$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0d5a3f7-f05c-4273-9a5d-15cde0dce531.roa File: e0d5a3f7-f05c-4273-9a5d-15cde0dce531.roa (raw, json) Hash identifier: tbqR07tKrQzd8/nZwdtWzawYxtz0DVO5l6qTO0oVq0U= Subject key identifier: 5F:8B:82:BE:AC:5C:1C:48:06:E5:80:52:A1:DC:54:29:95:C6:9B:45 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 037B5129A065ACD38E924823120B031F850007C7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0d5a3f7-f05c-4273-9a5d-15cde0dce531.roa Signing time: Fri 15 Aug 2025 00:10:52 +0000 ROA not before: Fri 15 Aug 2025 00:10:52 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7b:51:29:a0:65:ac:d3:8e:92:48:23:12:0b:03:1f:85:00:07:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:10:52 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=273fef45ba2500e99d97fc1204a459ba0f138f5489125d8e07fb8c393ed50fa2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:d6:55:22:fe:08:a1:6d:1b:68:86:1d:ce: 44:b8:5b:bd:d1:95:66:b6:01:83:01:4f:b0:a0:02: 76:83:83:cd:63:44:ea:0e:3b:df:12:c1:8b:a0:ed: 8a:93:76:45:ad:6e:86:33:08:5c:15:ee:14:66:be: ec:bd:7d:63:4e:3c:bd:4e:2c:4c:8f:5e:3d:17:6f: a5:44:37:b2:d6:b1:8d:6d:82:9f:4f:19:a6:97:aa: 06:ac:4a:3f:dc:4a:bc:fc:ad:53:14:a3:8d:5a:ed: c9:83:4a:52:83:64:d6:6c:a8:27:d2:d3:ce:25:b7: 93:66:c5:2c:37:7d:c5:ec:86:c4:4e:41:38:12:2c: b5:37:fc:37:60:36:4f:e7:ef:96:4d:bc:45:67:69: 4a:1d:29:27:27:7c:65:ce:65:85:ce:d9:d1:49:ee: 0b:50:a8:7f:82:ff:04:d3:66:bc:da:7d:45:b3:35: 3c:d3:1a:98:a3:eb:1e:66:4f:ab:d5:b4:c8:a5:1a: 3f:83:8a:03:b7:8b:cc:47:3f:de:50:16:1f:d6:d4: 5c:b7:b5:0a:c3:02:46:90:ff:ad:e0:1e:ef:6a:2b: 96:2d:66:fc:25:88:18:58:67:55:e0:24:bd:7f:3d: 31:19:7a:d0:23:09:dc:08:86:64:0d:b3:53:f6:8f: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8B:82:BE:AC:5C:1C:48:06:E5:80:52:A1:DC:54:29:95:C6:9B:45 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0d5a3f7-f05c-4273-9a5d-15cde0dce531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:840::/46 Signature Algorithm: sha256WithRSAEncryption 87:ed:a6:18:4a:ba:d8:f1:10:39:81:aa:c6:29:0d:35:be:a9: 19:79:b3:b1:1f:80:66:23:4c:00:58:45:d9:67:ae:c2:25:d4: dd:72:fc:39:3c:fa:3d:3b:f3:0c:af:b1:55:01:2f:a8:9d:1a: 69:3c:6b:13:76:93:71:21:9d:9e:26:d6:59:6f:24:b2:b9:53: d8:0c:39:91:cb:79:c0:54:d7:0a:89:83:7d:94:30:58:63:8a: 11:f0:b6:ff:f3:6e:42:46:db:59:82:58:2c:9b:0b:b0:92:86: e4:8d:b3:c8:13:41:8a:51:1e:32:71:f7:8a:af:cb:8a:9d:9b: fa:f2:5a:1f:fa:b6:0b:9b:43:73:db:9a:6b:0b:d5:52:07:28: a2:f2:a4:b6:e4:f9:53:e3:6b:b4:dc:ba:95:a0:57:3f:f1:e6: 4d:05:06:a6:64:b6:fe:8b:05:50:51:03:f5:a3:40:83:5e:84: bf:4b:15:a3:c4:2b:d0:7c:95:87:fe:bf:34:41:53:a2:fd:35: f7:3f:06:18:29:1b:d1:60:d4:37:a0:d3:84:c5:26:44:9c:f1: 41:20:9c:0a:75:c7:fd:cb:94:1e:ad:ac:eb:ee:33:bb:5d:76: c9:15:ec:f6:3b:e5:04:60:63:22:60:fe:fc:9a:94:7a:22:ce: 41:34:64:d4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUA3tRKaBlrNOOkkgjEgsDH4UAB8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTA1MloX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNAMjczZmVmNDViYTI1MDBlOTlkOTdm YzEyMDRhNDU5YmEwZjEzOGY1NDg5MTI1ZDhlMDdmYjhjMzkzZWQ1MGZhMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9vWVSL+CKFtG2iGHc5EuFu90ZVm tgGDAU+woAJ2g4PNY0TqDjvfEsGLoO2Kk3ZFrW6GMwhcFe4UZr7svX1jTjy9TixM j149F2+lRDey1rGNbYKfTxmml6oGrEo/3Eq8/K1TFKONWu3Jg0pSg2TWbKgn0tPO JbeTZsUsN33F7IbETkE4Eiy1N/w3YDZP5++WTbxFZ2lKHSknJ3xlzmWFztnRSe4L UKh/gv8E02a82n1FszU80xqYo+seZk+r1bTIpRo/g4oDt4vMRz/eUBYf1tRct7UK wwJGkP+t4B7vaiuWLWb8JYgYWGdV4CS9fz0xGXrQIwncCIZkDbNT9o8owwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF+Lgr6sXBxIBuWAUqHcVCmVxptFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwZDVhM2Y3LWYwNWMtNDI3My05YTVkLTE1Y2RlMGRjZTUzMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8whAMA0GCSqGSIb3DQEBCwUAA4IBAQCH7aYYSrrY8RA5garG KQ01vqkZebOxH4BmI0wAWEXZZ67CJdTdcvw5PPo9O/MMr7FVAS+onRppPGsTdpNx IZ2eJtZZbySyuVPYDDmRy3nAVNcKiYN9lDBYY4oR8Lb/825CRttZglgsmwuwkobk jbPIE0GKUR4ycfeKr8uKnZv68lof+rYLm0Nz25prC9VSByii8qS25PlT42u03LqV oFc/8eZNBQamZLb+iwVQUQP1o0CDXoS/SxWjxCvQfJWH/r80QVOi/TX3PwYYKRvR YNQ3oNOExSZEnPFBIJwKdcf9y5Qerazr7jO7XXbJFez2O+UEYGMiYP78mpR6Is5B NGTU -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:08 2025 by rpki-client