$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/544e7031-781b-4e29-9730-b21cc2781435.roa File: 544e7031-781b-4e29-9730-b21cc2781435.roa (raw, json) Hash identifier: 4PV79FBK94dewAFuk3ErFdxe3oskfs7VFMiHIQldHwg= Subject key identifier: 19:82:D8:D3:AA:7A:33:C5:10:59:3E:1E:29:07:15:2A:11:43:11:98 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6EEA9A6C1DB1A86BC4DDA8E1F3CBC1ABD63A7F4E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/544e7031-781b-4e29-9730-b21cc2781435.roa Signing time: Mon 04 Aug 2025 15:00:23 +0000 ROA not before: Mon 04 Aug 2025 15:00:23 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ea:9a:6c:1d:b1:a8:6b:c4:dd:a8:e1:f3:cb:c1:ab:d6:3a:7f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 4 15:00:23 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=06a596635d8931c5e44fe83018c46777fbb6057a1ed6adb79f48a7addd66f3a4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b3:ba:76:62:f5:51:91:a0:d2:9b:68:a4:05: 7c:dc:d1:a9:93:b8:68:69:8e:d9:a2:15:aa:3e:7e: 2b:b3:7e:b9:3e:6c:5d:96:7f:80:34:36:fb:a1:40: f3:a4:4e:10:c8:a9:e5:ea:5d:44:fe:35:de:d4:80: 0e:ce:e3:4a:61:3e:33:34:bb:72:73:1e:c2:b1:94: 41:80:56:07:90:b3:56:3f:f1:21:0c:e9:8f:37:4d: 18:9a:70:5f:96:f3:8f:9f:7a:72:39:46:40:c3:84: a9:a4:88:1a:92:66:2d:1a:11:c4:37:dd:42:a0:e0: 58:fd:d5:e7:4e:cc:fa:b2:c5:99:d2:11:c3:59:5d: 4d:cd:b0:9f:31:e9:98:b1:92:42:fb:ef:7c:68:69: e2:8f:8d:0a:84:d7:b9:26:3e:97:f2:4e:8b:f0:4e: 0e:e2:fc:49:8d:a3:fb:43:ff:97:91:a1:78:c5:06: 12:cb:b4:47:da:6e:8a:9a:18:02:88:bc:43:93:46: c3:93:3d:e2:21:d1:66:52:0a:d8:27:f1:e3:2a:62: b2:08:94:df:24:47:58:80:ba:e1:b4:62:d4:60:c8: 18:65:e5:4b:00:c1:16:86:22:fa:65:5e:b2:63:66: 34:c2:21:46:ad:69:97:22:96:1d:4d:a8:43:59:f2: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:82:D8:D3:AA:7A:33:C5:10:59:3E:1E:29:07:15:2A:11:43:11:98 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/544e7031-781b-4e29-9730-b21cc2781435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:a000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:fe:ea:a1:59:41:95:a6:c4:60:2a:3f:32:96:95:3d:a6:cb: fe:eb:64:42:7c:da:5f:5f:7b:4b:c6:f3:e3:24:a9:63:cd:4f: 8b:c7:51:55:f0:19:3c:89:a7:ec:b5:e6:52:e4:f9:a2:5f:a2: a1:b0:d0:b8:c3:7b:17:32:bb:45:68:a7:0b:99:12:19:90:b5: 3f:63:de:4e:fa:51:6d:d3:fe:09:6f:1b:04:b5:db:c5:44:91: e5:e4:fd:15:01:4a:a7:f0:7c:0b:c4:c0:1d:7b:5f:22:6f:dc: 3a:ec:78:75:d1:e9:fa:af:e5:e6:c0:80:b1:3f:91:b3:2e:50: 2b:c2:70:cc:d4:73:3e:70:53:c9:3f:0e:99:03:1b:57:3c:f9: d2:64:3c:5b:c8:66:33:02:d7:bb:fc:83:8f:2d:5e:3e:6b:7d: 95:a5:00:8f:7d:5d:25:06:23:a5:e5:e3:ab:a3:d8:38:c0:c5: b7:7a:e7:7a:96:9c:09:83:41:af:f5:2e:5c:47:9d:db:76:0e: 40:66:c5:20:33:63:c9:1e:d7:34:49:14:2d:36:23:41:bd:81: 58:c9:d7:d9:7a:2a:e6:12:ee:46:95:e2:ef:ac:02:a1:06:39: 56:16:1d:f6:6c:c3:fb:c8:b6:79:01:c3:3c:0f:f6:06:e9:11: fb:42:bf:4c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbuqabB2xqGvE3ajh88vBq9Y6f04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwNDE1MDAyM1oX DTI1MDkwODIzNTk1OVowejFJMEcGA1UEBRNAMDZhNTk2NjM1ZDg5MzFjNWU0NGZl ODMwMThjNDY3NzdmYmI2MDU3YTFlZDZhZGI3OWY0OGE3YWRkZDY2ZjNhNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7O6dmL1UZGg0ptopAV83NGpk7ho aY7ZohWqPn4rs365Pmxdln+ANDb7oUDzpE4QyKnl6l1E/jXe1IAOzuNKYT4zNLty cx7CsZRBgFYHkLNWP/EhDOmPN00YmnBflvOPn3pyOUZAw4SppIgakmYtGhHEN91C oOBY/dXnTsz6ssWZ0hHDWV1NzbCfMemYsZJC++98aGnij40KhNe5Jj6X8k6L8E4O 4vxJjaP7Q/+XkaF4xQYSy7RH2m6KmhgCiLxDk0bDkz3iIdFmUgrYJ/HjKmKyCJTf JEdYgLrhtGLUYMgYZeVLAMEWhiL6ZV6yY2Y0wiFGrWmXIpYdTahDWfKAOQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBmC2NOqejPFEFk+HikHFSoRQxGYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0NGU3MDMxLTc4MWItNGUyOS05NzMwLWIyMWNjMjc4MTQzNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNqAwDQYJKoZIhvcNAQELBQADggEBABv+6qFZQZWmxGAqPzKW lT2my/7rZEJ82l9fe0vG8+MkqWPNT4vHUVXwGTyJp+y15lLk+aJfoqGw0LjDexcy u0VopwuZEhmQtT9j3k76UW3T/glvGwS128VEkeXk/RUBSqfwfAvEwB17XyJv3Drs eHXR6fqv5ebAgLE/kbMuUCvCcMzUcz5wU8k/DpkDG1c8+dJkPFvIZjMC17v8g48t Xj5rfZWlAI99XSUGI6Xl46uj2DjAxbd653qWnAmDQa/1LlxHndt2DkBmxSAzY8ke 1zRJFC02I0G9gVjJ19l6KuYS7kaV4u+sAqEGOVYWHfZsw/vItnkBwzwP9gbpEftC v0w= -----END CERTIFICATE-----Generated at Sat Aug 9 10:38:27 2025 by rpki-client