$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f3d290f-ba07-44ec-8836-8683ef177077.roa File: 8f3d290f-ba07-44ec-8836-8683ef177077.roa (raw, json) Hash identifier: zNAlPGXRn7FSEWQI0kh3p4c6wjQ2N10duE1Ke5jccak= Subject key identifier: CC:CD:76:07:76:91:01:26:11:7B:8F:23:3A:1A:D3:EC:CB:EA:4C:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 52AE8FAA64CE0D893C62C2767EDD10958D7E887D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f3d290f-ba07-44ec-8836-8683ef177077.roa Signing time: Tue 10 Jun 2025 15:00:28 +0000 ROA not before: Tue 10 Jun 2025 15:00:28 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ae:8f:aa:64:ce:0d:89:3c:62:c2:76:7e:dd:10:95:8d:7e:88:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:00:28 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=db39ff300893e85c665dcdb8460e1471b5ecbec2065be9acac5098d24e49b6d4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:30:6b:b8:37:e1:08:30:9a:60:94:2c:ed:d0: 48:b8:e2:f5:b3:f1:5a:4c:69:55:e1:39:de:84:4e: 25:80:4a:fa:0d:3d:5e:10:80:73:f4:b0:60:65:62: 88:e6:67:03:9d:50:fc:15:b5:e8:bc:47:e4:ae:ab: 52:b0:2e:6d:8f:d5:2f:3d:de:bc:7f:3a:2b:16:25: 6b:8c:4a:aa:ec:4a:2f:62:b2:33:32:71:2e:14:47: 3b:3e:3f:e8:88:0d:fa:7b:ad:97:43:87:21:06:07: 95:3a:aa:d9:34:70:ff:ec:b1:f3:81:94:af:2d:2e: 1e:fc:43:1a:a9:4f:50:47:ee:43:30:2b:45:a0:24: 84:45:32:0d:57:65:91:8f:9a:ad:68:b7:b1:6e:fc: 9a:05:8d:94:5c:c0:c5:e8:44:be:b2:30:ad:5c:8a: fb:99:a9:96:56:c4:f2:a8:3f:2f:26:7c:22:80:d1: 60:54:d9:81:ab:1e:56:32:a7:66:d4:20:cb:a6:e9: e2:bc:38:69:54:16:fb:88:3d:16:64:0a:e4:40:be: 76:13:0c:1e:69:29:ac:56:c4:76:1f:79:c2:94:7c: 27:1f:a1:92:b6:ff:1a:1f:4b:48:db:d1:f4:fb:e8: 91:15:57:6e:c2:83:f3:00:02:46:83:92:80:45:cf: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CD:76:07:76:91:01:26:11:7B:8F:23:3A:1A:D3:EC:CB:EA:4C:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f3d290f-ba07-44ec-8836-8683ef177077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:e000::/40 Signature Algorithm: sha256WithRSAEncryption 5a:ca:c4:0d:5f:88:8b:48:77:07:f2:f2:14:b6:b7:d2:44:63: 96:00:2c:4f:98:1d:40:5e:65:8f:55:17:da:6e:a2:61:9f:55: 80:21:cb:86:bf:25:b7:d6:53:9d:49:f6:b0:7c:d3:57:c7:3a: 9a:e8:4e:74:e5:07:7d:c0:c5:df:88:91:21:66:70:06:74:cb: d2:e2:0b:5c:af:cd:f1:5a:9e:e5:6c:ce:b1:cb:37:aa:a0:a5: 24:81:9b:c5:7e:6a:58:b9:c2:03:70:18:b8:3e:28:99:45:09: b7:56:03:6f:aa:6c:65:98:c0:09:03:a5:af:0a:9f:f7:53:a4: 24:9b:f1:21:30:6e:f5:4a:fc:aa:5f:dc:87:15:77:e5:cc:8c: 44:8b:6a:aa:4e:21:cc:6c:34:4e:cd:2d:1b:63:e2:38:36:55: 9c:b7:46:fe:04:bf:01:e4:55:10:c6:7f:f5:ce:3e:c1:48:db: d6:5e:aa:18:f3:a0:33:bd:3b:04:b2:b7:6c:85:ff:f3:86:35: fa:41:e2:91:80:fa:06:8b:48:2e:9a:49:a4:b3:7e:27:11:06: 3c:34:de:88:04:23:d6:a8:94:ed:41:a0:4c:d2:8c:4a:6d:8c: 18:fa:f9:42:aa:a2:8c:61:1f:63:ee:6f:5a:95:10:dc:ba:fe: ac:8d:8a:54 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUq6PqmTODYk8YsJ2ft0QlY1+iH0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MDAyOFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZGIzOWZmMzAwODkzZTg1YzY2NWRj ZGI4NDYwZTE0NzFiNWVjYmVjMjA2NWJlOWFjYWM1MDk4ZDI0ZTQ5YjZkNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jBruDfhCDCaYJQs7dBIuOL1s/Fa TGlV4TnehE4lgEr6DT1eEIBz9LBgZWKI5mcDnVD8FbXovEfkrqtSsC5tj9UvPd68 fzorFiVrjEqq7EovYrIzMnEuFEc7Pj/oiA36e62XQ4chBgeVOqrZNHD/7LHzgZSv LS4e/EMaqU9QR+5DMCtFoCSERTINV2WRj5qtaLexbvyaBY2UXMDF6ES+sjCtXIr7 mamWVsTyqD8vJnwigNFgVNmBqx5WMqdm1CDLpunivDhpVBb7iD0WZArkQL52Ewwe aSmsVsR2H3nClHwnH6GStv8aH0tI29H0++iRFVduwoPzAAJGg5KARc/XiwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMzNdgd2kQEmEXuPIzoa0+zL6kx7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhmM2QyOTBmLWJhMDctNDRlYy04ODM2LTg2ODNlZjE3NzA3Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaueAwDQYJKoZIhvcNAQELBQADggEBAFrKxA1fiItIdwfy8hS2 t9JEY5YALE+YHUBeZY9VF9puomGfVYAhy4a/JbfWU51J9rB801fHOproTnTlB33A xd+IkSFmcAZ0y9LiC1yvzfFanuVszrHLN6qgpSSBm8V+ali5wgNwGLg+KJlFCbdW A2+qbGWYwAkDpa8Kn/dTpCSb8SEwbvVK/Kpf3IcVd+XMjESLaqpOIcxsNE7NLRtj 4jg2VZy3Rv4EvwHkVRDGf/XOPsFI29ZeqhjzoDO9OwSyt2yF//OGNfpB4pGA+gaL SC6aSaSzficRBjw03ogEI9aolO1BoEzSjEptjBj6+UKqooxhH2Pub1qVENy6/qyN ilQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:49:52 2025 by rpki-client