48:05:97: 4c:87:84:67:e1:90:f5:53:93:77:f3:61:02:db:8c: eb:af:0a:94:eb:c0:48:0d:98:8d:15:54:05:7d:9f: cc:ff:10:7b:77:ab:96:42:04:1b:5e:9b:cd:6b:c7: 3e:c3:62:f1:8e:c8:af:51:76:52:e7:8e:71:f7:cb: 23:81:22:7e:60:a3:b7:b6:14:98:1f:05:05:26:47: 17:05:fe:f0:4a:4c:c2:8f:af:0b:6e:03:bb:c5:ff: 83:69:ac:38:cb:dd:4b:dd:c3:7f:00:b2:a4:b1:35: c3:89:bb:5c:4b:83:d8:ee:f3:fe:94:89:2d:2b:44: 89:c3:78:27:53:2d:9c:c9:8a:a8:30:ed:57:6d:b4: ec:81:67:6f:34:ca:d2:57:79:66:58:2f:d2:d6:31: d1:fe:b0:2a:ba:62:07:8a:0c:52:66:26:a5:cf:d7: 07:e1:17:ba:17:2d:3f:34:d3:50:da:10:14:bf:40: 31:5f:d0:83:30:9e:a0:1f:66:ac:2e:98:62:e5:f4: bb:4c:ce:79:ac:f7:d1:60:c6:d6:cb:c0:c5:a1:f2: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0F:91:5E:55:96:62:5D:42:D0:F9:78:C6:CE:34:6D:2E:AA:03:FA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f22e1b8-adb1-42d2-8c89-7ceb3d7cecb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:9000::/40 Signature Algorithm: sha256WithRSAEncryption 46:92:32:42:b7:81:fe:58:e7:8f:86:04:5b:2d:b4:29:52:47: 89:a0:5f:8e:4e:9a:ff:61:ac:a3:11:07:9d:0c:86:35:e9:10: 33:af:19:ff:b7:3d:cd:64:6c:33:02:fd:77:22:a7:32:6d:33: 99:26:79:89:69:d1:1c:10:6b:9e:91:23:d7:47:cf:c2:63:0f: 9b:34:22:cf:dc:77:43:06:0c:b7:3f:78:bc:d1:06:d8:89:46: ae:5f:cc:22:fe:96:ba:d7:18:6a:d8:6c:0d:09:33:46:ae:13: 92:57:1e:1e:09:74:a9:b6:8a:e6:85:f0:25:f3:10:c3:5d:0d: 5a:3c:dd:52:1d:7f:db:c3:69:2d:fe:47:e1:45:69:9f:c2:61: 89:ab:16:d6:32:2c:cd:69:32:be:91:17:f1:11:5e:ec:18:3a: 3e:0a:70:2e:d4:23:c5:ab:4a:00:41:30:86:72:05:a7:af:ec: 0e:5f:91:58:e6:b6:70:4f:e6:83:be:af:60:59:d3:2d:d3:80: c6:36:44:b8:55:51:d2:ab:55:15:45:e3:c7:27:dc:12:9e:37: 63:c0:c9:6e:4c:ea:45:8d:22:f4:8b:0e:ad:04:3f:1f:59:d9: fb:1e:5f:07:b0:ca:29:5b:0e:62:6d:4a:38:b6:68:5d:01:2a: f5:57:5d:c4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCMdBzEg55lW9i9t61oHxY4Nv8qowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwODAwMDAxMVoX DTI1MDgxMjIzNTk1OVowejFJMEcGA1UEBRNAYzMzYjRkN2JhODFmMjhiMTU0M2Qw OTU1OTUyOGI5MTgwYzdkMzNmN2YzYTFjMzUyMWY1MzcwNWFlMGJjNjZkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEW49HMjBdxgEQpihLSDheFMMgWS DzdFQ5ItpKEHm/ANXZP5NgKYV0NIBZdMh4Rn4ZD1U5N382EC24zrrwqU68BIDZiN FVQFfZ/M/xB7d6uWQgQbXpvNa8c+w2LxjsivUXZS545x98sjgSJ+YKO3thSYHwUF JkcXBf7wSkzCj68LbgO7xf+Daaw4y91L3cN/ALKksTXDibtcS4PY7vP+lIktK0SJ w3gnUy2cyYqoMO1XbbTsgWdvNMrSV3lmWC/S1jHR/rAqumIHigxSZialz9cH4Re6 Fy0/NNNQ2hAUv0AxX9CDMJ6gH2asLphi5fS7TM55rPfRYMbWy8DFofJEbwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJEPkV5VlmJdQtD5eMbONG0uqgP6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhmMjJlMWI4LWFkYjEtNDJkMi04Yzg5LTdjZWIzZDdjZWNiOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaJAwDQYJKoZIhvcNAQELBQADggEBAEaSMkK3gf5Y54+GBFst tClSR4mgX45Omv9hrKMRB50MhjXpEDOvGf+3Pc1kbDMC/XcipzJtM5kmeYlp0RwQ a56RI9dHz8JjD5s0Is/cd0MGDLc/eLzRBtiJRq5fzCL+lrrXGGrYbA0JM0auE5JX Hh4JdKm2iuaF8CXzEMNdDVo83VIdf9vDaS3+R+FFaZ/CYYmrFtYyLM1pMr6RF/ER XuwYOj4KcC7UI8WrSgBBMIZyBaev7A5fkVjmtnBP5oO+r2BZ0y3TgMY2RLhVUdKr VRVF48cn3BKeN2PAyW5M6kWNIvSLDq0EPx9Z2fseXwewyilbDmJtSji2aF0BKvVX XcQ= -----END CERTIFICATE-----Generated at Wed Jul 16 12:08:34 2025 by rpki-client