$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa File: 23ecebb0-098e-41b3-815b-beadfef6484a.roa (raw, json) Hash identifier: QIBP5qf1T3sMmBl2OSl3Q7Llssk0Ap0r1lHcg/gqOrA= Subject key identifier: 61:ED:0F:A5:DD:A1:C9:F7:FD:22:91:4D:8A:E4:58:61:A8:7A:60:19 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 13D4014A0C8B6DDA4AF16407A0592E7557C34A40 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa Signing time: Fri 01 Aug 2025 00:21:21 +0000 ROA not before: Fri 01 Aug 2025 00:21:21 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d4:01:4a:0c:8b:6d:da:4a:f1:64:07:a0:59:2e:75:57:c3:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:21:21 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=a09cd75213b4fb7e8334a54fe6e80df8b1a2fe4f8ffd4a3c185d0caf5d9b02eb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:44:19:4e:3b:c2:94:a1:a8:0b:9d:3d:8b: 12:db:95:ca:49:a2:eb:fe:1c:e1:00:ba:6b:6b:a8: b2:f6:40:99:86:64:f5:a7:a8:0c:ee:03:a6:64:36: ca:c3:3f:70:c7:08:b9:f2:07:fb:3c:90:9c:75:de: 22:50:1d:d4:12:f6:cc:87:26:3c:34:05:69:c1:a5: 66:76:b8:09:93:d7:e5:bd:19:34:ae:ba:be:85:d1: ef:9e:9e:e0:93:ca:05:c3:55:b1:7d:20:5f:4a:94: b5:1f:eb:30:71:5b:8a:be:e5:17:6c:80:7f:9f:7c: 79:54:97:7c:c9:6e:06:db:93:4d:40:f4:e3:89:41: 3b:5f:5a:1b:33:c4:35:3c:e9:f0:71:13:a2:cf:d2: fc:05:80:4a:b6:df:e6:e4:6c:14:58:bf:7e:50:dd: 6e:12:f0:fb:57:4d:b5:f2:95:0b:87:24:bd:05:df: a6:87:ea:47:1d:f1:8f:ec:43:0f:a6:9e:39:48:d5: ff:b8:00:de:5c:e0:fe:3f:73:6d:19:44:6f:1f:8d: 52:d0:4f:4d:cc:4c:85:09:c5:82:df:56:b2:6f:9c: 16:32:96:7f:24:d8:40:b0:a1:07:ae:78:50:91:c7: 05:5a:a9:54:19:2a:1f:1f:52:ef:63:1d:bd:f3:9e: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:ED:0F:A5:DD:A1:C9:F7:FD:22:91:4D:8A:E4:58:61:A8:7A:60:19 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6::/32 Signature Algorithm: sha256WithRSAEncryption c4:f2:19:f9:dd:b1:d7:e6:07:49:32:02:bd:97:19:47:0a:dd: a9:e4:9b:02:72:85:4a:dd:e1:a0:f8:6e:e2:a0:59:dd:15:18: dd:0b:bc:66:cd:ec:d8:bf:16:88:92:ed:32:a5:36:92:af:52: c2:01:62:40:e1:a2:5c:4d:eb:0f:5d:0e:b5:5a:05:82:5e:d4: 5c:e7:9c:91:8e:33:32:7a:c9:90:b7:be:78:c2:7d:c6:19:8e: 42:85:b4:f9:01:dc:11:9a:ac:a6:8b:de:3f:3b:44:7f:f6:08: 3e:15:ab:6d:1c:4e:42:43:38:c7:c3:47:4c:90:ec:af:6f:45: ae:f6:d5:f1:73:a8:ce:93:05:1f:92:88:b9:68:32:ef:20:8c: 53:56:b4:c4:54:8d:e3:82:51:62:3a:74:b0:29:38:e0:76:c9: 30:57:84:2d:8d:35:64:6c:20:b6:c5:3e:c2:7b:7c:41:68:51: 21:26:47:09:67:8d:99:05:84:88:b8:2b:5b:e3:40:24:67:cb: 2e:da:65:0b:75:f5:0e:a5:98:1a:c7:0f:bd:83:e6:df:00:fe: 9c:ac:17:60:e9:8d:0a:12:85:84:ad:07:74:a2:bc:7b:6c:e3: 6a:51:bd:3f:0e:54:32:ed:e1:53:e3:5e:c8:c8:0b:9e:77:59: a3:a0:61:5e -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUE9QBSgyLbdpK8WQHoFkudVfDSkAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMjEyMVoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAYTA5Y2Q3NTIxM2I0ZmI3ZTgzMzRh NTRmZTZlODBkZjhiMWEyZmU0ZjhmZmQ0YTNjMTg1ZDBjYWY1ZDliMDJlYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl5EGU47wpShqAudPYsS25XKSaLr /hzhALpra6iy9kCZhmT1p6gM7gOmZDbKwz9wxwi58gf7PJCcdd4iUB3UEvbMhyY8 NAVpwaVmdrgJk9flvRk0rrq+hdHvnp7gk8oFw1WxfSBfSpS1H+swcVuKvuUXbIB/ n3x5VJd8yW4G25NNQPTjiUE7X1obM8Q1POnwcROiz9L8BYBKtt/m5GwUWL9+UN1u EvD7V0218pULhyS9Bd+mh+pHHfGP7EMPpp45SNX/uADeXOD+P3NtGURvH41S0E9N zEyFCcWC31ayb5wWMpZ/JNhAsKEHrnhQkccFWqlUGSofH1LvYx29854CiQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFGHtD6Xdocn3/SKRTYrkWGGoemAZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzZWNlYmIwLTA5OGUtNDFiMy04MTViLWJlYWRmZWY2NDg0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba9jANBgkqhkiG9w0BAQsFAAOCAQEAxPIZ+d2x1+YHSTICvZcZ RwrdqeSbAnKFSt3hoPhu4qBZ3RUY3Qu8Zs3s2L8WiJLtMqU2kq9SwgFiQOGiXE3r D10OtVoFgl7UXOeckY4zMnrJkLe+eMJ9xhmOQoW0+QHcEZqspovePztEf/YIPhWr bRxOQkM4x8NHTJDsr29FrvbV8XOozpMFH5KIuWgy7yCMU1a0xFSN44JRYjp0sCk4 4HbJMFeELY01ZGwgtsU+wnt8QWhRISZHCWeNmQWEiLgrW+NAJGfLLtplC3X1DqWY GscPvYPm3wD+nKwXYOmNChKFhK0HdKK8e2zjalG9Pw5UMu3hU+NeyMgLnndZo6Bh Xg== -----END CERTIFICATE-----Generated at Mon Aug 4 14:14:47 2025 by rpki-client