$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa File: b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa (raw, json) Hash identifier: N+IXWbK06O+i7vdP/149TeQ/kKGijRugpY2DamIbYB8= Subject key identifier: EA:61:44:12:27:42:82:41:8A:E0:39:57:C9:10:FC:02:04:99:A1:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7977943ED0740FC7F5AAF9D6E758A4D821F950F9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa Signing time: Fri 01 Aug 2025 00:41:26 +0000 ROA not before: Fri 01 Aug 2025 00:41:26 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:77:94:3e:d0:74:0f:c7:f5:aa:f9:d6:e7:58:a4:d8:21:f9:50:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:41:26 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=c346c09eb67ce51274ce91639775adad717ce03f9a98c7f4703685ab3b628961, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:d8:23:e8:c8:6e:12:ce:ea:91:41:92:f2: a0:c6:ba:67:af:a4:78:f7:5a:60:b7:89:fd:0c:4f: 79:f2:42:ab:ed:58:f4:0a:23:5b:ab:86:f2:77:4b: 19:c3:c6:49:90:99:d2:fb:e1:42:ef:85:3d:e8:e8: ef:16:04:7a:4d:fa:55:a0:d2:59:09:40:1a:e9:40: 8c:89:f1:22:30:64:a6:3a:45:26:b5:f4:97:b2:f9: af:87:ee:99:0e:7b:63:14:24:5f:ac:4c:97:53:5d: 16:de:59:44:9c:40:a0:6f:ce:2c:2f:5a:9d:dc:1f: f6:07:6f:7c:51:f5:5f:12:8b:9a:b8:53:e1:c3:7d: 78:4c:6c:4d:ca:74:62:69:eb:0d:83:84:26:8d:e9: a0:d9:17:be:44:63:7f:c2:33:d1:c0:a9:e4:1a:80: de:b9:c9:be:c5:b7:b6:02:c3:7e:9b:02:99:03:c6: 89:ba:a7:be:57:2a:f7:2f:54:99:ed:f6:0d:87:4d: 7d:d9:8c:e3:82:5e:14:a9:7d:d8:f8:81:27:8e:c0: 8e:9f:f6:9c:61:df:af:66:7b:0d:4e:12:ba:35:6b: 3a:b1:52:dc:29:9b:23:88:bb:03:73:86:48:4f:6e: 78:2c:62:bb:ab:9c:94:e3:04:fd:40:ca:10:2e:d4: 20:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:61:44:12:27:42:82:41:8A:E0:39:57:C9:10:FC:02:04:99:A1:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:8800::/38 Signature Algorithm: sha256WithRSAEncryption a8:78:14:fa:43:a8:eb:f0:3b:5e:1d:35:50:85:f1:9f:bc:8e: 78:fb:63:8b:ab:a1:61:87:71:a5:68:ce:a0:1a:11:8b:7a:9b: 4d:a9:2c:90:e1:f8:96:82:67:7d:51:e4:df:31:45:8f:f3:c7: 3a:39:75:bd:bb:1b:e1:6e:7c:fc:1e:cc:2a:30:32:bc:40:f3: 42:09:a0:29:c5:97:66:09:1f:e7:79:b4:e1:da:c4:7e:c0:86: ce:58:94:69:21:4d:9d:7a:c4:ab:da:f6:8a:86:b5:e5:aa:15: a1:9e:f2:b2:f4:31:9d:87:30:4c:a3:6a:a2:6d:c4:ba:48:6b: ed:11:ec:8e:6b:f3:84:f1:0c:b4:68:56:f7:d2:0a:54:e8:8d: 3c:ac:a2:ef:86:bd:51:dc:b3:44:52:c6:af:d9:42:1c:4c:d9: 46:e9:04:7d:26:7f:48:78:25:e2:85:d2:c7:c2:15:ca:27:fa: 52:db:22:68:ae:d5:e4:7f:2d:83:a6:99:15:f5:07:f6:d4:7d: fc:31:72:a1:c4:48:15:a5:1d:fd:57:e3:31:94:59:2c:70:5a: 0c:2f:fb:4f:c5:6e:f6:c6:44:e5:cc:14:fa:51:77:e6:11:ec: 68:87:5d:af:39:48:7b:6d:9b:db:64:30:e3:43:f9:8e:97:c1: 9e:44:03:d0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeXeUPtB0D8f1qvnW51ik2CH5UPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwNDEyNloX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAYzM0NmMwOWViNjdjZTUxMjc0Y2U5 MTYzOTc3NWFkYWQ3MTdjZTAzZjlhOThjN2Y0NzAzNjg1YWIzYjYyODk2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU7YI+jIbhLO6pFBkvKgxrpnr6R4 91pgt4n9DE958kKr7Vj0CiNbq4byd0sZw8ZJkJnS++FC74U96OjvFgR6TfpVoNJZ CUAa6UCMifEiMGSmOkUmtfSXsvmvh+6ZDntjFCRfrEyXU10W3llEnECgb84sL1qd 3B/2B298UfVfEouauFPhw314TGxNynRiaesNg4Qmjemg2Re+RGN/wjPRwKnkGoDe ucm+xbe2AsN+mwKZA8aJuqe+Vyr3L1SZ7fYNh0192Yzjgl4UqX3Y+IEnjsCOn/ac Yd+vZnsNThK6NWs6sVLcKZsjiLsDc4ZIT254LGK7q5yU4wT9QMoQLtQgewIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOphRBInQoJBiuA5V8kQ/AIEmaGrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3YzY0NjhlLTBiNzktNDJjYy05OWY0LWM2ODE2YzZhMWY5NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHIgwDQYJKoZIhvcNAQELBQADggEBAKh4FPpDqOvwO14dNVCF 8Z+8jnj7Y4uroWGHcaVozqAaEYt6m02pLJDh+JaCZ31R5N8xRY/zxzo5db27G+Fu fPwezCowMrxA80IJoCnFl2YJH+d5tOHaxH7Ahs5YlGkhTZ16xKva9oqGteWqFaGe 8rL0MZ2HMEyjaqJtxLpIa+0R7I5r84TxDLRoVvfSClTojTysou+GvVHcs0RSxq/Z QhxM2UbpBH0mf0h4JeKF0sfCFcon+lLbImiu1eR/LYOmmRX1B/bUffwxcqHESBWl Hf1X4zGUWSxwWgwv+0/FbvbGROXMFPpRd+YR7GiHXa85SHttm9tkMOND+Y6XwZ5E A9A= -----END CERTIFICATE-----Generated at Mon Aug 4 16:00:04 2025 by rpki-client