$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea6376bc-3f0a-4473-94e8-31ba637cd756.roa File: ea6376bc-3f0a-4473-94e8-31ba637cd756.roa (raw, json) Hash identifier: t6oM2wsMy5+hROtiGo5n3hTRNh9u6qisOyP/sza26Ck= Subject key identifier: 58:A3:3D:EC:0C:AF:8E:77:79:B6:98:48:88:35:78:99:A5:E3:9C:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C249ED9A9B84F1C074FFDDA7AE428F123C3165D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea6376bc-3f0a-4473-94e8-31ba637cd756.roa Signing time: Wed 23 Jul 2025 00:01:27 +0000 ROA not before: Wed 23 Jul 2025 00:01:27 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:24:9e:d9:a9:b8:4f:1c:07:4f:fd:da:7a:e4:28:f1:23:c3:16:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 23 00:01:27 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=163b8901d0445ad55d23e783f3d94721262752abef1e7c0758a6e1935079ff5b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0b:92:04:0c:53:a5:b4:f7:07:7e:ae:fb:e5: a9:bc:4b:1d:1d:83:d8:e2:b6:bf:d0:90:9d:ae:7f: 0a:68:a6:cf:bb:bc:dc:00:84:39:56:6a:fa:61:3c: b6:d0:8a:32:d5:09:1b:d0:a6:58:b9:f6:76:45:89: a1:b9:ee:de:3b:8f:44:69:2f:48:25:3e:66:59:ae: d9:83:4f:96:9b:b1:66:a6:ca:b2:50:a9:10:77:f0: 6b:80:88:78:66:86:3a:ae:55:66:2a:32:45:f8:ff: 8f:06:49:0f:c0:d4:be:f5:53:9e:43:a3:fe:30:3a: 3c:d6:72:20:cb:f4:48:7e:63:32:34:9f:15:54:9a: 4e:6e:78:3b:4e:0b:84:66:02:0e:fc:33:a5:42:3f: e0:fa:63:f3:48:ae:b0:19:df:6f:5a:00:86:7e:98: d8:b7:cd:f4:ff:ac:e3:77:86:4f:0d:4f:54:62:12: 1a:bf:65:e8:19:a1:04:21:37:e5:5c:ff:e6:12:bd: 8a:f0:25:26:c3:9f:2a:20:01:46:ea:98:61:ed:a5: da:6e:1f:23:82:d2:fa:f0:0d:b1:94:d0:e1:b7:b3: 86:f6:cd:f1:43:52:52:12:a4:0a:34:98:43:ee:6f: 20:2c:7c:a4:67:7d:36:b3:a9:c3:bc:c2:5f:30:bd: 31:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A3:3D:EC:0C:AF:8E:77:79:B6:98:48:88:35:78:99:A5:E3:9C:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea6376bc-3f0a-4473-94e8-31ba637cd756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:4800::/40 Signature Algorithm: sha256WithRSAEncryption b8:f4:78:99:a0:75:07:1f:48:9f:96:ea:81:5b:39:04:f9:9a: 03:62:42:13:18:52:67:59:f8:1c:84:d1:1b:70:f2:84:90:68: 21:f7:7e:06:99:c1:fc:40:3c:ba:08:71:91:f7:cd:9e:d8:43: 22:9b:81:2b:eb:58:f2:4d:58:6f:20:5b:4b:42:cd:28:d8:08: 9a:95:f7:c9:fd:3f:14:23:d1:63:1a:cb:2d:8b:0c:db:f4:f5: cc:4e:74:dd:3c:cf:b2:7c:ee:93:65:34:68:4b:6e:1f:f1:8a: ec:bf:5e:37:54:8b:88:32:55:9b:0f:69:69:43:38:8d:31:ce: 8d:cd:96:e0:8d:5f:98:6b:9e:b8:91:70:6b:70:d2:49:a5:8e: 3b:dc:40:c2:7e:ac:f0:c7:32:11:1b:4c:e5:13:69:5d:0c:a2: 1d:79:7a:9b:42:f3:7f:ee:35:39:ed:ea:89:29:4b:68:cd:6e: 01:ac:e0:79:3c:b0:19:6f:aa:f6:e0:4f:02:57:d5:61:04:44: c9:03:5f:2a:16:a0:45:91:ba:65:e8:50:1e:d4:93:c8:55:7b: 1c:ab:48:d8:fc:33:3a:44:22:e6:f1:18:e3:8d:a4:54:89:a2: fa:4e:19:67:3c:7c:f5:d1:5c:fc:92:61:1d:44:ff:08:8c:e8: 49:a4:e9:eb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTCSe2am4TxwHT/3aeuQo8SPDFl0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMzAwMDEyN1oX DTI1MDgyNzIzNTk1OVowejFJMEcGA1UEBRNAMTYzYjg5MDFkMDQ0NWFkNTVkMjNl NzgzZjNkOTQ3MjEyNjI3NTJhYmVmMWU3YzA3NThhNmUxOTM1MDc5ZmY1YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQuSBAxTpbT3B36u++WpvEsdHYPY 4ra/0JCdrn8KaKbPu7zcAIQ5Vmr6YTy20Ioy1Qkb0KZYufZ2RYmhue7eO49EaS9I JT5mWa7Zg0+Wm7FmpsqyUKkQd/BrgIh4ZoY6rlVmKjJF+P+PBkkPwNS+9VOeQ6P+ MDo81nIgy/RIfmMyNJ8VVJpObng7TguEZgIO/DOlQj/g+mPzSK6wGd9vWgCGfpjY t830/6zjd4ZPDU9UYhIav2XoGaEEITflXP/mEr2K8CUmw58qIAFG6phh7aXabh8j gtL68A2xlNDht7OG9s3xQ1JSEqQKNJhD7m8gLHykZ302s6nDvMJfML0x2QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFijPewMr453ebaYSIg1eJml45zlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VhNjM3NmJjLTNmMGEtNDQ3My05NGU4LTMxYmE2MzdjZDc1Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9EgwDQYJKoZIhvcNAQELBQADggEBALj0eJmgdQcfSJ+W6oFb OQT5mgNiQhMYUmdZ+ByE0Rtw8oSQaCH3fgaZwfxAPLoIcZH3zZ7YQyKbgSvrWPJN WG8gW0tCzSjYCJqV98n9PxQj0WMayy2LDNv09cxOdN08z7J87pNlNGhLbh/xiuy/ XjdUi4gyVZsPaWlDOI0xzo3NluCNX5hrnriRcGtw0kmljjvcQMJ+rPDHMhEbTOUT aV0Moh15eptC83/uNTnt6okpS2jNbgGs4Hk8sBlvqvbgTwJX1WEERMkDXyoWoEWR umXoUB7Uk8hVexyrSNj8MzpEIubxGOONpFSJovpOGWc8fPXRXPySYR1E/wiM6Emk 6es= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:58 2025 by rpki-client