$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83deaaaf-ec15-40fe-9a98-71b9bcc1ae87.roa File: 83deaaaf-ec15-40fe-9a98-71b9bcc1ae87.roa (raw, json) Hash identifier: +t1QmHB3kupzdJ1P/pI1CAUrr3mnf0pkWeFXYTsY9Xc= Subject key identifier: 7A:5F:03:9D:8F:D3:45:A4:43:1E:76:7F:B3:F6:D8:BB:62:0B:65:D6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6834ACE6E678A688F671241CE4056CF580B37CA2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83deaaaf-ec15-40fe-9a98-71b9bcc1ae87.roa Signing time: Sat 07 Jun 2025 00:11:41 +0000 ROA not before: Sat 07 Jun 2025 00:11:41 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:34:ac:e6:e6:78:a6:88:f6:71:24:1c:e4:05:6c:f5:80:b3:7c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 7 00:11:41 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=df9941c7e37f5a3cc2e575995f370d71f8888fc7f3ed75143405f62c62f32161, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:00:48:92:df:07:5c:7a:32:99:4b:39:4d: c5:9a:31:fc:21:e3:5d:e3:f6:ce:7d:f8:60:d7:24: ea:97:fc:bf:4c:da:c7:f8:bf:5b:fc:28:b4:4a:72: 3a:4d:15:5c:58:d2:63:bb:32:5e:6d:35:f6:07:94: 8f:26:e9:81:e3:f8:ae:bc:be:fa:d3:54:0c:ac:3c: 80:05:57:73:37:1e:06:02:96:c4:ca:e9:84:3c:b5: a2:60:ed:aa:53:53:b5:f6:76:aa:6e:57:8a:8c:59: e2:49:fe:19:e8:c2:7e:1b:18:9c:d1:f5:3e:8c:b0: 4a:30:77:2c:62:d4:43:be:5d:56:e4:c7:39:70:06: 25:95:ae:af:1f:6a:5b:53:0b:87:70:f8:19:69:8c: 8b:c7:87:2e:83:41:09:8c:61:f3:df:d8:fe:31:e9: 78:69:f8:8c:ca:6e:29:7f:ff:10:ba:a8:a6:be:85: 7b:c6:bd:83:2d:89:f8:96:31:2f:16:83:f9:a2:52: 33:6b:20:ea:a0:d5:63:05:47:b8:8f:03:24:ff:f0: 95:81:80:85:d4:43:33:7f:b9:3b:3b:98:1c:20:72: 1d:c1:23:2a:e7:9d:76:5a:d0:02:37:de:2d:f2:c3: c3:66:f0:3a:28:48:f6:ae:5b:94:96:ae:d6:e5:ed: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5F:03:9D:8F:D3:45:A4:43:1E:76:7F:B3:F6:D8:BB:62:0B:65:D6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83deaaaf-ec15-40fe-9a98-71b9bcc1ae87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8020::/48 Signature Algorithm: sha256WithRSAEncryption 33:95:ee:3d:6f:4e:d7:62:94:ec:11:21:2e:7c:93:07:bf:12: 77:a0:af:73:a5:92:db:66:29:49:3e:47:57:26:d6:21:18:45: c3:c1:b7:c7:47:51:05:7d:59:30:be:0a:3e:cb:47:df:ce:34: fa:ab:35:91:8c:06:4b:cc:b0:76:8e:c4:a4:6b:f2:ab:51:3f: b5:88:53:8b:90:68:f7:4f:cf:93:1f:9d:08:6e:e3:48:1e:b6: 1f:7c:1b:04:32:76:bc:a6:f5:64:2f:d9:b3:7e:ae:16:85:96: 43:1d:77:16:9c:59:30:8b:2f:8a:6e:c3:05:4c:b0:ed:34:4a: 59:7f:29:84:8e:10:8c:9d:a2:f3:4b:f0:34:ee:51:e8:90:f8: 1c:e1:06:76:54:24:29:f4:0e:dc:bf:c2:57:cf:58:30:bb:b2: 84:de:3e:c3:23:ec:f4:54:c3:67:0c:9d:ac:3f:66:f1:24:55: 22:7e:9c:92:27:84:15:8e:f5:b7:9f:64:cd:d1:1f:e3:ad:1f: 45:31:01:fd:99:18:9b:a0:75:7f:32:ec:15:db:ab:98:3a:07: 1a:70:f1:7a:9b:44:b9:cb:a4:6b:39:ff:08:c8:fd:b7:ad:01: 82:18:3d:58:1b:c9:b1:46:67:f4:75:21:b4:01:ee:d0:29:fa: b3:8d:ac:6d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaDSs5uZ4poj2cSQc5AVs9YCzfKIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNzAwMTE0MVoX DTI1MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAZGY5OTQxYzdlMzdmNWEzY2MyZTU3 NTk5NWYzNzBkNzFmODg4OGZjN2YzZWQ3NTE0MzQwNWY2MmM2MmYzMjE2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQYASJLfB1x6MplLOU3FmjH8IeNd 4/bOffhg1yTql/y/TNrH+L9b/Ci0SnI6TRVcWNJjuzJebTX2B5SPJumB4/iuvL76 01QMrDyABVdzNx4GApbEyumEPLWiYO2qU1O19naqbleKjFniSf4Z6MJ+Gxic0fU+ jLBKMHcsYtRDvl1W5Mc5cAYlla6vH2pbUwuHcPgZaYyLx4cug0EJjGHz39j+Mel4 afiMym4pf/8QuqimvoV7xr2DLYn4ljEvFoP5olIzayDqoNVjBUe4jwMk//CVgYCF 1EMzf7k7O5gcIHIdwSMq5512WtACN94t8sPDZvA6KEj2rluUlq7W5e2iBwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHpfA52P00WkQx52f7P22LtiC2XWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzZGVhYWFmLWVjMTUtNDBmZS05YTk4LTcxYjliY2MxYWU4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/4AgMA0GCSqGSIb3DQEBCwUAA4IBAQAzle49b07XYpTsESEu fJMHvxJ3oK9zpZLbZilJPkdXJtYhGEXDwbfHR1EFfVkwvgo+y0ffzjT6qzWRjAZL zLB2jsSka/KrUT+1iFOLkGj3T8+TH50IbuNIHrYffBsEMna8pvVkL9mzfq4WhZZD HXcWnFkwiy+KbsMFTLDtNEpZfymEjhCMnaLzS/A07lHokPgc4QZ2VCQp9A7cv8JX z1gwu7KE3j7DI+z0VMNnDJ2sP2bxJFUifpySJ4QVjvW3n2TN0R/jrR9FMQH9mRib oHV/MuwV26uYOgcacPF6m0S5y6RrOf8IyP23rQGCGD1YG8mxRmf0dSG0Ae7QKfqz jaxt -----END CERTIFICATE-----Generated at Sat Jun 14 06:10:39 2025 by rpki-client