$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93628203-b0e1-4510-b021-531c535d1c54.roa File: 93628203-b0e1-4510-b021-531c535d1c54.roa (raw, json) Hash identifier: ntPXFQImDEONdAyK9xQzbVSR2yl75NE9fSXjI8dGwUk= Subject key identifier: C3:2D:8E:8F:3C:FD:B9:F0:ED:9A:39:A0:AC:2D:57:BA:9F:F5:A1:8A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0B3F12DDC9AA33B6C03C18918B0FC27683CDA6C2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93628203-b0e1-4510-b021-531c535d1c54.roa Signing time: Tue 10 Jun 2025 15:41:08 +0000 ROA not before: Tue 10 Jun 2025 15:41:08 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3f:12:dd:c9:aa:33:b6:c0:3c:18:91:8b:0f:c2:76:83:cd:a6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:41:08 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=2d7eec0d473690c0a170d3a028daee2c2432f1bacbdbcf3b124e8fc310113dc9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:fc:30:b7:3a:58:ca:2b:3a:a7:2a:68:b5: d0:37:90:46:6d:6f:36:f8:9a:e7:32:f1:63:a1:ec: 41:fb:61:39:a8:97:54:eb:1f:19:2b:4c:33:10:14: 44:38:19:f2:b0:94:c9:5e:8e:2c:e9:8b:6d:33:11: 96:51:8e:13:4b:36:b2:00:50:85:9a:5a:0d:02:e9: 02:f7:d2:a9:74:fb:50:5d:a2:44:05:45:53:8c:71: a4:65:84:9e:9e:1e:90:22:78:58:b7:38:88:62:9f: 15:e7:c1:65:c6:37:71:79:de:da:46:a2:b9:9e:52: a9:87:22:0f:5e:da:fe:37:9b:6f:c9:42:e2:74:ee: 00:e3:29:89:d5:41:30:c1:f2:65:cd:62:38:76:f0: 7b:f4:fe:f7:62:40:71:4a:6c:89:81:d4:c4:89:43: e8:f7:5e:21:58:42:87:bf:27:e3:82:7b:96:05:64: cb:d9:20:ec:d3:af:9c:97:5d:e7:d7:67:b5:bb:24: 67:92:5d:3c:2f:57:bf:72:7a:05:d6:95:cb:43:aa: 70:a2:17:87:2d:c0:5b:b2:46:43:a7:29:42:5d:ca: 05:fd:c2:c9:2e:a9:1b:97:be:1b:2f:d8:52:b4:95: b4:ce:91:66:1d:d7:df:76:31:7a:ba:b2:b0:24:f7: fd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2D:8E:8F:3C:FD:B9:F0:ED:9A:39:A0:AC:2D:57:BA:9F:F5:A1:8A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93628203-b0e1-4510-b021-531c535d1c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:800::/38 Signature Algorithm: sha256WithRSAEncryption 3d:2d:56:70:f3:44:14:a8:a2:1f:7a:6d:99:64:c8:68:0e:16: df:19:93:e3:94:af:99:a2:9d:5e:d9:8e:52:b1:00:78:79:81: 86:dd:de:73:4d:6a:49:55:7d:32:e3:fb:20:71:59:8a:9e:c9: 87:58:9d:9a:7d:ec:95:bb:e9:96:be:70:83:1c:b7:9a:16:d2: e7:82:76:c0:4f:fa:32:57:5d:bf:d8:41:ed:d8:82:f7:cb:09: 34:0f:b9:d1:58:be:c3:25:b6:0e:21:d1:03:ae:f5:97:fa:2f: 60:6f:c4:dd:7e:b2:94:98:30:ea:64:0d:7a:29:a5:ae:4d:40: 92:77:15:28:a6:ed:4f:a0:05:3f:83:7b:cd:e5:c8:3d:87:78: 88:10:e0:4b:87:bf:79:1d:a6:d0:bd:79:4b:fa:af:95:c1:4e: 6d:7b:eb:5b:f3:fe:fb:3f:82:81:77:07:59:ae:93:00:bb:8b: bc:14:89:ce:f7:a6:c5:3e:ba:d1:de:5e:36:da:ca:43:02:c3: a6:c8:3a:22:7a:41:a0:f0:be:e0:dc:f1:06:4f:19:c2:9f:ef: 2d:e6:99:2e:08:01:57:1c:18:ba:e2:2f:28:11:45:76:03:05: 4b:e8:be:64:8e:63:7d:b7:8a:4f:34:34:bb:f8:08:4c:6e:0c: 19:37:f1:bb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCz8S3cmqM7bAPBiRiw/CdoPNpsIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1NDEwOFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAMmQ3ZWVjMGQ0NzM2OTBjMGExNzBk M2EwMjhkYWVlMmMyNDMyZjFiYWNiZGJjZjNiMTI0ZThmYzMxMDExM2RjOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gb8MLc6WMorOqcqaLXQN5BGbW82 +JrnMvFjoexB+2E5qJdU6x8ZK0wzEBREOBnysJTJXo4s6YttMxGWUY4TSzayAFCF mloNAukC99KpdPtQXaJEBUVTjHGkZYSenh6QInhYtziIYp8V58Flxjdxed7aRqK5 nlKphyIPXtr+N5tvyULidO4A4ymJ1UEwwfJlzWI4dvB79P73YkBxSmyJgdTEiUPo 914hWEKHvyfjgnuWBWTL2SDs06+cl13n12e1uyRnkl08L1e/cnoF1pXLQ6pwoheH LcBbskZDpylCXcoF/cLJLqkbl74bL9hStJW0zpFmHdffdjF6urKwJPf9rQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMMtjo88/bnw7Zo5oKwtV7qf9aGKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkzNjI4MjAzLWIwZTEtNDUxMC1iMDIxLTUzMWM1MzVkMWM1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEggwDQYJKoZIhvcNAQELBQADggEBAD0tVnDzRBSooh96bZlk yGgOFt8Zk+OUr5minV7ZjlKxAHh5gYbd3nNNaklVfTLj+yBxWYqeyYdYnZp97JW7 6Za+cIMct5oW0ueCdsBP+jJXXb/YQe3YgvfLCTQPudFYvsMltg4h0QOu9Zf6L2Bv xN1+spSYMOpkDXoppa5NQJJ3FSim7U+gBT+De83lyD2HeIgQ4EuHv3kdptC9eUv6 r5XBTm1761vz/vs/goF3B1mukwC7i7wUic73psU+utHeXjbaykMCw6bIOiJ6QaDw vuDc8QZPGcKf7y3mmS4IAVccGLriLygRRXYDBUvovmSOY323ik80NLv4CExuDBk3 8bs= -----END CERTIFICATE-----Generated at Sat Jun 14 06:55:43 2025 by rpki-client