$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9abaaa64-5830-4693-9846-8a0761c264ea.roa File: 9abaaa64-5830-4693-9846-8a0761c264ea.roa (raw, json) Hash identifier: EfWEa7hyxfbgMTkvpmUMcy0Wuy0kRQPJmWAIh7g4dr4= Subject key identifier: EB:DB:98:24:4E:AC:82:6C:AD:51:3A:4D:B6:79:D9:ED:6A:8F:BF:55 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 335A830AE27928528C5D110105625CAE0E4E68DD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9abaaa64-5830-4693-9846-8a0761c264ea.roa Signing time: Tue 10 Jun 2025 00:41:56 +0000 ROA not before: Tue 10 Jun 2025 00:41:56 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5a:83:0a:e2:79:28:52:8c:5d:11:01:05:62:5c:ae:0e:4e:68:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:41:56 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=fd8297acaa081666454d47be2197e359f6d7003063f1ed78556af19a300c1540, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a4:af:ca:91:d9:5e:5f:47:fa:de:ed:5e:0c: 90:4b:ad:f0:31:0f:90:1e:a9:74:cf:e1:a1:42:a2: 3a:c5:29:be:d4:6a:45:ec:80:8c:d8:d3:9a:20:c9: aa:50:d7:6f:2b:0b:2a:1f:1e:da:2a:92:b8:8a:aa: b3:57:89:fd:90:f6:0e:a9:ba:6a:a7:0e:20:4f:ed: 8c:33:4c:cb:a0:6a:1e:36:a7:de:95:aa:ed:60:ed: cf:ab:59:ee:66:e2:82:1b:c4:49:aa:cc:07:c2:b1: 6d:b6:ff:63:36:cd:99:a4:89:e8:74:0e:af:b9:00: 76:41:ad:dc:3d:f3:56:04:b6:cf:bd:76:e8:b5:06: 3b:dd:15:91:3d:e4:29:45:83:b0:e0:47:68:bd:69: 1b:be:a7:75:b9:8b:d9:90:8c:b1:57:73:18:05:b8: 7f:c4:9b:af:d8:b2:08:9a:50:29:0e:46:ca:4e:66: 7a:f3:21:50:3a:74:4d:59:7a:c8:bd:4d:42:21:08: d2:1d:03:94:19:27:eb:0d:3b:91:e5:12:d6:3f:76: 16:6e:d6:7b:04:fe:02:e4:c9:94:3b:12:91:77:68: 35:48:3e:24:f9:94:74:41:46:51:cb:19:ef:17:0c: 3b:9b:0c:18:04:ba:e8:65:3b:5a:22:dc:89:6a:5a: ad:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DB:98:24:4E:AC:82:6C:AD:51:3A:4D:B6:79:D9:ED:6A:8F:BF:55 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9abaaa64-5830-4693-9846-8a0761c264ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:4800::/40 Signature Algorithm: sha256WithRSAEncryption b8:ab:3d:26:f5:60:8e:19:df:5e:b5:97:25:ee:d3:e6:a3:69: 41:92:2b:5c:bf:32:27:b9:e3:9c:27:8d:e2:86:5c:e6:78:32: a6:c3:70:9d:3b:5e:24:6a:ab:7f:f6:be:f9:53:54:96:8e:88: 4f:c6:76:8e:80:d7:75:95:37:71:ef:1d:2a:65:8f:22:c9:f1: 25:cc:1b:2e:34:ff:ea:67:03:cb:7e:53:64:c3:a8:db:39:67: 04:ab:b4:21:75:e8:b7:66:e5:db:70:3d:46:50:87:a8:82:05: e9:84:e5:62:2e:fc:de:29:e7:65:f9:84:d9:4d:ee:62:dd:01: 4f:28:b3:8e:64:ac:c2:33:d6:68:9f:64:c4:fe:9f:16:f0:6c: 63:c1:ae:ec:05:62:b2:76:56:b1:37:cf:bb:63:54:67:4f:15: 5e:65:31:ab:98:92:8d:49:63:08:3b:49:2b:f1:25:ea:f7:9f: ec:12:bf:5e:a3:02:fa:1b:b1:a8:13:ea:4e:64:a5:6d:c2:6f: fa:2d:6e:8c:23:31:68:97:21:0c:6b:6f:3c:d0:93:02:12:42: 1d:1f:92:ef:dc:9d:41:c0:59:63:d5:41:d6:65:33:5d:d1:ae: 6e:b1:d9:35:4a:09:12:a0:ad:e2:81:02:e8:8a:65:b8:f4:5d: 86:e1:60:b8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUM1qDCuJ5KFKMXREBBWJcrg5OaN0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwNDE1NloX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZmQ4Mjk3YWNhYTA4MTY2NjQ1NGQ0 N2JlMjE5N2UzNTlmNmQ3MDAzMDYzZjFlZDc4NTU2YWYxOWEzMDBjMTU0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66SvypHZXl9H+t7tXgyQS63wMQ+Q Hql0z+GhQqI6xSm+1GpF7ICM2NOaIMmqUNdvKwsqHx7aKpK4iqqzV4n9kPYOqbpq pw4gT+2MM0zLoGoeNqfelartYO3Pq1nuZuKCG8RJqswHwrFttv9jNs2ZpInodA6v uQB2Qa3cPfNWBLbPvXbotQY73RWRPeQpRYOw4EdovWkbvqd1uYvZkIyxV3MYBbh/ xJuv2LIImlApDkbKTmZ68yFQOnRNWXrIvU1CIQjSHQOUGSfrDTuR5RLWP3YWbtZ7 BP4C5MmUOxKRd2g1SD4k+ZR0QUZRyxnvFww7mwwYBLroZTtaItyJalqtHQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOvbmCROrIJsrVE6TbZ52e1qj79VMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlhYmFhYTY0LTU4MzAtNDY5My05ODQ2LThhMDc2MWMyNjRlYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+0gwDQYJKoZIhvcNAQELBQADggEBALirPSb1YI4Z3161lyXu 0+ajaUGSK1y/Mie545wnjeKGXOZ4MqbDcJ07XiRqq3/2vvlTVJaOiE/Gdo6A13WV N3HvHSpljyLJ8SXMGy40/+pnA8t+U2TDqNs5ZwSrtCF16Ldm5dtwPUZQh6iCBemE 5WIu/N4p52X5hNlN7mLdAU8os45krMIz1mifZMT+nxbwbGPBruwFYrJ2VrE3z7tj VGdPFV5lMauYko1JYwg7SSvxJer3n+wSv16jAvobsagT6k5kpW3Cb/otbowjMWiX IQxrbzzQkwISQh0fku/cnUHAWWPVQdZlM13Rrm6x2TVKCRKgreKBAuiKZbj0XYbh YLg= -----END CERTIFICATE-----Generated at Sat Jun 14 18:51:06 2025 by rpki-client