$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4a75b2a7-15e5-4501-aaaf-4737a678d996.roa File: 4a75b2a7-15e5-4501-aaaf-4737a678d996.roa (raw, json) Hash identifier: 74emlEAQPBSgBvHwinXAtnoxT34FbjG4b6MqVqiIroc= Subject key identifier: CD:1F:82:2D:4B:58:E1:16:FC:3C:18:D8:7C:18:CE:0B:57:25:D6:C6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48C6F472F806334F5A6BEB55C6B241354773F2E5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4a75b2a7-15e5-4501-aaaf-4737a678d996.roa Signing time: Sat 02 Aug 2025 00:00:20 +0000 ROA not before: Sat 02 Aug 2025 00:00:20 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c6:f4:72:f8:06:33:4f:5a:6b:eb:55:c6:b2:41:35:47:73:f2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 2 00:00:20 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=f8a78f282f7d77125aebee66c2c9d75a6c20e6af2dcf5f69e29ae5f9f2708b00, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c9:d9:5d:e1:dd:31:72:1f:77:54:9d:9b:49: 41:bf:62:69:e1:19:7d:82:84:3b:27:ad:1b:9e:91: 9a:14:f6:df:71:89:15:eb:68:75:5c:1e:be:e8:26: 5d:cf:89:8f:f5:06:83:b8:9e:c2:6f:fd:71:46:a6: 12:92:b2:7a:21:15:71:8d:76:7a:0e:95:57:cf:29: da:82:43:a4:6d:9c:bf:97:90:cf:7c:79:74:e7:24: 8b:b5:9a:1f:bd:5b:68:91:1e:73:ab:d1:d3:53:a5: 52:7b:73:ad:85:2a:98:53:cc:13:d4:f4:22:5b:e7: e8:23:d2:e4:59:dd:c4:83:f7:76:6d:60:34:42:d3: e5:12:0f:71:44:88:c9:1b:4e:21:63:32:34:49:12: aa:85:6f:9e:ea:3c:1b:4e:8b:bd:be:c5:e6:78:34: b3:61:33:2f:cc:59:7c:63:a3:55:37:10:19:bc:30: 7a:3e:98:3a:cf:dd:be:e9:c1:59:31:fd:9a:ac:c3: a3:a8:be:9b:5d:f6:c2:65:06:13:00:13:46:ae:d7: c1:d9:25:98:b3:af:3b:f5:0f:74:fa:45:b1:c7:3a: 8b:d9:a5:ff:ff:8f:ba:ce:21:58:79:2e:64:28:ad: 97:88:40:ee:2c:59:f5:13:bf:71:4e:82:7a:89:2c: 85:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1F:82:2D:4B:58:E1:16:FC:3C:18:D8:7C:18:CE:0B:57:25:D6:C6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4a75b2a7-15e5-4501-aaaf-4737a678d996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:7000::/40 Signature Algorithm: sha256WithRSAEncryption 8b:92:a9:3a:64:37:10:56:a5:74:c9:e5:d5:30:b3:a8:e3:e0: d0:43:f3:4e:cf:42:10:4d:d5:d5:68:1f:2a:a9:e0:e5:5d:5f: 2a:e4:16:27:f9:b4:3a:28:48:4d:91:a6:f6:1d:80:93:b8:42: 4a:87:0d:8d:3a:52:86:73:65:74:5a:09:b7:b7:56:4b:43:0c: 29:84:7c:d0:97:84:52:f4:90:18:67:37:d0:b9:0b:2b:da:6f: a2:1c:33:a0:f3:25:14:f8:19:08:12:4a:81:40:cc:aa:6d:08: cf:e7:a8:0a:d9:e6:66:4a:ba:c4:a1:0e:ca:28:f8:44:0f:fd: c5:2a:08:78:82:db:fd:18:f6:9c:6b:d3:1a:81:25:21:81:06: 02:c1:15:56:b8:18:74:55:b0:59:cc:e4:0e:42:72:06:02:10: f9:fe:ae:ef:e3:29:a1:83:c6:41:d8:bd:16:0d:6f:f7:84:1d: 81:96:ac:2f:1e:e2:fa:22:ac:a7:0c:18:0d:b5:32:d3:a9:a5: 92:5b:97:b1:a7:88:24:0d:57:8e:f5:7b:0a:17:7a:d6:6a:b9: 52:9b:ee:1e:6f:f2:bb:e2:4a:fd:6f:53:32:4b:0a:0d:45:4e: 87:4b:25:73:7b:d7:13:4e:30:ea:4d:14:57:6a:20:52:6a:9e: 9a:c7:63:64 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSMb0cvgGM09aa+tVxrJBNUdz8uUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMjAwMDAyMFoX DTI1MDkwNjIzNTk1OVowejFJMEcGA1UEBRNAZjhhNzhmMjgyZjdkNzcxMjVhZWJl ZTY2YzJjOWQ3NWE2YzIwZTZhZjJkY2Y1ZjY5ZTI5YWU1ZjlmMjcwOGIwMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5snZXeHdMXIfd1Sdm0lBv2Jp4Rl9 goQ7J60bnpGaFPbfcYkV62h1XB6+6CZdz4mP9QaDuJ7Cb/1xRqYSkrJ6IRVxjXZ6 DpVXzynagkOkbZy/l5DPfHl05ySLtZofvVtokR5zq9HTU6VSe3OthSqYU8wT1PQi W+foI9LkWd3Eg/d2bWA0QtPlEg9xRIjJG04hYzI0SRKqhW+e6jwbTou9vsXmeDSz YTMvzFl8Y6NVNxAZvDB6Ppg6z92+6cFZMf2arMOjqL6bXfbCZQYTABNGrtfB2SWY s6879Q90+kWxxzqL2aX//4+6ziFYeS5kKK2XiEDuLFn1E79xToJ6iSyFLwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM0fgi1LWOEW/DwY2HwYzgtXJdbGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRhNzViMmE3LTE1ZTUtNDUwMS1hYWFmLTQ3MzdhNjc4ZDk5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaHAwDQYJKoZIhvcNAQELBQADggEBAIuSqTpkNxBWpXTJ5dUw s6jj4NBD807PQhBN1dVoHyqp4OVdXyrkFif5tDooSE2RpvYdgJO4QkqHDY06UoZz ZXRaCbe3VktDDCmEfNCXhFL0kBhnN9C5Cyvab6IcM6DzJRT4GQgSSoFAzKptCM/n qArZ5mZKusShDsoo+EQP/cUqCHiC2/0Y9pxr0xqBJSGBBgLBFVa4GHRVsFnM5A5C cgYCEPn+ru/jKaGDxkHYvRYNb/eEHYGWrC8e4voirKcMGA21MtOppZJbl7GniCQN V471ewoXetZquVKb7h5v8rviSv1vUzJLCg1FTodLJXN71xNOMOpNFFdqIFJqnprH Y2Q= -----END CERTIFICATE-----Generated at Mon Aug 4 15:31:37 2025 by rpki-client