$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed8cbeea-f5a0-4383-87d7-de8febe599cd.roa File: ed8cbeea-f5a0-4383-87d7-de8febe599cd.roa (raw, json) Hash identifier: equDj/DhQwXgLcjV84szqT5VBGzvCOp4Ybsti7uNv7s= Subject key identifier: 0D:16:A0:77:3E:08:C9:4B:9E:B5:21:F5:66:7E:24:E7:3B:05:DC:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5ED57BCEF0F30DECDAFE5D690E83DDFBB938136B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed8cbeea-f5a0-4383-87d7-de8febe599cd.roa Signing time: Sat 23 Aug 2025 00:41:48 +0000 ROA not before: Sat 23 Aug 2025 00:41:48 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d5:7b:ce:f0:f3:0d:ec:da:fe:5d:69:0e:83:dd:fb:b9:38:13:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:41:48 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=44ddb4d1f8860245575f5cb9dc071ff55708a7577ee640900b28db710462d6ef, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:9f:d7:91:80:91:00:35:9e:b7:ea:a3:c1: 9b:92:70:ba:ed:84:d0:b7:80:6b:3b:bb:2d:40:8b: ce:c7:18:ea:80:68:10:95:89:ce:1e:f9:29:e9:9e: 39:1c:35:a7:9c:ad:5f:39:2f:11:5e:5c:f7:e6:c9: 2e:c2:69:71:5c:8b:1e:21:70:d8:a7:af:e1:72:f8: 4a:87:fd:48:79:d1:d3:b6:16:73:df:0d:e1:59:58: 7c:03:e4:35:5f:59:08:44:24:59:e1:5a:53:9d:9e: 21:d7:8a:03:10:16:b6:61:5c:ca:08:9a:23:bd:3c: 1f:b5:1a:f2:06:96:f0:bd:e4:82:b6:81:40:95:3b: 39:d5:2a:f6:dc:1f:c9:39:66:f9:e4:36:af:24:8e: c4:e7:2d:4f:47:c8:78:e1:92:16:01:7a:58:c3:ff: f4:66:43:48:c6:40:e4:e0:9f:ef:a2:7a:96:6d:e7: 0b:63:ed:a4:72:a7:00:d9:8c:4b:b3:19:50:e4:26: 34:c4:6b:b8:72:72:21:87:7c:02:00:c5:95:e4:3f: ee:d9:5f:eb:db:89:31:c3:e9:28:66:83:2a:0c:64: f8:ab:10:41:5b:f9:14:a2:04:9e:db:a4:bf:4f:58: b4:2d:7e:2b:1a:37:49:41:23:86:78:81:5b:fd:76: ff:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:16:A0:77:3E:08:C9:4B:9E:B5:21:F5:66:7E:24:E7:3B:05:DC:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed8cbeea-f5a0-4383-87d7-de8febe599cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:4080::/48 Signature Algorithm: sha256WithRSAEncryption b8:9d:09:96:5d:e6:ee:a1:85:26:e1:1c:8d:6a:d6:2c:d5:66: 56:08:c7:d1:34:84:57:92:52:a1:c0:06:28:a4:13:21:a8:ca: 5d:2b:4b:3a:9b:32:12:12:75:e1:5a:15:b4:d6:2f:d0:59:55: 14:c2:ff:58:2e:4c:93:5a:a4:cc:17:f2:10:44:4d:e2:19:d0: 78:99:60:91:ec:91:e7:05:08:46:f7:f5:1d:5d:5e:67:fd:48: 1a:e2:60:62:00:a4:ea:79:f0:7a:4a:83:e1:9e:0a:bb:7e:75: ed:fe:44:91:30:67:a4:c1:27:5d:35:14:8e:db:f9:41:0f:57: 31:d3:e8:01:3c:98:e5:b7:71:07:3c:84:37:72:75:48:6f:00: 5b:51:70:ab:e5:82:3f:94:51:39:90:eb:8c:30:71:84:c2:d5: 7f:46:4b:64:63:d5:5c:ef:e3:e9:da:32:9b:d1:c4:8f:53:f8: 1f:be:76:68:d8:0b:90:23:c3:f8:da:a3:a9:23:b6:e4:6e:2d: 82:f9:c6:80:8a:cd:48:0a:fe:16:a7:70:a7:87:d8:a6:a0:f4: 3c:98:9a:24:94:e8:a0:d5:cc:76:59:f4:e4:32:23:28:58:cc: 23:30:0e:66:d5:75:e2:33:a9:78:52:66:73:51:df:e5:16:c8: 85:fb:4e:03 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXtV7zvDzDeza/l1pDoPd+7k4E2swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwNDE0OFoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNANDRkZGI0ZDFmODg2MDI0NTU3NWY1 Y2I5ZGMwNzFmZjU1NzA4YTc1NzdlZTY0MDkwMGIyOGRiNzEwNDYyZDZlZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuKf15GAkQA1nrfqo8GbknC67YTQ t4BrO7stQIvOxxjqgGgQlYnOHvkp6Z45HDWnnK1fOS8RXlz35skuwmlxXIseIXDY p6/hcvhKh/1IedHTthZz3w3hWVh8A+Q1X1kIRCRZ4VpTnZ4h14oDEBa2YVzKCJoj vTwftRryBpbwveSCtoFAlTs51Sr23B/JOWb55DavJI7E5y1PR8h44ZIWAXpYw//0 ZkNIxkDk4J/vonqWbecLY+2kcqcA2YxLsxlQ5CY0xGu4cnIhh3wCAMWV5D/u2V/r 24kxw+koZoMqDGT4qxBBW/kUogSe26S/T1i0LX4rGjdJQSOGeIFb/Xb/0wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFA0WoHc+CMlLnrUh9WZ+JOc7BdxYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VkOGNiZWVhLWY1YTAtNDM4My04N2Q3LWRlOGZlYmU1OTljZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOECAMA0GCSqGSIb3DQEBCwUAA4IBAQC4nQmWXebuoYUm4RyN atYs1WZWCMfRNIRXklKhwAYopBMhqMpdK0s6mzISEnXhWhW01i/QWVUUwv9YLkyT WqTMF/IQRE3iGdB4mWCR7JHnBQhG9/UdXV5n/Uga4mBiAKTqefB6SoPhngq7fnXt /kSRMGekwSddNRSO2/lBD1cx0+gBPJjlt3EHPIQ3cnVIbwBbUXCr5YI/lFE5kOuM MHGEwtV/RktkY9Vc7+Pp2jKb0cSPU/gfvnZo2AuQI8P42qOpI7bkbi2C+caAis1I Cv4Wp3Cnh9imoPQ8mJoklOig1cx2WfTkMiMoWMwjMA5m1XXiM6l4UmZzUd/lFsiF +04D -----END CERTIFICATE-----Generated at Sat Aug 23 08:11:12 2025 by rpki-client