$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4eba370b-504c-4cec-9df7-1704d28e1c93.roa File: 4eba370b-504c-4cec-9df7-1704d28e1c93.roa (raw, json) Hash identifier: 4mEykF3jgcQYzCRzVK6iTwVXDIcZ4j7ipUsifXCyJro= Subject key identifier: A5:B6:CE:4C:01:63:36:B0:66:3A:2C:8A:ED:FE:7D:CD:6E:D9:CD:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 283F59EA8A62B6F9E93C482BF04F56D747CEFF6C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4eba370b-504c-4cec-9df7-1704d28e1c93.roa Signing time: Sat 09 Aug 2025 00:00:11 +0000 ROA not before: Sat 09 Aug 2025 00:00:11 +0000 ROA not after: Sat 13 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da10::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3f:59:ea:8a:62:b6:f9:e9:3c:48:2b:f0:4f:56:d7:47:ce:ff:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 9 00:00:11 2025 GMT Not After : Sep 13 23:59:59 2025 GMT Subject: serialNumber=a40e508b44eede1c7944d47bfabd98bad2473490b394dd93796b08cce10e9478, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:94:c9:43:ef:29:ed:f5:2e:d5:4a:9b:16: 67:4e:e4:2a:ca:0a:b3:52:30:b8:76:7c:75:bd:e3: 75:c1:94:50:18:c4:d3:4d:d2:bb:19:81:cb:5c:66: a1:a4:03:b1:a4:31:5b:2a:f2:8d:23:34:28:a7:f7: 88:8d:48:f9:f7:58:5d:9b:fc:21:0b:a6:e7:fd:96: b7:4c:62:c4:6b:c4:98:4f:0b:4d:a0:59:53:8b:fc: 81:27:74:2c:b7:3b:81:6e:ad:ac:b4:ea:d5:ab:66: 8b:9b:cc:d6:66:f5:af:ae:08:07:d6:71:c3:8e:8d: 93:67:42:0d:8b:97:f8:06:1c:c7:b9:c2:6b:d1:db: f6:99:d7:97:a3:34:08:7e:bc:0d:3a:ad:d8:cf:9f: bc:1a:4b:28:c2:19:b2:b9:65:f5:cb:3f:d7:7e:b8: 60:e8:52:e7:72:20:0d:b6:86:6d:0c:d3:19:ec:aa: 97:cf:f9:36:c2:cd:3d:2e:ed:50:98:8b:95:a3:cc: d0:7b:d4:24:f2:e2:41:c5:f3:14:c9:f2:4c:98:e9: 2a:06:8e:55:ea:a5:a2:8b:de:b3:7c:bf:19:16:69: 5e:be:02:c4:ce:a8:ff:02:bd:27:36:77:f1:26:a0: 76:52:8f:77:85:2c:60:b7:36:12:ab:b6:7b:e1:47: 65:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B6:CE:4C:01:63:36:B0:66:3A:2C:8A:ED:FE:7D:CD:6E:D9:CD:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4eba370b-504c-4cec-9df7-1704d28e1c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da10::/28 Signature Algorithm: sha256WithRSAEncryption 9c:a8:f1:cd:e2:28:f5:0d:6b:be:78:54:1e:4e:4d:59:37:72: 8d:ca:2f:98:c9:56:cb:1e:7f:c6:f8:c2:b7:c5:e0:e9:c8:e7: 52:59:16:77:db:b9:31:d5:6d:7d:b8:91:53:82:29:72:b9:9a: 3e:11:28:5c:a7:0c:32:4d:e5:c6:a8:c3:23:ee:55:4a:03:d9: 7e:df:95:6a:06:93:28:3d:59:8b:c4:66:af:d3:bd:f1:60:b2: 8b:0c:c1:c5:31:a7:84:97:2d:8f:ff:93:15:97:15:42:c6:cd: 62:ca:fb:24:c6:9d:b6:d8:98:dc:8f:62:be:1a:93:34:ab:05: 70:b4:6c:b4:92:aa:83:94:78:f7:4c:4e:ab:76:9f:5d:65:1d: a8:1b:57:96:0c:fc:9d:86:88:86:06:fb:ee:e2:3f:4c:ee:b6: 7d:da:19:e0:57:e7:f4:80:4f:13:33:e2:73:f0:21:c8:3c:ff: 7e:46:42:2a:7e:52:35:ad:a4:c4:c8:77:ea:88:2e:51:2c:19: c8:3b:d2:f2:e7:62:d6:d8:6f:7f:3d:b9:35:22:b2:fb:36:18: 3c:0e:6c:6a:3c:60:34:aa:8c:de:b6:40:03:13:a6:1b:a8:65: bb:57:51:aa:e8:77:9b:09:a8:eb:9d:84:b8:2c:21:a9:f8:9c: 3d:52:c4:c5 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUKD9Z6opitvnpPEgr8E9W10fO/2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwOTAwMDAxMVoX DTI1MDkxMzIzNTk1OVowejFJMEcGA1UEBRNAYTQwZTUwOGI0NGVlZGUxYzc5NDRk NDdiZmFiZDk4YmFkMjQ3MzQ5MGIzOTRkZDkzNzk2YjA4Y2NlMTBlOTQ3ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYyUyUPvKe31LtVKmxZnTuQqygqz UjC4dnx1veN1wZRQGMTTTdK7GYHLXGahpAOxpDFbKvKNIzQop/eIjUj591hdm/wh C6bn/Za3TGLEa8SYTwtNoFlTi/yBJ3QstzuBbq2stOrVq2aLm8zWZvWvrggH1nHD jo2TZ0INi5f4BhzHucJr0dv2mdeXozQIfrwNOq3Yz5+8GksowhmyuWX1yz/Xfrhg 6FLnciANtoZtDNMZ7KqXz/k2ws09Lu1QmIuVo8zQe9Qk8uJBxfMUyfJMmOkqBo5V 6qWii96zfL8ZFmlevgLEzqj/Ar0nNnfxJqB2Uo93hSxgtzYSq7Z74UdlnwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFKW2zkwBYzawZjosiu3+fc1u2c0gMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRlYmEzNzBiLTUwNGMtNGNlYy05ZGY3LTE3MDRkMjhlMWM5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUEJAbaEDANBgkqhkiG9w0BAQsFAAOCAQEAnKjxzeIo9Q1rvnhUHk5N WTdyjcovmMlWyx5/xvjCt8Xg6cjnUlkWd9u5MdVtfbiRU4IpcrmaPhEoXKcMMk3l xqjDI+5VSgPZft+VagaTKD1Zi8Rmr9O98WCyiwzBxTGnhJctj/+TFZcVQsbNYsr7 JMadttiY3I9ivhqTNKsFcLRstJKqg5R490xOq3afXWUdqBtXlgz8nYaIhgb77uI/ TO62fdoZ4Ffn9IBPEzPic/AhyDz/fkZCKn5SNa2kxMh36oguUSwZyDvS8udi1thv fz25NSKy+zYYPA5sajxgNKqM3rZAAxOmG6hlu1dRquh3mwmo652EuCwhqficPVLE xQ== -----END CERTIFICATE-----Generated at Sat Aug 23 06:44:14 2025 by rpki-client