$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33792cb7-eb1d-47b9-939a-d14cbbaa92eb.roa File: 33792cb7-eb1d-47b9-939a-d14cbbaa92eb.roa (raw, json) Hash identifier: GuLjOzf/1borYlQmvrOzf3WnaK1RUAwMgPkEDddwncM= Subject key identifier: 64:10:18:DF:8F:1A:B8:F8:AC:F3:24:90:EF:11:49:FF:43:80:7E:BE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7FD1A308D38AE9D0B24C659107DF07A904E64A70 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33792cb7-eb1d-47b9-939a-d14cbbaa92eb.roa Signing time: Wed 23 Jul 2025 00:01:12 +0000 ROA not before: Wed 23 Jul 2025 00:01:12 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:a020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d1:a3:08:d3:8a:e9:d0:b2:4c:65:91:07:df:07:a9:04:e6:4a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 23 00:01:12 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=f34cab2df256344c905bdfe8bd52cd5e623ecc28af1d3b81468a4259a2bac93c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7e:9d:5f:46:f6:f5:c1:ee:9b:a6:c1:f1:0b: e0:8e:25:ed:fa:3f:4c:f8:5b:28:06:bf:f1:63:10: 91:ce:d3:38:80:a4:dd:24:46:a0:fe:f6:c5:50:60: 0d:24:c6:ca:1f:a7:67:6a:5d:79:53:6d:44:76:59: 55:0b:d3:53:db:f7:53:fd:87:d8:17:6d:6b:36:8d: df:58:98:7a:e9:da:d2:3b:b5:99:91:14:b8:7f:b1: 3a:9d:6c:bb:24:30:9c:9a:d7:8a:08:d0:9a:61:f8: f4:74:9b:16:8a:77:82:6f:bf:7d:14:48:b1:9a:26: e5:53:8a:65:47:16:81:30:e1:06:ab:b3:47:c6:15: 12:b7:94:eb:97:b9:e1:a2:e2:03:0d:33:7c:30:2b: ee:2d:56:b1:9e:81:25:f1:04:e1:e3:18:3d:58:c4: 50:c7:1a:3c:7e:4d:64:23:b9:0f:f5:36:73:ae:c4: ed:4d:19:c8:18:9e:4a:14:7c:44:7f:01:40:9c:ac: dc:ea:1b:dd:0e:6a:50:f4:b3:19:a4:fd:75:56:b0: b9:06:00:5b:ed:5f:d2:17:c1:93:ce:1b:32:a7:96: 2d:93:8c:7f:16:98:74:59:82:a2:59:08:9d:c3:72: 66:8b:ad:3c:5c:a1:8f:27:fa:1d:fc:e8:6c:37:ae: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:10:18:DF:8F:1A:B8:F8:AC:F3:24:90:EF:11:49:FF:43:80:7E:BE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33792cb7-eb1d-47b9-939a-d14cbbaa92eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:a020::/48 Signature Algorithm: sha256WithRSAEncryption b6:54:42:4d:4b:0d:4c:ef:7b:af:48:1f:56:91:71:a9:63:80: 18:a8:f9:e7:ba:cc:96:36:f4:8e:c4:e5:74:55:57:c8:6c:b3: 1b:9a:57:e2:e1:8d:ec:de:c1:5d:82:b0:3a:0f:58:d5:8a:c2: 73:66:f8:ba:a8:96:a0:0f:e6:29:e4:22:1a:66:28:44:76:c7: 88:ff:0b:6e:53:8a:d2:bb:a1:46:11:02:21:25:6e:51:cc:c7: d9:aa:e2:b1:d8:c2:f2:43:33:15:0b:d5:8b:3b:d9:24:7b:10: 3e:e3:75:03:6a:d5:bc:8d:d6:c4:0a:f2:f2:32:18:7c:a4:f6: 93:00:a8:8c:ff:fe:6f:cf:77:0b:ad:be:64:42:ee:9b:7f:ae: 62:62:52:1b:6f:68:f4:6b:8f:88:41:d2:1a:fc:18:c5:f9:57: 89:4d:68:57:ed:26:be:45:df:56:76:6e:0d:e0:d0:e0:12:4f: e5:45:02:f1:c2:6e:bc:b0:b6:6d:5a:7e:3c:8d:a7:1d:1f:e7: 01:c1:7e:79:35:01:b5:e5:20:37:5c:19:7a:fd:0c:a9:0a:71: 7c:b6:37:be:52:ce:51:d7:c7:cf:c3:d8:5c:1d:c7:8d:cc:b9: 3e:90:91:d1:71:ab:e3:c7:d1:3a:00:89:b7:c3:a2:29:94:ac: e3:68:bf:04 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUf9GjCNOK6dCyTGWRB98HqQTmSnAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMzAwMDExMloX DTI1MDgyNzIzNTk1OVowejFJMEcGA1UEBRNAZjM0Y2FiMmRmMjU2MzQ0YzkwNWJk ZmU4YmQ1MmNkNWU2MjNlY2MyOGFmMWQzYjgxNDY4YTQyNTlhMmJhYzkzYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n6dX0b29cHum6bB8QvgjiXt+j9M +FsoBr/xYxCRztM4gKTdJEag/vbFUGANJMbKH6dnal15U21EdllVC9NT2/dT/YfY F21rNo3fWJh66drSO7WZkRS4f7E6nWy7JDCcmteKCNCaYfj0dJsWineCb799FEix miblU4plRxaBMOEGq7NHxhUSt5Trl7nhouIDDTN8MCvuLVaxnoEl8QTh4xg9WMRQ xxo8fk1kI7kP9TZzrsTtTRnIGJ5KFHxEfwFAnKzc6hvdDmpQ9LMZpP11VrC5BgBb 7V/SF8GTzhsyp5Ytk4x/Fph0WYKiWQidw3Jmi608XKGPJ/od/OhsN64nFQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGQQGN+PGrj4rPMkkO8RSf9DgH6+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMzNzkyY2I3LWViMWQtNDdiOS05MzlhLWQxNGNiYmFhOTJlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAKAgMA0GCSqGSIb3DQEBCwUAA4IBAQC2VEJNSw1M73uvSB9W kXGpY4AYqPnnusyWNvSOxOV0VVfIbLMbmlfi4Y3s3sFdgrA6D1jVisJzZvi6qJag D+Yp5CIaZihEdseI/wtuU4rSu6FGEQIhJW5RzMfZquKx2MLyQzMVC9WLO9kkexA+ 43UDatW8jdbECvLyMhh8pPaTAKiM//5vz3cLrb5kQu6bf65iYlIbb2j0a4+IQdIa /BjF+VeJTWhX7Sa+Rd9Wdm4N4NDgEk/lRQLxwm68sLZtWn48jacdH+cBwX55NQG1 5SA3XBl6/QypCnF8tje+Us5R18fPw9hcHceNzLk+kJHRcavjx9E6AIm3w6IplKzj aL8E -----END CERTIFICATE-----Generated at Mon Aug 4 14:55:18 2025 by rpki-client