$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa File: df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa (raw, json) Hash identifier: YiUKyV3tCOl77pBhLn4zaCBElH0f//c3zmibHFf5o3Q= Subject key identifier: 0F:84:B1:17:1E:60:AA:9C:A4:42:3E:C3:D9:24:1C:85:77:AE:9B:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6BB27CA67A65A313EA5D0211ECD2E42EBDDACFCF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa Signing time: Fri 01 Aug 2025 00:01:40 +0000 ROA not before: Fri 01 Aug 2025 00:01:40 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b2:7c:a6:7a:65:a3:13:ea:5d:02:11:ec:d2:e4:2e:bd:da:cf:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:01:40 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=574350f41d645a5684e941db1b9326922231022e48d0257286fdbdce964de256, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:ad:f9:75:74:4e:e3:20:6f:28:f5:46:4f: a2:a9:3d:1a:09:4c:68:c7:7e:08:f8:de:6c:d8:0e: b2:19:4f:61:39:c8:00:f4:86:de:3d:81:e0:77:e4: 84:55:6d:0d:6d:9c:40:48:91:88:a4:9e:77:61:1d: d3:04:d2:10:23:7c:30:21:5d:46:68:76:87:24:16: c2:e7:56:2a:b2:f0:a6:23:cd:10:87:aa:e7:b9:58: 97:6d:07:ad:1e:53:f6:89:2a:7e:02:26:e1:8d:f1: cb:aa:6c:9a:a0:26:b3:f2:69:85:4d:fd:d9:6f:b2: 44:42:d8:5d:06:fe:d6:31:a0:f2:2b:1a:f0:0c:d6: 1f:fe:b2:35:95:d1:f0:c6:19:9b:67:f5:99:d0:e6: a2:fc:c7:eb:25:1d:e3:83:fe:e0:84:59:88:e9:52: db:c0:54:8d:94:09:4e:76:c0:24:02:fa:e1:41:a4: 74:6a:4a:b9:48:eb:bb:b0:00:7d:65:90:4c:84:5e: 45:52:74:00:5e:e2:3a:72:ca:e3:b2:5b:31:db:14: da:b5:4c:c6:78:59:d7:88:11:89:62:51:05:8e:99: 0f:58:74:f1:ad:c9:ed:b0:64:bc:e4:e6:52:a3:60: ef:e7:8a:db:b3:db:58:db:95:13:c9:81:d7:d6:e2: df:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:84:B1:17:1E:60:AA:9C:A4:42:3E:C3:D9:24:1C:85:77:AE:9B:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:800::/40 Signature Algorithm: sha256WithRSAEncryption 1b:0d:74:0e:93:9b:cb:46:1a:a1:60:79:14:e6:88:9d:61:d6: af:2f:20:67:9f:4f:1b:b5:fe:46:f0:ef:ae:38:dd:77:91:e4: 72:92:f6:5d:28:34:ca:8d:e4:cf:ea:c8:5f:00:ca:d2:a8:72: a7:3a:84:65:34:68:20:3e:ae:53:4a:14:c9:f5:da:f2:1d:c8: 95:eb:4e:ed:2b:ba:c7:db:d8:9c:9f:2f:d5:96:fe:74:6a:e3: 61:3a:29:97:de:55:da:eb:e5:8f:71:43:43:b4:fe:f9:8a:06: 10:77:80:8b:b6:41:82:54:ac:c5:b1:b9:d7:88:65:b4:94:fe: ad:c1:89:9d:be:67:20:4a:95:b3:5e:80:a0:25:f0:b9:d2:10: ee:35:5f:a1:1a:4a:c1:f6:ad:fc:91:fd:ff:1b:f0:c7:c0:ed: 23:2f:03:32:22:7b:aa:26:15:d2:f6:c7:93:ce:e6:5f:b5:02: d6:d4:60:7e:53:72:cb:29:ad:81:b4:af:71:a4:8a:b6:75:c3: f5:86:99:20:9e:8e:5f:e0:a0:47:4d:71:0a:fc:df:5c:fc:a9: d2:ca:56:82:d3:61:5a:33:01:7f:bb:7c:0f:0e:8f:27:d5:b0: 4c:16:d8:b0:eb:f8:a6:29:c4:63:75:52:ea:94:35:72:0c:f5: 94:de:b3:df -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUa7J8pnploxPqXQIR7NLkLr3az88wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMDE0MFoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNANTc0MzUwZjQxZDY0NWE1Njg0ZTk0 MWRiMWI5MzI2OTIyMjMxMDIyZTQ4ZDAyNTcyODZmZGJkY2U5NjRkZTI1NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou+t+XV0TuMgbyj1Rk+iqT0aCUxo x34I+N5s2A6yGU9hOcgA9IbePYHgd+SEVW0NbZxASJGIpJ53YR3TBNIQI3wwIV1G aHaHJBbC51YqsvCmI80Qh6rnuViXbQetHlP2iSp+AibhjfHLqmyaoCaz8mmFTf3Z b7JEQthdBv7WMaDyKxrwDNYf/rI1ldHwxhmbZ/WZ0Oai/MfrJR3jg/7ghFmI6VLb wFSNlAlOdsAkAvrhQaR0akq5SOu7sAB9ZZBMhF5FUnQAXuI6csrjslsx2xTatUzG eFnXiBGJYlEFjpkPWHTxrcntsGS85OZSo2Dv54rbs9tY25UTyYHX1uLfyQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA+EsRceYKqcpEI+w9kkHIV3rpvrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmMGVhOGU1LTJkNTUtNDIxNC05ZTA2LTVlNmZmMzg1MDgzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoAgwDQYJKoZIhvcNAQELBQADggEBABsNdA6Tm8tGGqFgeRTm iJ1h1q8vIGefTxu1/kbw76443XeR5HKS9l0oNMqN5M/qyF8AytKocqc6hGU0aCA+ rlNKFMn12vIdyJXrTu0rusfb2JyfL9WW/nRq42E6KZfeVdrr5Y9xQ0O0/vmKBhB3 gIu2QYJUrMWxudeIZbSU/q3BiZ2+ZyBKlbNegKAl8LnSEO41X6EaSsH2rfyR/f8b 8MfA7SMvAzIie6omFdL2x5PO5l+1AtbUYH5TcssprYG0r3GkirZ1w/WGmSCejl/g oEdNcQr831z8qdLKVoLTYVozAX+7fA8OjyfVsEwW2LDr+KYpxGN1UuqUNXIM9ZTe s98= -----END CERTIFICATE-----Generated at Tue Aug 5 17:16:53 2025 by rpki-client