$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10ef0103-fda6-4b6f-927e-7799f32459c2.roa File: 10ef0103-fda6-4b6f-927e-7799f32459c2.roa (raw, json) Hash identifier: DfAX/VrEpMqPWSlZFrCdY91qa7rYiq9iMTJNvLzfznc= Subject key identifier: 02:EA:C4:22:D0:32:EF:96:25:62:CE:82:22:39:BF:81:AE:70:10:03 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 687DCFC9EE3D2F3376680A80608415E7E46DBBE8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10ef0103-fda6-4b6f-927e-7799f32459c2.roa Signing time: Tue 10 Jun 2025 15:31:03 +0000 ROA not before: Tue 10 Jun 2025 15:31:03 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da18:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7d:cf:c9:ee:3d:2f:33:76:68:0a:80:60:84:15:e7:e4:6d:bb:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:31:03 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=e3d97749665e6471fd2f43e01e717a3f12d9cda63e21f83fc365d0f8237d429e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:3e:4b:e0:85:46:34:db:59:f2:04:e9:f1: f0:62:c5:ff:80:4b:13:1c:c0:e5:ff:80:c2:80:ad: a4:21:1a:a9:eb:f7:b8:0d:26:ff:05:58:63:d5:04: 81:82:38:91:48:40:c5:6c:6e:a6:21:08:ba:3e:9a: 14:ca:9f:a6:a0:9b:03:13:4d:b5:0d:c6:83:81:95: 3f:c0:6e:55:49:38:2c:eb:2e:64:9c:65:60:73:5c: cd:07:52:c3:f6:f6:4c:21:a7:05:0a:7a:a0:40:49: 19:da:69:63:15:14:15:6c:1e:39:93:54:04:31:65: 79:82:c8:12:34:5d:93:7b:23:66:d4:01:cb:11:a3: 76:75:29:57:86:4c:d7:70:57:03:d6:43:9e:f9:c9: 82:36:1f:a7:1f:1d:5f:c7:33:19:af:d1:d1:d2:19: 2e:46:4b:de:4d:75:aa:e8:87:a9:e3:88:06:48:0f: 64:9f:c8:c4:e9:84:05:aa:ef:ab:dc:0c:a2:af:8c: b5:76:08:85:1a:00:5e:e5:e1:0a:6e:b3:9d:3a:a9: ad:be:78:91:0c:f8:cd:4e:b7:4c:1d:f1:43:7a:54: 44:b3:78:9f:61:1f:d8:38:b5:62:31:d2:05:e3:3d: 69:91:7e:cb:e0:bb:cb:57:05:e2:cd:bf:50:8b:ce: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EA:C4:22:D0:32:EF:96:25:62:CE:82:22:39:BF:81:AE:70:10:03 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10ef0103-fda6-4b6f-927e-7799f32459c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da18:400::/38 Signature Algorithm: sha256WithRSAEncryption 78:1d:aa:8a:85:0f:c2:71:06:95:7f:0d:f5:f7:13:4b:2e:ce: 40:41:1f:9a:8e:19:25:ad:ff:f2:c6:9e:91:8a:d3:e6:ec:4b: 92:7a:f2:7a:a4:20:9d:67:33:a2:a3:41:14:9e:78:ee:13:9b: 64:a5:d1:31:de:b4:f1:89:53:cc:0e:1c:6c:be:cd:be:d4:61: f2:2a:d1:3f:3c:e6:3b:aa:6b:56:64:df:59:a7:5d:4b:f1:75: 44:c4:4e:05:fe:ab:bd:a1:2c:8c:5d:fa:e3:a6:03:1b:ab:c1: 79:06:09:a1:02:26:e0:0d:7d:07:0c:78:19:d1:42:10:af:df: b1:3b:5e:34:e6:82:b5:fb:9c:bf:e9:fe:d0:2c:83:aa:35:a9: 2b:d6:22:01:fb:f5:80:5a:11:d3:72:b1:83:04:3a:13:4d:3f: a0:e1:9a:9d:51:be:6f:61:33:b3:60:5c:4f:92:c3:64:87:9c: 12:0c:d1:56:23:ae:c5:70:f6:f9:c9:0c:86:b3:70:51:f8:63: ed:8c:55:69:8f:15:98:56:5a:b5:b5:8d:95:6d:68:c6:72:57: 28:f9:77:5b:8e:ec:b9:88:68:c1:9d:55:ce:d1:c0:ab:07:2e: 5a:9a:5b:0b:d8:92:7d:8d:70:51:61:83:0f:ee:67:23:9d:46: 60:54:40:4a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaH3Pye49LzN2aAqAYIQV5+Rtu+gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MzEwM1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZTNkOTc3NDk2NjVlNjQ3MWZkMmY0 M2UwMWU3MTdhM2YxMmQ5Y2RhNjNlMjFmODNmYzM2NWQwZjgyMzdkNDI5ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG4+S+CFRjTbWfIE6fHwYsX/gEsT HMDl/4DCgK2kIRqp6/e4DSb/BVhj1QSBgjiRSEDFbG6mIQi6PpoUyp+moJsDE021 DcaDgZU/wG5VSTgs6y5knGVgc1zNB1LD9vZMIacFCnqgQEkZ2mljFRQVbB45k1QE MWV5gsgSNF2TeyNm1AHLEaN2dSlXhkzXcFcD1kOe+cmCNh+nHx1fxzMZr9HR0hku RkveTXWq6Iep44gGSA9kn8jE6YQFqu+r3Ayir4y1dgiFGgBe5eEKbrOdOqmtvniR DPjNTrdMHfFDelREs3ifYR/YOLViMdIF4z1pkX7L4LvLVwXizb9Qi85dXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFALqxCLQMu+WJWLOgiI5v4GucBADMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEwZWYwMTAzLWZkYTYtNGI2Zi05MjdlLTc3OTlmMzI0NTljMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGAQwDQYJKoZIhvcNAQELBQADggEBAHgdqoqFD8JxBpV/DfX3 E0suzkBBH5qOGSWt//LGnpGK0+bsS5J68nqkIJ1nM6KjQRSeeO4Tm2Sl0THetPGJ U8wOHGy+zb7UYfIq0T885juqa1Zk31mnXUvxdUTETgX+q72hLIxd+uOmAxurwXkG CaECJuANfQcMeBnRQhCv37E7XjTmgrX7nL/p/tAsg6o1qSvWIgH79YBaEdNysYME OhNNP6Dhmp1Rvm9hM7NgXE+Sw2SHnBIM0VYjrsVw9vnJDIazcFH4Y+2MVWmPFZhW WrW1jZVtaMZyVyj5d1uO7LmIaMGdVc7RwKsHLlqaWwvYkn2NcFFhgw/uZyOdRmBU QEo= -----END CERTIFICATE-----Generated at Sat Jun 14 06:18:26 2025 by rpki-client