$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ef6ab83-cb4a-4c45-a58b-8383ab2bf4f7.roa File: 9ef6ab83-cb4a-4c45-a58b-8383ab2bf4f7.roa (raw, json) Hash identifier: KjRD8u94nHVACdHywuxrHeoCJr9e0TppfpNoExv8N/I= Subject key identifier: 37:41:01:10:FC:51:13:6C:A1:5B:C6:19:D8:75:EF:1B:DE:CE:81:CD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6340A5261C77A6FD7B506BAB470069721B26269B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ef6ab83-cb4a-4c45-a58b-8383ab2bf4f7.roa Signing time: Wed 04 Jun 2025 00:00:23 +0000 ROA not before: Wed 04 Jun 2025 00:00:23 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:40:a5:26:1c:77:a6:fd:7b:50:6b:ab:47:00:69:72:1b:26:26:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 4 00:00:23 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=ca8e6d5aadac86198037fc3e4c8cdd3ab9bc5ce1fb90e9310961fc2eed5f1566, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:37:78:9b:bf:15:7a:f7:bd:9d:ed:e2:10:96: d2:9f:67:91:6b:ee:79:fe:6f:ad:1d:91:5c:21:3e: e4:78:6e:48:ca:81:83:9a:22:03:2e:93:f4:89:23: b7:72:5d:84:9e:cf:07:3c:c7:9c:76:cf:10:49:0b: b6:dd:55:70:27:8b:f0:2f:b4:d1:e5:44:3f:ca:4b: cf:36:5c:bd:64:cf:45:c2:4b:f7:68:1b:ca:3c:29: e8:a7:14:6e:40:1d:4a:b4:50:61:13:ff:84:2a:e4: c2:9b:a5:30:25:b3:bd:42:d1:0a:e0:39:df:57:88: e9:28:a9:ea:e6:9f:8b:4b:fe:a4:1b:91:72:33:5f: 64:82:6f:0d:8c:ca:b1:7b:5c:e4:8b:f4:d2:e7:d2: 5d:4c:8b:73:ff:ba:e6:94:cb:54:09:1d:a6:21:fc: e6:8a:0c:69:13:bf:0b:0d:43:ff:5d:db:b6:85:ff: 16:18:57:9f:3d:d9:a9:fa:91:74:5f:c5:74:c7:f9: f5:93:b9:1f:91:ad:c3:24:b4:62:7a:69:40:84:8a: 41:18:0f:e4:d2:bb:87:f4:39:59:34:6c:4f:b6:ec: c0:5e:0a:69:a6:bb:71:8e:c5:1d:ca:ca:40:2f:ac: 55:7e:0d:ef:3e:22:ec:7b:13:25:98:60:01:66:78: a8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:41:01:10:FC:51:13:6C:A1:5B:C6:19:D8:75:EF:1B:DE:CE:81:CD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ef6ab83-cb4a-4c45-a58b-8383ab2bf4f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:b000::/40 Signature Algorithm: sha256WithRSAEncryption 11:c4:25:0d:55:e7:af:d4:d2:d0:6c:7d:19:95:f3:02:3a:cc: b4:92:76:63:70:f0:55:a4:bf:82:bd:1f:30:71:95:8b:74:a7: 45:53:eb:c8:29:e5:80:37:7c:44:23:82:48:5f:a9:36:05:6c: 3a:15:65:52:97:eb:14:75:9e:af:ff:93:4d:1e:be:b4:4a:59: dd:97:09:41:8c:2e:30:dc:7f:99:a1:b0:e7:23:63:c8:b4:d9: 9e:6d:e7:91:60:38:6c:6c:ba:15:aa:32:40:5e:30:67:00:82: 86:80:45:cf:7e:21:0b:be:bf:f2:8e:fa:52:8a:df:c4:00:ca: b7:d9:5a:a0:9f:ea:19:3f:8e:6b:11:78:ee:02:7e:b5:fa:fe: 68:88:b7:bf:29:78:20:2c:ca:55:3f:93:77:b8:a1:09:9a:68: 79:65:26:05:0f:71:fe:ed:c2:b6:a8:4c:77:df:df:c4:ef:cf: 8b:0d:13:c1:62:5a:a0:8c:5f:e2:0f:69:4b:a8:ca:6a:f8:e3: 3f:9f:81:5d:b2:4a:89:ed:df:6d:44:99:42:d7:0a:ea:d7:3c: 88:ce:d0:42:e9:13:c4:12:75:49:37:36:bb:94:92:30:33:6f: 2e:4f:80:95:06:7f:1c:a3:8f:63:78:4b:fb:f6:c3:04:73:42: 9d:07:39:53 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY0ClJhx3pv17UGurRwBpchsmJpswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNDAwMDAyM1oX DTI1MDcwOTIzNTk1OVowejFJMEcGA1UEBRNAY2E4ZTZkNWFhZGFjODYxOTgwMzdm YzNlNGM4Y2RkM2FiOWJjNWNlMWZiOTBlOTMxMDk2MWZjMmVlZDVmMTU2NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTd4m78Veve9ne3iEJbSn2eRa+55 /m+tHZFcIT7keG5IyoGDmiIDLpP0iSO3cl2Ens8HPMecds8QSQu23VVwJ4vwL7TR 5UQ/ykvPNly9ZM9Fwkv3aBvKPCnopxRuQB1KtFBhE/+EKuTCm6UwJbO9QtEK4Dnf V4jpKKnq5p+LS/6kG5FyM19kgm8NjMqxe1zki/TS59JdTItz/7rmlMtUCR2mIfzm igxpE78LDUP/Xdu2hf8WGFefPdmp+pF0X8V0x/n1k7kfka3DJLRiemlAhIpBGA/k 0ruH9DlZNGxPtuzAXgppprtxjsUdyspAL6xVfg3vPiLsexMlmGABZniodwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDdBARD8URNsoVvGGdh17xvezoHNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzllZjZhYjgzLWNiNGEtNGM0NS1hNThiLTgzODNhYjJiZjRmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYLAwDQYJKoZIhvcNAQELBQADggEBABHEJQ1V56/U0tBsfRmV 8wI6zLSSdmNw8FWkv4K9HzBxlYt0p0VT68gp5YA3fEQjgkhfqTYFbDoVZVKX6xR1 nq//k00evrRKWd2XCUGMLjDcf5mhsOcjY8i02Z5t55FgOGxsuhWqMkBeMGcAgoaA Rc9+IQu+v/KO+lKK38QAyrfZWqCf6hk/jmsReO4CfrX6/miIt78peCAsylU/k3e4 oQmaaHllJgUPcf7twraoTHff38Tvz4sNE8FiWqCMX+IPaUuoymr44z+fgV2ySont 321EmULXCurXPIjO0ELpE8QSdUk3NruUkjAzby5PgJUGfxyjj2N4S/v2wwRzQp0H OVM= -----END CERTIFICATE-----Generated at Sun Jun 15 09:00:13 2025 by rpki-client