$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c017ae6c-65e9-495c-a109-f29969b4159f.roa File: c017ae6c-65e9-495c-a109-f29969b4159f.roa (raw, json) Hash identifier: U297nmFzG1QkGwxm1D0ePU0y5Ic1bV9A6diWiOOOrQQ= Subject key identifier: 82:D1:5F:7B:44:A5:9F:4F:B4:2B:9E:56:24:60:F1:84:35:FA:E4:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 07ABBF0EFF308204B7047A41CE03CC60CE738E8A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c017ae6c-65e9-495c-a109-f29969b4159f.roa Signing time: Fri 01 Aug 2025 00:21:20 +0000 ROA not before: Fri 01 Aug 2025 00:21:20 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ab:bf:0e:ff:30:82:04:b7:04:7a:41:ce:03:cc:60:ce:73:8e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:21:20 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=7e3e11e61d2df2be44bc32539b55a109111194f7f42ac37f87feb82ccea64945, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:dc:e1:29:aa:be:f1:41:0b:7a:3f:7f:20: 88:e5:eb:99:2f:dd:7d:2d:ba:90:19:70:a5:a2:79: ab:58:f1:fc:ae:1b:bf:1a:3c:5d:0f:49:b7:e3:e4: f6:c2:04:07:65:6d:ee:cd:cc:d1:fc:eb:1b:70:e1: 9b:8f:5a:af:50:14:ad:39:58:32:0f:31:03:8c:83: 7b:c4:71:e4:bb:e1:52:d6:5a:5d:c6:13:3d:96:28: 66:bf:81:30:e0:59:99:00:2c:fe:d1:82:61:49:0a: 30:84:9d:7e:9f:32:aa:b4:cb:3d:b4:af:6a:1d:58: 02:1f:46:3a:f6:c4:51:8d:f7:84:da:88:86:88:cc: 05:37:ce:21:64:b4:67:9d:88:b6:24:dd:14:67:2a: 4f:b8:b2:77:eb:78:d0:07:c0:da:70:6b:82:d4:9f: 51:8e:0e:cb:82:6c:cf:13:a4:f1:55:f4:13:d0:41: 40:38:df:5a:45:ca:e3:a0:46:dc:96:f5:ec:7b:00: 05:00:4a:8a:2c:7a:06:b5:77:f4:25:67:a7:a5:a6: ed:f3:aa:cc:6b:f0:b0:8a:11:d1:46:14:d6:f7:7e: ef:a0:bc:26:17:77:0e:d3:db:f1:d6:cd:d3:1e:d8: 46:c6:40:0d:91:af:78:10:c4:44:1f:53:99:f6:4f: 32:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D1:5F:7B:44:A5:9F:4F:B4:2B:9E:56:24:60:F1:84:35:FA:E4:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c017ae6c-65e9-495c-a109-f29969b4159f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:2000::/40 Signature Algorithm: sha256WithRSAEncryption 7e:13:83:06:c5:0a:da:aa:1c:f3:50:e1:5c:7f:22:e9:90:47: 2e:b9:1b:47:9d:55:72:cb:62:82:f2:fb:83:b5:8f:54:f1:34: 3e:2d:36:37:9e:81:ce:01:53:23:5a:e7:20:e4:29:81:db:e7: 2b:55:10:5c:59:f5:64:d7:ee:0d:f4:ec:4c:02:b9:d7:96:e5: a4:b3:34:f5:ec:dd:dc:e3:b5:84:32:d1:77:02:84:9e:a2:0e: 01:ac:28:46:14:aa:8a:ce:0f:2c:4b:16:db:03:6e:27:ae:75: d2:69:5d:9c:81:dd:76:5c:16:38:89:30:7f:f4:52:88:73:18: e9:83:f7:0c:e6:23:8a:19:66:51:7d:00:cd:bd:db:43:b6:7c: 70:64:10:7b:d5:d0:e1:3e:c4:2d:62:5a:25:ec:8a:52:ae:89: a6:b1:da:04:8d:21:f3:e9:e3:17:03:65:38:f3:b0:13:b1:f8: 04:a4:98:29:e1:cb:9a:9a:a4:17:9e:fc:f4:5b:54:3a:70:53: 56:02:ef:0c:d4:1e:ae:bc:6f:65:ce:c6:57:23:ee:ff:2e:93: 31:e5:c3:2a:eb:79:2a:95:47:a9:5b:95:a8:92:0b:83:62:59: cb:2e:cb:3e:1b:71:4c:3a:2d:b6:bf:bd:a4:8d:ae:0a:5e:c8: 1b:b6:fa:a9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUB6u/Dv8wggS3BHpBzgPMYM5zjoowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMjEyMFoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAN2UzZTExZTYxZDJkZjJiZTQ0YmMz MjUzOWI1NWExMDkxMTExOTRmN2Y0MmFjMzdmODdmZWI4MmNjZWE2NDk0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2jc4SmqvvFBC3o/fyCI5euZL919 LbqQGXClonmrWPH8rhu/GjxdD0m34+T2wgQHZW3uzczR/OsbcOGbj1qvUBStOVgy DzEDjIN7xHHku+FS1lpdxhM9lihmv4Ew4FmZACz+0YJhSQowhJ1+nzKqtMs9tK9q HVgCH0Y69sRRjfeE2oiGiMwFN84hZLRnnYi2JN0UZypPuLJ363jQB8DacGuC1J9R jg7LgmzPE6TxVfQT0EFAON9aRcrjoEbclvXsewAFAEqKLHoGtXf0JWenpabt86rM a/CwihHRRhTW937voLwmF3cO09vx1s3THthGxkANka94EMREH1OZ9k8ymwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFILRX3tEpZ9PtCueViRg8YQ1+uQiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MwMTdhZTZjLTY1ZTktNDk1Yy1hMTA5LWYyOTk2OWI0MTU5Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+iAwDQYJKoZIhvcNAQELBQADggEBAH4TgwbFCtqqHPNQ4Vx/ IumQRy65G0edVXLLYoLy+4O1j1TxND4tNjeegc4BUyNa5yDkKYHb5ytVEFxZ9WTX 7g307EwCudeW5aSzNPXs3dzjtYQy0XcChJ6iDgGsKEYUqorODyxLFtsDbieuddJp XZyB3XZcFjiJMH/0UohzGOmD9wzmI4oZZlF9AM2920O2fHBkEHvV0OE+xC1iWiXs ilKuiaax2gSNIfPp4xcDZTjzsBOx+ASkmCnhy5qapBee/PRbVDpwU1YC7wzUHq68 b2XOxlcj7v8ukzHlwyrreSqVR6lblaiSC4NiWcsuyz4bcUw6Lba/vaSNrgpeyBu2 +qk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:02:08 2025 by rpki-client