$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa File: e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa (raw, json) Hash identifier: hRU0H+J3Jj9WQ6Opa1UNSwMIdeG8xeowjAyHefLpxD8= Subject key identifier: 19:E8:0C:FE:EB:2A:BE:93:D7:68:F3:22:17:FD:5F:69:AD:9B:F4:25 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5B22E150B09C8AD8DAA636C3C8DE6BB0B1A70B3B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa Signing time: Tue 29 Jul 2025 00:30:23 +0000 ROA not before: Tue 29 Jul 2025 00:30:23 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:22:e1:50:b0:9c:8a:d8:da:a6:36:c3:c8:de:6b:b0:b1:a7:0b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:30:23 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=031115b6132013cae08346817245f5f72150082bd0ce04e292acdd3929f8acef, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:90:75:2e:10:10:3c:13:e6:01:5c:b4:96: fe:5c:be:85:e0:19:c4:bc:66:a6:12:86:61:53:02: 50:a4:38:3a:ea:cd:c7:a4:50:5e:1d:f9:78:df:35: c6:be:a1:23:6d:f5:22:90:7e:e5:40:c3:ab:f4:9b: 47:df:75:7b:29:94:2c:58:26:1c:30:75:58:29:e3: 30:ca:b2:e8:50:65:6a:45:e7:2f:56:83:9c:df:7a: ed:a6:98:87:c8:e7:49:cd:c9:ea:9d:65:f5:a0:d9: b7:b2:87:68:76:7d:2c:71:7c:57:63:49:b0:21:03: 02:63:7c:71:a7:a5:69:ca:04:12:0e:86:35:96:6d: d1:2e:cd:95:90:6b:43:0a:ac:5a:63:52:95:6e:cf: a8:45:bf:f8:6d:d8:75:23:73:55:f6:17:63:b1:20: 44:4b:73:c9:bd:5f:f9:70:4e:60:95:05:58:c7:9b: 6a:fa:c9:84:90:d6:c7:06:f5:e4:c9:c8:94:01:63: 96:b2:e6:09:9a:0c:c2:f1:54:c7:91:a6:60:e9:57: 85:22:7d:92:9c:69:53:71:92:b3:71:e3:23:26:ed: 46:47:fe:cf:cc:c9:0b:b3:4a:7b:e9:0f:79:1f:0b: d6:91:af:14:2a:58:33:bf:6d:5b:99:0a:83:c3:d5: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E8:0C:FE:EB:2A:BE:93:D7:68:F3:22:17:FD:5F:69:AD:9B:F4:25 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c000::/40 Signature Algorithm: sha256WithRSAEncryption 14:63:01:1d:f5:e6:98:f1:d7:a0:7d:15:8c:5f:05:99:29:17: 60:3c:f5:97:99:56:b3:58:66:dc:a3:d6:23:7e:79:93:b9:bf: 83:97:b8:2c:35:c3:38:e6:72:18:d9:89:ba:96:25:41:b8:69: 26:a7:63:56:d2:62:bf:c6:2a:69:1d:b4:36:be:73:7f:9a:aa: 7b:28:f3:40:e3:f6:12:23:ea:1d:85:3e:17:d2:18:ec:00:0e: 29:4a:e8:d8:a8:6f:c1:08:81:d6:d1:dd:d9:30:8b:c2:05:23: 4e:4c:08:20:00:81:4f:35:df:ef:da:f8:14:83:da:3e:77:a7: 72:35:a7:b2:e4:d6:3c:2f:8a:77:b0:08:4a:f8:05:6b:44:d5: 82:aa:7e:ef:d6:4a:5e:4e:26:6b:87:a9:48:b5:88:4c:1c:48: 6b:3b:72:06:dd:82:cf:41:3d:c0:2d:0a:ca:d3:1a:50:ba:17: a1:67:30:5a:17:df:7b:92:4b:0b:e8:51:3a:30:c2:0d:6c:05: 6c:88:77:4b:c5:26:5a:55:c5:08:51:be:23:0f:0c:b2:9d:de: 52:6c:cf:5b:2a:fa:03:23:89:11:89:87:38:72:3d:6b:04:3a: df:fb:1a:31:67:64:b5:84:07:3c:6a:c9:ed:c5:07:a2:e7:32: b4:5c:00:07 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWyLhULCcitjapjbDyN5rsLGnCzswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMzAyM1oX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAMDMxMTE1YjYxMzIwMTNjYWUwODM0 NjgxNzI0NWY1ZjcyMTUwMDgyYmQwY2UwNGUyOTJhY2RkMzkyOWY4YWNlZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzGQdS4QEDwT5gFctJb+XL6F4BnE vGamEoZhUwJQpDg66s3HpFBeHfl43zXGvqEjbfUikH7lQMOr9JtH33V7KZQsWCYc MHVYKeMwyrLoUGVqRecvVoOc33rtppiHyOdJzcnqnWX1oNm3sododn0scXxXY0mw IQMCY3xxp6VpygQSDoY1lm3RLs2VkGtDCqxaY1KVbs+oRb/4bdh1I3NV9hdjsSBE S3PJvV/5cE5glQVYx5tq+smEkNbHBvXkyciUAWOWsuYJmgzC8VTHkaZg6VeFIn2S nGlTcZKzceMjJu1GR/7PzMkLs0p76Q95HwvWka8UKlgzv21bmQqDw9VuHQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBnoDP7rKr6T12jzIhf9X2mtm/QlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzZjQ2ZDdhLTFhNjUtNDgxYi04MGZmLWEzYTkwMzZhNWU4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYcAwDQYJKoZIhvcNAQELBQADggEBABRjAR315pjx16B9FYxf BZkpF2A89ZeZVrNYZtyj1iN+eZO5v4OXuCw1wzjmchjZibqWJUG4aSanY1bSYr/G KmkdtDa+c3+aqnso80Dj9hIj6h2FPhfSGOwADilK6Niob8EIgdbR3dkwi8IFI05M CCAAgU813+/a+BSD2j53p3I1p7Lk1jwvinewCEr4BWtE1YKqfu/WSl5OJmuHqUi1 iEwcSGs7cgbdgs9BPcAtCsrTGlC6F6FnMFoX33uSSwvoUTowwg1sBWyId0vFJlpV xQhRviMPDLKd3lJsz1sq+gMjiRGJhzhyPWsEOt/7GjFnZLWEBzxqye3FB6LnMrRc AAc= -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:22 2025 by rpki-client