$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9f3baba-fb82-4aed-9205-b78882941654.roa File: a9f3baba-fb82-4aed-9205-b78882941654.roa (raw, json) Hash identifier: 3gJ9mZWByllNyUvUuQ/1hJ8IIbcF1eRQwM2KVsXBl/o= Subject key identifier: E6:65:91:44:89:44:DF:33:3C:59:02:9C:17:B5:9A:BE:63:4A:84:DA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4BE6FBD975F4F3CB02073AE195C3AFC535D79A16 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9f3baba-fb82-4aed-9205-b78882941654.roa Signing time: Mon 09 Jun 2025 15:21:43 +0000 ROA not before: Mon 09 Jun 2025 15:21:43 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e6:fb:d9:75:f4:f3:cb:02:07:3a:e1:95:c3:af:c5:35:d7:9a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:21:43 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=86253bfdb5ef80349564ad1070ee69023808bfee622baaff1f8a1683b7715546, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:35:1e:9e:b5:e7:64:c8:d5:fa:47:1b:d1: 24:3c:a7:47:4d:a3:d9:ce:71:4c:db:bc:ca:68:1d: 6f:53:f2:c6:0f:a5:b0:8e:e7:00:71:2c:ad:8d:42: bd:34:98:88:91:e7:80:87:cb:2d:cd:7c:f7:b0:7f: 4d:52:c3:d8:4a:0e:bd:d4:51:03:31:31:b6:90:03: d1:32:46:ce:89:23:3c:97:60:eb:b6:40:9b:ee:22: 24:80:94:6a:23:8c:96:c1:54:36:04:43:e6:76:e0: ca:14:ab:76:7e:f8:56:84:5e:12:e3:d1:84:b4:b4: 34:15:66:83:63:5c:e7:8e:74:98:a9:f2:88:31:1e: d5:b1:ee:52:e5:15:2b:b6:a2:86:35:79:67:7c:3d: 7d:59:47:8d:0b:9c:8a:da:5b:d8:14:83:41:24:bf: 64:93:b7:0e:72:46:f1:67:7c:28:a4:03:b0:46:5e: 1e:b6:61:1e:a5:35:52:27:87:6a:bd:dd:36:ff:23: bc:91:7d:00:c5:e9:6c:44:cc:9d:cc:a4:f5:f3:59: 35:69:1a:ef:eb:c7:a7:42:70:d3:16:0e:4a:f3:67: 33:0b:31:21:e2:1f:f0:81:42:c1:64:5f:07:9b:dc: 19:84:4e:8d:1d:80:26:fa:6b:5f:ae:87:b2:85:17: 00:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:65:91:44:89:44:DF:33:3C:59:02:9C:17:B5:9A:BE:63:4A:84:DA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9f3baba-fb82-4aed-9205-b78882941654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:f000::/40 Signature Algorithm: sha256WithRSAEncryption 63:a5:50:7b:80:3f:81:00:22:09:6d:9d:b1:45:86:df:e0:50: ab:ba:15:ad:d3:fe:c7:df:14:13:21:b5:49:e0:25:0b:2d:e9: c3:7c:32:95:d9:86:68:bb:1c:46:53:38:8a:4a:6c:ff:3d:c4: ac:12:56:50:1e:c4:cd:af:b8:c9:bb:07:e8:5f:7e:f5:31:92: bb:67:2b:57:f1:48:ae:d9:af:35:4c:c9:4e:92:4d:20:80:60: 4e:7d:ff:bb:bc:42:05:ae:dd:48:f2:a5:1c:f2:84:d6:de:a1: fc:90:b6:5b:50:ed:93:7a:a7:13:05:1e:c1:8f:60:c2:8f:f8: d8:25:b8:99:c8:46:f8:e7:f8:d9:02:e3:c2:2e:78:ac:c4:4f: 05:d0:5a:31:e0:f8:f6:58:3f:fc:b6:29:81:46:1e:0e:55:73: 01:39:47:a8:64:dc:e5:b6:0f:88:f8:7a:40:bf:f6:e3:f6:7e: af:9e:2c:05:da:8e:f5:4f:4a:b2:30:9c:2b:a5:70:da:54:5d: 54:de:5b:29:f0:f7:2b:b8:7c:97:6e:fb:f6:d3:45:4d:a9:88: 91:95:f1:16:83:9b:c1:71:a3:cc:5b:52:17:a9:d7:48:e6:ed: 56:77:a1:98:ae:b3:0f:34:7d:79:e7:7e:d8:93:4a:3e:16:5b: 3f:fe:a1:33 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUS+b72XX088sCBzrhlcOvxTXXmhYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MjE0M1oX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAODYyNTNiZmRiNWVmODAzNDk1NjRh ZDEwNzBlZTY5MDIzODA4YmZlZTYyMmJhYWZmMWY4YTE2ODNiNzcxNTU0NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMQ1Hp6152TI1fpHG9EkPKdHTaPZ znFM27zKaB1vU/LGD6WwjucAcSytjUK9NJiIkeeAh8stzXz3sH9NUsPYSg691FED MTG2kAPRMkbOiSM8l2DrtkCb7iIkgJRqI4yWwVQ2BEPmduDKFKt2fvhWhF4S49GE tLQ0FWaDY1znjnSYqfKIMR7Vse5S5RUrtqKGNXlnfD19WUeNC5yK2lvYFINBJL9k k7cOckbxZ3wopAOwRl4etmEepTVSJ4dqvd02/yO8kX0AxelsRMydzKT181k1aRrv 68enQnDTFg5K82czCzEh4h/wgULBZF8Hm9wZhE6NHYAm+mtfroeyhRcAXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOZlkUSJRN8zPFkCnBe1mr5jSoTaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5ZjNiYWJhLWZiODItNGFlZC05MjA1LWI3ODg4Mjk0MTY1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8vAwDQYJKoZIhvcNAQELBQADggEBAGOlUHuAP4EAIgltnbFF ht/gUKu6Fa3T/sffFBMhtUngJQst6cN8MpXZhmi7HEZTOIpKbP89xKwSVlAexM2v uMm7B+hffvUxkrtnK1fxSK7ZrzVMyU6STSCAYE59/7u8QgWu3UjypRzyhNbeofyQ tltQ7ZN6pxMFHsGPYMKP+NgluJnIRvjn+NkC48IueKzETwXQWjHg+PZYP/y2KYFG Hg5VcwE5R6hk3OW2D4j4ekC/9uP2fq+eLAXajvVPSrIwnCulcNpUXVTeWynw9yu4 fJdu+/bTRU2piJGV8RaDm8Fxo8xbUhep10jm7VZ3oZiusw80fXnnftiTSj4WWz/+ oTM= -----END CERTIFICATE-----Generated at Sat Jun 14 06:43:23 2025 by rpki-client