$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/177c65cf-4881-4258-a16c-faa036e312e2.roa File: 177c65cf-4881-4258-a16c-faa036e312e2.roa (raw, json) Hash identifier: /ijUfvMPFQmwvNg4/5IK0dW4yjcXZCIGrsas9lPw21k= Subject key identifier: 78:86:8E:8B:5E:64:6A:5C:07:2E:E3:0B:87:69:82:5D:F2:78:E9:D8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58A509FA72049518AD6DB3214C11BD45CBA0EA0F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/177c65cf-4881-4258-a16c-faa036e312e2.roa Signing time: Fri 01 Aug 2025 00:00:16 +0000 ROA not before: Fri 01 Aug 2025 00:00:16 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a5:09:fa:72:04:95:18:ad:6d:b3:21:4c:11:bd:45:cb:a0:ea:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:00:16 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=f7ac1514871717c25352be5af4729023d35ef372658d1c191a16a01af2518175, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:d4:82:b9:35:55:a4:31:4a:a9:89:5d:a6: 48:25:24:5f:f2:2c:62:28:1b:21:2e:75:f3:a9:b3: f4:b5:20:0f:23:ef:8b:e3:76:ab:31:aa:9f:5b:62: ec:52:1d:58:ed:eb:1a:55:5f:f0:68:0c:39:dc:ba: 12:10:a7:ee:c4:68:88:cb:9d:26:d4:99:ff:73:b0: a3:8e:90:24:92:82:19:46:58:d9:c6:58:de:9a:9f: f1:5f:21:8a:ff:b0:53:a2:9f:4e:b2:4e:0a:65:62: e9:63:e6:49:b8:ca:39:ab:85:63:55:d9:37:91:f5: 9d:b7:41:1a:f2:33:32:fd:32:2c:65:58:1d:ac:f6: 5c:03:10:5b:e3:e5:08:fd:18:38:74:e5:c2:7b:8f: 32:4d:66:f7:a1:cc:b2:d9:73:37:09:b8:3e:e6:47: c3:a3:a4:92:de:6f:e5:7f:b9:76:a8:d7:16:38:fb: 19:e6:2f:f4:11:80:7a:e1:9b:ef:8e:53:18:64:d3: 1c:49:40:bf:4c:26:6b:ba:c8:32:31:8c:e4:21:4c: f9:bd:b0:23:bf:a3:d4:2c:40:18:db:93:b2:a3:e2: 18:1e:cf:21:c2:15:3b:16:00:4a:51:21:ba:5b:fd: 50:fd:f3:1c:59:5f:a1:4b:26:7c:25:5a:64:5e:61: 3c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:86:8E:8B:5E:64:6A:5C:07:2E:E3:0B:87:69:82:5D:F2:78:E9:D8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/177c65cf-4881-4258-a16c-faa036e312e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:8000::/40 Signature Algorithm: sha256WithRSAEncryption 23:58:23:c3:64:e6:3f:65:a6:91:ba:c8:ab:1f:ba:08:67:8a: 61:ea:cc:ff:af:23:5f:4f:74:e7:3b:4b:31:90:3a:cd:c1:85: 4a:5e:8d:0e:a7:8b:da:36:e7:03:ea:da:48:15:24:03:68:80: 54:a6:51:93:56:17:42:8f:69:21:0b:8e:d0:fd:42:74:89:61: 92:f3:23:16:b3:96:82:9d:74:cd:f5:cb:20:9e:d1:dd:df:0d: 9c:1b:93:23:7a:d5:24:ef:53:c6:ec:c6:83:58:95:7e:0a:6d: 57:31:00:f0:21:21:43:cd:bb:a0:1a:c1:b6:da:7e:8d:c2:66: 6a:1c:18:29:ce:38:08:93:71:ec:27:ff:40:78:a2:8d:e9:8c: 96:f0:a9:0a:d8:46:7f:7e:fe:cb:e9:db:3e:4d:d3:0e:49:31: 60:46:ab:a8:32:37:c0:f4:72:08:76:9e:6f:1b:04:67:91:7c: cb:e3:78:63:d9:8e:5c:ac:fd:57:a6:87:a9:d7:71:22:2f:9d: 44:b5:80:98:ee:84:3c:c5:fd:0c:1d:13:16:8f:43:59:99:60: e7:4c:fa:70:ad:d1:5e:17:de:c8:16:90:9b:3d:56:2f:92:11: 7d:bf:39:6a:39:5d:a9:56:3a:33:db:cb:c6:b0:3e:9b:81:c0: ae:db:95:7f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWKUJ+nIElRitbbMhTBG9Rcug6g8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMDAxNloX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAZjdhYzE1MTQ4NzE3MTdjMjUzNTJi ZTVhZjQ3MjkwMjNkMzVlZjM3MjY1OGQxYzE5MWExNmEwMWFmMjUxODE3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6LUgrk1VaQxSqmJXaZIJSRf8ixi KBshLnXzqbP0tSAPI++L43arMaqfW2LsUh1Y7esaVV/waAw53LoSEKfuxGiIy50m 1Jn/c7CjjpAkkoIZRljZxljemp/xXyGK/7BTop9Osk4KZWLpY+ZJuMo5q4VjVdk3 kfWdt0Ea8jMy/TIsZVgdrPZcAxBb4+UI/Rg4dOXCe48yTWb3ocyy2XM3Cbg+5kfD o6SS3m/lf7l2qNcWOPsZ5i/0EYB64ZvvjlMYZNMcSUC/TCZrusgyMYzkIUz5vbAj v6PULEAY25Oyo+IYHs8hwhU7FgBKUSG6W/1Q/fMcWV+hSyZ8JVpkXmE84wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHiGjoteZGpcBy7jC4dpgl3yeOnYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE3N2M2NWNmLTQ4ODEtNDI1OC1hMTZjLWZhYTAzNmUzMTJlMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauYAwDQYJKoZIhvcNAQELBQADggEBACNYI8Nk5j9lppG6yKsf ughnimHqzP+vI19PdOc7SzGQOs3BhUpejQ6ni9o25wPq2kgVJANogFSmUZNWF0KP aSELjtD9QnSJYZLzIxazloKddM31yyCe0d3fDZwbkyN61STvU8bsxoNYlX4KbVcx APAhIUPNu6Aawbbafo3CZmocGCnOOAiTcewn/0B4oo3pjJbwqQrYRn9+/svp2z5N 0w5JMWBGq6gyN8D0cgh2nm8bBGeRfMvjeGPZjlys/Vemh6nXcSIvnUS1gJjuhDzF /QwdExaPQ1mZYOdM+nCt0V4X3sgWkJs9Vi+SEX2/OWo5XalWOjPby8awPpuBwK7b lX8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:11:02 2025 by rpki-client