$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d5e21f1-37c5-4013-8bc3-1b867c6fa0b6.roa File: 2d5e21f1-37c5-4013-8bc3-1b867c6fa0b6.roa (raw, json) Hash identifier: qhCeqzxFs1tILCxbnzFMhhIvRoO4jEhZ2+thUL+ETm8= Subject key identifier: D6:E7:95:DF:C0:8E:5C:F7:4D:C9:F6:B4:35:AE:3B:F0:A7:0A:44:9E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D8C5B2DBB0AD8CD7A969AF2A973E43906AB0AF5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d5e21f1-37c5-4013-8bc3-1b867c6fa0b6.roa Signing time: Fri 01 Aug 2025 00:21:11 +0000 ROA not before: Fri 01 Aug 2025 00:21:11 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8c:5b:2d:bb:0a:d8:cd:7a:96:9a:f2:a9:73:e4:39:06:ab:0a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:21:11 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=3adbfafc6cbf6670a6af2c45dedf6ffca9aaac8699abfa0affad484a423a646d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:e7:fe:e5:ff:8c:4f:03:3b:5d:2f:a3:1f: dd:3a:a2:06:e8:01:11:45:c7:c4:a4:ae:84:05:df: ee:fd:63:2d:4b:23:bf:e1:cd:0a:d6:39:b3:1a:5a: b4:2e:88:1a:51:8d:bc:86:13:66:27:d0:2d:b6:f5: 60:9f:88:33:be:0f:ee:c7:66:33:89:01:f9:f7:88: d0:23:6f:3d:e5:12:31:be:b8:a6:97:bc:67:15:07: 69:90:c3:52:5b:27:ce:ee:b3:eb:66:ef:7c:60:64: 8a:69:51:2e:d3:12:7a:80:9d:c7:c7:b2:92:b8:c6: fd:00:7d:ed:68:30:cc:46:ce:ed:f3:c3:d0:32:8b: 93:d1:d7:b8:79:1c:3f:6e:1e:70:38:23:4d:e0:26: 4a:e0:e7:16:6e:9b:62:fb:89:4f:b7:40:24:0f:fc: 6c:dc:82:44:3e:ac:24:a2:7e:44:ea:8f:47:d9:ad: 10:11:ef:28:50:84:2b:da:d6:36:e4:70:40:7b:6e: ec:0f:98:75:bf:df:1f:4b:7d:9d:28:4e:49:6c:ca: 17:77:8b:ab:aa:0e:67:5d:71:8c:a6:c4:b3:14:ae: 0d:f7:2b:3b:f2:9d:dc:01:fc:92:78:08:78:a6:cf: b5:df:85:e6:f7:63:19:d3:f4:a4:0a:7c:59:e3:0d: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E7:95:DF:C0:8E:5C:F7:4D:C9:F6:B4:35:AE:3B:F0:A7:0A:44:9E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d5e21f1-37c5-4013-8bc3-1b867c6fa0b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:2800::/40 Signature Algorithm: sha256WithRSAEncryption 6d:95:4b:e6:67:f0:e7:d4:9c:65:1d:d9:b4:99:2b:1a:1c:e8: da:0f:f8:c6:27:77:52:9b:14:50:45:c5:88:dd:29:7f:15:af: 75:5b:3a:cd:dd:f1:3c:d8:02:3a:59:a4:3d:32:b3:96:a5:9a: 14:db:e4:b4:61:64:bd:f1:f5:31:91:9c:55:78:fa:0b:ae:d8: 7a:84:a2:0a:04:3c:02:0a:b2:1a:1f:60:00:41:99:d9:bb:c6: d9:4a:eb:9c:4d:5b:ff:c0:23:71:1e:c4:63:63:ca:fa:29:4a: 3e:14:7e:2f:45:75:07:cc:50:07:9d:97:9b:2f:5a:c3:71:9a: 6c:13:91:86:0b:85:32:41:bf:1b:55:11:e6:1d:62:bd:f5:bf: 14:d1:79:8d:65:75:34:09:40:2e:eb:6d:36:72:05:a8:43:ee: 09:77:95:98:bb:ae:0c:a7:1f:ab:a5:2a:c9:46:0e:25:ef:8d: 7b:fb:88:d5:6a:af:d8:33:18:e4:3a:d2:77:8c:d5:4e:87:0c: ca:95:56:71:30:c4:33:c0:f3:ca:83:d2:3a:87:46:31:b4:1c: 4a:01:49:ee:e4:23:00:21:6a:a4:66:4f:b6:f1:f6:7e:d7:10: e3:a6:e4:0b:2b:55:b6:d3:db:cc:b2:2c:9b:97:4d:65:bb:42: eb:c8:0f:d4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbYxbLbsK2M16lpryqXPkOQarCvUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMjExMVoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAM2FkYmZhZmM2Y2JmNjY3MGE2YWYy YzQ1ZGVkZjZmZmNhOWFhYWM4Njk5YWJmYTBhZmZhZDQ4NGE0MjNhNjQ2ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsInn/uX/jE8DO10vox/dOqIG6AER RcfEpK6EBd/u/WMtSyO/4c0K1jmzGlq0LogaUY28hhNmJ9AttvVgn4gzvg/ux2Yz iQH594jQI2895RIxvriml7xnFQdpkMNSWyfO7rPrZu98YGSKaVEu0xJ6gJ3Hx7KS uMb9AH3taDDMRs7t88PQMouT0de4eRw/bh5wOCNN4CZK4OcWbpti+4lPt0AkD/xs 3IJEPqwkon5E6o9H2a0QEe8oUIQr2tY25HBAe27sD5h1v98fS32dKE5JbMoXd4ur qg5nXXGMpsSzFK4N9ys78p3cAfySeAh4ps+134Xm92MZ0/SkCnxZ4w3M0wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNbnld/Ajlz3Tcn2tDWuO/CnCkSeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJkNWUyMWYxLTM3YzUtNDAxMy04YmMzLTFiODY3YzZmYTBiNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMigwDQYJKoZIhvcNAQELBQADggEBAG2VS+Zn8OfUnGUd2bSZ Kxoc6NoP+MYnd1KbFFBFxYjdKX8Vr3VbOs3d8TzYAjpZpD0ys5almhTb5LRhZL3x 9TGRnFV4+guu2HqEogoEPAIKshofYABBmdm7xtlK65xNW//AI3EexGNjyvopSj4U fi9FdQfMUAedl5svWsNxmmwTkYYLhTJBvxtVEeYdYr31vxTReY1ldTQJQC7rbTZy BahD7gl3lZi7rgynH6ulKslGDiXvjXv7iNVqr9gzGOQ60neM1U6HDMqVVnEwxDPA 88qD0jqHRjG0HEoBSe7kIwAhaqRmT7bx9n7XEOOm5AsrVbbT28yyLJuXTWW7QuvI D9Q= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:05 2025 by rpki-client