$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/850e0fc5-88f5-49f5-b9de-6017e72e00eb.roa File: 850e0fc5-88f5-49f5-b9de-6017e72e00eb.roa (raw, json) Hash identifier: VuPeKLkuJScCMj0qseqC3Z96KlMZRnlhjBK8/cM/948= Subject key identifier: AB:FE:1F:1D:FD:89:3C:BE:38:4B:DD:86:F1:5C:06:A6:E3:26:05:D6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1EACF03DD3CEAD005AD744F861A6C1A725581B9A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/850e0fc5-88f5-49f5-b9de-6017e72e00eb.roa Signing time: Mon 21 Jul 2025 15:00:50 +0000 ROA not before: Mon 21 Jul 2025 15:00:50 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ac:f0:3d:d3:ce:ad:00:5a:d7:44:f8:61:a6:c1:a7:25:58:1b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 15:00:50 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=6120a27be5265fe0f13b27e79881967aadc656f1d7da34626b1465bd39271cd3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:78:7e:48:99:e7:82:68:02:44:e4:06:88: 86:6e:9a:c8:fb:b7:96:6d:6e:8d:6d:f0:cf:0c:3a: 2c:96:13:d4:1e:c7:c1:23:80:ca:d6:62:8e:c5:df: fd:87:76:53:79:9a:fd:38:97:79:f7:46:35:a6:4f: 6a:01:62:55:04:d5:e8:fc:c5:2f:f4:6a:81:0c:5a: 3d:71:4d:07:2b:f6:a4:a6:e0:e9:2c:c8:0a:14:55: 45:3e:ad:22:99:09:3e:e6:88:ea:d5:19:e9:cf:76: fe:63:a6:57:05:b6:bb:57:60:f7:d6:93:36:d4:a4: 3a:ee:b1:90:2f:79:ff:b0:d9:76:99:fb:3e:a7:42: ad:94:18:9e:18:57:49:c1:2e:ba:10:5e:b2:3f:e4: 53:ab:34:7a:01:05:94:d3:5a:7c:ce:7a:95:ae:68: 9f:4c:9e:0a:5c:e5:44:31:47:96:21:76:cf:be:03: d4:d8:2c:2c:38:48:e8:42:b2:2a:fc:62:59:0e:c3: de:56:e9:f0:89:df:d6:dd:48:92:a1:05:86:f4:46: b3:04:6b:12:29:1c:bb:ac:bd:ac:b2:d6:8b:ba:a8: ce:30:d5:92:30:b5:03:6b:58:80:e0:ed:0c:ea:a2: 64:23:90:74:bb:b0:90:55:c1:be:76:4f:87:ab:0a: 1a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FE:1F:1D:FD:89:3C:BE:38:4B:DD:86:F1:5C:06:A6:E3:26:05:D6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/850e0fc5-88f5-49f5-b9de-6017e72e00eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c0c0::/46 Signature Algorithm: sha256WithRSAEncryption 20:1d:13:0a:30:0e:e8:90:dc:9d:44:cc:c6:fb:17:93:b0:fe: b1:84:9f:d0:42:db:45:07:09:ab:8e:d3:e1:c6:4d:aa:42:86: ca:24:b9:19:19:2c:db:5c:6e:86:f7:41:2b:9e:75:47:ae:0e: 10:f9:ee:8e:6c:c9:39:48:11:8a:5d:ff:a3:12:66:74:cb:38: ea:2b:5e:c1:02:92:d0:f3:07:e1:4e:53:74:b4:d8:72:d8:fa: 86:51:7c:66:28:ad:f0:8f:9e:c0:c4:0c:ce:83:ff:f7:3e:ca: 44:1d:4a:8e:99:75:a5:5c:50:7e:77:d4:20:9b:78:f0:58:13: fb:d4:82:58:49:08:15:18:03:b0:bb:20:b2:61:3e:9b:48:7b: 40:47:a5:84:dd:7f:0e:b6:20:85:30:0a:37:84:54:a4:82:d7: a3:5a:cc:97:25:45:0c:e3:36:df:97:12:6a:f0:f4:34:b4:19: f3:e3:e9:06:f0:5a:11:c0:da:48:20:a4:8c:19:7b:c3:ef:98: 78:5b:21:7a:7a:05:1e:a1:36:18:e5:20:3e:7f:7e:ca:c3:5a: 5c:9a:91:fc:bb:2a:61:ae:a5:05:1a:c3:96:31:f0:b7:a9:8e: 77:0a:4d:06:f6:f5:cb:50:bf:01:3b:78:c3:5f:fe:56:5a:05: 3b:ba:03:34 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHqzwPdPOrQBa10T4YabBpyVYG5owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMTE1MDA1MFoX DTI1MDgyNTIzNTk1OVowejFJMEcGA1UEBRNANjEyMGEyN2JlNTI2NWZlMGYxM2Iy N2U3OTg4MTk2N2FhZGM2NTZmMWQ3ZGEzNDYyNmIxNDY1YmQzOTI3MWNkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsht4fkiZ54JoAkTkBoiGbprI+7eW bW6NbfDPDDoslhPUHsfBI4DK1mKOxd/9h3ZTeZr9OJd590Y1pk9qAWJVBNXo/MUv 9GqBDFo9cU0HK/akpuDpLMgKFFVFPq0imQk+5ojq1Rnpz3b+Y6ZXBba7V2D31pM2 1KQ67rGQL3n/sNl2mfs+p0KtlBieGFdJwS66EF6yP+RTqzR6AQWU01p8znqVrmif TJ4KXOVEMUeWIXbPvgPU2CwsOEjoQrIq/GJZDsPeVunwid/W3UiSoQWG9EazBGsS KRy7rL2sstaLuqjOMNWSMLUDa1iA4O0M6qJkI5B0u7CQVcG+dk+HqwoaxwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKv+Hx39iTy+OEvdhvFcBqbjJgXWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg1MGUwZmM1LTg4ZjUtNDlmNS1iOWRlLTYwMTdlNzJlMDBlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88DAMA0GCSqGSIb3DQEBCwUAA4IBAQAgHRMKMA7okNydRMzG +xeTsP6xhJ/QQttFBwmrjtPhxk2qQobKJLkZGSzbXG6G90ErnnVHrg4Q+e6ObMk5 SBGKXf+jEmZ0yzjqK17BApLQ8wfhTlN0tNhy2PqGUXxmKK3wj57AxAzOg//3PspE HUqOmXWlXFB+d9Qgm3jwWBP71IJYSQgVGAOwuyCyYT6bSHtAR6WE3X8OtiCFMAo3 hFSkgtejWsyXJUUM4zbflxJq8PQ0tBnz4+kG8FoRwNpIIKSMGXvD75h4WyF6egUe oTYY5SA+f37Kw1pcmpH8uyphrqUFGsOWMfC3qY53Ck0G9vXLUL8BO3jDX/5WWgU7 ugM0 -----END CERTIFICATE-----Generated at Mon Aug 4 15:06:53 2025 by rpki-client