$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f722ed1-c2d3-4f34-93db-f2625e7e189a.roa File: 2f722ed1-c2d3-4f34-93db-f2625e7e189a.roa (raw, json) Hash identifier: r6vrbmv3mmvypwr5AvF2wxd83dVGbTwMSMorakGyA58= Subject key identifier: DE:DB:96:72:FB:62:63:B5:65:61:8D:95:2B:34:09:05:7E:53:99:7F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 66B95B8286E0ACDA8E1AF670930828C1579F3819 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f722ed1-c2d3-4f34-93db-f2625e7e189a.roa Signing time: Mon 09 Jun 2025 15:21:28 +0000 ROA not before: Mon 09 Jun 2025 15:21:28 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b9:5b:82:86:e0:ac:da:8e:1a:f6:70:93:08:28:c1:57:9f:38:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:21:28 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=6eea79f3527b021f2927ffc890c13c573133d3d99306b8bab4c9b6ef1e6b1efc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:e1:2c:ca:b4:e4:5e:65:0f:5c:44:6a:73: 4d:04:4b:da:a6:b0:d3:15:0a:53:8b:02:04:8a:65: 9b:e3:34:75:70:74:1d:eb:06:15:e7:52:ac:1a:76: 78:da:f0:8e:29:80:1c:c7:62:01:e6:a9:7b:47:81: e1:45:2d:37:17:d0:75:d5:18:ef:27:34:34:9d:3b: a3:ad:a5:27:ab:37:73:be:cc:ee:99:fd:03:19:79: 89:21:02:5f:fd:f7:34:72:7f:89:5a:15:4f:5d:53: 85:c2:2f:ae:17:04:3f:56:59:63:b8:6a:37:ce:9e: de:bd:95:97:b4:49:bc:2f:87:aa:ec:ea:89:1f:66: 74:0d:67:c0:e8:a5:b4:4e:aa:89:a4:56:4c:7e:6a: ef:7e:4c:e1:c2:61:25:20:b3:aa:52:36:4f:ab:b5: 67:2e:bc:d9:82:b4:63:cf:02:d8:ee:86:5f:99:7e: 6c:f5:10:90:0f:1c:58:2c:e4:7b:23:c2:d4:1d:59: 5b:bb:59:28:e9:e8:46:67:a9:b3:a4:6e:cc:83:82: 8f:e1:2c:b6:40:ae:1f:fc:c9:e0:2a:a7:3c:68:d2: 6a:2b:d0:2a:11:c4:f6:c9:f3:2f:2e:97:34:fe:4c: 8c:b8:b3:a9:1f:96:27:34:24:ff:05:dd:8e:43:89: ae:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DB:96:72:FB:62:63:B5:65:61:8D:95:2B:34:09:05:7E:53:99:7F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f722ed1-c2d3-4f34-93db-f2625e7e189a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:b040::/48 Signature Algorithm: sha256WithRSAEncryption b6:49:c9:c9:c1:a4:61:b3:7f:e0:31:b8:fd:00:f2:6c:29:56: 8a:5a:f3:58:0d:25:45:ea:96:0b:dc:c0:78:08:31:68:72:d6: 3e:e8:a6:f1:d7:ab:6c:1c:a7:d7:8d:40:37:b4:39:8b:c7:c8: 71:3c:5d:14:b0:6d:67:eb:41:f1:84:b3:14:b5:f6:59:17:ed: c5:46:4a:51:38:f4:68:9a:b7:f6:5b:6d:01:03:c0:7b:7a:b4: cb:f9:a0:e6:d7:b1:9a:57:13:e6:90:71:e1:24:0a:c5:a5:ae: 08:5b:77:2d:65:15:ea:86:f1:97:0a:0f:4e:87:35:20:67:72: a4:e8:a9:e8:8f:4e:fc:92:85:a5:51:df:1f:d7:49:29:4d:b4: 07:c1:9f:c1:10:df:08:0b:ee:cc:bf:dc:f8:75:66:b6:67:49: d6:11:1e:4d:9b:66:ed:f3:14:49:5a:4e:b4:d2:55:cb:59:4f: 13:64:38:97:a4:de:e4:3e:d2:7f:0f:dc:c7:0b:9d:2b:44:8a: 9b:56:e6:03:d9:db:25:70:7d:7d:98:be:a4:00:fa:35:76:4b: f5:8c:d3:58:62:13:eb:fb:0f:2a:2f:ed:ba:49:de:21:68:f7: 73:0e:ab:98:39:7d:5a:64:f4:35:70:28:8b:1b:6b:8c:b0:02: 73:03:f7:7a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZrlbgobgrNqOGvZwkwgowVefOBkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MjEyOFoX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNANmVlYTc5ZjM1MjdiMDIxZjI5Mjdm ZmM4OTBjMTNjNTczMTMzZDNkOTkzMDZiOGJhYjRjOWI2ZWYxZTZiMWVmYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/3hLMq05F5lD1xEanNNBEvaprDT FQpTiwIEimWb4zR1cHQd6wYV51KsGnZ42vCOKYAcx2IB5ql7R4HhRS03F9B11Rjv JzQ0nTujraUnqzdzvszumf0DGXmJIQJf/fc0cn+JWhVPXVOFwi+uFwQ/VlljuGo3 zp7evZWXtEm8L4eq7OqJH2Z0DWfA6KW0TqqJpFZMfmrvfkzhwmElILOqUjZPq7Vn LrzZgrRjzwLY7oZfmX5s9RCQDxxYLOR7I8LUHVlbu1ko6ehGZ6mzpG7Mg4KP4Sy2 QK4f/MngKqc8aNJqK9AqEcT2yfMvLpc0/kyMuLOpH5YnNCT/Bd2OQ4muZQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFN7blnL7YmO1ZWGNlSs0CQV+U5l/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmNzIyZWQxLWMyZDMtNGYzNC05M2RiLWYyNjI1ZTdlMTg5YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8rBAMA0GCSqGSIb3DQEBCwUAA4IBAQC2ScnJwaRhs3/gMbj9 APJsKVaKWvNYDSVF6pYL3MB4CDFoctY+6Kbx16tsHKfXjUA3tDmLx8hxPF0UsG1n 60HxhLMUtfZZF+3FRkpROPRomrf2W20BA8B7erTL+aDm17GaVxPmkHHhJArFpa4I W3ctZRXqhvGXCg9OhzUgZ3Kk6Knoj078koWlUd8f10kpTbQHwZ/BEN8IC+7Mv9z4 dWa2Z0nWER5Nm2bt8xRJWk600lXLWU8TZDiXpN7kPtJ/D9zHC50rRIqbVuYD2dsl cH19mL6kAPo1dkv1jNNYYhPr+w8qL+26Sd4haPdzDquYOX1aZPQ1cCiLG2uMsAJz A/d6 -----END CERTIFICATE-----Generated at Sat Jun 14 05:43:17 2025 by rpki-client