$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/535d0c09-610a-4f9b-bf98-e73787d01ce8.roa File: 535d0c09-610a-4f9b-bf98-e73787d01ce8.roa (raw, json) Hash identifier: 7UyKUqX9rrRIR+6eRsflx6Ce6yQhSjoEHgGGwU/ic74= Subject key identifier: 14:ED:7E:B1:D2:AD:57:57:FA:D9:06:53:3E:C7:E6:12:BD:D3:FD:56 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 75F96BD63980F00DF60E4083C40AC2481E02F7D5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/535d0c09-610a-4f9b-bf98-e73787d01ce8.roa Signing time: Tue 03 Jun 2025 19:37:05 +0000 ROA not before: Tue 03 Jun 2025 19:37:05 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f9:6b:d6:39:80:f0:0d:f6:0e:40:83:c4:0a:c2:48:1e:02:f7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 3 19:37:05 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=9888e8ccb872d13da400f7cce0a7b20f331ba134299689086ff92379237d843a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:8a:5b:8c:06:b9:5b:b9:a5:e4:2c:be:74: 17:ee:57:df:a3:4a:3f:cc:58:a6:60:d6:04:ed:8a: 58:69:94:ef:33:b1:5a:62:c3:2b:a8:4c:d5:21:08: 62:e2:a4:00:29:39:1a:b9:bf:2c:96:12:c9:a6:ea: c5:ae:76:57:b2:40:55:41:78:5b:cb:fe:0c:4b:83: c8:5a:72:65:80:7b:f3:db:00:e9:f0:04:68:ce:26: 5a:5e:eb:f5:ae:19:a2:ac:a7:d3:27:a8:03:10:9b: 2a:43:cf:f0:aa:5e:51:e5:6b:89:24:81:d3:a3:0f: a9:1f:5d:56:8d:fd:42:6b:21:46:42:76:1c:7b:ef: 85:a8:dd:8d:20:2a:c8:51:00:a7:33:d3:36:af:e5: dd:0f:28:5b:34:b9:d0:9a:2d:14:1f:74:5b:90:3b: 04:21:16:2d:9e:4b:3c:db:d5:94:38:0c:f7:09:5c: f3:2c:8b:ea:3e:a2:fc:9f:6d:22:98:9b:7d:4f:b1: ad:b2:eb:59:45:6e:50:07:ec:64:37:5d:84:52:48: c3:bc:e6:eb:23:d4:16:1a:8c:66:94:2b:56:d4:76: 87:8d:42:2f:5a:3e:61:f6:bc:73:e9:e3:75:ff:83: 3b:a2:bc:77:43:a2:b9:aa:a3:71:1f:6e:08:32:fd: bb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:ED:7E:B1:D2:AD:57:57:FA:D9:06:53:3E:C7:E6:12:BD:D3:FD:56 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/535d0c09-610a-4f9b-bf98-e73787d01ce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:800::/40 Signature Algorithm: sha256WithRSAEncryption 6c:12:52:2e:26:74:ab:08:57:8b:e5:59:6a:4b:43:05:81:fb: 46:fb:3a:db:f8:1a:df:f2:f2:b6:21:2c:21:38:61:9b:a5:b0: 65:81:f4:d3:49:82:2d:b4:b3:f6:4a:e1:fd:48:9d:c8:73:8d: 95:35:c4:04:0a:7f:9b:7b:b5:20:35:8a:23:ec:17:1d:ad:59: 0f:c6:6f:e5:41:1b:d9:61:96:fa:39:29:e7:95:ba:23:80:4a: ce:46:9d:b8:1f:ea:53:14:9a:aa:91:28:17:71:97:5e:c7:62: 28:e3:b3:9b:df:8d:3f:bb:78:a3:94:96:54:b5:4d:23:01:8d: 53:73:6d:4a:ad:94:26:db:91:cd:af:a0:d9:1c:64:ff:6e:4f: f4:3d:84:6b:4b:65:1a:1b:7c:9c:08:44:8d:cd:8d:0d:7a:8b: 38:f9:39:9a:0c:e0:6d:2a:c5:49:0d:62:25:6e:3f:61:53:55: 4c:c9:4f:90:20:06:fc:97:11:a4:a0:8e:39:2f:cf:d0:0c:e7: b5:d4:13:b2:86:ed:7c:6e:cf:70:c7:47:fd:0f:f7:98:23:21: 52:a1:00:b8:fb:8d:d5:50:b9:bf:6c:fd:c9:c1:25:7c:e2:da: 7f:62:c8:46:98:d8:01:e3:3a:62:81:12:75:a4:0f:99:de:cd: a3:5a:17:04 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdflr1jmA8A32DkCDxArCSB4C99UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwMzE5MzcwNVoX DTI1MDcwODIzNTk1OVowejFJMEcGA1UEBRNAOTg4OGU4Y2NiODcyZDEzZGE0MDBm N2NjZTBhN2IyMGYzMzFiYTEzNDI5OTY4OTA4NmZmOTIzNzkyMzdkODQzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuteKW4wGuVu5peQsvnQX7lffo0o/ zFimYNYE7YpYaZTvM7FaYsMrqEzVIQhi4qQAKTkaub8slhLJpurFrnZXskBVQXhb y/4MS4PIWnJlgHvz2wDp8ARoziZaXuv1rhmirKfTJ6gDEJsqQ8/wql5R5WuJJIHT ow+pH11Wjf1CayFGQnYce++FqN2NICrIUQCnM9M2r+XdDyhbNLnQmi0UH3RbkDsE IRYtnks829WUOAz3CVzzLIvqPqL8n20imJt9T7GtsutZRW5QB+xkN12EUkjDvObr I9QWGoxmlCtW1HaHjUIvWj5h9rxz6eN1/4M7orx3Q6K5qqNxH24IMv27SwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBTtfrHSrVdX+tkGUz7H5hK90/1WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUzNWQwYzA5LTYxMGEtNGY5Yi1iZjk4LWU3Mzc4N2QwMWNlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9AgwDQYJKoZIhvcNAQELBQADggEBAGwSUi4mdKsIV4vlWWpL QwWB+0b7Otv4Gt/y8rYhLCE4YZulsGWB9NNJgi20s/ZK4f1InchzjZU1xAQKf5t7 tSA1iiPsFx2tWQ/Gb+VBG9lhlvo5KeeVuiOASs5Gnbgf6lMUmqqRKBdxl17HYijj s5vfjT+7eKOUllS1TSMBjVNzbUqtlCbbkc2voNkcZP9uT/Q9hGtLZRobfJwIRI3N jQ16izj5OZoM4G0qxUkNYiVuP2FTVUzJT5AgBvyXEaSgjjkvz9AM57XUE7KG7Xxu z3DHR/0P95gjIVKhALj7jdVQub9s/cnBJXzi2n9iyEaY2AHjOmKBEnWkD5nezaNa FwQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:31:32 2025 by rpki-client