$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/361d936c-1adc-484a-92e0-91a674c8ad9d.roa File: 361d936c-1adc-484a-92e0-91a674c8ad9d.roa (raw, json) Hash identifier: WkTeAaYeOg3lBtQY8BZpgndDno3vBhdFJ4cP5ktIg8M= Subject key identifier: 29:69:92:B2:68:00:85:63:85:03:AE:F8:9F:72:92:0F:EB:60:9D:6A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58E7F5F9CF45672B73BAE5ADBBC8C0901B39ECDB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/361d936c-1adc-484a-92e0-91a674c8ad9d.roa Signing time: Mon 09 Jun 2025 15:11:43 +0000 ROA not before: Mon 09 Jun 2025 15:11:43 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e7:f5:f9:cf:45:67:2b:73:ba:e5:ad:bb:c8:c0:90:1b:39:ec:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:11:43 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=9a18aad687677190628f6eeb69a8988a267199ffc1d565cc7ba2e09ea59741d6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:94:52:fd:6c:1a:4a:ea:5e:d9:82:e8:db:44: 2c:39:c4:dc:a6:3b:37:df:69:27:a4:8e:c3:08:f9: 61:84:1d:04:53:44:07:68:de:83:2c:e8:04:66:02: 79:e2:f5:15:3e:c4:28:dd:87:43:c1:ac:21:c3:fc: c6:bc:18:43:5d:94:ed:92:24:0b:06:77:f3:4d:5c: 8f:b3:a7:ce:15:c1:38:7f:df:c9:70:3d:3a:27:ef: a3:dd:b5:61:8f:e5:c8:ca:6c:e4:7d:04:46:ac:ab: cb:16:61:a0:fb:9b:88:73:c4:6c:c9:af:ef:ca:83: 7c:93:33:88:21:84:3c:89:33:a5:11:b2:4e:22:7d: f7:12:bf:f2:50:c5:00:7b:09:59:aa:49:43:6c:19: 7d:02:e3:5f:6a:62:f9:62:bb:b1:a7:fe:c6:d2:28: 38:fa:e4:e8:44:6e:8f:e9:40:fa:6c:38:83:aa:46: 65:c6:36:1e:8c:e2:c6:75:0c:37:44:0a:31:3c:fa: a9:b3:14:f1:bb:f4:a6:5b:81:8b:e1:d7:31:f1:02: 82:6a:9b:00:a3:da:e4:88:d0:70:3b:4d:6a:9d:f4: a9:1f:05:5e:1a:f7:4c:b8:e1:95:20:c0:49:5a:fd: fd:60:ab:7d:89:24:14:f1:5b:9d:88:23:7c:a3:e4: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:69:92:B2:68:00:85:63:85:03:AE:F8:9F:72:92:0F:EB:60:9D:6A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/361d936c-1adc-484a-92e0-91a674c8ad9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption 09:aa:4a:7e:c7:b2:45:3f:2e:e1:f1:1c:8f:25:1e:25:c7:f7: 98:74:4d:89:04:db:9f:05:0a:aa:b3:6b:92:c5:57:56:23:12: 9a:43:1c:7f:0e:95:d5:ad:27:cf:6e:8a:79:2b:4a:6f:a9:2d: fd:ff:47:b7:37:cc:98:e2:0a:b1:dc:46:65:d1:27:2a:cc:32: 24:13:69:5e:ea:c3:59:31:f9:5b:4b:60:86:e1:c7:d5:25:04: db:77:7d:79:80:c4:3f:b0:61:89:6f:24:68:a0:dc:1f:08:3d: 8c:72:77:85:db:93:3a:fb:50:29:40:47:f5:32:51:74:9a:68: 9d:8e:cc:05:52:b4:98:f6:9f:a5:ec:d0:3c:e5:c0:07:53:38: 11:c5:d5:01:9f:53:76:86:f7:da:3d:7f:f8:55:aa:3f:50:08: c0:38:e9:7e:40:f8:7e:c7:26:2f:53:fe:5a:75:51:5c:5a:a3: b6:bf:dd:b4:27:f7:f5:34:3d:55:e4:61:92:cc:73:24:57:ae: 60:62:cc:f6:8b:06:a6:59:bc:da:90:6c:99:12:5a:dd:6c:5e: f1:75:4a:4a:f4:48:67:17:17:81:6d:12:ea:8c:f0:6f:60:da: f0:71:03:6c:83:23:e8:09:b6:9e:43:d2:44:cf:05:64:c1:24: 4e:8e:f3:5b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWOf1+c9FZytzuuWtu8jAkBs57NswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MTE0M1oX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAOWExOGFhZDY4NzY3NzE5MDYyOGY2 ZWViNjlhODk4OGEyNjcxOTlmZmMxZDU2NWNjN2JhMmUwOWVhNTk3NDFkNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35RS/WwaSupe2YLo20QsOcTcpjs3 32knpI7DCPlhhB0EU0QHaN6DLOgEZgJ54vUVPsQo3YdDwawhw/zGvBhDXZTtkiQL BnfzTVyPs6fOFcE4f9/JcD06J++j3bVhj+XIymzkfQRGrKvLFmGg+5uIc8Rsya/v yoN8kzOIIYQ8iTOlEbJOIn33Er/yUMUAewlZqklDbBl9AuNfamL5Yruxp/7G0ig4 +uToRG6P6UD6bDiDqkZlxjYejOLGdQw3RAoxPPqpsxTxu/SmW4GL4dcx8QKCapsA o9rkiNBwO01qnfSpHwVeGvdMuOGVIMBJWv39YKt9iSQU8VudiCN8o+TpHQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFClpkrJoAIVjhQOu+J9ykg/rYJ1qMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM2MWQ5MzZjLTFhZGMtNDg0YS05MmUwLTkxYTY3NGM4YWQ5ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOMDAMA0GCSqGSIb3DQEBCwUAA4IBAQAJqkp+x7JFPy7h8RyP JR4lx/eYdE2JBNufBQqqs2uSxVdWIxKaQxx/DpXVrSfPbop5K0pvqS39/0e3N8yY 4gqx3EZl0ScqzDIkE2le6sNZMflbS2CG4cfVJQTbd315gMQ/sGGJbyRooNwfCD2M cneF25M6+1ApQEf1MlF0mmidjswFUrSY9p+l7NA85cAHUzgRxdUBn1N2hvfaPX/4 Vao/UAjAOOl+QPh+xyYvU/5adVFcWqO2v920J/f1ND1V5GGSzHMkV65gYsz2iwam WbzakGyZElrdbF7xdUpK9EhnFxeBbRLqjPBvYNrwcQNsgyPoCbaeQ9JEzwVkwSRO jvNb -----END CERTIFICATE-----Generated at Sat Jun 14 06:02:19 2025 by rpki-client