$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28ff52d2-0135-4def-a017-40424079b2a7.roa File: 28ff52d2-0135-4def-a017-40424079b2a7.roa (raw, json) Hash identifier: u17mMcuvTdxWfCFkkKbNwOdfnNMrV/iwXbwduuGcuhI= Subject key identifier: 42:CA:E6:8F:43:EE:B7:94:31:1C:08:9A:5D:8E:7D:0E:11:0E:BC:03 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 31B9D88B4FF2D75BF9305F9357A7ACEFC51FBB75 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28ff52d2-0135-4def-a017-40424079b2a7.roa Signing time: Mon 09 Jun 2025 15:00:56 +0000 ROA not before: Mon 09 Jun 2025 15:00:56 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b9:d8:8b:4f:f2:d7:5b:f9:30:5f:93:57:a7:ac:ef:c5:1f:bb:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:00:56 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=7449093192531bd79187dbda8f60625986c5a2e58b07de5aa4c37f1547406b37, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4f:d1:6a:94:33:82:39:8d:9e:f7:08:a7:26: af:de:51:c5:f5:92:29:c3:4e:e9:27:02:92:41:9b: 06:23:26:89:03:e8:03:23:d9:7f:fc:ac:d3:eb:f1: f0:33:f0:6e:fd:1f:ba:84:7d:e1:21:2b:ac:28:05: 74:27:c6:e7:47:30:bf:e0:e5:f9:be:1c:b1:a7:19: 32:db:9b:35:57:71:4b:c8:ad:ae:d8:88:22:40:21: 70:61:54:ec:fc:f2:a4:bc:36:73:c4:dd:d3:84:8e: 21:3a:30:0a:aa:a8:25:56:67:34:57:d9:1c:c6:71: 0a:0e:9f:3d:b9:cc:de:0b:9c:83:a4:ed:22:70:ce: e2:aa:73:52:f5:a4:4a:49:9b:b7:cf:b5:10:54:7a: 0e:a1:c2:4b:9f:55:3a:10:e5:ee:b5:5c:aa:67:06: 3f:ab:69:4e:37:3a:16:8a:c1:25:b7:8f:e6:87:9c: f1:18:7e:f9:aa:cf:15:7c:9d:af:45:59:61:bd:2f: 3a:6d:1e:ec:06:2e:4b:72:12:eb:6b:62:23:08:e6: 38:a3:06:fe:44:2c:59:12:7c:d6:78:60:75:d3:49: 1b:ad:f5:db:68:b0:b9:5f:7f:ec:da:dd:9d:9e:62: c8:66:f2:b4:fe:c1:4d:6f:10:b5:d6:65:6a:3c:40: 8f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CA:E6:8F:43:EE:B7:94:31:1C:08:9A:5D:8E:7D:0E:11:0E:BC:03 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28ff52d2-0135-4def-a017-40424079b2a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:880::/48 Signature Algorithm: sha256WithRSAEncryption 7c:b4:f2:03:00:0a:b6:66:f2:a4:e2:6b:3f:50:9f:a3:bd:cc: 12:cc:9a:bd:21:1d:ac:33:a5:c6:f6:38:c8:ff:b1:1a:b9:42: b9:62:dd:b1:0d:da:f3:ef:32:77:09:30:c9:56:e4:d9:e9:b2: 35:b1:66:b3:77:e4:b0:57:67:b2:9a:37:20:f2:b1:7b:a4:46: 5b:d7:b3:97:d8:63:e6:bf:26:0d:16:c0:78:16:1a:03:0f:02: 59:cc:c6:8e:cb:1a:72:0e:06:7e:10:b8:b0:fc:d9:13:23:d1: ee:51:a7:45:84:c2:ad:b5:64:0c:c5:b7:d0:9d:57:0f:64:bf: 1b:7e:0e:87:87:56:be:bd:37:09:d4:d3:16:c5:50:cf:8a:e6: d3:98:09:fb:d4:b2:33:ae:35:20:85:0c:20:73:58:84:77:73: fb:ac:e9:41:fd:02:fa:de:dc:0b:df:19:90:48:61:42:52:da: ad:22:9f:c3:7f:9c:e9:ae:ec:94:b9:48:4d:f2:3b:a2:fd:2c: 05:87:a5:a1:67:97:68:e3:ce:5a:c5:03:7f:47:15:85:0f:1b: da:06:a7:65:1a:11:e8:d4:ec:f5:06:83:04:62:58:6a:3b:ee: ef:45:a0:4c:d5:4c:ca:c2:e5:2e:8f:a2:bc:be:ef:19:2c:28: 5c:40:f9:da -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMbnYi0/y11v5MF+TV6es78Ufu3UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MDA1NloX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNANzQ0OTA5MzE5MjUzMWJkNzkxODdk YmRhOGY2MDYyNTk4NmM1YTJlNThiMDdkZTVhYTRjMzdmMTU0NzQwNmIzNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k/RapQzgjmNnvcIpyav3lHF9ZIp w07pJwKSQZsGIyaJA+gDI9l//KzT6/HwM/Bu/R+6hH3hISusKAV0J8bnRzC/4OX5 vhyxpxky25s1V3FLyK2u2IgiQCFwYVTs/PKkvDZzxN3ThI4hOjAKqqglVmc0V9kc xnEKDp89uczeC5yDpO0icM7iqnNS9aRKSZu3z7UQVHoOocJLn1U6EOXutVyqZwY/ q2lONzoWisElt4/mh5zxGH75qs8VfJ2vRVlhvS86bR7sBi5LchLra2IjCOY4owb+ RCxZEnzWeGB100kbrfXbaLC5X3/s2t2dnmLIZvK0/sFNbxC11mVqPECPHQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFELK5o9D7reUMRwIml2OfQ4RDrwDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI4ZmY1MmQyLTAxMzUtNGRlZi1hMDE3LTQwNDI0MDc5YjJhNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/wiAMA0GCSqGSIb3DQEBCwUAA4IBAQB8tPIDAAq2ZvKk4ms/ UJ+jvcwSzJq9IR2sM6XG9jjI/7EauUK5Yt2xDdrz7zJ3CTDJVuTZ6bI1sWazd+Sw V2eymjcg8rF7pEZb17OX2GPmvyYNFsB4FhoDDwJZzMaOyxpyDgZ+ELiw/NkTI9Hu UadFhMKttWQMxbfQnVcPZL8bfg6Hh1a+vTcJ1NMWxVDPiubTmAn71LIzrjUghQwg c1iEd3P7rOlB/QL63twL3xmQSGFCUtqtIp/Df5zpruyUuUhN8jui/SwFh6WhZ5do 485axQN/RxWFDxvaBqdlGhHo1Oz1BoMEYlhqO+7vRaBM1UzKwuUuj6K8vu8ZLChc QPna -----END CERTIFICATE-----Generated at Sat Jun 14 06:00:05 2025 by rpki-client