$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ae9fa93-06f6-4e3f-b9ac-3cfc9933e9ec.roa File: 2ae9fa93-06f6-4e3f-b9ac-3cfc9933e9ec.roa (raw, json) Hash identifier: TFd+xK4FJir/HAv41WLsAYq9ismRj84d8RmQ+LfUqqQ= Subject key identifier: 7E:28:59:0F:FF:E1:92:42:3F:47:03:57:51:15:19:78:34:52:49:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6752BA219496A409D5A663A92E146AEE9F61E6D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ae9fa93-06f6-4e3f-b9ac-3cfc9933e9ec.roa Signing time: Tue 10 Jun 2025 00:30:21 +0000 ROA not before: Tue 10 Jun 2025 00:30:21 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:4020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:52:ba:21:94:96:a4:09:d5:a6:63:a9:2e:14:6a:ee:9f:61:e6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:30:21 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=724bd477956cebd1015cd284ca9e78afbf7ef8f7c3ff220fa285a9517b94f226, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:98:da:db:28:45:61:5d:44:09:f4:18:97: 16:60:46:ec:05:e6:47:e3:55:97:fd:20:09:61:0c: 28:34:56:88:5c:4a:5c:ca:ec:36:5f:64:e0:c2:45: f6:31:51:ac:bb:92:0c:34:92:e1:b0:2e:49:ac:f6: de:94:5b:00:71:1d:a1:af:bc:81:96:04:bf:0f:22: 29:e0:d9:dc:36:0c:5b:9c:97:c3:d4:0f:24:2f:5f: ff:11:5c:7e:9e:52:74:70:3b:42:8b:22:e9:ee:a7: 20:14:34:44:2c:73:c8:c0:03:e3:08:d3:42:97:56: e1:ab:c6:71:ea:95:62:84:0b:72:0e:17:5e:dc:a7: 1b:a3:b5:0d:a0:2a:06:54:e8:f6:48:7a:e2:70:df: 61:30:64:70:e4:0b:6d:63:f3:92:b7:e8:1c:fe:26: ac:5a:49:62:8e:8b:41:07:29:ea:e5:df:0e:d8:3b: 4d:ab:c6:d0:6e:5f:5b:43:53:b1:63:a9:df:cb:c5: 80:4b:8f:b6:3f:66:d4:0a:eb:f8:97:82:cf:35:8d: 04:36:de:4b:f4:a9:e5:47:ff:73:81:02:5e:ed:58: 7d:1a:28:a2:ed:17:30:c4:e1:a9:35:75:9b:fd:24: 8e:e6:5b:35:b9:a3:f6:9f:1a:8c:b1:1d:70:15:c6: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:28:59:0F:FF:E1:92:42:3F:47:03:57:51:15:19:78:34:52:49:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ae9fa93-06f6-4e3f-b9ac-3cfc9933e9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:4020::/46 Signature Algorithm: sha256WithRSAEncryption 76:7b:1b:05:83:c7:ea:a6:ce:1a:7c:4a:1a:d6:30:51:e1:dd: 1b:06:8f:94:a6:cd:b0:4b:8b:8a:bb:b2:4d:30:39:19:04:b1: d1:e0:b7:92:45:5c:ad:dd:ea:21:6b:0a:a3:31:17:54:82:53: c2:da:48:d9:ca:22:ee:bc:62:71:19:00:d5:bc:63:7f:1d:2d: 28:6a:1c:27:31:b6:88:37:c6:eb:6f:0e:93:5a:cc:bc:d3:22: 2e:ab:ac:c3:8d:0d:de:b4:1a:23:d7:ee:5f:93:35:72:52:1a: 61:9f:90:da:ea:5b:29:9f:3c:05:e5:02:af:76:be:b7:a0:11: c6:03:97:cc:45:88:6a:cd:65:8f:7c:2b:94:d5:6a:e6:da:a4: 1e:e7:a7:e1:6d:7b:3e:2d:3c:36:4e:8c:3d:49:b7:37:c5:f9: c8:2e:b7:ce:59:23:82:89:b0:69:41:c8:26:ee:4f:62:80:4d: 22:ba:be:c2:2b:52:64:7b:61:99:5b:98:18:8e:42:b4:e8:06: cf:96:e8:63:34:80:e6:10:ce:84:86:79:f9:0b:24:d9:39:c9: df:70:f3:a6:b3:79:5f:0e:f2:bc:b9:01:ab:95:27:aa:fc:cd: 09:99:24:0e:28:63:cb:7d:27:8f:90:f3:c8:1f:58:dc:9c:f6: 66:f7:f0:45 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZ1K6IZSWpAnVpmOpLhRq7p9h5tcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMzAyMVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNANzI0YmQ0Nzc5NTZjZWJkMTAxNWNk Mjg0Y2E5ZTc4YWZiZjdlZjhmN2MzZmYyMjBmYTI4NWE5NTE3Yjk0ZjIyNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUSY2tsoRWFdRAn0GJcWYEbsBeZH 41WX/SAJYQwoNFaIXEpcyuw2X2TgwkX2MVGsu5IMNJLhsC5JrPbelFsAcR2hr7yB lgS/DyIp4NncNgxbnJfD1A8kL1//EVx+nlJ0cDtCiyLp7qcgFDRELHPIwAPjCNNC l1bhq8Zx6pVihAtyDhde3Kcbo7UNoCoGVOj2SHricN9hMGRw5AttY/OSt+gc/ias WklijotBBynq5d8O2DtNq8bQbl9bQ1OxY6nfy8WAS4+2P2bUCuv4l4LPNY0ENt5L 9KnlR/9zgQJe7Vh9Giii7RcwxOGpNXWb/SSO5ls1uaP2nxqMsR1wFcb/VQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH4oWQ//4ZJCP0cDV1EVGXg0UkngMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJhZTlmYTkzLTA2ZjYtNGUzZi1iOWFjLTNjZmM5OTMzZTllYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+0AgMA0GCSqGSIb3DQEBCwUAA4IBAQB2exsFg8fqps4afEoa 1jBR4d0bBo+Ups2wS4uKu7JNMDkZBLHR4LeSRVyt3eohawqjMRdUglPC2kjZyiLu vGJxGQDVvGN/HS0oahwnMbaIN8brbw6TWsy80yIuq6zDjQ3etBoj1+5fkzVyUhph n5Da6lspnzwF5QKvdr63oBHGA5fMRYhqzWWPfCuU1Wrm2qQe56fhbXs+LTw2Tow9 Sbc3xfnILrfOWSOCibBpQcgm7k9igE0iur7CK1Jke2GZW5gYjkK06AbPluhjNIDm EM6Ehnn5CyTZOcnfcPOms3lfDvK8uQGrlSeq/M0JmSQOKGPLfSePkPPIH1jcnPZm 9/BF -----END CERTIFICATE-----Generated at Sat Jun 14 05:59:02 2025 by rpki-client