$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fe9e46f2-7ae2-4a38-89eb-91e51e539f45.roa File: fe9e46f2-7ae2-4a38-89eb-91e51e539f45.roa (raw, json) Hash identifier: Z91qHIJI/tycstcQKcfyvQyecL6r4VPikx9QkN8G1oQ= Subject key identifier: 4A:E7:C5:30:91:B8:A7:A7:D4:EA:CC:5D:CB:15:E2:2B:EB:D6:14:B9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2FFA4ACA887F097663DE798B6681BF8DE5A3CFDB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fe9e46f2-7ae2-4a38-89eb-91e51e539f45.roa Signing time: Fri 01 Aug 2025 00:41:18 +0000 ROA not before: Fri 01 Aug 2025 00:41:18 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da17:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:fa:4a:ca:88:7f:09:76:63:de:79:8b:66:81:bf:8d:e5:a3:cf:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:41:18 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=57aef22bafc5143f65b672eb041d81a71674eee1902cf58f4719525af0cf52db, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:03:7a:61:2b:0b:82:4c:53:1a:a1:b5:95: 61:13:a0:54:45:a3:be:18:c2:0c:a2:d2:63:c9:9e: e7:c7:74:92:2f:47:1a:ba:ce:f7:d7:0b:b2:c1:51: 1b:97:72:59:73:17:b6:f3:e0:f3:a9:2b:8c:6e:54: 1c:1e:b4:0c:3d:b6:f5:bd:82:38:ba:f3:f8:8f:ce: ed:74:c3:2a:92:82:68:c0:ed:25:63:bc:14:16:ed: 22:09:0a:f3:ba:c5:0c:06:0a:67:1c:86:be:cc:2c: 93:ab:f0:cb:89:ef:d1:26:66:c9:88:8c:73:d4:51: f1:a2:0a:d9:15:ce:d5:81:d5:60:4f:5e:08:67:57: 67:bc:3e:e5:2e:87:43:15:ff:f7:4e:cb:bc:aa:56: d8:37:bc:f6:fc:50:b2:c9:90:6f:2c:46:e1:82:53: e3:14:a5:17:c8:b0:1d:51:9e:ea:c4:e4:80:7e:eb: 62:e6:86:cb:cb:d0:b8:71:13:6b:a6:3d:92:e4:cf: 56:c6:4e:8f:20:4d:7a:4b:1d:67:c3:76:98:40:df: 64:0f:e9:02:b1:2d:84:c0:62:f2:67:55:8e:6b:39: 44:82:ff:82:c9:ed:86:49:58:cc:52:68:b5:0a:13: af:c6:b4:a1:5d:39:c1:4b:10:de:75:24:f3:03:b1: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E7:C5:30:91:B8:A7:A7:D4:EA:CC:5D:CB:15:E2:2B:EB:D6:14:B9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fe9e46f2-7ae2-4a38-89eb-91e51e539f45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da17:c00::/38 Signature Algorithm: sha256WithRSAEncryption 5c:2e:e1:72:41:39:c1:a3:6c:3d:1d:30:e7:8d:98:81:04:d7: e5:36:ac:c4:a3:f0:53:01:1d:13:67:2b:3f:c9:9e:c5:85:db: 93:39:f5:9b:80:a1:fe:5c:49:64:70:cd:ec:9c:c0:0b:0d:8a: f3:86:17:93:58:43:df:94:96:09:ae:b0:cd:e6:96:e7:b1:a9: 7a:e1:c3:10:08:24:55:3b:88:1a:f1:c2:12:e8:b5:77:47:f7: 25:04:fe:fb:f7:59:f8:0a:e5:0d:6c:d5:98:9c:31:33:8b:47: 79:e5:ca:99:e4:4f:3c:cd:45:2e:72:29:ed:26:3c:eb:9d:71: d3:34:d1:6c:82:91:fa:b4:e9:66:f9:4d:46:77:52:29:fb:3d: 3c:40:8b:1f:b5:54:6d:19:03:d1:4b:c7:ed:16:fd:a5:37:3b: d5:cc:65:f3:69:1d:8f:5f:c2:05:65:3f:88:95:57:77:a1:17: 31:2e:b3:1a:1e:4e:b2:40:9b:07:60:b2:3d:b8:09:db:94:0b: 5a:11:64:b9:c4:63:9d:29:b4:f7:c7:2a:fa:52:9c:98:a4:2f: 13:5d:69:4b:2a:dd:00:9e:ac:c7:b4:16:6e:97:90:7e:b1:b6: ef:41:95:42:c2:7b:09:23:d2:93:44:e1:9e:c2:b4:2a:3d:f4: cb:1d:1a:17 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUL/pKyoh/CXZj3nmLZoG/jeWjz9swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwNDExOFoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNANTdhZWYyMmJhZmM1MTQzZjY1YjY3 MmViMDQxZDgxYTcxNjc0ZWVlMTkwMmNmNThmNDcxOTUyNWFmMGNmNTJkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugMDemErC4JMUxqhtZVhE6BURaO+ GMIMotJjyZ7nx3SSL0caus731wuywVEbl3JZcxe28+DzqSuMblQcHrQMPbb1vYI4 uvP4j87tdMMqkoJowO0lY7wUFu0iCQrzusUMBgpnHIa+zCyTq/DLie/RJmbJiIxz 1FHxogrZFc7VgdVgT14IZ1dnvD7lLodDFf/3Tsu8qlbYN7z2/FCyyZBvLEbhglPj FKUXyLAdUZ7qxOSAfuti5obLy9C4cRNrpj2S5M9Wxk6PIE16Sx1nw3aYQN9kD+kC sS2EwGLyZ1WOazlEgv+Cye2GSVjMUmi1ChOvxrShXTnBSxDedSTzA7EJXQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFErnxTCRuKen1OrMXcsV4ivr1hS5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZlOWU0NmYyLTdhZTItNGEzOC04OWViLTkxZTUxZTUzOWY0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFwwwDQYJKoZIhvcNAQELBQADggEBAFwu4XJBOcGjbD0dMOeN mIEE1+U2rMSj8FMBHRNnKz/JnsWF25M59ZuAof5cSWRwzeycwAsNivOGF5NYQ9+U lgmusM3mluexqXrhwxAIJFU7iBrxwhLotXdH9yUE/vv3WfgK5Q1s1ZicMTOLR3nl ypnkTzzNRS5yKe0mPOudcdM00WyCkfq06Wb5TUZ3Uin7PTxAix+1VG0ZA9FLx+0W /aU3O9XMZfNpHY9fwgVlP4iVV3ehFzEusxoeTrJAmwdgsj24CduUC1oRZLnEY50p tPfHKvpSnJikLxNdaUsq3QCerMe0Fm6XkH6xtu9BlULCewkj0pNE4Z7CtCo99Msd Ghc= -----END CERTIFICATE-----Generated at Mon Aug 4 14:04:21 2025 by rpki-client