$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa File: e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa (raw, json) Hash identifier: 2HNCMrVN1umi9JA6opl5KyQizLCC4mOgyBKrBuptNxo= Subject key identifier: D6:6F:29:9A:E2:F6:74:9C:75:50:F8:A5:62:61:C7:3E:A8:BD:7B:4D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 743182868C2A4B50219E9526B7052E4487F79CBF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa Signing time: Mon 28 Jul 2025 15:11:13 +0000 ROA not before: Mon 28 Jul 2025 15:11:13 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:31:82:86:8c:2a:4b:50:21:9e:95:26:b7:05:2e:44:87:f7:9c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 15:11:13 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=6561d63f53d722595298cf43cc850eec80d7831c60ff5200664cb1bfc0a70c45, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:10:11:30:4d:e3:23:d6:3f:e2:a2:2a:49:be: 59:97:7b:dd:31:96:6c:32:90:06:4c:d5:fa:21:23: da:b0:04:08:d5:64:cb:d9:b0:c4:3f:40:b0:92:27: e5:6f:c4:c3:4b:bc:76:17:b4:41:ba:77:f3:4a:22: b8:72:25:be:b4:20:a1:77:e3:0e:32:af:32:44:b5: 7b:36:d9:88:a0:41:0e:67:42:d8:21:3f:30:aa:a2: 02:24:19:d8:46:ef:e8:4e:de:91:5a:e4:f3:8f:dc: 2a:9c:f0:93:df:f9:96:9d:65:34:61:3f:aa:20:be: 77:87:1c:1a:73:c6:3b:75:28:d2:68:23:a9:49:17: a2:bb:55:46:a4:95:63:0f:35:22:72:93:dd:6a:50: 26:72:9d:c4:9a:89:f6:09:cb:80:13:cd:7c:c9:3b: 60:1b:17:0f:5a:56:a5:c0:bd:0e:51:d4:6c:71:20: a0:30:4f:79:52:14:e2:3b:f1:02:8e:22:83:5e:e6: 87:d0:11:c0:59:6a:c5:0e:07:ca:9a:7d:98:a0:b8: f6:c4:49:a8:c7:32:ce:56:66:bb:b3:79:5d:a7:50: c2:6e:99:1b:95:dc:73:9e:5b:b1:cb:65:c4:ff:cf: 34:0b:f8:f2:eb:3d:58:83:9b:00:31:10:00:55:d8: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6F:29:9A:E2:F6:74:9C:75:50:F8:A5:62:61:C7:3E:A8:BD:7B:4D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:b080::/48 Signature Algorithm: sha256WithRSAEncryption c7:bf:14:5a:70:03:97:60:c8:3e:eb:89:67:a6:73:b1:c1:4c: b4:1c:f1:8a:5a:af:33:d8:a7:95:7d:e9:87:5f:8d:a1:ab:71: 3b:d4:cc:8b:49:24:90:5f:de:f8:e0:50:20:ab:2a:95:8d:ac: db:a8:a1:b0:e5:9f:ab:58:f1:cb:ef:c4:0f:86:2a:be:4d:53: 8b:92:58:b6:4a:76:7e:75:ab:20:b0:34:1f:55:d1:33:d2:28: 3a:1c:20:89:e5:98:57:bc:86:2c:bd:70:7c:c4:9e:99:04:7b: 60:00:c6:fb:dd:6d:8e:68:56:1b:cf:f2:b5:b3:9c:9d:2b:04: 79:ff:82:78:cc:7b:1e:59:1b:a8:0c:f3:bf:2d:8a:9b:a0:50: ec:31:d2:fe:78:55:fa:df:ed:c7:03:30:dd:7c:e6:84:67:ad: 29:36:0b:00:c0:98:ce:2a:8d:52:a3:b7:fc:64:e0:63:27:fb: bb:3e:a1:07:77:cb:fb:4b:22:b0:3a:9c:e5:0e:35:da:b6:95: 5e:ab:05:01:66:8b:3c:43:cd:26:b0:af:38:ae:35:dd:62:31: 6e:d4:f7:ca:89:6f:2f:de:6a:63:5d:cb:b7:dd:26:e4:68:61: 30:d0:68:37:f2:08:a5:9a:83:8c:77:e9:6a:72:2f:4a:26:a5: cf:e3:03:4f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdDGChowqS1AhnpUmtwUuRIf3nL8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyODE1MTExM1oX DTI1MDkwMTIzNTk1OVowejFJMEcGA1UEBRNANjU2MWQ2M2Y1M2Q3MjI1OTUyOThj ZjQzY2M4NTBlZWM4MGQ3ODMxYzYwZmY1MjAwNjY0Y2IxYmZjMGE3MGM0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RARME3jI9Y/4qIqSb5Zl3vdMZZs MpAGTNX6ISPasAQI1WTL2bDEP0Cwkiflb8TDS7x2F7RBunfzSiK4ciW+tCChd+MO Mq8yRLV7NtmIoEEOZ0LYIT8wqqICJBnYRu/oTt6RWuTzj9wqnPCT3/mWnWU0YT+q IL53hxwac8Y7dSjSaCOpSReiu1VGpJVjDzUicpPdalAmcp3Emon2CcuAE818yTtg GxcPWlalwL0OUdRscSCgME95UhTiO/ECjiKDXuaH0BHAWWrFDgfKmn2YoLj2xEmo xzLOVma7s3ldp1DCbpkbldxznluxy2XE/880C/jy6z1Yg5sAMRAAVdhy0wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNZvKZri9nScdVD4pWJhxz6ovXtNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxYjBmNzM0LTRkZDUtNGQ2Yi1iNTYwLTIwNDAyNWExYjJlZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8rCAMA0GCSqGSIb3DQEBCwUAA4IBAQDHvxRacAOXYMg+64ln pnOxwUy0HPGKWq8z2KeVfemHX42hq3E71MyLSSSQX9744FAgqyqVjazbqKGw5Z+r WPHL78QPhiq+TVOLkli2SnZ+dasgsDQfVdEz0ig6HCCJ5ZhXvIYsvXB8xJ6ZBHtg AMb73W2OaFYbz/K1s5ydKwR5/4J4zHseWRuoDPO/LYqboFDsMdL+eFX63+3HAzDd fOaEZ60pNgsAwJjOKo1So7f8ZOBjJ/u7PqEHd8v7SyKwOpzlDjXatpVeqwUBZos8 Q80msK84rjXdYjFu1PfKiW8v3mpjXcu33SbkaGEw0Gg38gilmoOMd+lqci9KJqXP 4wNP -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:39 2025 by rpki-client