$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2265854-ac1c-4e5a-a794-d4ce1e5833ad.roa File: b2265854-ac1c-4e5a-a794-d4ce1e5833ad.roa (raw, json) Hash identifier: CC1aOiiReiVDZk87j4Lt2NqxJeF9cJEQOfvNymVTppk= Subject key identifier: BA:C4:D0:D1:59:B5:37:10:95:58:94:1B:65:BD:36:F4:16:AE:12:B7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 423605BD3A6063E3872D474BD3C5422FFF140AA8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2265854-ac1c-4e5a-a794-d4ce1e5833ad.roa Signing time: Tue 29 Jul 2025 00:40:57 +0000 ROA not before: Tue 29 Jul 2025 00:40:57 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:36:05:bd:3a:60:63:e3:87:2d:47:4b:d3:c5:42:2f:ff:14:0a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:40:57 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=7ac3b68617f2e7f419df8e80ef5380ff26a2c5cf3340abf6f115da743a63f695, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:aa:3e:cf:16:b6:73:da:c4:1c:55:17:cd:b2: df:bb:c0:10:33:38:84:00:7c:93:51:80:4c:49:59: 96:08:b9:f7:26:3a:dc:ac:49:7f:97:2e:43:0c:28: 63:a1:bd:31:4b:94:62:b1:ea:dd:f7:ec:08:a4:c8: 85:0d:1e:09:5d:a6:58:f4:74:6f:a9:89:d7:01:67: 05:33:ef:d8:ee:2a:0f:9c:06:56:b3:7a:ca:5f:b2: 3a:ef:56:69:33:5f:18:ed:57:11:44:09:81:7f:18: 6f:ca:71:01:2e:c5:e0:d7:54:1f:9f:05:e1:73:3a: 63:02:c8:ac:69:37:ae:1e:95:86:d3:02:28:25:3a: 5d:44:42:f5:67:15:8f:a3:04:7d:ab:fc:cd:24:53: 76:84:95:51:64:1b:f1:e7:31:f9:74:80:54:17:ee: 89:5b:f0:0f:58:95:82:3d:28:75:a7:02:9b:77:59: cb:f1:eb:ef:f7:ef:eb:f8:ec:fb:8b:3a:73:75:85: ef:ba:ee:2a:34:47:70:11:29:7b:00:8a:f2:bd:63: 35:31:8c:aa:94:03:38:42:72:e2:f1:99:8b:b7:ba: 83:d5:e9:b0:bf:a1:a3:55:c4:c1:9c:89:6e:7c:59: 69:b8:1d:7d:e8:94:19:35:be:43:7b:05:b6:b5:ba: 3d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C4:D0:D1:59:B5:37:10:95:58:94:1B:65:BD:36:F4:16:AE:12:B7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2265854-ac1c-4e5a-a794-d4ce1e5833ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:8800::/40 Signature Algorithm: sha256WithRSAEncryption 26:f3:2a:a9:66:d0:9e:96:f0:21:cd:f1:c6:5f:92:cc:90:67: 3b:7f:e8:7e:66:7d:29:29:90:f6:57:89:06:b8:99:e3:a0:a2: f1:07:f5:45:5d:86:ee:be:f1:67:b2:ad:bf:2e:a1:9f:8a:77: 7f:d1:c6:9e:67:f1:3b:96:93:a5:d3:76:5c:75:35:20:b8:a7: 74:38:4c:2d:43:6b:2d:5a:33:ff:00:cf:59:e6:a1:4c:37:0b: 13:09:77:96:6c:77:09:18:6e:02:ad:25:b0:ba:5b:d5:ab:15: f6:d1:7c:85:67:31:f1:8a:8f:81:44:0f:6c:05:1f:37:ce:f4: cc:51:f5:44:88:0f:24:c5:c8:8d:de:d0:3d:4c:b5:9c:4a:8a: 5d:ee:06:12:82:29:53:62:2f:ba:3a:72:0d:fd:fb:f1:e8:ed: 75:91:71:52:66:cc:7f:e5:c2:72:ae:dd:be:c6:8a:c4:0c:be: 19:c7:48:a9:e9:76:82:84:ec:85:ff:6c:e5:0e:4e:b7:51:9f: f5:94:77:8a:bc:c8:e8:83:24:e4:91:b2:e5:bb:ca:81:66:03: b9:a7:11:6f:9e:2f:89:37:95:6d:83:13:55:2a:4d:b1:25:8a: 25:d8:d4:2d:e5:1d:18:f0:fc:ad:71:bc:24:c9:9d:63:47:41: f3:be:c2:ed -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQjYFvTpgY+OHLUdL08VCL/8UCqgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwNDA1N1oX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAN2FjM2I2ODYxN2YyZTdmNDE5ZGY4 ZTgwZWY1MzgwZmYyNmEyYzVjZjMzNDBhYmY2ZjExNWRhNzQzYTYzZjY5NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkao+zxa2c9rEHFUXzbLfu8AQMziE AHyTUYBMSVmWCLn3JjrcrEl/ly5DDChjob0xS5Riserd9+wIpMiFDR4JXaZY9HRv qYnXAWcFM+/Y7ioPnAZWs3rKX7I671ZpM18Y7VcRRAmBfxhvynEBLsXg11QfnwXh czpjAsisaTeuHpWG0wIoJTpdREL1ZxWPowR9q/zNJFN2hJVRZBvx5zH5dIBUF+6J W/APWJWCPSh1pwKbd1nL8evv9+/r+Oz7izpzdYXvuu4qNEdwESl7AIryvWM1MYyq lAM4QnLi8ZmLt7qD1emwv6GjVcTBnIlufFlpuB196JQZNb5DewW2tbo9hQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLrE0NFZtTcQlViUG2W9NvQWrhK3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IyMjY1ODU0LWFjMWMtNGU1YS1hNzk0LWQ0Y2UxZTU4MzNhZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOIgwDQYJKoZIhvcNAQELBQADggEBACbzKqlm0J6W8CHN8cZf ksyQZzt/6H5mfSkpkPZXiQa4meOgovEH9UVdhu6+8Weyrb8uoZ+Kd3/Rxp5n8TuW k6XTdlx1NSC4p3Q4TC1Day1aM/8Az1nmoUw3CxMJd5ZsdwkYbgKtJbC6W9WrFfbR fIVnMfGKj4FED2wFHzfO9MxR9USIDyTFyI3e0D1MtZxKil3uBhKCKVNiL7o6cg39 +/Ho7XWRcVJmzH/lwnKu3b7GisQMvhnHSKnpdoKE7IX/bOUOTrdRn/WUd4q8yOiD JOSRsuW7yoFmA7mnEW+eL4k3lW2DE1UqTbEliiXY1C3lHRjw/K1xvCTJnWNHQfO+ wu0= -----END CERTIFICATE-----Generated at Thu Jul 31 00:59:15 2025 by rpki-client