$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d535b481-1ffe-4263-9b5f-9562ed843795.roa File: d535b481-1ffe-4263-9b5f-9562ed843795.roa (raw, json) Hash identifier: toCeI+ss+m95GPnn9sxbRO2KODyEcFloPk3ExnWdQpk= Subject key identifier: 52:09:ED:8C:F5:69:2F:5F:B0:E9:5E:99:A0:46:F8:9D:BE:10:C2:E9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1711820B69B006548E1C3E263FF95ACD0343AA8D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d535b481-1ffe-4263-9b5f-9562ed843795.roa Signing time: Fri 01 Aug 2025 00:40:50 +0000 ROA not before: Fri 01 Aug 2025 00:40:50 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:11:82:0b:69:b0:06:54:8e:1c:3e:26:3f:f9:5a:cd:03:43:aa:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:40:50 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=4aaeca1150ca3f8677c487879a00ed40474168d01eaf4a06670e908cc0f45094, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c5:27:64:d8:c1:a6:0e:3e:0e:71:7e:0e:95: cd:b9:b7:25:28:1d:a6:6d:a8:d4:06:a5:50:86:b0: 54:df:53:b9:13:3c:1e:f1:5b:81:86:da:d2:ea:8e: 97:53:ba:71:6b:3b:c8:24:03:1b:03:61:b2:7f:2b: 0b:41:25:8b:cd:de:18:49:e2:fe:e7:82:e7:a2:3e: 77:e1:cd:46:b7:3a:3e:b2:cc:4b:0a:0f:78:ab:a6: e3:73:97:d8:35:9f:5e:87:48:8f:55:0f:7a:80:c9: e6:c1:c9:df:ea:3a:15:76:a9:93:92:5a:40:58:0d: d1:79:4a:66:a2:3b:c3:70:4c:1f:f8:a8:cc:77:13: 22:99:c6:86:4c:ab:6e:2f:16:00:cd:1b:52:c2:9d: ca:db:66:95:e9:94:01:97:25:02:0b:19:90:70:f9: 49:4f:c8:33:1c:42:45:f4:fd:2a:2f:d4:f2:3b:3d: 5d:8f:5a:22:a9:a9:29:4b:a7:26:a2:61:da:84:4f: 38:5c:cf:25:30:84:90:b6:fb:db:d9:f3:51:47:7d: 60:22:89:8e:c0:ef:ab:71:e5:ad:85:45:e7:68:a2: f2:2c:4e:38:41:1a:14:fa:89:17:d4:7c:a2:e5:49: 8c:e3:28:e1:3b:24:26:ce:08:9d:1e:82:fc:58:09: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:09:ED:8C:F5:69:2F:5F:B0:E9:5E:99:A0:46:F8:9D:BE:10:C2:E9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d535b481-1ffe-4263-9b5f-9562ed843795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:c00::/38 Signature Algorithm: sha256WithRSAEncryption c2:93:bf:a1:b9:d3:d2:87:8f:f0:17:d3:ce:60:dd:e1:96:27: 99:58:56:c1:b4:e0:83:ad:b7:23:f3:e9:fd:4e:00:32:57:5c: fc:03:da:cc:42:08:ca:b1:1f:c6:3f:d2:a5:cb:c5:1b:96:c3: 27:a9:ab:21:d1:a1:c5:2e:c1:8a:0a:37:98:aa:ca:73:e0:f5: 98:77:7c:08:d8:0f:66:90:03:83:0a:03:97:21:60:b1:e0:d3: a3:ff:f3:4b:b5:9a:ea:67:29:1d:76:c7:85:56:2e:25:8c:5c: 01:87:67:49:ff:5d:74:65:b9:b0:f5:2f:6a:b2:bc:00:e4:60: 66:72:a6:2a:6c:0b:bf:5d:47:76:15:66:23:5d:a1:79:08:ac: 5d:af:df:69:6d:c6:9c:e5:14:27:2b:0e:38:bf:ce:f3:d4:89: 37:59:5b:4b:0f:01:18:e8:e9:57:72:b3:f2:15:c7:7d:b6:5d: b7:44:14:eb:e1:d9:58:ec:5f:db:43:f3:8d:b7:21:4e:bf:1e: 51:7a:22:e8:7d:de:72:6f:09:04:1d:2e:04:a8:56:4c:80:d0: 1e:11:33:5c:cd:25:9e:c1:ac:f2:61:92:2c:8e:27:a4:30:9a: 49:70:72:92:9a:b4:34:a2:1b:fc:61:f4:15:9a:98:53:04:28: c7:b4:13:8a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFxGCC2mwBlSOHD4mP/lazQNDqo0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwNDA1MFoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNANGFhZWNhMTE1MGNhM2Y4Njc3YzQ4 Nzg3OWEwMGVkNDA0NzQxNjhkMDFlYWY0YTA2NjcwZTkwOGNjMGY0NTA5NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8UnZNjBpg4+DnF+DpXNubclKB2m bajUBqVQhrBU31O5Ezwe8VuBhtrS6o6XU7pxazvIJAMbA2GyfysLQSWLzd4YSeL+ 54Lnoj534c1Gtzo+ssxLCg94q6bjc5fYNZ9eh0iPVQ96gMnmwcnf6joVdqmTklpA WA3ReUpmojvDcEwf+KjMdxMimcaGTKtuLxYAzRtSwp3K22aV6ZQBlyUCCxmQcPlJ T8gzHEJF9P0qL9TyOz1dj1oiqakpS6cmomHahE84XM8lMISQtvvb2fNRR31gIomO wO+rceWthUXnaKLyLE44QRoU+okX1Hyi5UmM4yjhOyQmzgidHoL8WAm1SwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFIJ7Yz1aS9fsOlemaBG+J2+EMLpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q1MzViNDgxLTFmZmUtNDI2My05YjVmLTk1NjJlZDg0Mzc5NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHAwwDQYJKoZIhvcNAQELBQADggEBAMKTv6G509KHj/AX085g 3eGWJ5lYVsG04IOttyPz6f1OADJXXPwD2sxCCMqxH8Y/0qXLxRuWwyepqyHRocUu wYoKN5iqynPg9Zh3fAjYD2aQA4MKA5chYLHg06P/80u1mupnKR12x4VWLiWMXAGH Z0n/XXRlubD1L2qyvADkYGZypipsC79dR3YVZiNdoXkIrF2v32ltxpzlFCcrDji/ zvPUiTdZW0sPARjo6Vdys/IVx322XbdEFOvh2VjsX9tD8423IU6/HlF6Iuh93nJv CQQdLgSoVkyA0B4RM1zNJZ7BrPJhkiyOJ6QwmklwcpKatDSiG/xh9BWamFMEKMe0 E4o= -----END CERTIFICATE-----Generated at Wed Aug 6 09:37:06 2025 by rpki-client