$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08139f8c-2c48-4f09-9917-9ff73fe712df.roa File: 08139f8c-2c48-4f09-9917-9ff73fe712df.roa (raw, json) Hash identifier: EuFOitUlc5vgmwtwE6Bo88E54geJ5Ayvr9bzQyIxLuM= Subject key identifier: A5:70:CD:2F:58:81:B0:2F:FE:8B:54:F1:81:7A:D2:87:EF:8B:BF:9D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 46891ABA3055600039751F6254916BE212ADE84E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08139f8c-2c48-4f09-9917-9ff73fe712df.roa Signing time: Wed 23 Jul 2025 00:01:23 +0000 ROA not before: Wed 23 Jul 2025 00:01:23 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:89:1a:ba:30:55:60:00:39:75:1f:62:54:91:6b:e2:12:ad:e8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 23 00:01:23 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=322c353c914da425a80800b8d7d3ef48578fcce0810d23b6ab49939b355f1d78, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e6:a2:c7:19:d3:9c:fe:f4:d9:cd:e5:ba:05: 49:d2:84:2f:67:40:10:b2:d7:47:39:1c:da:a5:32: 29:53:6c:fe:ae:34:80:94:0a:69:fd:e9:71:97:60: bd:52:b1:bb:50:af:43:2e:9a:32:74:11:73:3f:23: c8:16:b5:58:96:07:ab:26:b2:11:e6:6b:6e:78:2e: b2:b2:c9:f7:4d:6f:a0:8d:36:8b:a2:1f:1e:73:0f: 72:af:49:2a:32:13:66:b7:29:dc:7e:c8:20:70:07: 37:ac:51:7e:62:c9:66:df:e1:45:b1:bf:c7:de:4f: 16:2b:0c:db:89:52:48:3c:3a:5e:11:13:0c:c6:0e: bb:e3:e4:2f:34:a0:f7:62:16:ec:2f:bd:55:68:fb: 2d:7b:5b:37:47:02:36:6e:5d:31:cd:c6:de:22:e5: ea:d3:8c:5c:3c:79:ab:f8:62:d1:d1:3e:2c:26:0f: 1b:8c:12:6b:65:c8:5e:43:69:12:c4:ba:59:5b:00: 79:83:20:94:63:ff:54:c8:83:94:c4:53:dc:a6:e4: 92:ad:fb:65:a6:eb:9d:d3:b6:74:90:9c:7a:01:4e: ba:f4:a5:ff:1d:67:98:fd:37:36:65:25:c4:43:6d: 21:36:b1:63:c7:2d:e4:fb:78:f2:4a:5a:2f:a0:ef: cc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:70:CD:2F:58:81:B0:2F:FE:8B:54:F1:81:7A:D2:87:EF:8B:BF:9D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08139f8c-2c48-4f09-9917-9ff73fe712df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:2800::/40 Signature Algorithm: sha256WithRSAEncryption 12:e5:51:8f:24:92:67:96:4a:01:3c:d1:83:b9:b3:c5:41:86: c8:2a:dd:d7:52:5f:ab:d8:ce:f5:32:fc:d2:89:cf:61:f1:2e: 9d:b6:dc:29:e3:dc:8d:7c:d9:e7:0a:e8:1e:7e:e4:07:25:96: e3:b9:19:10:2b:b5:58:87:7a:1f:f1:ee:4d:96:ed:34:1f:34: 46:d8:30:8d:71:87:28:11:9c:71:b8:c0:98:f8:5c:8c:2b:11: 83:0f:fe:a8:d7:84:cb:51:5f:50:58:07:3d:af:55:9d:ee:c4: 1b:bc:43:af:cb:90:ef:18:18:51:8f:f2:7d:42:73:40:f1:b9: 26:53:32:d4:5f:86:da:82:bf:b1:b3:f8:f0:58:da:9c:0f:25: a4:c3:5d:9e:39:97:2e:9f:1c:e1:a4:9b:dd:09:87:64:39:57: 56:98:c8:ce:62:08:aa:2a:fb:da:46:79:4a:5c:2e:df:a5:60: 20:83:22:a0:41:15:63:47:fb:e0:16:29:1b:e2:30:ab:81:b4: fe:cb:94:3d:d4:f2:13:8d:c7:03:41:3a:ef:a8:72:c1:6f:af: 9a:2e:87:24:5d:49:bf:f6:88:12:57:04:6c:d5:c1:18:63:15: 15:16:77:97:be:be:da:b4:4b:55:c8:14:95:08:8c:fa:e8:47: df:c2:22:30 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURokaujBVYAA5dR9iVJFr4hKt6E4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMzAwMDEyM1oX DTI1MDgyNzIzNTk1OVowejFJMEcGA1UEBRNAMzIyYzM1M2M5MTRkYTQyNWE4MDgw MGI4ZDdkM2VmNDg1NzhmY2NlMDgxMGQyM2I2YWI0OTkzOWIzNTVmMWQ3ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+aixxnTnP702c3lugVJ0oQvZ0AQ stdHORzapTIpU2z+rjSAlApp/elxl2C9UrG7UK9DLpoydBFzPyPIFrVYlgerJrIR 5mtueC6yssn3TW+gjTaLoh8ecw9yr0kqMhNmtyncfsggcAc3rFF+Yslm3+FFsb/H 3k8WKwzbiVJIPDpeERMMxg674+QvNKD3YhbsL71VaPste1s3RwI2bl0xzcbeIuXq 04xcPHmr+GLR0T4sJg8bjBJrZcheQ2kSxLpZWwB5gyCUY/9UyIOUxFPcpuSSrftl puud07Z0kJx6AU669KX/HWeY/Tc2ZSXEQ20hNrFjxy3k+3jySlovoO/MmwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKVwzS9YgbAv/otU8YF60ofvi7+dMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4MTM5ZjhjLTJjNDgtNGYwOS05OTE3LTlmZjczZmU3MTJkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9CgwDQYJKoZIhvcNAQELBQADggEBABLlUY8kkmeWSgE80YO5 s8VBhsgq3ddSX6vYzvUy/NKJz2HxLp223Cnj3I182ecK6B5+5AclluO5GRArtViH eh/x7k2W7TQfNEbYMI1xhygRnHG4wJj4XIwrEYMP/qjXhMtRX1BYBz2vVZ3uxBu8 Q6/LkO8YGFGP8n1Cc0DxuSZTMtRfhtqCv7Gz+PBY2pwPJaTDXZ45ly6fHOGkm90J h2Q5V1aYyM5iCKoq+9pGeUpcLt+lYCCDIqBBFWNH++AWKRviMKuBtP7LlD3U8hON xwNBOu+ocsFvr5ouhyRdSb/2iBJXBGzVwRhjFRUWd5e+vtq0S1XIFJUIjProR9/C IjA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:16:59 2025 by rpki-client