$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa File: cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa (raw, json) Hash identifier: 9y7tVTsjS8HtK+cGzukV2x6TwhsDEXqwxifoxGKY0G8= Subject key identifier: EC:DF:2A:25:1B:0E:7E:CE:8F:19:A4:1E:18:B6:C6:6A:A4:A5:3F:3B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 498D3345E778057EC5F84F87A39FE4C57A0FAF46 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa Signing time: Tue 29 Jul 2025 00:41:38 +0000 ROA not before: Tue 29 Jul 2025 00:41:38 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:8d:33:45:e7:78:05:7e:c5:f8:4f:87:a3:9f:e4:c5:7a:0f:af:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:41:38 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=8a519c39c619b9f46963d4cb647eb17a2df5a302d289a78eff528a72397bac20, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:15:bc:92:c0:f5:2a:23:a1:2a:43:a1:ec: 92:28:2e:6e:dd:63:f8:ca:4f:e9:ac:ef:83:f3:44: ff:de:c7:1f:08:c5:24:d8:78:2d:46:b9:93:f4:16: 98:94:ba:38:a5:f4:0b:00:c5:b9:57:9c:39:8f:1d: b1:cf:33:32:ba:83:58:44:02:a7:41:f3:b4:58:7a: 99:52:a7:ce:f8:63:e1:79:26:2f:33:2c:98:aa:c7: 59:2d:75:3f:6f:a2:ef:b3:6b:f4:83:4a:b2:7e:bc: e7:75:73:ea:77:ec:d9:1d:7e:dd:0a:a8:50:7d:8b: 93:0c:a9:c4:4b:8d:8e:c0:6e:90:ef:3f:cc:12:34: 7b:09:e7:28:e3:2b:46:07:b3:50:f8:39:56:2a:40: e0:05:11:d1:51:d6:e4:a7:b0:a1:1a:77:ba:cf:b5: ab:d2:40:ca:aa:a7:44:f4:db:f2:cf:47:23:fa:b0: 0f:44:b9:04:c1:46:f0:93:fe:ac:b6:10:e8:4e:7f: 10:7a:02:3c:e9:2f:f4:c9:3d:35:e2:ae:6e:56:b2: 6c:37:38:b5:0d:91:1e:47:d0:70:76:9b:88:d5:77: e7:bd:46:06:c2:28:74:b9:74:e1:52:5a:82:f2:73: f9:84:8a:06:40:c8:b2:81:9f:7b:6b:ce:50:fb:79: bc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DF:2A:25:1B:0E:7E:CE:8F:19:A4:1E:18:B6:C6:6A:A4:A5:3F:3B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:1000::/40 Signature Algorithm: sha256WithRSAEncryption 93:74:34:9b:17:4f:eb:5a:0c:59:3e:4c:f5:d8:2d:16:07:e3: 37:25:96:66:fc:ab:7f:29:f8:a8:a3:6b:7d:15:0f:45:d2:47: 4c:f0:61:b8:48:ff:d0:a7:5f:50:cb:bc:c9:f3:c5:47:3c:40: a3:31:fc:5e:6b:a1:bd:ea:e9:d3:2d:27:90:22:8d:0d:51:01: 0a:ef:b9:83:6a:d6:46:cf:27:66:87:0f:8b:4a:f2:05:b1:33: 34:31:3b:0e:58:4b:27:dd:a6:56:4c:a5:c6:d6:7e:bf:5b:ac: 25:46:d9:c2:17:8a:02:cc:bc:d9:46:75:6a:38:b4:8c:50:da: b2:7f:b6:40:78:14:a4:92:0a:d1:3d:60:8e:3b:1b:9f:95:c2: 0c:03:f8:4f:47:0b:80:9e:cb:7b:7e:13:e2:3d:c1:60:43:7f: 2d:02:c6:c9:66:98:c5:02:00:c1:ee:6c:bb:43:39:f4:13:b5: 99:39:59:8f:a0:9b:36:c3:46:ee:c4:b8:ae:86:e3:b1:a4:64: 9a:81:1c:dc:45:a2:c1:d0:18:93:09:e1:5e:23:63:d7:f5:b1: ca:f2:1e:a0:1a:98:82:d4:53:ff:6a:47:56:8c:57:47:4e:4a: d4:b7:0c:0b:31:64:ed:76:f0:48:3b:fd:a9:63:5c:50:e1:68: 38:14:ac:20 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSY0zRed4BX7F+E+Ho5/kxXoPr0YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwNDEzOFoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAOGE1MTljMzljNjE5YjlmNDY5NjNk NGNiNjQ3ZWIxN2EyZGY1YTMwMmQyODlhNzhlZmY1MjhhNzIzOTdiYWMyMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdgVvJLA9SojoSpDoeySKC5u3WP4 yk/prO+D80T/3scfCMUk2HgtRrmT9BaYlLo4pfQLAMW5V5w5jx2xzzMyuoNYRAKn QfO0WHqZUqfO+GPheSYvMyyYqsdZLXU/b6Lvs2v0g0qyfrzndXPqd+zZHX7dCqhQ fYuTDKnES42OwG6Q7z/MEjR7Ceco4ytGB7NQ+DlWKkDgBRHRUdbkp7ChGne6z7Wr 0kDKqqdE9Nvyz0cj+rAPRLkEwUbwk/6sthDoTn8QegI86S/0yT014q5uVrJsNzi1 DZEeR9BwdpuI1XfnvUYGwih0uXThUlqC8nP5hIoGQMiygZ97a85Q+3m8awIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOzfKiUbDn7OjxmkHhi2xmqkpT87MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NhZDAyNTNjLWU4ZWEtNGE3MC1hZjk3LWVmMzdlN2I5MTVlNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYRAwDQYJKoZIhvcNAQELBQADggEBAJN0NJsXT+taDFk+TPXY LRYH4zcllmb8q38p+Kija30VD0XSR0zwYbhI/9CnX1DLvMnzxUc8QKMx/F5rob3q 6dMtJ5AijQ1RAQrvuYNq1kbPJ2aHD4tK8gWxMzQxOw5YSyfdplZMpcbWfr9brCVG 2cIXigLMvNlGdWo4tIxQ2rJ/tkB4FKSSCtE9YI47G5+VwgwD+E9HC4Cey3t+E+I9 wWBDfy0CxslmmMUCAMHubLtDOfQTtZk5WY+gmzbDRu7EuK6G47GkZJqBHNxFosHQ GJMJ4V4jY9f1scryHqAamILUU/9qR1aMV0dOStS3DAsxZO128Eg7/aljXFDhaDgU rCA= -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:20 2025 by rpki-client