$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb256107-485a-42e4-8372-1aca6582970f.roa File: eb256107-485a-42e4-8372-1aca6582970f.roa (raw, json) Hash identifier: fXfSpotFP0JkjK8HBPH0SiRR9OfG1hm9qqaCNJNxNXA= Subject key identifier: D2:4B:BE:2B:91:11:C5:6A:7D:3E:35:42:63:E3:33:A8:C4:38:96:08 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E48F3F316C1C769201E03DDC36AF119265ED33E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb256107-485a-42e4-8372-1aca6582970f.roa Signing time: Mon 18 Aug 2025 15:00:44 +0000 ROA not before: Mon 18 Aug 2025 15:00:44 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daee::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:48:f3:f3:16:c1:c7:69:20:1e:03:dd:c3:6a:f1:19:26:5e:d3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 15:00:44 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=638ed2bb7a8df77b784ca25e00354855c7bca95940c3ec2608c176f6252187b7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:d2:cb:9d:5f:e2:e6:e0:89:b8:f8:d0:ea: 91:30:5e:7f:eb:cc:04:9c:e9:1c:16:c1:8c:fe:fd: 61:cd:3c:bf:45:42:ed:e3:fb:30:9a:c6:88:85:dc: f4:d4:12:09:99:87:90:e9:c8:c3:ba:dd:80:e9:25: 43:24:0a:ce:eb:02:25:71:65:bf:dd:b9:59:c8:65: 82:c6:60:13:b5:29:67:41:30:b9:48:7e:6f:85:8d: 66:2d:a6:19:52:5f:50:37:3d:e7:ae:52:47:83:05: 8b:71:59:47:b5:0b:c3:fb:20:bd:d9:fd:5a:54:a5: bc:4c:0c:e0:c0:3b:e7:89:9d:48:e4:3b:ae:37:fb: bd:11:54:66:0a:42:36:ea:b1:52:ea:bc:15:bf:ec: 58:91:01:7c:28:72:0d:92:37:54:91:b5:fb:2d:21: a0:c9:f7:ed:0c:32:88:24:36:93:ef:a4:1e:3b:27: 2a:c1:af:95:ad:9c:00:81:ea:4e:c5:31:28:6d:74: 7f:90:09:77:cf:de:0b:ff:e9:3a:d2:2e:d0:7d:bf: 81:db:a7:15:58:6f:a5:91:41:3e:a5:74:c8:a1:26: 19:fe:ac:f1:a7:9c:65:5e:47:dc:99:83:69:7d:1a: e8:5a:67:ca:c1:03:4d:ee:13:89:d3:fe:91:fc:3f: c3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4B:BE:2B:91:11:C5:6A:7D:3E:35:42:63:E3:33:A8:C4:38:96:08 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb256107-485a-42e4-8372-1aca6582970f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daee::/32 Signature Algorithm: sha256WithRSAEncryption 1e:64:33:24:2b:0d:ce:49:db:09:8c:33:43:d0:5b:49:b2:0e: ed:f9:4c:a7:62:e9:d9:f7:e4:a8:8d:12:bd:0a:76:da:e1:f4: 26:82:33:61:f9:de:a1:47:e5:32:fe:8e:ef:3b:78:2e:5b:04: 9f:1b:a0:70:da:b0:24:16:59:d1:e8:56:35:fe:b0:d6:03:ef: 08:d5:41:de:92:a5:2f:0c:7c:0c:84:72:de:27:45:d2:68:a3: ec:12:60:eb:c4:cc:39:77:a0:7a:df:56:b0:a0:b3:d5:f5:df: 2a:e4:44:24:e5:43:77:f0:c5:d3:b3:25:d7:1c:c3:4a:3a:be: 59:e6:fe:bb:47:4e:72:db:55:f6:f7:23:b5:2c:85:e2:1d:9b: 01:7b:46:ad:c2:1f:5c:81:be:6f:03:e0:9d:09:27:cb:ec:74: 65:f3:ad:89:f7:f6:35:95:36:a0:85:51:ba:0c:bf:3c:c2:49: 1b:35:2d:c7:c3:59:12:96:4b:d7:cb:d0:62:c7:c5:50:91:38: b1:d1:f4:3e:d3:79:a0:fa:c3:a4:ef:d1:3d:6c:ea:52:1d:1f: ec:a0:87:fc:8c:37:4d:a2:b4:3a:47:33:04:61:b0:92:d7:d6: 16:c5:34:a9:91:6e:97:13:d5:17:4a:94:21:09:67:87:0c:7d: 96:56:8a:75 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIULkjz8xbBx2kgHgPdw2rxGSZe0z4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE1MDA0NFoX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNANjM4ZWQyYmI3YThkZjc3Yjc4NGNh MjVlMDAzNTQ4NTVjN2JjYTk1OTQwYzNlYzI2MDhjMTc2ZjYyNTIxODdiNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokbSy51f4ubgibj40OqRMF5/68wE nOkcFsGM/v1hzTy/RULt4/swmsaIhdz01BIJmYeQ6cjDut2A6SVDJArO6wIlcWW/ 3blZyGWCxmATtSlnQTC5SH5vhY1mLaYZUl9QNz3nrlJHgwWLcVlHtQvD+yC92f1a VKW8TAzgwDvniZ1I5DuuN/u9EVRmCkI26rFS6rwVv+xYkQF8KHINkjdUkbX7LSGg yfftDDKIJDaT76QeOycqwa+VrZwAgepOxTEobXR/kAl3z94L/+k60i7Qfb+B26cV WG+lkUE+pXTIoSYZ/qzxp5xlXkfcmYNpfRroWmfKwQNN7hOJ0/6R/D/D8QIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFNJLviuREcVqfT41QmPjM6jEOJYIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ViMjU2MTA3LTQ4NWEtNDJlNC04MzcyLTFhY2E2NTgyOTcwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba7jANBgkqhkiG9w0BAQsFAAOCAQEAHmQzJCsNzknbCYwzQ9Bb SbIO7flMp2Lp2ffkqI0SvQp22uH0JoIzYfneoUflMv6O7zt4LlsEnxugcNqwJBZZ 0ehWNf6w1gPvCNVB3pKlLwx8DIRy3idF0mij7BJg68TMOXeget9WsKCz1fXfKuRE JOVDd/DF07Ml1xzDSjq+Web+u0dOcttV9vcjtSyF4h2bAXtGrcIfXIG+bwPgnQkn y+x0ZfOtiff2NZU2oIVRugy/PMJJGzUtx8NZEpZL18vQYsfFUJE4sdH0PtN5oPrD pO/RPWzqUh0f7KCH/Iw3TaK0OkczBGGwktfWFsU0qZFulxPVF0qUIQlnhwx9llaK dQ== -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:19 2025 by rpki-client