$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b95ed28-78dc-4a87-8241-9602df8787d4.roa File: 6b95ed28-78dc-4a87-8241-9602df8787d4.roa (raw, json) Hash identifier: JNhxVjON/PFYx4XJtPq0JkevmLiPmUVGMeMJBwllMgM= Subject key identifier: 74:71:31:13:55:90:46:4E:26:E6:15:36:74:8D:6E:E1:F4:C4:98:79 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 26780F0A82E2BEB21D4FB836C286EC0C4FAA2FBF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b95ed28-78dc-4a87-8241-9602df8787d4.roa Signing time: Wed 30 Jul 2025 17:38:41 +0000 ROA not before: Wed 30 Jul 2025 17:38:41 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:78:0f:0a:82:e2:be:b2:1d:4f:b8:36:c2:86:ec:0c:4f:aa:2f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 17:38:41 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=76bdf6c8d4d5d4897b620f0c1ac37b60432085ffa4a0a946e6b7cecc3e5f7ea4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:28:91:c4:52:10:36:a7:1f:00:b0:83:a0:44: f0:ee:f9:b7:ab:a2:33:78:f3:99:8a:ad:65:ce:aa: 67:9a:14:ec:ed:f4:43:cb:fb:a5:aa:1b:30:76:fd: a7:af:5f:6f:72:36:8a:35:ac:84:e2:8a:8d:59:3e: ed:1c:15:f0:63:0e:67:d9:6c:d6:5c:21:7f:b6:eb: 5e:f1:5a:ed:af:22:40:45:88:22:32:b7:f9:c4:0c: 7b:1a:84:e0:32:65:d4:47:21:89:e6:53:87:45:bb: 4b:13:4c:51:08:f8:d0:23:28:03:d0:f9:db:f1:31: 7e:48:a1:d9:97:c6:57:d3:90:80:03:fe:22:5c:40: cb:2e:cb:35:65:0e:d4:f0:61:07:67:e8:06:0e:0c: 23:29:e8:e1:bd:a3:98:75:28:d1:18:1d:c1:4f:25: 8e:34:e1:d3:68:9a:e1:d3:a7:fc:07:4b:2e:fd:d4: 07:7a:2e:68:cd:a0:21:bf:de:8e:14:e8:ba:dc:f5: 12:9c:89:e9:8d:9f:9e:a4:8c:a2:ef:24:0c:db:55: 9a:ba:15:21:3e:59:f7:e9:e2:78:64:4d:1d:db:6c: 22:6e:f3:77:fc:91:2c:af:ca:61:f1:ea:7a:1b:25: c4:9b:99:45:9d:b7:15:a4:35:56:47:db:85:ff:d4: 17:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:71:31:13:55:90:46:4E:26:E6:15:36:74:8D:6E:E1:F4:C4:98:79 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b95ed28-78dc-4a87-8241-9602df8787d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:c800::/40 Signature Algorithm: sha256WithRSAEncryption 59:ba:69:74:13:79:02:f9:ec:0d:93:f5:77:89:c1:b1:1b:28: 8b:be:e5:a8:88:f7:ed:11:45:99:c8:5d:d1:a5:dd:fa:fd:cd: 18:3b:80:f5:49:6f:37:b7:e9:42:6b:8c:7c:bd:36:d3:4b:e5: 2e:3a:42:24:57:aa:fa:0f:d3:f4:c2:b6:61:b2:f9:31:ab:46: 26:4c:01:4e:bd:cf:6f:c0:f5:9c:ef:11:33:0f:da:03:d4:12: bc:17:ad:4f:c2:7d:4e:0a:b9:c9:6b:00:ea:aa:f3:d9:f1:2b: 5d:bd:16:ae:d6:2a:a4:46:a0:67:f8:78:e1:2d:27:94:36:a5: 80:84:3e:23:ff:53:99:9e:56:05:c2:0b:77:78:57:7d:87:89: 66:28:cd:06:ce:09:64:1f:0d:03:6a:68:1e:70:ed:ad:60:bc: 42:df:fc:ad:b9:2a:37:bc:c7:21:32:20:e4:cc:34:38:bb:17: d3:ef:98:4d:57:dd:01:a7:a0:fa:b4:08:e4:c2:fc:60:ed:1f: ec:1b:ac:44:4f:b0:a0:00:74:68:3e:e6:e8:4a:3e:62:f2:99: 55:10:53:ba:b8:d0:f3:db:f9:0e:4e:42:be:74:e6:9e:16:a1: 0e:3d:8a:63:6c:88:2b:16:9c:a3:dd:5f:df:12:d5:8c:09:41: b5:84:38:d0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJngPCoLivrIdT7g2wobsDE+qL78wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDE3Mzg0MVoX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNANzZiZGY2YzhkNGQ1ZDQ4OTdiNjIw ZjBjMWFjMzdiNjA0MzIwODVmZmE0YTBhOTQ2ZTZiN2NlY2MzZTVmN2VhNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CiRxFIQNqcfALCDoETw7vm3q6Iz ePOZiq1lzqpnmhTs7fRDy/ulqhswdv2nr19vcjaKNayE4oqNWT7tHBXwYw5n2WzW XCF/tute8VrtryJARYgiMrf5xAx7GoTgMmXURyGJ5lOHRbtLE0xRCPjQIygD0Pnb 8TF+SKHZl8ZX05CAA/4iXEDLLss1ZQ7U8GEHZ+gGDgwjKejhvaOYdSjRGB3BTyWO NOHTaJrh06f8B0su/dQHei5ozaAhv96OFOi63PUSnInpjZ+epIyi7yQM21WauhUh Pln36eJ4ZE0d22wibvN3/JEsr8ph8ep6GyXEm5lFnbcVpDVWR9uF/9QXUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHRxMRNVkEZOJuYVNnSNbuH0xJh5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZiOTVlZDI4LTc4ZGMtNGE4Ny04MjQxLTk2MDJkZjg3ODdkNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaacgwDQYJKoZIhvcNAQELBQADggEBAFm6aXQTeQL57A2T9XeJ wbEbKIu+5aiI9+0RRZnIXdGl3fr9zRg7gPVJbze36UJrjHy9NtNL5S46QiRXqvoP 0/TCtmGy+TGrRiZMAU69z2/A9ZzvETMP2gPUErwXrU/CfU4KuclrAOqq89nxK129 Fq7WKqRGoGf4eOEtJ5Q2pYCEPiP/U5meVgXCC3d4V32HiWYozQbOCWQfDQNqaB5w 7a1gvELf/K25Kje8xyEyIOTMNDi7F9PvmE1X3QGnoPq0COTC/GDtH+wbrERPsKAA dGg+5uhKPmLymVUQU7q40PPb+Q5OQr505p4WoQ49imNsiCsWnKPdX98S1YwJQbWE ONA= -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:32 2025 by rpki-client