$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e69d97aa-b68a-4fc2-846c-38f589c4786e.roa File: e69d97aa-b68a-4fc2-846c-38f589c4786e.roa (raw, json) Hash identifier: YrkQpgbu5vdyfAHye8GOUtWBxkK3Pjr6KiU+iSiBuTA= Subject key identifier: 88:ED:53:D9:BE:19:B2:83:D0:4B:EA:D6:BB:4F:C1:F1:26:BF:45:89 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 47FA4077F5472CA2E013B2ADFE7253B9F667C6F5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e69d97aa-b68a-4fc2-846c-38f589c4786e.roa Signing time: Tue 29 Jul 2025 00:10:13 +0000 ROA not before: Tue 29 Jul 2025 00:10:13 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:7040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:fa:40:77:f5:47:2c:a2:e0:13:b2:ad:fe:72:53:b9:f6:67:c6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:10:13 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=f241fc5cf011ad92358afa94163040e1b771132f3dd41fb59cd481d39d90d19e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c0:6a:12:e2:f1:51:d7:9a:d5:65:4d:e3:96: d4:54:b1:4e:a9:af:3b:4d:ea:33:26:16:fe:ea:e4: 0d:3f:18:21:69:9a:f1:9a:be:93:38:9c:98:76:2f: 58:65:61:1e:43:df:8b:59:f8:d1:54:31:74:e6:02: 2f:be:46:b3:f8:d9:9d:7e:c4:a0:1b:8d:92:95:86: 65:c0:56:e3:ad:68:fa:1d:6b:50:c5:24:2d:4e:89: 8b:a0:42:b6:f7:59:2d:9c:ce:84:a8:fd:60:45:16: f2:2e:28:48:82:4f:22:fa:23:c4:1e:fe:46:27:8e: 58:a2:55:6a:f8:0e:b3:a8:f8:1e:ae:52:da:3b:4c: 73:3c:5e:42:26:22:ca:c0:7a:19:d3:ef:85:ad:97: 06:f2:e8:48:72:eb:99:63:3d:fd:33:e7:d8:8d:89: c0:cb:50:ca:b8:90:17:06:49:84:4d:ee:6d:7a:5a: 50:3e:c4:24:86:e8:e2:07:da:69:f9:12:39:1e:6d: ad:9d:ff:f9:64:ad:f4:b2:aa:60:fc:6e:cd:70:b8: cb:fc:a9:6b:3d:94:c3:91:74:fe:38:bb:ef:4a:dc: 9e:de:14:ab:72:56:63:ba:56:2e:38:95:1a:56:2d: de:19:8b:76:73:41:bc:95:f2:c5:c5:61:f2:fd:d1: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:ED:53:D9:BE:19:B2:83:D0:4B:EA:D6:BB:4F:C1:F1:26:BF:45:89 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e69d97aa-b68a-4fc2-846c-38f589c4786e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:7040::/48 Signature Algorithm: sha256WithRSAEncryption 8c:94:72:6b:f5:bf:7d:82:ee:29:10:d3:2d:60:ed:d4:4e:aa: 4c:7a:b6:ef:78:0f:0e:4a:53:4f:14:c9:54:8e:28:11:ca:01: 52:2c:aa:3c:73:d3:62:a9:19:84:b4:d4:b9:1d:8c:33:74:33: c9:0e:ae:98:62:4e:5a:98:01:e4:15:2a:cc:d0:7e:c8:5a:81: 29:f1:b3:ff:f3:2e:66:c2:1c:d3:1e:82:28:85:ce:41:6f:a0: c3:e2:1b:c9:18:ee:fd:ac:66:27:dc:11:4c:2c:27:b9:c4:1e: ab:5e:38:d0:4f:53:3a:a2:d6:59:1c:27:f4:76:04:34:98:8f: 35:be:09:ee:38:36:55:3a:ce:c6:b5:4b:7b:fb:7c:f1:bb:bc: 1e:ce:7d:dc:e5:39:1c:2b:67:e1:3c:75:ae:4f:3f:da:16:0c: ca:86:bd:5c:f2:70:05:bc:44:e5:7d:ec:df:e4:bc:da:8d:81: af:b5:d6:d8:78:da:cf:cf:e7:db:cb:c2:09:dc:17:50:ea:80: 99:f5:9c:f5:99:3d:0e:3c:24:c3:04:a3:22:00:9f:ab:f2:7c: c0:7c:85:41:5b:7e:e7:5d:dc:3e:86:34:e0:f2:79:2f:44:f4: e5:68:c0:15:2e:49:f7:bc:ad:8a:9e:3d:8f:34:87:ef:71:c0: 7c:0b:a0:a5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUR/pAd/VHLKLgE7Kt/nJTufZnxvUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMTAxM1oX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAZjI0MWZjNWNmMDExYWQ5MjM1OGFm YTk0MTYzMDQwZTFiNzcxMTMyZjNkZDQxZmI1OWNkNDgxZDM5ZDkwZDE5ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMBqEuLxUdea1WVN45bUVLFOqa87 TeozJhb+6uQNPxghaZrxmr6TOJyYdi9YZWEeQ9+LWfjRVDF05gIvvkaz+NmdfsSg G42SlYZlwFbjrWj6HWtQxSQtTomLoEK291ktnM6EqP1gRRbyLihIgk8i+iPEHv5G J45YolVq+A6zqPgerlLaO0xzPF5CJiLKwHoZ0++FrZcG8uhIcuuZYz39M+fYjYnA y1DKuJAXBkmETe5telpQPsQkhujiB9pp+RI5Hm2tnf/5ZK30sqpg/G7NcLjL/Klr PZTDkXT+OLvvStye3hSrclZjulYuOJUaVi3eGYt2c0G8lfLFxWHy/dFL6QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIjtU9m+GbKD0Evq1rtPwfEmv0WJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U2OWQ5N2FhLWI2OGEtNGZjMi04NDZjLTM4ZjU4OWM0Nzg2ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYXBAMA0GCSqGSIb3DQEBCwUAA4IBAQCMlHJr9b99gu4pENMt YO3UTqpMerbveA8OSlNPFMlUjigRygFSLKo8c9NiqRmEtNS5HYwzdDPJDq6YYk5a mAHkFSrM0H7IWoEp8bP/8y5mwhzTHoIohc5Bb6DD4hvJGO79rGYn3BFMLCe5xB6r XjjQT1M6otZZHCf0dgQ0mI81vgnuODZVOs7GtUt7+3zxu7wezn3c5TkcK2fhPHWu Tz/aFgzKhr1c8nAFvETlfezf5LzajYGvtdbYeNrPz+fby8IJ3BdQ6oCZ9Zz1mT0O PCTDBKMiAJ+r8nzAfIVBW37nXdw+hjTg8nkvRPTlaMAVLkn3vK2Knj2PNIfvccB8 C6Cl -----END CERTIFICATE-----Generated at Thu Jul 31 01:03:53 2025 by rpki-client