$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/794f94c6-a1e0-44db-ac13-0cb5d0d8bc67.roa File: 794f94c6-a1e0-44db-ac13-0cb5d0d8bc67.roa (raw, json) Hash identifier: 1zpWiT0h3lV/F8uz/STb335HlDX2t2MfUoHzm+2Mbfs= Subject key identifier: B4:FE:34:3A:A6:A8:4A:F4:D6:C2:6A:E4:86:86:CF:31:B3:E7:53:26 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4030FEFD5C529037D183D8B8D654C6FEC7526123 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/794f94c6-a1e0-44db-ac13-0cb5d0d8bc67.roa Signing time: Fri 01 Aug 2025 00:30:13 +0000 ROA not before: Fri 01 Aug 2025 00:30:13 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1a::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:30:fe:fd:5c:52:90:37:d1:83:d8:b8:d6:54:c6:fe:c7:52:61:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:30:13 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=b0da8899931db488c81d17451cc8df1b3ee8bc8980c507675d73556deddd11fb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:81:14:63:6f:73:b5:de:cc:c2:be:95:40: 84:1f:c2:5b:b2:33:4a:83:b5:a1:48:80:fe:a6:ef: 41:f2:fd:e6:cb:11:25:8a:f8:fe:31:b8:e0:41:cb: 88:42:19:a0:9e:08:ae:80:57:84:6e:52:04:3e:52: 78:8e:f8:3f:67:4f:9c:d3:3a:0d:28:e8:85:95:33: d6:5b:7f:91:84:04:17:da:f0:d0:c4:1d:25:8a:4c: 4d:c1:08:33:08:4c:2b:90:c6:9f:1d:3f:3d:69:3f: b6:d1:b1:20:2c:f8:e1:e3:03:80:96:3c:8d:25:e9: 71:f0:4f:16:33:9d:8e:4a:d5:31:70:40:e2:8c:f4: 3c:3e:f9:25:45:38:c6:9c:ec:cf:6d:39:62:d2:af: 79:3c:8b:6b:e7:5d:49:f6:fd:92:07:1e:03:20:c2: e7:ed:a4:ef:e6:50:6a:c6:a7:35:e5:cb:96:8f:a9: 4f:a0:36:6d:65:03:0e:cb:c9:71:7d:6e:21:61:38: 85:d7:33:78:a5:a3:5a:cf:a3:2f:cd:dc:18:80:a5: df:e1:74:2f:4e:f5:72:65:cd:1a:40:52:f5:d4:ac: eb:af:0d:23:df:2b:a4:87:23:a8:96:83:d7:7f:e4: 07:c8:03:04:ba:a6:00:8e:22:f4:bb:2a:74:da:66: 61:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FE:34:3A:A6:A8:4A:F4:D6:C2:6A:E4:86:86:CF:31:B3:E7:53:26 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/794f94c6-a1e0-44db-ac13-0cb5d0d8bc67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1a::/38 Signature Algorithm: sha256WithRSAEncryption 8a:79:0c:06:f7:95:bb:8c:d1:3f:2d:dc:29:cc:f8:d8:11:a0: 78:b0:d4:e6:cd:fd:42:da:f5:9e:b8:27:a8:a8:0b:c8:79:25: b2:1e:14:cf:33:75:32:04:71:a6:b7:cd:dd:92:a6:04:b5:1d: 45:5c:77:fe:90:0a:6d:12:73:ff:96:c0:11:82:b8:db:79:36: 22:b0:8c:84:99:74:7b:57:40:11:18:95:38:d3:5c:b8:ae:81: aa:d3:1b:1a:5d:c2:e7:44:be:39:c0:74:0d:41:23:ce:87:1d: 8e:9e:f1:ed:e0:3f:2b:55:7c:7f:52:65:ad:13:5d:c0:c0:c4: 0f:71:0c:e7:98:33:6a:5e:09:4c:72:c3:71:5b:47:13:5a:22: f9:ba:81:b7:40:4c:0a:03:96:7f:5e:2f:43:83:8a:14:fa:78: 79:8d:01:be:ed:d2:e0:6f:26:7f:1e:04:a3:73:d7:00:2c:9d: ec:27:7c:ed:f5:9c:55:4f:85:01:25:d8:6c:82:53:75:31:50: 2a:aa:ac:e3:83:f6:e4:77:8e:57:1b:b3:39:03:4b:d4:e0:07: 0c:34:e2:b9:55:fc:a4:12:7f:10:65:1d:3a:0c:9a:29:af:d1: 4f:11:2c:b4:07:b1:8e:00:b0:97:b5:99:f7:99:82:a4:ed:35: cc:f9:a9:4c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQDD+/VxSkDfRg9i41lTG/sdSYSMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMzAxM1oX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAYjBkYTg4OTk5MzFkYjQ4OGM4MWQx NzQ1MWNjOGRmMWIzZWU4YmM4OTgwYzUwNzY3NWQ3MzU1NmRlZGRkMTFmYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuICBFGNvc7XezMK+lUCEH8JbsjNK g7WhSID+pu9B8v3myxElivj+MbjgQcuIQhmgngiugFeEblIEPlJ4jvg/Z0+c0zoN KOiFlTPWW3+RhAQX2vDQxB0likxNwQgzCEwrkMafHT89aT+20bEgLPjh4wOAljyN Jelx8E8WM52OStUxcEDijPQ8PvklRTjGnOzPbTli0q95PItr511J9v2SBx4DIMLn 7aTv5lBqxqc15cuWj6lPoDZtZQMOy8lxfW4hYTiF1zN4paNaz6MvzdwYgKXf4XQv TvVyZc0aQFL11Kzrrw0j3yukhyOoloPXf+QHyAMEuqYAjiL0uyp02mZhrwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLT+NDqmqEr01sJq5IaGzzGz51MmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc5NGY5NGM2LWExZTAtNDRkYi1hYzEzLTBjYjVkMGQ4YmM2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGgAwDQYJKoZIhvcNAQELBQADggEBAIp5DAb3lbuM0T8t3CnM +NgRoHiw1ObN/ULa9Z64J6ioC8h5JbIeFM8zdTIEcaa3zd2SpgS1HUVcd/6QCm0S c/+WwBGCuNt5NiKwjISZdHtXQBEYlTjTXLiugarTGxpdwudEvjnAdA1BI86HHY6e 8e3gPytVfH9SZa0TXcDAxA9xDOeYM2peCUxyw3FbRxNaIvm6gbdATAoDln9eL0OD ihT6eHmNAb7t0uBvJn8eBKNz1wAsnewnfO31nFVPhQEl2GyCU3UxUCqqrOOD9uR3 jlcbszkDS9TgBww04rlV/KQSfxBlHToMmimv0U8RLLQHsY4AsJe1mfeZgqTtNcz5 qUw= -----END CERTIFICATE-----Generated at Mon Aug 4 14:21:48 2025 by rpki-client