$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e09950bd-07ca-4e5c-bd3d-a17fcc36729c.roa File: e09950bd-07ca-4e5c-bd3d-a17fcc36729c.roa (raw, json) Hash identifier: //H6bn/kU9Zw2do3gSiBrb5nhmMTuOOOGJFHh8a734U= Subject key identifier: 5A:B0:33:E9:6E:89:7C:1C:49:5F:68:49:6A:83:40:AF:5E:08:3B:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 65222825A962616FE945278E5FA5C302597D0083 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e09950bd-07ca-4e5c-bd3d-a17fcc36729c.roa Signing time: Tue 29 Jul 2025 00:10:48 +0000 ROA not before: Tue 29 Jul 2025 00:10:48 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:22:28:25:a9:62:61:6f:e9:45:27:8e:5f:a5:c3:02:59:7d:00:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:10:48 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=907c4c662b3d317de13e466e50b1ae81c45988dc65d32aa1153bf3d302f57045, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:b0:e4:2e:60:9b:0d:97:5c:66:72:60:57: 37:66:1f:51:52:8a:71:cc:39:5a:04:6b:37:c3:c8: 08:cc:bf:03:77:f5:fc:b7:43:28:bc:40:4b:f7:cc: 07:96:6d:2f:70:ad:6d:b2:0f:7a:ea:eb:f5:5b:5e: ca:b4:4e:1f:d9:fa:79:ed:2d:b3:87:16:36:a1:e4: 8b:c9:74:58:d1:15:2f:b3:27:63:7d:e8:50:3f:e4: e9:68:f9:de:dd:91:48:b2:32:b1:8d:4d:af:93:64: 06:7d:bf:31:c4:c4:7a:a0:f8:bd:63:75:a4:1a:7c: d2:24:b7:d7:f3:4e:3b:59:0b:ec:e8:20:63:78:37: 37:a1:6e:d8:ec:60:1b:e3:6a:94:7b:26:88:f2:8d: ec:b0:8e:22:fa:56:f5:cf:f8:fe:74:c8:d4:59:38: e9:b9:11:bb:16:93:59:eb:dc:4d:b4:df:d6:c1:23: 72:02:9e:f3:bf:d7:6f:d0:78:e8:99:46:38:39:3a: c5:a8:f8:4b:ab:d0:a4:c2:14:cd:d8:e4:e1:44:5d: a7:fd:30:e7:f9:d9:eb:90:e8:5f:1e:a6:9c:a8:56: b7:18:c6:25:fb:6e:22:df:e8:ec:f4:fb:39:6e:6c: 23:25:4b:1d:e0:20:29:84:16:9a:fa:6a:f7:a6:23: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B0:33:E9:6E:89:7C:1C:49:5F:68:49:6A:83:40:AF:5E:08:3B:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e09950bd-07ca-4e5c-bd3d-a17fcc36729c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 9a:e3:ea:9a:6e:93:b5:ca:ef:6c:97:2d:d9:38:68:8b:77:3f: e4:cb:fa:6b:ed:22:7f:58:82:44:17:06:06:c8:ce:46:8f:75: d0:6a:14:8c:e5:31:bc:93:06:68:77:93:d9:dc:40:31:4e:ce: 8b:9e:3f:7a:74:9a:89:6e:9c:98:1d:1a:69:68:66:f0:7b:bd: 67:0d:a0:4d:88:1c:62:86:fb:a1:08:ed:de:8e:3c:6c:57:2d: 97:a0:aa:6d:14:5d:6f:02:bc:d6:db:a7:44:c4:91:47:10:d1: 3b:43:57:41:f1:96:10:4f:72:24:be:e8:45:eb:fb:c6:ec:b9: 0b:eb:51:a8:80:7f:09:9b:3c:18:1b:1c:a2:21:bb:a9:dd:7f: e2:a9:2b:aa:9e:41:52:78:ad:74:22:45:ce:c4:04:a2:9a:68: 1d:33:74:2b:c2:3a:a1:1c:c1:d4:6d:cc:f8:93:65:b4:91:83: a9:76:ca:a9:d7:b4:9f:2c:0f:ae:91:03:7f:68:8c:f9:c0:4a: 19:60:a5:ac:05:3e:be:a8:5b:cd:58:31:f9:1c:af:1a:70:37: b4:ab:cd:3a:5a:ea:59:ef:76:95:6b:25:61:5e:00:39:7d:5f: c6:e6:a2:a0:d1:84:49:e2:3d:e7:80:60:c4:1c:45:b4:54:44: cf:b3:ec:e9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZSIoJaliYW/pRSeOX6XDAll9AIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMTA0OFoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAOTA3YzRjNjYyYjNkMzE3ZGUxM2U0 NjZlNTBiMWFlODFjNDU5ODhkYzY1ZDMyYWExMTUzYmYzZDMwMmY1NzA0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ+w5C5gmw2XXGZyYFc3Zh9RUopx zDlaBGs3w8gIzL8Dd/X8t0MovEBL98wHlm0vcK1tsg966uv1W17KtE4f2fp57S2z hxY2oeSLyXRY0RUvsydjfehQP+TpaPne3ZFIsjKxjU2vk2QGfb8xxMR6oPi9Y3Wk GnzSJLfX8047WQvs6CBjeDc3oW7Y7GAb42qUeyaI8o3ssI4i+lb1z/j+dMjUWTjp uRG7FpNZ69xNtN/WwSNyAp7zv9dv0HjomUY4OTrFqPhLq9CkwhTN2OThRF2n/TDn +dnrkOhfHqacqFa3GMYl+24i3+js9Ps5bmwjJUsd4CAphBaa+mr3piODOwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFqwM+luiXwcSV9oSWqDQK9eCDv/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwOTk1MGJkLTA3Y2EtNGU1Yy1iZDNkLWExN2ZjYzM2NzI5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYfDAMA0GCSqGSIb3DQEBCwUAA4IBAQCa4+qabpO1yu9sly3Z OGiLdz/ky/pr7SJ/WIJEFwYGyM5Gj3XQahSM5TG8kwZod5PZ3EAxTs6Lnj96dJqJ bpyYHRppaGbwe71nDaBNiBxihvuhCO3ejjxsVy2XoKptFF1vArzW26dExJFHENE7 Q1dB8ZYQT3IkvuhF6/vG7LkL61GogH8JmzwYGxyiIbup3X/iqSuqnkFSeK10IkXO xASimmgdM3QrwjqhHMHUbcz4k2W0kYOpdsqp17SfLA+ukQN/aIz5wEoZYKWsBT6+ qFvNWDH5HK8acDe0q806WupZ73aVayVhXgA5fV/G5qKg0YRJ4j3ngGDEHEW0VETP s+zp -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:48 2025 by rpki-client