$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/699e1901-6701-4fae-ba1b-680131cc39df.roa File: 699e1901-6701-4fae-ba1b-680131cc39df.roa (raw, json) Hash identifier: uOgQgWatfXsudhjJ9cZZ2k+oXxn5K4VwQdtJYKqMupU= Subject key identifier: 39:61:AE:40:F9:15:5D:8E:5A:A7:C7:E5:C0:53:0C:3D:A8:85:5F:B6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 51E60372917FBDA01E56F0B9A63B4CCBFE636ECF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/699e1901-6701-4fae-ba1b-680131cc39df.roa Signing time: Tue 10 Jun 2025 15:40:24 +0000 ROA not before: Tue 10 Jun 2025 15:40:24 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1b::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 00:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e6:03:72:91:7f:bd:a0:1e:56:f0:b9:a6:3b:4c:cb:fe:63:6e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:40:24 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=f40d39d8cc79ca9ff776a14aefc693f995940c03fdae573769ea1d44f6d19d7d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c9:b2:6f:ef:e9:ff:b6:88:d0:7d:07:41:a9: e3:03:23:20:03:63:7e:a7:e4:12:09:20:29:94:87: 62:26:46:7e:0c:2f:50:2f:00:c5:e8:b4:87:8e:38: f2:33:8f:27:b6:bb:37:d5:1b:9f:5b:ed:2e:e3:a1: 1d:15:76:ad:02:f6:ee:7b:69:d4:73:d0:78:56:87: f0:f3:c9:80:93:22:5a:cb:e8:0b:31:36:40:10:a2: 5f:d1:86:01:47:9d:4c:cc:c7:17:d2:82:d4:14:03: c0:af:ac:5e:b2:0f:31:46:61:3b:69:a4:ff:e4:a8: 83:2f:e9:d2:b2:0e:e7:fd:60:98:12:a9:84:e2:f1: ab:64:45:5a:c0:5f:52:3b:d8:de:74:75:53:d7:04: ba:3d:12:d0:be:aa:56:11:e3:1e:4f:2d:7b:15:72: 47:a7:a3:a8:02:f6:88:8c:12:f9:60:63:c0:69:a1: 29:0c:23:4f:5c:48:d4:5a:fc:ce:45:b9:8c:5c:a0: b7:0c:48:04:88:a6:04:42:3d:9f:71:9e:e3:d5:8f: 8e:b0:af:22:f5:2c:4d:a8:cd:27:89:79:37:9c:47: 94:e6:09:c3:a4:1a:b9:20:bf:a0:89:c5:bb:5b:d5: 90:2a:df:ab:fa:96:d5:7f:60:d0:b1:a6:c9:b7:21: 5b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:61:AE:40:F9:15:5D:8E:5A:A7:C7:E5:C0:53:0C:3D:A8:85:5F:B6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/699e1901-6701-4fae-ba1b-680131cc39df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1b::/38 Signature Algorithm: sha256WithRSAEncryption b5:7e:74:fc:ee:27:e5:b0:56:fa:29:06:d2:4d:2b:23:84:e2: 8e:5b:a9:e0:eb:27:1c:b2:2a:58:c3:76:fe:3d:5e:9f:fc:05: a6:9d:92:4f:82:5d:c7:73:39:c7:a9:e3:31:1a:b4:6e:8a:f3: bd:7c:43:ad:23:a9:b2:f9:0a:64:5a:17:d7:22:3e:f3:5c:ec: 4f:57:ab:86:3c:7a:7e:ef:77:93:23:6c:93:38:c3:0b:d9:cb: 4b:84:82:4b:d9:c3:4d:27:53:d0:2b:87:7d:08:d8:f6:f5:14: 0a:db:79:a2:96:13:55:e4:a0:e5:e3:36:ef:69:d9:e5:09:b5: 46:3f:21:40:96:3f:83:d6:3f:72:14:5e:0d:3a:e7:8b:26:a7: af:2e:69:18:ee:36:75:fd:21:d2:ec:d0:43:48:80:e3:f6:58: 7f:de:3c:89:07:13:81:b9:e6:93:ca:74:ac:b7:44:25:4c:14: 93:a9:c1:82:55:de:f7:c6:c8:c7:b8:bf:0d:51:3a:ea:74:61: 5a:ab:fc:da:ef:9e:81:a6:2c:44:9f:d6:f9:64:a1:5a:70:8b: 94:fc:91:ff:08:4a:da:63:f2:98:dc:d8:11:ac:f7:68:33:a6: 1c:5b:7b:ca:e1:03:e2:ca:ab:d1:cc:e8:4c:4b:12:54:58:cb: 1b:55:a4:30 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUeYDcpF/vaAeVvC5pjtMy/5jbs8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1NDAyNFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZjQwZDM5ZDhjYzc5Y2E5ZmY3NzZh MTRhZWZjNjkzZjk5NTk0MGMwM2ZkYWU1NzM3NjllYTFkNDRmNmQxOWQ3ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncmyb+/p/7aI0H0HQanjAyMgA2N+ p+QSCSAplIdiJkZ+DC9QLwDF6LSHjjjyM48ntrs31RufW+0u46EdFXatAvbue2nU c9B4Vofw88mAkyJay+gLMTZAEKJf0YYBR51MzMcX0oLUFAPAr6xesg8xRmE7aaT/ 5KiDL+nSsg7n/WCYEqmE4vGrZEVawF9SO9jedHVT1wS6PRLQvqpWEeMeTy17FXJH p6OoAvaIjBL5YGPAaaEpDCNPXEjUWvzORbmMXKC3DEgEiKYEQj2fcZ7j1Y+OsK8i 9SxNqM0niXk3nEeU5gnDpBq5IL+gicW7W9WQKt+r+pbVf2DQsabJtyFb3QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDlhrkD5FV2OWqfH5cBTDD2ohV+2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY5OWUxOTAxLTY3MDEtNGZhZS1iYTFiLTY4MDEzMWNjMzlkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGwAwDQYJKoZIhvcNAQELBQADggEBALV+dPzuJ+WwVvopBtJN KyOE4o5bqeDrJxyyKljDdv49Xp/8Baadkk+CXcdzOcep4zEatG6K8718Q60jqbL5 CmRaF9ciPvNc7E9Xq4Y8en7vd5MjbJM4wwvZy0uEgkvZw00nU9Arh30I2Pb1FArb eaKWE1XkoOXjNu9p2eUJtUY/IUCWP4PWP3IUXg0654smp68uaRjuNnX9IdLs0ENI gOP2WH/ePIkHE4G55pPKdKy3RCVMFJOpwYJV3vfGyMe4vw1ROup0YVqr/NrvnoGm LESf1vlkoVpwi5T8kf8IStpj8pjc2BGs92gzphxbe8rhA+LKq9HM6ExLElRYyxtV pDA= -----END CERTIFICATE-----Generated at Tue Jun 17 07:52:34 2025 by rpki-client