$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa File: c2c34d45-d139-4122-8407-d2263ceee098.roa (raw, json) Hash identifier: RkQZyL+ejk0Ul7HW0sCs29xHwYf/EywUW48XAWDU5jE= Subject key identifier: 40:B0:49:7E:8E:C5:88:B7:E4:20:29:39:8F:C1:15:85:AF:32:15:E1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1E675C11C7FD058E727FA9BDA404493A79BB5095 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa Signing time: Tue 10 Jun 2025 15:20:55 +0000 ROA not before: Tue 10 Jun 2025 15:20:55 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:67:5c:11:c7:fd:05:8e:72:7f:a9:bd:a4:04:49:3a:79:bb:50:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:20:55 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=9969501352fb4ba3a515be3b266c2b3c8ef1ad16fa88b2a21009a85ba03678a1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:27:f7:f5:29:ba:fa:85:1e:85:70:36:fd: 81:20:18:bc:da:c8:48:64:cd:47:86:56:b3:37:86: 67:48:5e:fc:47:22:f9:10:b5:11:f7:49:a0:77:92: 37:2a:ee:45:ea:18:a7:f1:33:92:c4:0f:9e:67:72: e3:e6:b0:94:67:e8:c7:c0:4f:96:4c:4b:c0:a0:a0: 3d:cf:04:24:7d:cc:25:dd:f3:78:eb:b3:da:43:0b: aa:b3:54:29:9f:d7:89:32:31:f0:20:66:f2:15:31: 34:0b:e0:cf:1c:da:f6:ac:8e:31:45:0e:c7:a2:6b: 7a:b1:bb:e4:f5:58:8e:61:3c:f7:40:0e:1c:58:f8: 4f:08:d9:32:27:6b:82:56:de:1b:39:de:29:3e:cb: 45:5b:19:7a:52:7e:06:6f:a7:1a:ee:dd:37:c8:b9: 38:88:e6:95:7a:61:f9:e6:b8:d6:c2:e9:4a:24:d0: d9:d3:e6:38:09:82:72:83:f9:d4:da:eb:d9:76:ca: d0:8a:9b:4c:14:67:c7:76:4a:48:98:bf:e2:f6:9d: 50:56:29:f0:06:69:12:b8:0d:69:d4:e1:45:6c:78: 79:27:35:8d:9f:fc:fd:0a:0e:bd:27:74:c6:a7:a4: 99:7a:df:9e:8e:c4:fe:90:60:79:c7:0c:6b:46:a7: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B0:49:7E:8E:C5:88:B7:E4:20:29:39:8F:C1:15:85:AF:32:15:E1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:e000::/40 Signature Algorithm: sha256WithRSAEncryption 39:6e:02:39:89:e8:0b:85:67:c9:ac:2a:50:0d:65:ec:fb:45: f1:9d:8c:ba:af:f0:b6:80:65:79:70:93:c8:e1:ef:5e:b7:5b: ba:b9:a0:1e:a5:70:0f:c1:bc:66:d9:f2:61:12:65:9b:e3:f4: 68:d0:e6:42:d9:4c:71:57:26:57:1c:61:a6:b2:26:84:fa:db: 57:5c:97:b9:06:8b:95:0c:3a:58:a8:8a:7e:a5:1c:15:e4:e2: cd:9d:94:c6:92:cb:09:65:b6:48:3d:15:cc:42:0c:11:ca:db: c0:18:02:aa:6a:54:83:44:9a:a4:bd:15:e2:88:43:ff:59:ae: 00:89:41:b4:cc:6d:2e:69:b8:e8:b6:b4:8d:9c:64:62:31:0b: 52:2d:1e:0f:43:88:49:28:5b:74:1c:c6:84:3a:e8:a7:bf:85: af:a2:90:cc:40:7c:80:58:d3:41:f9:9d:06:bc:15:26:52:82: 55:95:e5:07:e7:90:2f:d2:50:3a:b7:bb:45:fe:51:d3:24:cc: 59:10:25:8f:1f:92:c9:19:fb:4a:92:eb:5b:4b:1f:3b:ac:13: 37:d7:f4:cd:e8:8f:75:21:7f:fb:7d:55:e1:8d:b8:17:a5:10: 24:43:01:1d:8f:94:e3:86:5e:08:92:f2:f8:06:85:e2:20:e0: 7c:de:4c:b0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHmdcEcf9BY5yf6m9pARJOnm7UJUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MjA1NVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAOTk2OTUwMTM1MmZiNGJhM2E1MTVi ZTNiMjY2YzJiM2M4ZWYxYWQxNmZhODhiMmEyMTAwOWE4NWJhMDM2NzhhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIAn9/UpuvqFHoVwNv2BIBi82shI ZM1HhlazN4ZnSF78RyL5ELUR90mgd5I3Ku5F6hin8TOSxA+eZ3Lj5rCUZ+jHwE+W TEvAoKA9zwQkfcwl3fN467PaQwuqs1Qpn9eJMjHwIGbyFTE0C+DPHNr2rI4xRQ7H omt6sbvk9ViOYTz3QA4cWPhPCNkyJ2uCVt4bOd4pPstFWxl6Un4Gb6ca7t03yLk4 iOaVemH55rjWwulKJNDZ0+Y4CYJyg/nU2uvZdsrQiptMFGfHdkpImL/i9p1QVinw BmkSuA1p1OFFbHh5JzWNn/z9Cg69J3TGp6SZet+ejsT+kGB5xwxrRqd+9QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFECwSX6OxYi35CApOY/BFYWvMhXhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyYzM0ZDQ1LWQxMzktNDEyMi04NDA3LWQyMjYzY2VlZTA5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMuAwDQYJKoZIhvcNAQELBQADggEBADluAjmJ6AuFZ8msKlAN Zez7RfGdjLqv8LaAZXlwk8jh7163W7q5oB6lcA/BvGbZ8mESZZvj9GjQ5kLZTHFX JlccYaayJoT621dcl7kGi5UMOlioin6lHBXk4s2dlMaSywlltkg9FcxCDBHK28AY AqpqVINEmqS9FeKIQ/9ZrgCJQbTMbS5puOi2tI2cZGIxC1ItHg9DiEkoW3QcxoQ6 6Ke/ha+ikMxAfIBY00H5nQa8FSZSglWV5QfnkC/SUDq3u0X+UdMkzFkQJY8fkskZ +0qS61tLHzusEzfX9M3oj3Uhf/t9VeGNuBelECRDAR2PlOOGXgiS8vgGheIg4Hze TLA= -----END CERTIFICATE-----Generated at Sat Jun 14 06:15:05 2025 by rpki-client