$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b17b22ee-80a1-41f9-b887-0dcc173f823b.roa File: b17b22ee-80a1-41f9-b887-0dcc173f823b.roa (raw, json) Hash identifier: xNx831m3TKtZT4p8SmBUTyLs73q/mbq8TmpMJlfXtwg= Subject key identifier: 8A:DD:6D:60:70:77:08:91:88:E6:EC:25:97:3A:58:73:4C:28:6D:8D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5E00E35A0DDC83A4FD610CC667FA7EE2B7EA9A0C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b17b22ee-80a1-41f9-b887-0dcc173f823b.roa Signing time: Tue 10 Jun 2025 00:20:14 +0000 ROA not before: Tue 10 Jun 2025 00:20:14 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:e040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:00:e3:5a:0d:dc:83:a4:fd:61:0c:c6:67:fa:7e:e2:b7:ea:9a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:20:14 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=9ee3aa7d8e6c964a1d1747ed82bb9e6ba8a9f8c7eac12b5cca958cc2e6f4b803, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:9d:2b:2f:e6:c4:74:15:ff:42:bd:96:08: 93:df:f2:54:84:4f:21:44:69:a3:17:1f:2c:05:de: 71:67:3b:e7:a7:89:f0:01:05:c3:15:68:f5:d2:dc: af:b5:e3:3c:e2:bc:ed:d1:6b:62:35:c3:01:b2:bc: 36:fa:a0:f9:4d:d7:4b:0f:76:73:65:05:c1:ec:07: 5c:db:31:5f:4a:fc:00:30:b9:e0:6f:c6:ef:31:80: ae:1c:57:85:18:ae:3e:0c:ee:98:7e:b6:69:8b:5b: cb:32:f1:41:5d:5b:ae:0c:ce:28:11:fe:27:4d:68: 04:b3:eb:2b:3d:d8:34:d8:7b:f8:be:c5:fa:4a:36: a2:f6:b4:89:1a:b7:40:56:d7:3a:29:12:60:7f:f2: 76:1a:70:81:fd:46:54:63:78:8e:bb:bb:ff:c6:c8: 1f:03:8f:70:b8:31:7f:cf:78:13:1d:ce:d4:9d:2f: c1:6c:23:05:75:46:92:a4:6f:d5:5b:84:0d:5d:e2: 83:51:21:c6:c5:32:02:b8:2d:c8:06:36:99:5f:f1: 74:d5:a3:69:5c:05:53:2c:1a:18:68:84:04:b3:a9: f2:cd:0a:a8:be:53:51:d2:6a:de:60:ae:c0:d4:05: 9a:79:28:05:90:0e:b9:54:76:ab:1b:cd:9b:fc:25: e5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DD:6D:60:70:77:08:91:88:E6:EC:25:97:3A:58:73:4C:28:6D:8D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b17b22ee-80a1-41f9-b887-0dcc173f823b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:e040::/46 Signature Algorithm: sha256WithRSAEncryption bb:91:ef:f9:4c:82:a0:11:b7:e2:a3:80:eb:d1:68:d8:ee:20: 19:4f:55:30:4e:ab:a7:60:cc:52:12:c3:2b:09:54:e3:c3:da: 79:1d:1f:0d:7f:6a:55:aa:f6:80:24:dc:ce:b6:17:bc:71:d9: 0d:02:cc:21:2b:3d:03:45:69:65:c9:c7:19:bc:a3:e2:b2:b5: 63:e6:5e:6b:97:e0:5a:10:c8:ff:9c:78:e0:78:2e:20:47:ad: 90:d9:36:bb:22:55:d0:79:3b:a7:ea:63:73:8c:0f:b0:39:15: 3a:52:a0:5e:83:cd:19:94:83:96:d9:b0:52:a8:d6:0a:21:db: b0:1e:f8:c6:d0:35:da:54:98:dc:de:dc:eb:78:06:16:47:47: 99:aa:e1:2c:e7:dd:4d:20:f8:a1:fb:b6:57:7f:8b:ca:01:62: 29:79:d5:a5:f2:96:d4:b9:b6:0a:fa:b6:2a:7c:52:ca:6e:ab: 9e:f7:6b:73:28:89:1a:78:eb:03:cb:31:73:12:80:cb:7b:ed: 3a:b4:19:ad:d0:fd:3d:8d:e7:ba:68:4a:e1:43:78:5c:2a:1f: 96:1b:b8:f1:f5:db:15:35:76:48:cf:ae:81:21:f9:e4:f1:c1: 80:de:60:46:fd:aa:e7:36:90:1f:44:05:28:d8:1b:e0:f9:51: 28:0a:4a:ee -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXgDjWg3cg6T9YQzGZ/p+4rfqmgwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMjAxNFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAOWVlM2FhN2Q4ZTZjOTY0YTFkMTc0 N2VkODJiYjllNmJhOGE5ZjhjN2VhYzEyYjVjY2E5NThjYzJlNmY0YjgwMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLGdKy/mxHQV/0K9lgiT3/JUhE8h RGmjFx8sBd5xZzvnp4nwAQXDFWj10tyvteM84rzt0WtiNcMBsrw2+qD5TddLD3Zz ZQXB7Adc2zFfSvwAMLngb8bvMYCuHFeFGK4+DO6YfrZpi1vLMvFBXVuuDM4oEf4n TWgEs+srPdg02Hv4vsX6Sjai9rSJGrdAVtc6KRJgf/J2GnCB/UZUY3iOu7v/xsgf A49wuDF/z3gTHc7UnS/BbCMFdUaSpG/VW4QNXeKDUSHGxTICuC3IBjaZX/F01aNp XAVTLBoYaIQEs6nyzQqovlNR0mreYK7A1AWaeSgFkA65VHarG82b/CXlnwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIrdbWBwdwiRiObsJZc6WHNMKG2NMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IxN2IyMmVlLTgwYTEtNDFmOS1iODg3LTBkY2MxNzNmODIzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaeBAMA0GCSqGSIb3DQEBCwUAA4IBAQC7ke/5TIKgEbfio4Dr 0WjY7iAZT1UwTqunYMxSEsMrCVTjw9p5HR8Nf2pVqvaAJNzOthe8cdkNAswhKz0D RWllyccZvKPisrVj5l5rl+BaEMj/nHjgeC4gR62Q2Ta7IlXQeTun6mNzjA+wORU6 UqBeg80ZlIOW2bBSqNYKIduwHvjG0DXaVJjc3tzreAYWR0eZquEs591NIPih+7ZX f4vKAWIpedWl8pbUubYK+rYqfFLKbque92tzKIkaeOsDyzFzEoDLe+06tBmt0P09 jee6aErhQ3hcKh+WG7jx9dsVNXZIz66BIfnk8cGA3mBG/arnNpAfRAUo2Bvg+VEo Ckru -----END CERTIFICATE-----Generated at Sat Jun 14 05:43:21 2025 by rpki-client