$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7a048e9-67c5-415d-88d4-0acc3454af62.roa File: c7a048e9-67c5-415d-88d4-0acc3454af62.roa (raw, json) Hash identifier: inBVSucDmQRnxBaPhdBK9A6xcnKW3rN1Vaq7GOimsiM= Subject key identifier: 7C:DD:BF:A0:D5:1F:FF:8F:2B:63:F8:AB:FD:8D:06:E9:9D:95:1C:1D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C98A24BF7568A7BABD2CC9919869546778EC601 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7a048e9-67c5-415d-88d4-0acc3454af62.roa Signing time: Fri 01 Aug 2025 00:20:19 +0000 ROA not before: Fri 01 Aug 2025 00:20:19 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:98:a2:4b:f7:56:8a:7b:ab:d2:cc:99:19:86:95:46:77:8e:c6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:20:19 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=af2e1812598aaa4801a9a7fc82dadf2b84fddda46e19ff334498af5ab33ba377, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:36:95:96:5f:2d:c2:64:e1:bb:6e:d9:77: 4d:50:29:af:57:b6:a4:e1:10:fe:37:4c:9d:cf:af: 5d:88:d7:06:d9:2b:e7:4b:fb:f2:37:52:3a:26:96: bf:af:dd:52:d4:a5:08:8a:af:47:62:12:3d:69:c6: 2e:5b:75:b6:95:94:db:de:8d:1f:22:e0:47:5f:10: 4b:01:17:02:4a:7c:3a:a9:ec:15:5b:27:de:21:93: 67:df:7d:76:95:2e:58:34:f3:9d:06:18:94:33:f4: be:41:44:63:a5:7e:86:34:89:0f:d3:30:a3:99:b0: e0:9f:89:43:51:ac:db:81:b4:81:f2:7d:68:eb:5f: 25:6c:8b:e9:30:79:fd:98:12:0d:89:f3:e2:90:f7: 7c:53:9b:a2:d8:17:d8:ab:a9:a8:81:c8:27:2d:02: d6:85:7a:2e:7d:0f:6e:29:41:c1:08:93:cf:d8:da: ce:b3:31:cd:8c:c0:18:b5:68:13:91:4d:8c:8f:7a: 09:26:70:15:a7:3a:0f:a9:de:22:e5:41:5b:20:27: 8e:c2:5b:9d:8a:89:e4:68:25:fb:ed:c1:19:e9:69: 39:96:e9:c8:5c:1c:05:4b:8b:ee:6b:e7:0a:a7:d8: 56:76:34:32:0e:c7:58:bc:d8:c2:18:c6:71:fa:f1: 7d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DD:BF:A0:D5:1F:FF:8F:2B:63:F8:AB:FD:8D:06:E9:9D:95:1C:1D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7a048e9-67c5-415d-88d4-0acc3454af62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:8000::/40 Signature Algorithm: sha256WithRSAEncryption 27:89:ad:79:e8:b8:dc:d4:a0:a6:ba:68:e9:f3:2a:72:12:fd: 7b:c4:55:27:9b:73:85:14:78:2b:6b:d6:8a:d1:56:2e:41:dd: e9:4a:79:77:59:66:33:37:a7:b0:55:29:4b:38:93:26:51:d7: 7d:3e:88:1a:ad:31:2e:91:d3:62:e9:8e:ef:29:bb:8f:ff:4c: ab:fd:de:c4:ad:9a:85:7f:a6:4b:87:0b:64:5d:5d:d5:55:02: a4:a3:2f:69:8b:3b:26:a0:6f:45:c7:96:f6:79:a2:b8:0d:31: b7:e8:f6:08:75:4f:c2:11:8f:13:8b:7b:1b:04:a2:dc:4e:f1: 77:45:59:65:e8:4f:8c:90:fb:21:88:69:03:04:96:5d:0e:ae: 5d:db:64:ed:39:f8:b7:47:f0:91:9d:94:aa:0c:74:82:14:53: 82:79:4b:b8:ef:64:18:a9:3a:c4:b9:8b:84:7b:d9:7d:d6:ae: ad:23:88:75:57:8c:cf:05:b6:1a:19:aa:0d:c9:73:d9:37:80: b5:26:40:b0:28:81:44:cd:80:10:a6:6b:cd:99:10:6b:6c:34: f8:04:f2:2d:d7:d3:b9:2c:5d:19:7f:ed:64:43:4e:b0:4c:17: 46:a2:85:0b:47:b7:8c:e0:27:82:48:b3:f2:40:18:7d:37:0f: 02:31:70:3c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXJiiS/dWinur0syZGYaVRneOxgEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMjAxOVoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAYWYyZTE4MTI1OThhYWE0ODAxYTlh N2ZjODJkYWRmMmI4NGZkZGRhNDZlMTlmZjMzNDQ5OGFmNWFiMzNiYTM3NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7w2lZZfLcJk4btu2XdNUCmvV7ak 4RD+N0ydz69diNcG2SvnS/vyN1I6Jpa/r91S1KUIiq9HYhI9acYuW3W2lZTb3o0f IuBHXxBLARcCSnw6qewVWyfeIZNn3312lS5YNPOdBhiUM/S+QURjpX6GNIkP0zCj mbDgn4lDUazbgbSB8n1o618lbIvpMHn9mBINifPikPd8U5ui2BfYq6mogcgnLQLW hXoufQ9uKUHBCJPP2NrOszHNjMAYtWgTkU2Mj3oJJnAVpzoPqd4i5UFbICeOwlud ionkaCX77cEZ6Wk5lunIXBwFS4vua+cKp9hWdjQyDsdYvNjCGMZx+vF9vwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHzdv6DVH/+PK2P4q/2NBumdlRwdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3YTA0OGU5LTY3YzUtNDE1ZC04OGQ0LTBhY2MzNDU0YWY2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/oAwDQYJKoZIhvcNAQELBQADggEBACeJrXnouNzUoKa6aOnz KnIS/XvEVSebc4UUeCtr1orRVi5B3elKeXdZZjM3p7BVKUs4kyZR130+iBqtMS6R 02Lpju8pu4//TKv93sStmoV/pkuHC2RdXdVVAqSjL2mLOyagb0XHlvZ5orgNMbfo 9gh1T8IRjxOLexsEotxO8XdFWWXoT4yQ+yGIaQMEll0Orl3bZO05+LdH8JGdlKoM dIIUU4J5S7jvZBipOsS5i4R72X3Wrq0jiHVXjM8FthoZqg3Jc9k3gLUmQLAogUTN gBCma82ZEGtsNPgE8i3X07ksXRl/7WRDTrBMF0aihQtHt4zgJ4JIs/JAGH03DwIx cDw= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:47 2025 by rpki-client