$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa File: eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa (raw, json) Hash identifier: 06Dr1Fbr7I0YhmVb11iSobcVpV8N0F8BKgqFYJ++W9Q= Subject key identifier: E9:6B:17:A7:0E:A6:B0:A9:35:A5:F8:6A:CB:36:2E:AB:AD:B0:DF:36 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3834409A4D6A911D1ED3E41E03FA686CF69D99FF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa Signing time: Fri 01 Aug 2025 00:01:35 +0000 ROA not before: Fri 01 Aug 2025 00:01:35 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:34:40:9a:4d:6a:91:1d:1e:d3:e4:1e:03:fa:68:6c:f6:9d:99:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:01:35 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=ea6e407020a1a34a1a4890c12317bde7663bbbc20ad7719254c99d79cbd4e14f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:28:49:0b:ce:0b:46:e1:10:f2:d8:d4:7c: 30:e4:77:51:26:8e:ea:55:2d:3a:b3:90:9c:8a:83: 7e:e0:a8:ef:20:d0:00:49:dc:f0:14:c2:82:3a:9f: 85:8f:24:ab:d1:fb:6e:b0:a8:1e:8a:d5:c7:4e:08: 25:df:99:a0:31:2a:82:50:67:53:c5:d4:03:fa:16: dd:4f:27:4c:ba:01:04:f9:20:cd:f0:d0:72:08:5a: a9:8e:ae:3a:6c:bf:e4:77:3c:0d:cf:ca:68:3b:67: b8:fd:2c:4f:ab:26:4f:60:04:c4:bb:e0:bb:3d:03: 9f:6b:21:67:7e:97:af:b8:5f:fc:8e:6d:52:40:95: 31:21:c7:f9:bb:5e:c6:13:c5:78:09:20:11:47:a8: 14:d9:bc:02:8e:af:8b:6b:6a:4d:57:3f:72:0b:41: 42:63:e9:5d:4d:bc:4d:d4:ee:b3:8d:cd:c5:6b:63: eb:bb:eb:bc:d8:74:ab:79:55:ac:9a:2b:44:f3:4d: 1e:ad:56:da:bf:6a:19:13:58:cd:e4:f9:7b:7d:82: 4e:02:7b:eb:89:15:55:2d:00:a7:d9:9d:a1:a9:34: eb:69:a0:0b:a4:27:af:d5:90:3b:29:a0:c7:03:bd: 30:ed:a8:75:fb:c8:1f:0f:db:45:60:9b:55:15:68: b3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6B:17:A7:0E:A6:B0:A9:35:A5:F8:6A:CB:36:2E:AB:AD:B0:DF:36 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:800::/40 Signature Algorithm: sha256WithRSAEncryption 33:34:c0:e4:8d:db:79:c2:df:34:50:7e:65:dc:98:c9:54:77: 30:82:68:2b:1b:e9:a3:f1:51:04:6d:44:a1:89:1b:9c:35:62: c6:14:37:4c:2e:1f:97:7d:a2:45:0e:3a:ee:36:e7:45:5a:d2: f5:36:7d:c8:d8:a2:16:c9:62:31:e9:27:c6:40:88:c3:4c:78: cc:10:85:74:95:24:3b:2f:e6:24:07:d0:8c:a1:ea:74:41:20: 0a:68:85:9d:c3:90:b2:62:06:15:01:0a:f7:48:f4:39:f4:e1: 94:0b:0e:23:0b:bf:01:80:53:ee:84:ba:93:7f:27:2c:b0:03: 23:a4:33:ca:7e:f2:e7:2b:db:84:f1:38:db:ba:6c:9c:f8:f7: 77:ff:f4:72:0e:cd:52:76:fd:6d:93:51:09:ae:2a:15:6c:31: 26:cb:60:43:b4:18:e0:cd:ee:d2:c3:85:86:1f:26:60:3a:25: d4:76:73:08:0f:3b:0b:5a:49:e1:1c:81:6c:54:a4:c4:46:5d: 2f:4d:f9:b1:5d:01:fd:05:23:12:ab:05:9f:df:f8:0f:d2:70: 24:c9:88:6c:7e:b4:33:1e:cf:cd:75:d0:4f:02:f8:ce:f4:44: 67:f6:9c:e9:3d:96:32:87:37:fd:66:0f:fa:46:54:da:5f:6c: 75:55:0b:2f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUODRAmk1qkR0e0+QeA/pobPadmf8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMDEzNVoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAZWE2ZTQwNzAyMGExYTM0YTFhNDg5 MGMxMjMxN2JkZTc2NjNiYmJjMjBhZDc3MTkyNTRjOTlkNzljYmQ0ZTE0ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YkoSQvOC0bhEPLY1Hww5HdRJo7q VS06s5CcioN+4KjvINAASdzwFMKCOp+FjySr0ftusKgeitXHTggl35mgMSqCUGdT xdQD+hbdTydMugEE+SDN8NByCFqpjq46bL/kdzwNz8poO2e4/SxPqyZPYATEu+C7 PQOfayFnfpevuF/8jm1SQJUxIcf5u17GE8V4CSARR6gU2bwCjq+La2pNVz9yC0FC Y+ldTbxN1O6zjc3Fa2Pru+u82HSreVWsmitE800erVbav2oZE1jN5Pl7fYJOAnvr iRVVLQCn2Z2hqTTraaALpCev1ZA7KaDHA70w7ah1+8gfD9tFYJtVFWizMQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOlrF6cOprCpNaX4ass2LqutsN82MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VlYzdhZDVlLWY2NTYtNGViYy04YmUyLWMzYTQyZmQwMDNjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNggwDQYJKoZIhvcNAQELBQADggEBADM0wOSN23nC3zRQfmXc mMlUdzCCaCsb6aPxUQRtRKGJG5w1YsYUN0wuH5d9okUOOu4250Va0vU2fcjYohbJ YjHpJ8ZAiMNMeMwQhXSVJDsv5iQH0Iyh6nRBIApohZ3DkLJiBhUBCvdI9Dn04ZQL DiMLvwGAU+6EupN/JyywAyOkM8p+8ucr24TxONu6bJz493f/9HIOzVJ2/W2TUQmu KhVsMSbLYEO0GODN7tLDhYYfJmA6JdR2cwgPOwtaSeEcgWxUpMRGXS9N+bFdAf0F IxKrBZ/f+A/ScCTJiGx+tDMez8110E8C+M70RGf2nOk9ljKHN/1mD/pGVNpfbHVV Cy8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:00:08 2025 by rpki-client