$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/564bcbed-0561-4889-868c-6cfcb0ba50ec.roa File: 564bcbed-0561-4889-868c-6cfcb0ba50ec.roa (raw, json) Hash identifier: ZT8j2OiJPVSskHf/4XWC6jX/1cWs7Q499LmZXmx210g= Subject key identifier: D4:AF:B1:A7:C3:3B:72:3A:99:7C:EC:33:F0:1D:28:B4:26:A0:4B:B3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4D08346172A4C59BC4D0D3E234CD158095FC908A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/564bcbed-0561-4889-868c-6cfcb0ba50ec.roa Signing time: Fri 01 Aug 2025 00:30:17 +0000 ROA not before: Fri 01 Aug 2025 00:30:17 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:08:34:61:72:a4:c5:9b:c4:d0:d3:e2:34:cd:15:80:95:fc:90:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:30:17 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=2e36469f4ea19c9d62f09236b268e53e4d5f49afc0ca5557586afdc8797c4d69, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:93:b5:28:a8:3a:43:bb:73:fc:d7:bf:30: 00:2f:f1:43:af:d7:09:eb:f5:d0:4d:2b:af:36:49: 10:56:57:d4:2a:50:22:cd:60:d8:b6:48:dc:97:21: 5b:8a:82:ec:1c:e6:9f:0c:e4:96:77:0f:e0:32:be: 8b:1d:a0:36:ac:38:44:0e:5e:ae:ba:cf:a3:b3:ed: 60:38:65:e4:81:5d:56:22:7f:84:c4:21:bf:dd:b5: e6:83:d5:ac:4f:84:b4:8b:22:8c:75:20:21:73:fa: 12:f2:cd:6b:61:41:5f:97:7d:68:72:a1:0c:fc:24: 9c:3b:cd:27:78:82:98:c1:92:7a:b0:a2:7c:b0:85: 2b:dd:40:07:81:d0:bb:09:5f:0e:5a:e0:15:5d:3a: 27:9c:9c:7a:3b:a6:c3:9a:ca:c6:40:16:74:90:3e: 60:c6:4e:f8:02:9a:e3:3e:7a:b4:ca:7d:c2:3b:b1: e3:8a:66:99:3a:6f:12:7f:8d:31:18:fd:dc:1d:21: a7:6b:7a:0b:7f:09:be:cb:64:57:e7:9b:30:f4:20: ea:e8:84:f6:78:2e:18:0a:30:78:63:da:ec:13:b2: d4:d7:0c:46:5e:0f:ee:4a:3e:39:dd:49:57:46:7a: bb:4b:ac:4b:77:71:0c:90:8c:34:80:7a:c0:19:33: 16:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AF:B1:A7:C3:3B:72:3A:99:7C:EC:33:F0:1D:28:B4:26:A0:4B:B3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/564bcbed-0561-4889-868c-6cfcb0ba50ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:8c00::/38 Signature Algorithm: sha256WithRSAEncryption 90:ae:47:44:16:43:2b:a6:65:63:ce:50:43:a4:e7:f0:30:ee: 83:24:a1:32:c7:96:fc:e7:ed:90:1c:90:17:2d:9b:32:2b:c6: 19:48:21:9e:5e:25:6d:5c:7a:d0:29:f3:aa:0e:bb:d8:35:a5: 59:6c:1d:ec:c2:e4:18:37:56:20:92:4a:93:5b:cb:ff:dd:2e: bc:3d:79:67:e3:54:d7:60:5c:6b:33:6f:c8:c2:a3:d5:7f:1b: 10:bb:74:0c:4a:a9:82:ae:72:24:5d:d1:5e:67:18:bf:c9:55: 61:92:6c:63:ff:cd:6e:27:ea:df:b2:a5:69:14:3e:9d:6a:77: 11:02:62:f0:06:74:4e:94:95:de:4c:a2:39:4d:20:0e:99:a1: 96:a8:39:22:c2:14:03:b8:f0:2d:6f:7f:cb:4a:71:8c:8e:2c: d8:75:8c:1b:fa:86:cd:b6:4a:19:4e:42:3f:e1:71:52:df:54: 99:51:60:0b:22:9a:7d:e6:95:99:59:03:1b:18:47:ef:c8:dc: c0:cf:5d:ab:0e:29:4f:b4:e6:1e:a7:c7:70:34:3d:9c:bf:f1: 6c:46:1f:d5:13:7f:6b:be:ef:9f:49:33:35:51:ae:06:b5:e7: 20:8c:71:e5:6b:d2:6a:6f:09:0a:a9:0f:37:f1:83:ab:a1:cd: 04:97:06:60 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTQg0YXKkxZvE0NPiNM0VgJX8kIowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMzAxN1oX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAMmUzNjQ2OWY0ZWExOWM5ZDYyZjA5 MjM2YjI2OGU1M2U0ZDVmNDlhZmMwY2E1NTU3NTg2YWZkYzg3OTdjNGQ2OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk6TtSioOkO7c/zXvzAAL/FDr9cJ 6/XQTSuvNkkQVlfUKlAizWDYtkjclyFbioLsHOafDOSWdw/gMr6LHaA2rDhEDl6u us+js+1gOGXkgV1WIn+ExCG/3bXmg9WsT4S0iyKMdSAhc/oS8s1rYUFfl31ocqEM /CScO80neIKYwZJ6sKJ8sIUr3UAHgdC7CV8OWuAVXTonnJx6O6bDmsrGQBZ0kD5g xk74AprjPnq0yn3CO7HjimaZOm8Sf40xGP3cHSGna3oLfwm+y2RX55sw9CDq6IT2 eC4YCjB4Y9rsE7LU1wxGXg/uSj453UlXRnq7S6xLd3EMkIw0gHrAGTMWowIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNSvsafDO3I6mXzsM/AdKLQmoEuzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2NGJjYmVkLTA1NjEtNDg4OS04NjhjLTZjZmNiMGJhNTBlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEowwDQYJKoZIhvcNAQELBQADggEBAJCuR0QWQyumZWPOUEOk 5/Aw7oMkoTLHlvzn7ZAckBctmzIrxhlIIZ5eJW1cetAp86oOu9g1pVlsHezC5Bg3 ViCSSpNby//dLrw9eWfjVNdgXGszb8jCo9V/GxC7dAxKqYKuciRd0V5nGL/JVWGS bGP/zW4n6t+ypWkUPp1qdxECYvAGdE6Uld5MojlNIA6ZoZaoOSLCFAO48C1vf8tK cYyOLNh1jBv6hs22ShlOQj/hcVLfVJlRYAsimn3mlZlZAxsYR+/I3MDPXasOKU+0 5h6nx3A0PZy/8WxGH9UTf2u+759JMzVRrga15yCMceVr0mpvCQqpDzfxg6uhzQSX BmA= -----END CERTIFICATE-----Generated at Tue Aug 5 17:09:15 2025 by rpki-client