$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d0d3d64-afcc-4838-bca0-f7693f145edf.roa File: 4d0d3d64-afcc-4838-bca0-f7693f145edf.roa (raw, json) Hash identifier: f43CmeooiL7nUtvUNIVadtXp2xlPJwyho+zhLhdYz74= Subject key identifier: 04:5A:E3:2B:F7:A7:29:9E:2C:9C:34:CE:4E:EC:32:BD:19:51:C0:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58AC33A09776FCF418B089FF56FDA8EE89569077 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d0d3d64-afcc-4838-bca0-f7693f145edf.roa Signing time: Fri 01 Aug 2025 00:20:21 +0000 ROA not before: Fri 01 Aug 2025 00:20:21 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ac:33:a0:97:76:fc:f4:18:b0:89:ff:56:fd:a8:ee:89:56:90:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:20:21 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=c75543eb5b82c0d471feeb968b84fab764fb9c0e7e5a55b9568ce078f96e681a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e6:aa:cd:95:05:b2:09:a8:2c:8d:fb:ee:92: c1:53:3e:33:fa:60:8e:a2:c0:0e:d1:2d:f3:e1:82: d8:a4:dc:53:37:9a:81:65:61:35:2c:87:1b:3a:64: 00:a6:1a:0e:fb:8e:d1:df:54:95:73:74:bb:9f:22: 49:5e:18:8b:30:cf:da:6c:b4:b2:c7:09:1b:fd:53: e5:2e:bf:da:8d:94:77:5f:ba:f4:4c:f7:77:71:52: bc:fa:10:82:e1:e2:50:b9:1f:cb:26:cb:9d:3e:2b: e9:ea:12:9a:58:0b:d2:5e:eb:9c:36:d0:d1:7f:5b: 23:48:3a:61:4e:f3:b5:68:92:1e:b4:70:a2:51:a5: 9e:2a:f3:38:34:e5:97:68:84:b4:f8:ee:83:0b:9d: fc:b8:e4:5b:34:ee:0a:6f:d2:67:b4:07:ba:f8:b3: c5:c0:76:39:8f:35:cc:46:94:88:15:c4:f6:4d:5b: 24:5b:10:56:18:29:82:45:5d:05:12:27:b0:f5:69: 44:17:a2:ac:29:1d:5a:e4:b1:ed:a5:6c:94:c3:d1: b0:30:8a:ce:dd:e0:e0:d9:76:c4:ad:c7:07:a1:47: e4:b0:c8:0b:0e:9a:1a:92:87:c2:51:db:bf:17:c9: 58:f7:13:49:c5:bb:ca:b4:f3:32:09:99:24:6a:b1: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5A:E3:2B:F7:A7:29:9E:2C:9C:34:CE:4E:EC:32:BD:19:51:C0:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d0d3d64-afcc-4838-bca0-f7693f145edf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:b000::/40 Signature Algorithm: sha256WithRSAEncryption cb:b9:c9:df:8c:d2:5c:67:59:13:c4:05:7f:79:8e:32:9a:ae: 3a:f5:7d:fe:c8:79:cd:8c:3e:4c:62:0a:a3:6f:32:a3:71:f0: f4:cf:44:ef:d6:9d:ad:43:2d:ad:68:f1:32:df:6e:87:e7:2b: fc:a4:f7:cb:e4:ec:31:07:5d:c8:f6:a3:06:86:39:86:3b:cc: 4c:79:4c:c6:04:35:28:67:8a:93:d0:98:65:5d:64:6d:26:65: 9e:72:46:81:85:12:4f:71:59:aa:2d:36:e0:3f:97:08:8b:19: ad:75:f2:5b:59:84:d5:bc:ff:7a:0c:c8:dd:e1:ff:0e:53:f7: f9:a3:1d:af:77:77:03:b6:a7:7e:54:74:03:ee:f6:a0:2e:20: ba:cd:5a:e6:a4:d4:53:46:1c:eb:92:18:25:52:76:e4:73:13: cb:4e:61:9b:9a:0d:fd:52:03:dd:4b:34:48:b6:d9:9e:66:a7: 73:1f:b5:87:49:0a:0b:84:de:2a:80:80:a9:b8:0b:b8:12:2a: 6d:42:80:02:d1:d7:28:4a:3d:df:21:79:c9:39:69:e6:47:20: 1a:ac:5d:17:d7:0e:1a:d6:38:89:f7:1d:8e:6a:ef:1b:ab:f8: e7:a1:d3:16:f4:9c:2d:8f:78:31:ba:e1:a6:2e:d8:f5:eb:2b: 71:8b:94:32 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWKwzoJd2/PQYsIn/Vv2o7olWkHcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMjAyMVoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAYzc1NTQzZWI1YjgyYzBkNDcxZmVl Yjk2OGI4NGZhYjc2NGZiOWMwZTdlNWE1NWI5NTY4Y2UwNzhmOTZlNjgxYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+aqzZUFsgmoLI377pLBUz4z+mCO osAO0S3z4YLYpNxTN5qBZWE1LIcbOmQAphoO+47R31SVc3S7nyJJXhiLMM/abLSy xwkb/VPlLr/ajZR3X7r0TPd3cVK8+hCC4eJQuR/LJsudPivp6hKaWAvSXuucNtDR f1sjSDphTvO1aJIetHCiUaWeKvM4NOWXaIS0+O6DC538uORbNO4Kb9JntAe6+LPF wHY5jzXMRpSIFcT2TVskWxBWGCmCRV0FEiew9WlEF6KsKR1a5LHtpWyUw9GwMIrO 3eDg2XbErccHoUfksMgLDpoakofCUdu/F8lY9xNJxbvKtPMyCZkkarGGlQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFARa4yv3pymeLJw0zk7sMr0ZUcA9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRkMGQzZDY0LWFmY2MtNDgzOC1iY2EwLWY3NjkzZjE0NWVkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8bAwDQYJKoZIhvcNAQELBQADggEBAMu5yd+M0lxnWRPEBX95 jjKarjr1ff7Iec2MPkxiCqNvMqNx8PTPRO/Wna1DLa1o8TLfbofnK/yk98vk7DEH Xcj2owaGOYY7zEx5TMYENShnipPQmGVdZG0mZZ5yRoGFEk9xWaotNuA/lwiLGa11 8ltZhNW8/3oMyN3h/w5T9/mjHa93dwO2p35UdAPu9qAuILrNWuak1FNGHOuSGCVS duRzE8tOYZuaDf1SA91LNEi22Z5mp3MftYdJCguE3iqAgKm4C7gSKm1CgALR1yhK Pd8heck5aeZHIBqsXRfXDhrWOIn3HY5q7xur+Oeh0xb0nC2PeDG64aYu2PXrK3GL lDI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:18:17 2025 by rpki-client