$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa File: c2c34d45-d139-4122-8407-d2263ceee098.roa (raw, json) Hash identifier: yTY+yLyJaIJ+7Q0XW3L87w18i5SwJo5ujezLrmXBOVE= Subject key identifier: AB:12:77:95:38:32:75:F4:2B:B4:AB:A2:DE:DD:B2:0E:E7:FC:98:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42F551A1157107C4994985059D732491B8536089 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa Signing time: Mon 07 Jul 2025 15:20:05 +0000 ROA not before: Mon 07 Jul 2025 15:20:05 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f5:51:a1:15:71:07:c4:99:49:85:05:9d:73:24:91:b8:53:60:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:20:05 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=052a353a72fdacee51fb8e4a037fb9a4dac7ad43cbd62a928d8b05eb333294ef, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:55:13:be:4b:fd:fb:ac:1b:34:40:4c:76: b4:cd:86:dd:77:1d:53:73:6a:a8:5c:ef:24:15:58: 2d:58:2b:24:f2:3d:28:b2:68:4e:8a:1b:f7:0e:28: d5:a3:92:66:4b:24:a6:04:63:11:d9:32:cc:d2:52: c2:c5:29:0d:3b:da:ff:67:5a:31:59:55:1f:56:dc: 8c:c9:6c:ec:2a:f2:98:75:3b:6e:78:d5:c9:79:50: a2:00:14:8d:0e:06:c3:bb:ad:81:4e:48:12:04:88: 98:d6:e8:b7:1d:23:cb:b5:46:d5:1b:1b:a3:d4:d3: c4:1d:ad:e0:67:f3:35:46:b1:37:6e:72:46:cd:39: 50:45:1a:98:58:b1:48:a1:13:39:3d:4e:9f:66:99: 77:05:43:c6:57:46:59:08:3a:f7:5d:d1:6e:0a:27: c7:9b:6e:74:07:57:f4:38:10:fe:2a:0e:11:9d:a9: 65:af:ce:4d:fa:8c:57:4f:5d:26:7a:c5:d9:f3:cd: df:12:e3:45:d4:13:df:43:23:aa:4a:05:fa:9b:8c: b0:63:49:cc:0f:20:30:e1:2b:6e:c6:b5:35:62:9b: 9b:2a:25:65:a8:7f:71:1e:85:4b:e0:32:8d:96:31: 83:99:38:46:27:21:e2:55:67:13:5d:b2:c5:e9:3e: be:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:12:77:95:38:32:75:F4:2B:B4:AB:A2:DE:DD:B2:0E:E7:FC:98:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:e000::/40 Signature Algorithm: sha256WithRSAEncryption 93:ad:44:1f:e2:79:78:75:76:86:48:47:81:9c:c7:a7:eb:6b: e2:33:50:2f:5c:f5:dd:2e:22:9f:8f:59:c0:de:ea:ab:5e:ca: ce:ca:3a:48:a1:0c:c8:e8:c6:5c:60:8b:a1:87:27:80:89:68: 38:81:e8:ac:ce:51:6a:86:bf:93:c8:e5:7c:ba:c3:59:1a:a2: f1:b2:8a:41:16:b5:b5:85:73:d7:a9:0c:e1:15:ad:50:eb:5b: e1:7e:11:6f:c9:79:2c:99:cc:b5:37:d6:41:62:02:85:24:3f: 3a:ef:5d:94:0d:d3:45:83:77:ec:9a:4d:a7:52:40:c1:f3:f0: ea:86:91:8f:69:90:0e:ae:09:37:9f:94:53:05:6b:07:f9:5d: 39:42:e9:fb:f7:6a:14:29:fc:01:d5:89:8a:ed:85:eb:1b:fd: a3:1c:e0:86:ea:eb:1a:10:04:1b:1d:36:66:80:e1:5c:a0:78: df:fc:17:5d:4b:54:af:8d:f3:5a:35:17:a4:ba:f3:1b:1d:c4: ea:de:44:96:72:3c:47:92:a8:71:95:fd:49:2c:c4:64:ff:c3: 34:d1:e9:6f:71:c0:6b:54:35:a5:8a:e5:78:31:3f:16:be:9b: 76:1f:e9:f6:30:f1:c0:a2:fa:9d:05:b6:a9:45:12:f7:fd:e6: 21:49:b5:54 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQvVRoRVxB8SZSYUFnXMkkbhTYIkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1MjAwNVoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAMDUyYTM1M2E3MmZkYWNlZTUxZmI4 ZTRhMDM3ZmI5YTRkYWM3YWQ0M2NiZDYyYTkyOGQ4YjA1ZWIzMzMyOTRlZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquxVE75L/fusGzRATHa0zYbddx1T c2qoXO8kFVgtWCsk8j0osmhOihv3DijVo5JmSySmBGMR2TLM0lLCxSkNO9r/Z1ox WVUfVtyMyWzsKvKYdTtueNXJeVCiABSNDgbDu62BTkgSBIiY1ui3HSPLtUbVGxuj 1NPEHa3gZ/M1RrE3bnJGzTlQRRqYWLFIoRM5PU6fZpl3BUPGV0ZZCDr3XdFuCifH m250B1f0OBD+Kg4Rnallr85N+oxXT10mesXZ883fEuNF1BPfQyOqSgX6m4ywY0nM DyAw4StuxrU1YpubKiVlqH9xHoVL4DKNljGDmThGJyHiVWcTXbLF6T6+/QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKsSd5U4MnX0K7Srot7dsg7n/JgBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyYzM0ZDQ1LWQxMzktNDEyMi04NDA3LWQyMjYzY2VlZTA5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMuAwDQYJKoZIhvcNAQELBQADggEBAJOtRB/ieXh1doZIR4Gc x6fra+IzUC9c9d0uIp+PWcDe6qteys7KOkihDMjoxlxgi6GHJ4CJaDiB6KzOUWqG v5PI5Xy6w1kaovGyikEWtbWFc9epDOEVrVDrW+F+EW/JeSyZzLU31kFiAoUkPzrv XZQN00WDd+yaTadSQMHz8OqGkY9pkA6uCTeflFMFawf5XTlC6fv3ahQp/AHViYrt hesb/aMc4Ibq6xoQBBsdNmaA4VygeN/8F11LVK+N81o1F6S68xsdxOreRJZyPEeS qHGV/UksxGT/wzTR6W9xwGtUNaWK5XgxPxa+m3Yf6fYw8cCi+p0FtqlFEvf95iFJ tVQ= -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:37 2025 by rpki-client