$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5d5cb49-ec19-4933-b36e-be6e51b97a92.roa File: e5d5cb49-ec19-4933-b36e-be6e51b97a92.roa (raw, json) Hash identifier: D5RA5iGc60ugTxuGHfG7eUUwJshNvUqoU+jYPFvNNTA= Subject key identifier: D1:9B:12:68:F0:A6:16:27:97:5D:CF:3D:05:1E:EB:90:B4:70:BB:1E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0EB564E7966EA245C1A92BD5F10D7AE6D805BC00 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5d5cb49-ec19-4933-b36e-be6e51b97a92.roa Signing time: Tue 29 Jul 2025 00:01:22 +0000 ROA not before: Tue 29 Jul 2025 00:01:22 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b5:64:e7:96:6e:a2:45:c1:a9:2b:d5:f1:0d:7a:e6:d8:05:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:01:22 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=127056265962663698518905e23d697c9250108c1729b99e76139f7ff86980d9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:a0:ef:7e:59:9b:96:f6:69:23:a3:d6:e5: 20:2b:6d:1c:96:40:b5:2e:3b:69:cd:1a:37:8f:ab: 23:e1:7b:f6:ed:7a:1e:c8:e8:a9:18:6b:ff:ff:64: 4e:f3:87:e6:2b:ae:b7:25:2a:80:70:73:0f:37:93: 0b:ed:05:c3:d1:f5:a4:1e:96:94:3f:66:30:97:40: 58:73:8d:8c:f7:88:be:71:63:dd:ca:6a:68:e5:dd: 23:dd:ab:bd:df:ad:4a:0c:da:cb:ff:46:4d:c4:1d: b2:b7:6e:ed:e5:9d:13:4b:95:a1:d5:97:8f:2e:c0: 39:d9:fa:dc:bd:ff:51:2f:eb:10:28:cc:b3:cf:95: 1d:51:09:8e:bc:c2:36:93:e2:07:63:91:b5:28:f2: 75:4a:63:2a:7e:c1:46:46:f9:c3:bf:80:20:c8:c1: e0:f7:48:cb:d3:f7:2c:55:aa:d1:56:b1:31:c2:0f: b9:6f:61:8a:68:d7:9b:c7:9f:50:f5:27:ce:dc:65: a7:6c:27:a4:bf:8e:80:55:5f:73:fe:69:1f:ed:d7: 81:f0:43:4a:4d:a2:56:27:5f:2c:b9:c9:d1:f1:44: 41:3a:c7:d3:cb:e9:a3:0e:d7:6e:44:ce:37:6c:df: 85:44:4e:be:fc:3a:3d:fc:1e:fa:9d:df:97:0d:f6: f2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9B:12:68:F0:A6:16:27:97:5D:CF:3D:05:1E:EB:90:B4:70:BB:1E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5d5cb49-ec19-4933-b36e-be6e51b97a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:2840::/48 Signature Algorithm: sha256WithRSAEncryption 13:74:ba:2b:be:76:d7:72:36:db:ee:72:7d:e4:e2:d4:cb:77: 20:f6:46:50:e3:5b:68:8c:c1:73:60:4b:a6:8d:04:30:4a:19: 39:98:68:75:b0:d8:b0:d4:82:6d:5f:e6:c0:b0:2b:63:a0:05: 8b:b3:79:ce:8b:36:74:2c:16:cb:e9:da:57:e4:46:7e:e5:00: 20:bd:f0:72:25:bd:ac:2d:74:1a:73:42:26:f2:b8:4a:6a:81: 1e:3e:53:71:1d:12:00:f4:2c:c7:15:4e:7d:a7:b1:8b:ca:5f: 8b:3c:45:d2:a1:90:4e:13:f4:28:32:d6:6f:01:6c:46:16:35: f4:d5:29:1f:a9:87:9d:38:91:96:55:5d:13:5e:c4:b6:df:13: e2:be:c8:bb:07:46:0e:55:e4:2a:50:6d:80:77:cd:13:a0:66: eb:4b:f1:4f:9b:80:52:6a:d4:81:b2:83:f9:a2:6c:d6:fe:bf: be:3d:92:f5:02:bd:58:4b:a8:8e:af:8b:c9:5a:50:26:ea:a0: 32:63:55:30:60:eb:66:56:e6:9f:42:3a:59:69:4b:16:cc:05: 0d:90:fa:f2:ac:cf:44:68:20:48:84:91:bd:4a:0e:e8:0b:ea: 47:88:7a:30:5f:7e:53:91:9e:bf:84:48:96:a6:4b:6e:c9:1e: 83:9a:61:c8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDrVk55ZuokXBqSvV8Q165tgFvAAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMDEyMloX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAMTI3MDU2MjY1OTYyNjYzNjk4NTE4 OTA1ZTIzZDY5N2M5MjUwMTA4YzE3MjliOTllNzYxMzlmN2ZmODY5ODBkOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1ug735Zm5b2aSOj1uUgK20clkC1 LjtpzRo3j6sj4Xv27XoeyOipGGv//2RO84fmK663JSqAcHMPN5ML7QXD0fWkHpaU P2Ywl0BYc42M94i+cWPdympo5d0j3au9361KDNrL/0ZNxB2yt27t5Z0TS5Wh1ZeP LsA52frcvf9RL+sQKMyzz5UdUQmOvMI2k+IHY5G1KPJ1SmMqfsFGRvnDv4AgyMHg 90jL0/csVarRVrExwg+5b2GKaNebx59Q9SfO3GWnbCekv46AVV9z/mkf7deB8ENK TaJWJ18sucnR8URBOsfTy+mjDtduRM43bN+FRE6+/Do9/B76nd+XDfbySwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNGbEmjwphYnl13PPQUe65C0cLseMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1ZDVjYjQ5LWVjMTktNDkzMy1iMzZlLWJlNmU1MWI5N2E5Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOChAMA0GCSqGSIb3DQEBCwUAA4IBAQATdLorvnbXcjbb7nJ9 5OLUy3cg9kZQ41tojMFzYEumjQQwShk5mGh1sNiw1IJtX+bAsCtjoAWLs3nOizZ0 LBbL6dpX5EZ+5QAgvfByJb2sLXQac0Im8rhKaoEePlNxHRIA9CzHFU59p7GLyl+L PEXSoZBOE/QoMtZvAWxGFjX01SkfqYedOJGWVV0TXsS23xPivsi7B0YOVeQqUG2A d80ToGbrS/FPm4BSatSBsoP5omzW/r++PZL1Ar1YS6iOr4vJWlAm6qAyY1UwYOtm VuafQjpZaUsWzAUNkPryrM9EaCBIhJG9Sg7oC+pHiHowX35TkZ6/hEiWpktuyR6D mmHI -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:15 2025 by rpki-client