$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa File: 612ca3c6-0251-4029-8118-ab1be2a61379.roa (raw, json) Hash identifier: Q/EawNPjG/Qxmx2qpCqSa5R3KiOhMTVMbFreh3xGn24= Subject key identifier: 92:61:E6:2A:3C:16:EE:6C:DE:B0:E9:0F:5E:AB:61:55:C6:6A:40:4E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5FF66BC6B19375E56F967F45481D919E0B083143 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa Signing time: Sat 07 Jun 2025 00:01:44 +0000 ROA not before: Sat 07 Jun 2025 00:01:44 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f6:6b:c6:b1:93:75:e5:6f:96:7f:45:48:1d:91:9e:0b:08:31:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 7 00:01:44 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=3e41faae154ee60666f02782b3f6fb6a20498daf7533d3d0294151a620c8760c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:86:1e:3a:37:eb:31:f4:66:88:91:13:56:13: 7e:0f:d8:b4:be:b1:5d:af:dc:d2:67:21:67:50:fc: f7:8c:55:b9:a0:e4:b4:3d:0c:80:83:ce:27:14:84: 2f:98:ad:b1:95:ae:55:96:27:82:9f:cf:c7:a4:a1: 09:e9:5b:67:27:51:f1:9b:8f:cd:98:a8:c7:b5:81: 18:7d:c4:99:28:f4:c6:46:3a:eb:17:a9:5e:b9:e0: 21:33:89:55:36:e9:ba:1f:1d:21:33:2a:3e:ed:32: 7c:90:a7:41:3f:0f:bc:ed:21:9c:10:f6:dd:2e:e6: 64:f7:6c:9a:30:5c:c8:48:63:e9:99:94:15:5b:1c: 59:5d:a8:ec:94:e3:6c:b7:a2:1b:6f:6d:c8:98:82: 53:40:2a:cb:7e:ec:d3:8b:10:d8:5d:43:15:8f:6b: 14:13:23:bf:eb:a0:83:60:22:18:fd:9d:b7:94:d3: 24:00:45:6f:cb:b8:ae:83:84:d4:ea:4b:55:94:99: b3:ab:79:15:cf:0c:83:71:d6:67:fc:49:01:75:1d: 5e:0d:c7:ed:82:85:2c:71:39:c8:dc:49:9f:14:69: c8:b2:54:3e:35:63:34:0e:ca:ee:47:75:a6:e8:a9: 57:db:c4:d5:77:74:b8:c4:5f:2d:63:c5:b6:63:9c: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:61:E6:2A:3C:16:EE:6C:DE:B0:E9:0F:5E:AB:61:55:C6:6A:40:4E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4040::/48 Signature Algorithm: sha256WithRSAEncryption 57:d1:98:a5:f2:cd:1d:e1:0d:4f:2e:56:ef:94:35:3b:1d:54: 50:f0:7b:af:99:a4:e5:c2:93:7f:14:e7:de:9d:9e:d8:f2:c8: 57:3f:39:ba:65:45:2f:6f:22:66:c4:5c:16:32:d2:d8:cf:46: 28:2c:2a:6f:e7:df:32:df:7d:e8:24:86:a3:c7:fb:f1:c6:f2: f6:34:c9:7f:02:1f:a1:1f:41:fb:7c:40:2a:e9:fd:c7:d5:ae: 7f:c2:55:34:21:3c:0f:f1:9f:d2:01:b8:ec:81:a3:b4:ea:a4: b7:29:4d:f3:49:19:19:c1:29:cb:12:69:25:27:99:64:0a:e6: fc:26:4f:9a:91:47:53:62:96:b6:25:a2:25:ba:8f:c7:9d:6b: 87:fc:6b:16:c4:df:eb:80:46:07:2a:a8:2c:d0:65:99:1a:2c: b9:b4:85:b6:c1:b9:cc:52:11:59:d8:f9:ed:46:8c:83:45:0a: d1:87:81:bb:db:92:03:05:33:71:53:e3:92:02:94:a2:0a:a0: 48:aa:be:6e:fe:25:92:61:17:ad:6c:f2:a7:d2:7b:ea:62:3e: 09:e2:81:4d:78:b1:2e:3e:04:d5:88:85:82:6c:4f:59:a9:dc: 90:b4:08:70:82:99:34:bb:25:f7:51:b2:94:44:2e:6a:83:62: 1b:46:66:25 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUX/ZrxrGTdeVvln9FSB2RngsIMUMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNzAwMDE0NFoX DTI1MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAM2U0MWZhYWUxNTRlZTYwNjY2ZjAy NzgyYjNmNmZiNmEyMDQ5OGRhZjc1MzNkM2QwMjk0MTUxYTYyMGM4NzYwYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14YeOjfrMfRmiJETVhN+D9i0vrFd r9zSZyFnUPz3jFW5oOS0PQyAg84nFIQvmK2xla5VlieCn8/HpKEJ6VtnJ1Hxm4/N mKjHtYEYfcSZKPTGRjrrF6leueAhM4lVNum6Hx0hMyo+7TJ8kKdBPw+87SGcEPbd LuZk92yaMFzISGPpmZQVWxxZXajslONst6Ibb23ImIJTQCrLfuzTixDYXUMVj2sU EyO/66CDYCIY/Z23lNMkAEVvy7iug4TU6ktVlJmzq3kVzwyDcdZn/EkBdR1eDcft goUscTnI3EmfFGnIslQ+NWM0DsruR3Wm6KlX28TVd3S4xF8tY8W2Y5yOhwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJJh5io8Fu5s3rDpD16rYVXGakBOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxMmNhM2M2LTAyNTEtNDAyOS04MTE4LWFiMWJlMmE2MTM3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0BAMA0GCSqGSIb3DQEBCwUAA4IBAQBX0Zil8s0d4Q1PLlbv lDU7HVRQ8HuvmaTlwpN/FOfenZ7Y8shXPzm6ZUUvbyJmxFwWMtLYz0YoLCpv598y 333oJIajx/vxxvL2NMl/Ah+hH0H7fEAq6f3H1a5/wlU0ITwP8Z/SAbjsgaO06qS3 KU3zSRkZwSnLEmklJ5lkCub8Jk+akUdTYpa2JaIluo/HnWuH/GsWxN/rgEYHKqgs 0GWZGiy5tIW2wbnMUhFZ2PntRoyDRQrRh4G725IDBTNxU+OSApSiCqBIqr5u/iWS YRetbPKn0nvqYj4J4oFNeLEuPgTViIWCbE9ZqdyQtAhwgpk0uyX3UbKURC5qg2Ib RmYl -----END CERTIFICATE-----Generated at Sat Jun 14 06:31:25 2025 by rpki-client