$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39e837a2-fed3-4fe3-959f-d22cb42598c4.roa File: 39e837a2-fed3-4fe3-959f-d22cb42598c4.roa (raw, json) Hash identifier: EuhHn9Y3Y+TBb1myAlCsYioNKOnBLeqZDR/phP0cF9A= Subject key identifier: D2:1F:8F:73:70:87:9B:8D:FF:FE:50:29:88:C4:D3:CD:2F:50:C0:55 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A4C5F95404B3FD049EC12711E592B7503FD1F91 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39e837a2-fed3-4fe3-959f-d22cb42598c4.roa Signing time: Fri 01 Aug 2025 00:00:13 +0000 ROA not before: Fri 01 Aug 2025 00:00:13 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4c:5f:95:40:4b:3f:d0:49:ec:12:71:1e:59:2b:75:03:fd:1f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:00:13 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=75936aa6f742f669a0659d7e6d31dd5ffce0291023d9177ffd068aaaf1267327, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:e3:f7:cf:31:22:64:89:c8:b5:ee:0a:d8: 07:15:4a:e7:57:e7:f9:5e:01:cf:1e:59:a8:61:9b: eb:ef:f8:14:3e:e3:54:75:e7:8f:91:a5:d3:34:27: 86:6e:61:d7:2d:1d:e7:90:91:6e:2c:f4:58:98:86: c1:52:50:d3:e4:57:0d:6b:71:5c:5a:42:28:85:f8: a1:20:24:60:1f:fb:b2:4b:bc:8d:49:f5:da:ee:46: 24:7e:65:98:35:b5:6b:dc:8d:84:a8:7c:2b:70:46: 3e:68:bc:41:de:45:72:d0:d3:5c:a9:de:20:f9:7a: 3f:b2:3e:4e:cf:9f:a9:30:27:02:d6:3a:9a:ef:f5: f3:ba:ae:22:0d:df:83:2a:00:7e:3a:4d:cb:13:6d: 2f:e9:f5:98:d0:e3:61:58:25:29:2b:75:6f:7a:f1: 9b:d8:91:5f:4b:66:0e:91:05:72:f5:da:fd:63:e7: 57:41:28:05:0d:ca:c2:11:72:36:b0:3c:ec:e1:a7: e0:1a:d3:b9:7e:b9:a7:3e:4f:6e:28:c1:62:2e:b1: fc:7e:d7:99:23:8a:d6:40:58:e8:4c:4a:5b:3f:b9: cf:73:72:22:da:c0:76:08:3c:03:8d:8a:a3:df:25: 3d:00:b7:90:92:36:07:0d:f0:f5:fa:5a:4e:39:65: 82:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1F:8F:73:70:87:9B:8D:FF:FE:50:29:88:C4:D3:CD:2F:50:C0:55 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39e837a2-fed3-4fe3-959f-d22cb42598c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:2800::/40 Signature Algorithm: sha256WithRSAEncryption 49:c8:e4:fc:4d:0a:83:de:ef:d1:74:e2:d5:4f:de:89:01:89: 72:e0:0b:7c:e8:58:0b:b9:46:2d:e5:5c:97:d3:a1:d5:1f:4d: c5:42:32:e0:b1:3f:5c:3c:b2:d3:3a:cf:cc:09:06:61:b6:ad: 2b:0f:aa:c7:8e:1a:c0:5e:00:f7:1d:f3:16:f6:87:93:e6:95: 2a:51:78:54:34:3a:28:c0:6d:e0:91:00:9b:4f:48:7b:24:01: 3f:ac:70:f4:83:4d:94:d5:d7:90:17:4b:d0:18:22:67:d5:b8: 43:d3:b5:60:ae:0f:c9:4d:fc:0c:72:f9:22:58:e9:94:1c:09: 87:5a:5d:e7:dc:34:97:08:6a:c6:3f:d5:19:55:a2:6b:d1:35: 60:46:17:84:51:d7:4e:83:b3:87:9e:ff:35:bb:41:f9:8f:d4: 59:58:ec:70:f4:ea:e4:8f:c3:34:16:4a:5d:5f:35:64:96:61: 54:83:5d:f3:f7:0f:90:19:36:0d:f4:3a:3c:0e:7e:13:0b:8c: 2d:e2:88:28:3e:c5:c9:27:9b:73:5c:6f:b3:ce:f9:fb:90:7f: 52:93:da:68:2a:03:26:c4:36:8c:be:60:bf:6d:37:13:fe:54: db:ba:34:e7:52:f7:66:e6:b9:68:98:76:27:4d:37:0c:da:4a: 3e:9a:a7:bc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOkxflUBLP9BJ7BJxHlkrdQP9H5EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMDAxM1oX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNANzU5MzZhYTZmNzQyZjY2OWEwNjU5 ZDdlNmQzMWRkNWZmY2UwMjkxMDIzZDkxNzdmZmQwNjhhYWFmMTI2NzMyNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvvj988xImSJyLXuCtgHFUrnV+f5 XgHPHlmoYZvr7/gUPuNUdeePkaXTNCeGbmHXLR3nkJFuLPRYmIbBUlDT5FcNa3Fc WkIohfihICRgH/uyS7yNSfXa7kYkfmWYNbVr3I2EqHwrcEY+aLxB3kVy0NNcqd4g +Xo/sj5Oz5+pMCcC1jqa7/Xzuq4iDd+DKgB+Ok3LE20v6fWY0ONhWCUpK3VvevGb 2JFfS2YOkQVy9dr9Y+dXQSgFDcrCEXI2sDzs4afgGtO5frmnPk9uKMFiLrH8fteZ I4rWQFjoTEpbP7nPc3Ii2sB2CDwDjYqj3yU9ALeQkjYHDfD1+lpOOWWCawIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNIfj3Nwh5uN//5QKYjE080vUMBVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM5ZTgzN2EyLWZlZDMtNGZlMy05NTlmLWQyMmNiNDI1OThjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNigwDQYJKoZIhvcNAQELBQADggEBAEnI5PxNCoPe79F04tVP 3okBiXLgC3zoWAu5Ri3lXJfTodUfTcVCMuCxP1w8stM6z8wJBmG2rSsPqseOGsBe APcd8xb2h5PmlSpReFQ0OijAbeCRAJtPSHskAT+scPSDTZTV15AXS9AYImfVuEPT tWCuD8lN/Axy+SJY6ZQcCYdaXefcNJcIasY/1RlVomvRNWBGF4RR106Ds4ee/zW7 QfmP1FlY7HD06uSPwzQWSl1fNWSWYVSDXfP3D5AZNg30OjwOfhMLjC3iiCg+xckn m3Ncb7PO+fuQf1KT2mgqAybENoy+YL9tNxP+VNu6NOdS92bmuWiYdidNNwzaSj6a p7w= -----END CERTIFICATE-----Generated at Mon Aug 4 14:05:33 2025 by rpki-client