$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5e8f8-01ee-4887-9403-cad800717cc9.roa File: 25d5e8f8-01ee-4887-9403-cad800717cc9.roa (raw, json) Hash identifier: 5NBGsTpd6y9t6aosJN8UgNaTLuouP0r04vT5kD5a6mg= Subject key identifier: 9A:83:40:D3:4E:20:E4:37:09:E0:FF:BF:34:71:16:9B:98:DB:F7:8D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 64DC7EDDD79CB3D67C391B50B5E7E0FCA0E7AF57 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5e8f8-01ee-4887-9403-cad800717cc9.roa Signing time: Fri 01 Aug 2025 00:21:14 +0000 ROA not before: Fri 01 Aug 2025 00:21:14 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:dc:7e:dd:d7:9c:b3:d6:7c:39:1b:50:b5:e7:e0:fc:a0:e7:af:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:21:14 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=f0fddb724ffcc43ee83d9041d93c275f4e89572af1f71ecab54811d6a698d6e2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:1a:54:91:8a:15:65:c4:5e:84:68:40:9e: ca:75:d9:2d:d0:1a:84:e3:6a:45:65:82:da:93:c1: 5e:0e:a7:77:b5:f1:ce:82:7d:eb:cf:f9:c4:1d:d4: 2d:8d:42:cc:32:3c:a1:c3:a5:90:e5:d2:ba:31:2a: 97:29:eb:d2:f3:4a:fd:8e:42:7d:53:a6:da:35:f5: 1a:89:fd:79:0e:ba:9f:3c:bc:41:a9:12:a4:49:a6: 75:5d:79:77:b2:2b:2b:b9:9d:ba:69:b2:f9:f5:ec: a1:40:12:f2:96:41:0c:e5:59:76:cf:c7:8d:4b:10: 64:60:ca:66:4f:2a:a4:f4:38:34:07:be:cd:9b:cb: 42:7e:ae:4f:42:38:fb:f2:dd:42:fd:42:50:9a:ec: 4f:0e:01:2c:cb:7f:89:21:db:31:a6:65:4f:db:ee: 7e:57:47:3d:43:54:b5:3a:96:5b:91:37:ac:fe:e3: bf:c0:85:c6:d0:1b:e0:61:74:4c:8a:68:e7:52:10: c2:e6:29:be:f8:25:af:fe:ea:da:b2:0e:2d:b1:8a: d8:a6:59:bf:54:1b:f6:bf:76:68:29:02:24:8d:cc: 51:2a:d2:ce:d5:94:81:96:ed:08:21:7c:d4:92:04: fd:ae:c8:8f:f2:4a:52:b1:42:72:64:da:70:f9:98: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:83:40:D3:4E:20:E4:37:09:E0:FF:BF:34:71:16:9B:98:DB:F7:8D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5e8f8-01ee-4887-9403-cad800717cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:1000::/40 Signature Algorithm: sha256WithRSAEncryption 0e:15:ef:87:6e:56:f6:58:d1:2b:df:8f:1c:cd:bd:21:00:32: 62:19:bc:a8:ec:ab:a5:a3:99:9d:15:a0:25:39:2d:f3:13:9d: 8b:2b:58:54:2f:3d:d2:3d:04:82:11:c3:f7:52:3f:b9:d1:ec: 14:5c:44:23:39:2e:02:1f:dc:76:56:5b:ce:1b:f6:69:89:ea: cc:a9:ac:53:5f:ad:e3:20:b6:5b:81:1d:95:1e:1a:4b:8e:cd: 30:d0:50:6e:45:ad:84:54:cf:3f:bf:7c:66:ac:63:ca:ae:7e: 7f:89:29:6c:44:c6:8d:f4:cc:3d:6e:0d:3e:04:f4:bb:85:69: a8:ee:80:f6:ab:ce:4a:e4:ce:49:18:da:e2:f7:2f:bc:13:1e: e1:56:85:10:b4:8b:88:b3:cd:48:ce:5d:d7:5b:05:b4:a8:f5: b0:9c:c5:68:b2:51:a6:3c:04:ef:a6:eb:a1:3b:21:b0:b6:e4: c0:24:c4:c7:e2:23:ff:e3:82:94:e1:c7:3d:76:03:05:76:eb: 5a:6c:da:9a:ad:ab:99:ba:fd:a5:e7:e3:3b:a1:ea:5f:d6:4c: 48:a9:41:dc:b2:ea:5f:b5:c6:c2:23:44:2e:a1:ef:b7:51:64: a0:60:c7:5c:6f:26:dc:5a:92:c3:ff:28:7d:c1:06:dc:d3:cb: c8:29:9c:de -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZNx+3decs9Z8ORtQtefg/KDnr1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMjExNFoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAZjBmZGRiNzI0ZmZjYzQzZWU4M2Q5 MDQxZDkzYzI3NWY0ZTg5NTcyYWYxZjcxZWNhYjU0ODExZDZhNjk4ZDZlMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz44aVJGKFWXEXoRoQJ7Kddkt0BqE 42pFZYLak8FeDqd3tfHOgn3rz/nEHdQtjULMMjyhw6WQ5dK6MSqXKevS80r9jkJ9 U6baNfUaif15DrqfPLxBqRKkSaZ1XXl3sisruZ26abL59eyhQBLylkEM5Vl2z8eN SxBkYMpmTyqk9Dg0B77Nm8tCfq5PQjj78t1C/UJQmuxPDgEsy3+JIdsxpmVP2+5+ V0c9Q1S1OpZbkTes/uO/wIXG0BvgYXRMimjnUhDC5im++CWv/urasg4tsYrYplm/ VBv2v3ZoKQIkjcxRKtLO1ZSBlu0IIXzUkgT9rsiP8kpSsUJyZNpw+Zg+zwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJqDQNNOIOQ3CeD/vzRxFpuY2/eNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI1ZDVlOGY4LTAxZWUtNDg4Ny05NDAzLWNhZDgwMDcxN2NjOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacBAwDQYJKoZIhvcNAQELBQADggEBAA4V74duVvZY0SvfjxzN vSEAMmIZvKjsq6WjmZ0VoCU5LfMTnYsrWFQvPdI9BIIRw/dSP7nR7BRcRCM5LgIf 3HZWW84b9mmJ6syprFNfreMgtluBHZUeGkuOzTDQUG5FrYRUzz+/fGasY8qufn+J KWxExo30zD1uDT4E9LuFaajugParzkrkzkkY2uL3L7wTHuFWhRC0i4izzUjOXddb BbSo9bCcxWiyUaY8BO+m66E7IbC25MAkxMfiI//jgpThxz12AwV261ps2pqtq5m6 /aXn4zuh6l/WTEipQdyy6l+1xsIjRC6h77dRZKBgx1xvJtxaksP/KH3BBtzTy8gp nN4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:36:25 2025 by rpki-client