$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a37e2e0-7837-401c-a03e-a8f996e737fe.roa File: 6a37e2e0-7837-401c-a03e-a8f996e737fe.roa (raw, json) Hash identifier: XlBDkYAIz8f3D+ickw5KhNGCELUVigFckVw9zK436pk= Subject key identifier: 98:BF:E6:F6:96:AF:7F:20:24:9B:2A:F3:ED:03:28:61:7E:66:05:B2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 65A850D124226EE91520825E2B748B69E39123EE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a37e2e0-7837-401c-a03e-a8f996e737fe.roa Signing time: Tue 10 Jun 2025 00:50:48 +0000 ROA not before: Tue 10 Jun 2025 00:50:48 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:c0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a8:50:d1:24:22:6e:e9:15:20:82:5e:2b:74:8b:69:e3:91:23:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:50:48 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=4085d120b945a64fa83de209e5a2509ed277a8eca75e44ca470cb1991db9507d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:20:ac:53:1d:6b:a9:0b:4c:1b:1f:97:b2: 35:de:c8:89:6a:f6:8b:01:74:94:b2:61:ee:9c:44: 6f:0a:64:fb:14:a2:5d:16:5d:1f:0c:39:5c:ed:fe: d8:d4:c7:d3:ad:db:50:2e:7d:3b:ab:a3:77:2f:ac: f3:22:8d:76:13:2a:e0:53:03:e0:47:41:ae:17:b1: 8c:e3:4b:f7:1d:8e:e0:28:10:0c:ae:30:c3:67:53: 02:43:b2:2c:42:d9:e4:d2:b9:73:54:d1:6c:02:22: 3f:38:2c:55:5b:f5:c6:61:52:6b:75:a8:93:a5:41: e0:e3:e8:e2:a3:06:1a:c6:fd:ff:e2:81:25:e6:98: ef:3a:81:5c:16:aa:21:57:93:3f:b6:31:9b:f3:f1: f3:99:aa:29:ca:15:45:02:16:b3:c6:75:13:5a:f3: 13:64:aa:a6:30:2c:ae:07:c7:8a:b1:a5:88:01:38: 24:ee:aa:37:25:71:55:3c:08:b8:1b:05:85:22:7e: da:c4:70:08:06:f6:74:97:e7:20:b0:4e:b2:cf:33: dc:91:2e:ef:5e:17:7b:8e:5a:40:b7:e8:50:ea:71: 35:a3:a9:f1:3b:18:10:10:2c:b5:ba:aa:39:94:14: 2e:f7:73:e9:83:01:6a:63:b8:1a:e6:56:55:59:c0: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BF:E6:F6:96:AF:7F:20:24:9B:2A:F3:ED:03:28:61:7E:66:05:B2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a37e2e0-7837-401c-a03e-a8f996e737fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:c0c0::/46 Signature Algorithm: sha256WithRSAEncryption c8:75:34:cd:33:7b:ee:b3:3f:cd:5c:de:8b:6f:a5:28:66:1a: 3b:42:34:15:05:1f:57:0e:4c:ae:e2:16:01:71:8b:15:f6:f3: 1c:b3:c6:24:20:da:d7:70:56:72:c5:e2:f5:c6:34:47:37:6d: 5b:22:3c:00:17:3b:61:db:ee:f6:9b:d5:4b:da:24:e1:10:3b: 37:ba:5e:ed:2a:18:db:c1:a4:79:27:41:12:1b:76:b9:ed:93: dc:bb:68:03:f6:d5:ca:29:0e:be:3d:b4:1c:50:bc:7a:e4:ff: de:27:04:20:bf:27:8d:f9:43:cf:69:51:7a:c6:dd:30:bb:6c: 55:25:22:1f:f0:a0:d0:20:8e:53:45:44:66:3e:c2:96:6b:bf: 46:9b:83:87:3d:db:7f:7b:1e:c1:32:ce:f8:48:57:1f:60:08: a5:93:13:70:37:25:4d:ef:98:76:b3:77:b8:d0:6d:16:56:7c: 72:8e:7e:68:4b:aa:ac:13:67:72:df:b7:f2:6e:c0:83:45:30: 3d:3e:48:1d:81:95:a1:65:59:f6:c9:38:76:7e:66:6e:fd:b9: 87:b4:43:8b:56:47:35:54:a5:df:ca:47:1a:61:c5:e3:43:37: 97:9b:d5:58:52:da:33:0b:85:7d:7f:45:10:29:ab:93:34:55: 3e:b3:ba:df -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZahQ0SQibukVIIJeK3SLaeORI+4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwNTA0OFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNANDA4NWQxMjBiOTQ1YTY0ZmE4M2Rl MjA5ZTVhMjUwOWVkMjc3YThlY2E3NWU0NGNhNDcwY2IxOTkxZGI5NTA3ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvwgrFMda6kLTBsfl7I13siJavaL AXSUsmHunERvCmT7FKJdFl0fDDlc7f7Y1MfTrdtQLn07q6N3L6zzIo12EyrgUwPg R0GuF7GM40v3HY7gKBAMrjDDZ1MCQ7IsQtnk0rlzVNFsAiI/OCxVW/XGYVJrdaiT pUHg4+jiowYaxv3/4oEl5pjvOoFcFqohV5M/tjGb8/HzmaopyhVFAhazxnUTWvMT ZKqmMCyuB8eKsaWIATgk7qo3JXFVPAi4GwWFIn7axHAIBvZ0l+cgsE6yzzPckS7v Xhd7jlpAt+hQ6nE1o6nxOxgQECy1uqo5lBQu93PpgwFqY7ga5lZVWcAbfwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJi/5vaWr38gJJsq8+0DKGF+ZgWyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZhMzdlMmUwLTc4MzctNDAxYy1hMDNlLWE4Zjk5NmU3MzdmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba98DAMA0GCSqGSIb3DQEBCwUAA4IBAQDIdTTNM3vusz/NXN6L b6UoZho7QjQVBR9XDkyu4hYBcYsV9vMcs8YkINrXcFZyxeL1xjRHN21bIjwAFzth 2+72m9VL2iThEDs3ul7tKhjbwaR5J0ESG3a57ZPcu2gD9tXKKQ6+PbQcULx65P/e JwQgvyeN+UPPaVF6xt0wu2xVJSIf8KDQII5TRURmPsKWa79Gm4OHPdt/ex7BMs74 SFcfYAilkxNwNyVN75h2s3e40G0WVnxyjn5oS6qsE2dy37fybsCDRTA9PkgdgZWh ZVn2yTh2fmZu/bmHtEOLVkc1VKXfykcaYcXjQzeXm9VYUtozC4V9f0UQKauTNFU+ s7rf -----END CERTIFICATE-----Generated at Sat Jun 14 06:01:02 2025 by rpki-client