$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3070e2cc-7e12-41c7-a980-989a4b17aa7f.roa File: 3070e2cc-7e12-41c7-a980-989a4b17aa7f.roa (raw, json) Hash identifier: x5x7eDlJlN4GcfevUnBcVXTEa3EitYD7LBYqqD8fA50= Subject key identifier: 7E:88:6D:09:AB:F7:0A:8A:96:D6:4D:01:A0:02:2C:8C:78:B8:23:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1AAF057AB247C3B2C1A274D4CEEB470A45626435 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3070e2cc-7e12-41c7-a980-989a4b17aa7f.roa Signing time: Tue 10 Jun 2025 00:11:09 +0000 ROA not before: Tue 10 Jun 2025 00:11:09 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:a0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:af:05:7a:b2:47:c3:b2:c1:a2:74:d4:ce:eb:47:0a:45:62:64:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:11:09 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=ed95dcfd1cd02f157e5391d8b89af7af3ea916648c17a975d45f52398af913c4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:88:4e:a1:bb:b8:9b:f7:77:aa:6b:2d:97:97: 15:2d:60:67:11:6a:0b:ef:f9:03:ca:09:7f:34:10: 66:c8:88:c6:93:85:e7:cf:ad:ad:10:2b:68:7e:73: 23:14:8c:3b:a1:5f:9d:e3:93:ca:3e:73:1f:cd:65: ff:53:24:93:a6:13:5b:cf:c2:5a:9b:22:28:d0:2a: b8:59:20:34:02:6e:ef:68:a0:f3:48:40:f2:f7:08: bd:f5:c4:7b:8a:68:3b:ea:f7:a9:bf:7b:80:14:46: 0f:6a:be:e5:54:43:5d:c1:44:ea:c6:60:7d:e5:26: 41:e1:0c:ff:06:5e:88:e5:db:d3:18:1e:46:98:df: c6:0f:bd:64:15:16:06:a5:46:36:5f:90:bc:12:14: a2:f2:62:b1:dd:9f:86:e9:c4:8e:ba:50:c7:f3:2c: 9e:45:20:bb:c9:7d:08:f1:5a:f0:68:1f:c7:1e:fe: c0:ec:ac:6c:05:76:38:9a:65:ea:8d:ae:44:b0:8a: ea:cc:1f:0d:dd:3c:1f:f2:df:40:ca:3c:95:c8:99: 95:ea:a4:a3:1b:84:05:6f:86:99:96:70:f3:c9:d9: dc:83:c6:31:45:48:b1:7e:f4:55:ff:21:ee:0e:57: 93:a8:6d:e9:80:95:be:50:31:53:4f:e0:ce:b0:3d: 96:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:88:6D:09:AB:F7:0A:8A:96:D6:4D:01:A0:02:2C:8C:78:B8:23:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3070e2cc-7e12-41c7-a980-989a4b17aa7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:a0c0::/46 Signature Algorithm: sha256WithRSAEncryption 40:3a:7b:d3:5f:63:67:b2:0f:b8:aa:51:16:3c:46:78:ff:82: 90:61:96:93:e0:14:c5:45:00:1b:7f:b7:77:ff:62:7a:6c:5d: 11:eb:7c:9f:0a:3a:59:5e:1f:21:ca:17:46:1b:f3:5e:c4:2b: 92:57:0f:ba:c9:22:d8:9a:aa:9c:a5:d2:23:90:90:85:ce:bb: ee:48:d0:31:36:d8:c9:ba:13:cf:a9:d7:83:95:2c:8c:fd:86: eb:c2:15:2f:f2:dd:3a:47:e6:c8:c8:cc:e8:81:3d:09:3a:04: 3d:be:c1:b2:01:d4:eb:d0:5c:af:0b:70:3b:f3:1d:58:ab:1f: 83:ce:85:7d:0f:2b:ed:fb:54:d4:5a:06:0f:94:2c:0d:ac:95: 2f:39:c9:39:bd:a1:fc:d7:ca:cf:28:b2:88:3c:69:db:62:67: d6:cc:99:ac:fd:5c:c8:0e:e2:71:4c:a6:ed:95:c3:f4:da:77: 8e:64:ea:cc:99:c9:51:ec:be:5f:f2:40:08:22:d3:1e:46:7c: fb:ad:00:2b:f6:32:90:42:b4:a8:b2:1b:a2:01:27:3c:cc:9f: 6c:d0:27:82:77:a0:9d:b3:6a:f6:b7:fa:7b:9f:a9:b1:ea:25: d2:57:4b:5e:69:54:96:56:cf:79:b1:df:85:69:85:a2:09:d0: 26:1c:3b:0e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGq8FerJHw7LBonTUzutHCkViZDUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMTEwOVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZWQ5NWRjZmQxY2QwMmYxNTdlNTM5 MWQ4Yjg5YWY3YWYzZWE5MTY2NDhjMTdhOTc1ZDQ1ZjUyMzk4YWY5MTNjNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ohOobu4m/d3qmstl5cVLWBnEWoL 7/kDygl/NBBmyIjGk4Xnz62tECtofnMjFIw7oV+d45PKPnMfzWX/UySTphNbz8Ja myIo0Cq4WSA0Am7vaKDzSEDy9wi99cR7img76vepv3uAFEYPar7lVENdwUTqxmB9 5SZB4Qz/Bl6I5dvTGB5GmN/GD71kFRYGpUY2X5C8EhSi8mKx3Z+G6cSOulDH8yye RSC7yX0I8VrwaB/HHv7A7KxsBXY4mmXqja5EsIrqzB8N3Twf8t9AyjyVyJmV6qSj G4QFb4aZlnDzydncg8YxRUixfvRV/yHuDleTqG3pgJW+UDFTT+DOsD2WVQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH6IbQmr9wqKltZNAaACLIx4uCMBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMwNzBlMmNjLTdlMTItNDFjNy1hOTgwLTk4OWE0YjE3YWE3Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba96DAMA0GCSqGSIb3DQEBCwUAA4IBAQBAOnvTX2Nnsg+4qlEW PEZ4/4KQYZaT4BTFRQAbf7d3/2J6bF0R63yfCjpZXh8hyhdGG/NexCuSVw+6ySLY mqqcpdIjkJCFzrvuSNAxNtjJuhPPqdeDlSyM/YbrwhUv8t06R+bIyMzogT0JOgQ9 vsGyAdTr0FyvC3A78x1Yqx+DzoV9Dyvt+1TUWgYPlCwNrJUvOck5vaH818rPKLKI PGnbYmfWzJms/VzIDuJxTKbtlcP02neOZOrMmclR7L5f8kAIItMeRnz7rQAr9jKQ QrSoshuiASc8zJ9s0CeCd6Cds2r2t/p7n6mx6iXSV0teaVSWVs95sd+FaYWiCdAm HDsO -----END CERTIFICATE-----Generated at Sat Jun 14 06:03:05 2025 by rpki-client