$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/14e739f6-8650-4583-96ca-2f090de0cc47.roa File: 14e739f6-8650-4583-96ca-2f090de0cc47.roa (raw, json) Hash identifier: ZoO/ag9lvBeyGAeGEGmDtth7YWZbqEj2/Mpu96wf77E= Subject key identifier: DF:F7:69:C1:F5:A2:00:86:83:0D:31:15:C8:1A:12:E3:14:78:64:68 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 058278554E01E1B6258388F55DF045B73B11675D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/14e739f6-8650-4583-96ca-2f090de0cc47.roa Signing time: Tue 10 Jun 2025 00:51:32 +0000 ROA not before: Tue 10 Jun 2025 00:51:32 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:82:78:55:4e:01:e1:b6:25:83:88:f5:5d:f0:45:b7:3b:11:67:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:51:32 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=11ac7c41e54f790442bd89b2d425cc105ed4fe9e0003a1feaeea5c374a14369f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:d7:5d:e6:5f:dd:3b:7f:84:f9:54:b9:cc: 8f:10:6d:7b:7a:af:6f:58:aa:6c:5b:ce:e3:79:1f: 10:a5:96:61:d8:64:d4:54:9a:ca:1c:6c:14:82:16: e3:0a:3f:f5:a8:2f:23:04:c9:0d:ba:f4:a1:1e:b5: fa:ce:a1:6e:40:4c:a0:ac:82:f8:77:71:1c:43:c2: 6c:37:b5:2f:c8:03:7a:33:e9:46:1d:1b:1b:f6:f7: 84:d2:57:77:8b:3e:6e:52:ab:67:22:07:ff:9a:d8: 8a:a9:f1:85:53:6d:bd:c2:cf:54:97:8b:44:7d:59: 9b:38:27:3c:6a:9e:0f:4b:20:c3:a4:13:32:19:84: 5c:62:58:4d:6b:31:7e:13:0e:81:16:d1:59:44:91: bd:ce:c2:3e:94:06:e9:5d:ad:f9:97:91:2d:3f:fd: e6:22:98:41:fa:de:ed:24:85:6d:24:b0:d0:c2:c6: 0e:f2:84:28:a9:d9:84:50:49:f0:0b:d0:39:67:a7: 8b:ee:4d:d4:f0:32:0d:a2:cd:4d:2e:b8:6f:b1:11: 20:cc:b4:14:fe:54:41:c9:e9:c1:47:65:1e:3c:71: bb:86:6d:7d:a2:fe:2e:37:71:20:03:38:da:90:17: 7a:8b:25:e0:e5:fb:e1:44:2c:9e:4b:fd:60:31:36: b5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F7:69:C1:F5:A2:00:86:83:0D:31:15:C8:1A:12:E3:14:78:64:68 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/14e739f6-8650-4583-96ca-2f090de0cc47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:f000::/40 Signature Algorithm: sha256WithRSAEncryption 07:a6:a9:7e:60:51:7a:b7:17:d3:a0:de:c5:8f:d4:7b:f0:f8: f8:46:f6:2b:bc:2f:5c:a4:d4:aa:d6:7c:9b:e4:b8:7b:cd:bd: 37:5b:dd:33:e0:18:77:19:27:c9:cf:a2:b5:7e:68:72:78:5e: 9e:05:ed:ac:b0:49:03:a0:f7:85:e5:e7:34:7d:66:93:94:d3: 17:ea:42:c4:52:03:86:97:d2:b5:ff:7b:b0:ec:c4:30:58:d5: cb:bb:08:8f:d0:af:58:36:a7:2e:f2:2f:c3:fb:69:2d:f2:d7: b3:93:ca:41:94:8a:6e:23:92:dc:18:8c:d3:fb:2e:15:e2:6b: ca:46:42:d5:57:e0:da:be:aa:b1:4d:46:2f:92:58:8a:54:ca: d5:f8:33:68:83:af:85:40:ce:86:19:e2:5a:7e:28:fe:20:28: 7c:5c:d9:81:c9:3f:07:2d:81:dc:ed:ea:47:23:87:e7:5d:42: c4:a8:71:a0:98:96:5f:95:fa:d5:66:90:f6:52:08:49:3f:4f: ee:ca:f0:cb:b7:03:19:c3:90:c9:ba:29:39:24:bc:4d:ef:ee: 65:3b:1a:07:5e:d4:c3:3a:5c:63:20:3d:ca:b0:d3:2c:0a:c1: 8f:72:ac:18:ac:cb:a1:d7:44:82:e3:00:de:bc:ed:4e:1b:86: 99:a8:33:49 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBYJ4VU4B4bYlg4j1XfBFtzsRZ10wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwNTEzMloX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAMTFhYzdjNDFlNTRmNzkwNDQyYmQ4 OWIyZDQyNWNjMTA1ZWQ0ZmU5ZTAwMDNhMWZlYWVlYTVjMzc0YTE0MzY5ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBvXXeZf3Tt/hPlUucyPEG17eq9v WKpsW87jeR8QpZZh2GTUVJrKHGwUghbjCj/1qC8jBMkNuvShHrX6zqFuQEygrIL4 d3EcQ8JsN7UvyAN6M+lGHRsb9veE0ld3iz5uUqtnIgf/mtiKqfGFU229ws9Ul4tE fVmbOCc8ap4PSyDDpBMyGYRcYlhNazF+Ew6BFtFZRJG9zsI+lAbpXa35l5EtP/3m IphB+t7tJIVtJLDQwsYO8oQoqdmEUEnwC9A5Z6eL7k3U8DINos1NLrhvsREgzLQU /lRByenBR2UePHG7hm19ov4uN3EgAzjakBd6iyXg5fvhRCyeS/1gMTa12QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN/3acH1ogCGgw0xFcgaEuMUeGRoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE0ZTczOWY2LTg2NTAtNDU4My05NmNhLTJmMDkwZGUwY2M0Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9/AwDQYJKoZIhvcNAQELBQADggEBAAemqX5gUXq3F9Og3sWP 1Hvw+PhG9iu8L1yk1KrWfJvkuHvNvTdb3TPgGHcZJ8nPorV+aHJ4Xp4F7aywSQOg 94Xl5zR9ZpOU0xfqQsRSA4aX0rX/e7DsxDBY1cu7CI/Qr1g2py7yL8P7aS3y17OT ykGUim4jktwYjNP7LhXia8pGQtVX4Nq+qrFNRi+SWIpUytX4M2iDr4VAzoYZ4lp+ KP4gKHxc2YHJPwctgdzt6kcjh+ddQsSocaCYll+V+tVmkPZSCEk/T+7K8Mu3AxnD kMm6KTkkvE3v7mU7Ggde1MM6XGMgPcqw0ywKwY9yrBisy6HXRILjAN687U4bhpmo M0k= -----END CERTIFICATE-----Generated at Sat Jun 14 06:33:21 2025 by rpki-client