$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d07df133-27a9-413c-9804-adb048f407f3.roa File: d07df133-27a9-413c-9804-adb048f407f3.roa (raw, json) Hash identifier: jzh3YNzRa9RLi6YdEvg+4sgCvtKp1EnjHfaEGbpIX8s= Subject key identifier: 51:C1:42:1B:F6:6D:4F:77:51:39:3F:04:97:06:AF:32:76:BB:FF:30 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 66C53D8A6ACF7CB1B8353FCEF703764E753BF828 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d07df133-27a9-413c-9804-adb048f407f3.roa Signing time: Fri 01 Aug 2025 00:20:12 +0000 ROA not before: Fri 01 Aug 2025 00:20:12 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c5:3d:8a:6a:cf:7c:b1:b8:35:3f:ce:f7:03:76:4e:75:3b:f8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:20:12 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=2a583b61812721f274357dc9c499963ca5ba281c062c5fc2e390bf588ac4e26e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bd:39:89:ba:b5:e0:ca:46:e7:8d:df:c4:38: 5a:fc:9d:8d:4e:0c:66:90:60:e1:c7:70:50:fb:18: 02:c0:b2:70:6f:44:5c:58:c4:4a:dd:d1:34:43:6e: 80:cd:90:3c:53:c2:5e:e1:e1:11:90:2b:64:85:3b: b0:b2:5c:25:f7:8a:99:9e:c6:11:9b:b2:e7:b8:9a: 8f:4c:69:90:af:b4:67:e9:87:f5:eb:4a:5f:54:3e: aa:be:f2:98:5c:37:1b:e5:c8:5f:d2:c1:5d:6a:6a: 24:56:f7:20:fe:d3:62:35:ef:4a:2b:f4:55:6d:c6: a6:40:20:b4:e9:aa:ba:38:09:5f:71:a7:b3:b0:6e: eb:4d:f7:64:f8:07:e2:dc:ac:c3:7d:65:f7:73:32: b9:0d:30:c8:08:f3:09:9d:b9:21:77:e5:a6:b0:01: 24:c3:d6:52:07:ac:e1:ae:28:e4:e3:37:1c:18:12: 87:3c:ea:3b:54:77:f1:9d:88:da:78:6f:93:42:40: 53:99:fd:4e:2f:50:f5:d9:49:88:e5:f5:4c:c3:87: 3c:9e:02:ca:b0:3f:0b:77:1f:10:f2:9f:49:4b:5c: 34:9e:d3:f6:f3:5c:fa:d8:a4:93:56:98:25:42:ca: c7:5d:ae:4f:37:b5:f8:a5:8f:41:4c:3f:e9:fb:89: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C1:42:1B:F6:6D:4F:77:51:39:3F:04:97:06:AF:32:76:BB:FF:30 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d07df133-27a9-413c-9804-adb048f407f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:2800::/40 Signature Algorithm: sha256WithRSAEncryption 10:0b:6b:3a:7d:6a:e1:c3:77:04:32:0a:45:58:b5:06:cd:14: 71:2a:7a:26:c2:f6:d4:c3:80:d5:8e:2e:be:df:f6:2e:3e:ac: 1d:4f:9f:e0:c2:e1:55:47:68:fa:c8:e6:f6:78:27:59:ab:72: 67:f6:7c:ce:00:1c:d9:22:3a:a3:09:62:2c:61:dc:58:d8:6c: 0b:f6:b0:98:06:0e:30:ec:b0:cc:34:a7:05:d9:e4:f2:4e:65: 3b:d3:bb:57:c9:8b:b9:47:89:46:31:fe:78:00:24:9e:ec:86: f8:39:10:98:22:db:20:c2:f1:3b:6a:e1:a5:54:1b:20:5c:5f: d7:8d:fc:a6:a6:27:f4:e5:5f:98:1f:97:9e:4f:11:02:59:28: 62:5e:d3:90:ca:f5:4f:b3:9a:19:6d:4f:cc:1f:e5:17:ee:71: 29:80:34:d4:b4:cd:35:a4:39:78:ce:49:d6:10:3f:5c:f7:e7: d0:bc:8b:fd:df:5c:4e:10:42:08:d5:e8:0a:43:c4:7c:20:81: 2d:73:de:3b:e6:1e:2f:e0:a2:7d:dd:77:48:e3:6a:7c:ed:77: 6f:19:86:66:a5:e8:d3:37:92:31:2c:b6:22:31:77:72:15:fa: 78:3f:9a:3c:bb:fc:fd:b8:da:05:8d:e0:bc:1a:e2:8d:13:65: b0:df:e1:c4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZsU9imrPfLG4NT/O9wN2TnU7+CgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMjAxMloX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAMmE1ODNiNjE4MTI3MjFmMjc0MzU3 ZGM5YzQ5OTk2M2NhNWJhMjgxYzA2MmM1ZmMyZTM5MGJmNTg4YWM0ZTI2ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL05ibq14MpG543fxDha/J2NTgxm kGDhx3BQ+xgCwLJwb0RcWMRK3dE0Q26AzZA8U8Je4eERkCtkhTuwslwl94qZnsYR m7LnuJqPTGmQr7Rn6Yf160pfVD6qvvKYXDcb5chf0sFdamokVvcg/tNiNe9KK/RV bcamQCC06aq6OAlfcaezsG7rTfdk+Afi3KzDfWX3czK5DTDICPMJnbkhd+WmsAEk w9ZSB6zhrijk4zccGBKHPOo7VHfxnYjaeG+TQkBTmf1OL1D12UmI5fVMw4c8ngLK sD8Ldx8Q8p9JS1w0ntP281z62KSTVpglQsrHXa5PN7X4pY9BTD/p+4niZwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFHBQhv2bU93UTk/BJcGrzJ2u/8wMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QwN2RmMTMzLTI3YTktNDEzYy05ODA0LWFkYjA0OGY0MDdmMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoCgwDQYJKoZIhvcNAQELBQADggEBABALazp9auHDdwQyCkVY tQbNFHEqeibC9tTDgNWOLr7f9i4+rB1Pn+DC4VVHaPrI5vZ4J1mrcmf2fM4AHNki OqMJYixh3FjYbAv2sJgGDjDssMw0pwXZ5PJOZTvTu1fJi7lHiUYx/ngAJJ7shvg5 EJgi2yDC8Ttq4aVUGyBcX9eN/KamJ/TlX5gfl55PEQJZKGJe05DK9U+zmhltT8wf 5RfucSmANNS0zTWkOXjOSdYQP1z359C8i/3fXE4QQgjV6ApDxHwggS1z3jvmHi/g on3dd0jjanztd28Zhmal6NM3kjEstiIxd3IV+ng/mjy7/P242gWN4Lwa4o0TZbDf 4cQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:48:54 2025 by rpki-client