$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7a048e9-67c5-415d-88d4-0acc3454af62.roa File: c7a048e9-67c5-415d-88d4-0acc3454af62.roa (raw, json) Hash identifier: /cS4Pbx/JZR2Xnu3pGgglZ4PufMD0CIfWCwNswqFYfM= Subject key identifier: 40:B9:DD:9C:6B:D9:B1:1B:38:02:A0:70:EC:A0:5A:FF:68:16:CC:FC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6DACAD5CC2538199B0729D8ED4CC4FC603600562 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7a048e9-67c5-415d-88d4-0acc3454af62.roa Signing time: Tue 10 Jun 2025 15:30:29 +0000 ROA not before: Tue 10 Jun 2025 15:30:29 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ac:ad:5c:c2:53:81:99:b0:72:9d:8e:d4:cc:4f:c6:03:60:05:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:30:29 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=9d9533e80f7874d157600eb5236c133aae4884b67c3f261c1c7b3c3fded758a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:b0:2e:43:81:01:24:a9:ad:1f:fa:4c:63: a9:91:a3:53:71:9e:38:54:e5:20:5f:12:36:ee:71: 9d:fd:4f:c4:ce:d0:c9:5d:74:59:81:10:41:40:99: 85:6a:57:4f:ce:71:e4:b4:cc:d3:a3:af:63:3d:56: 97:fb:91:fd:bd:84:6b:78:21:6d:41:31:c6:bb:af: cd:80:d2:b4:bc:88:4a:45:e6:75:c7:ef:e1:42:0f: 36:cb:84:8d:12:a1:26:cf:7f:2a:0f:c2:36:d5:14: cc:a2:4e:d1:b4:12:3c:e1:91:35:4c:b7:eb:c0:22: 2f:21:9f:5d:a5:49:14:e9:db:3d:f5:b8:55:75:63: 16:48:cd:b5:d5:0b:8d:18:93:95:5c:4c:38:06:1a: 98:2f:8f:d5:4a:77:b6:22:02:dc:11:d5:7c:43:b3: 6d:cc:7b:e0:ac:60:4a:3b:f9:2a:d3:4e:61:25:03: b3:ee:e5:08:dd:e3:f7:98:d8:5c:e6:12:4c:00:e9: 37:04:2d:02:79:82:4f:90:78:80:ff:3c:ea:a5:f6: ca:e8:bf:13:d3:d8:00:f3:c7:7d:c8:80:d8:09:1b: 3e:92:3c:ab:01:23:8f:04:2c:0d:1c:e5:e9:87:85: 5c:f6:17:1d:36:0b:5b:d4:28:3b:6a:6f:44:cd:70: 61:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B9:DD:9C:6B:D9:B1:1B:38:02:A0:70:EC:A0:5A:FF:68:16:CC:FC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7a048e9-67c5-415d-88d4-0acc3454af62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:8000::/40 Signature Algorithm: sha256WithRSAEncryption 2a:2a:19:f3:b0:f1:e2:67:99:c4:ea:67:d8:3f:50:ae:f6:46: b4:e9:bf:08:9b:83:af:a2:ad:87:38:52:e7:fe:65:de:01:d5: 31:d2:bf:68:f2:82:ab:d2:3b:34:62:76:62:89:8c:7c:af:0b: 33:ee:04:40:27:d7:f6:ed:f1:ae:6b:e3:b6:42:12:f1:db:1c: da:ff:11:bb:a8:09:c7:3f:86:3b:68:33:ad:b9:96:10:af:1b: e4:2d:29:16:86:09:b4:c9:03:c8:46:54:1f:66:c8:d4:ab:d6: df:e7:9b:2f:4a:aa:8d:cc:6a:75:28:1e:aa:64:ad:bd:d6:dd: 74:07:24:de:b9:39:5a:0e:df:b1:6c:ef:c8:1d:bc:e7:99:3d: 4a:7b:ee:5b:ec:11:6b:da:eb:ed:a8:48:a2:6a:83:1c:f3:17: 01:2e:c9:f9:62:2f:42:4e:58:f5:94:37:54:4e:db:41:cf:72: bf:82:41:f3:2a:5a:f6:25:20:a0:ba:96:ed:1c:1c:6b:13:36: e7:83:39:28:54:d0:2b:b5:41:3f:82:53:f8:6c:c5:04:6d:02: ff:82:12:14:9b:fe:6d:8c:2e:68:40:f4:c0:e0:09:1f:b9:cd: c4:8d:84:f4:eb:ca:6d:1a:15:eb:be:7c:b6:a4:d5:d8:45:36: 1c:09:d2:b4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbaytXMJTgZmwcp2O1MxPxgNgBWIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MzAyOVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAOWQ5NTMzZTgwZjc4NzRkMTU3NjAw ZWI1MjM2YzEzM2FhZTQ4ODRiNjdjM2YyNjFjMWM3YjNjM2ZkZWQ3NThhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVOwLkOBASSprR/6TGOpkaNTcZ44 VOUgXxI27nGd/U/EztDJXXRZgRBBQJmFaldPznHktMzTo69jPVaX+5H9vYRreCFt QTHGu6/NgNK0vIhKReZ1x+/hQg82y4SNEqEmz38qD8I21RTMok7RtBI84ZE1TLfr wCIvIZ9dpUkU6ds99bhVdWMWSM211QuNGJOVXEw4BhqYL4/VSne2IgLcEdV8Q7Nt zHvgrGBKO/kq005hJQOz7uUI3eP3mNhc5hJMAOk3BC0CeYJPkHiA/zzqpfbK6L8T 09gA88d9yIDYCRs+kjyrASOPBCwNHOXph4Vc9hcdNgtb1Cg7am9EzXBhTwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEC53Zxr2bEbOAKgcOygWv9oFsz8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3YTA0OGU5LTY3YzUtNDE1ZC04OGQ0LTBhY2MzNDU0YWY2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/oAwDQYJKoZIhvcNAQELBQADggEBACoqGfOw8eJnmcTqZ9g/ UK72RrTpvwibg6+irYc4Uuf+Zd4B1THSv2jygqvSOzRidmKJjHyvCzPuBEAn1/bt 8a5r47ZCEvHbHNr/EbuoCcc/hjtoM625lhCvG+QtKRaGCbTJA8hGVB9myNSr1t/n my9Kqo3ManUoHqpkrb3W3XQHJN65OVoO37Fs78gdvOeZPUp77lvsEWva6+2oSKJq gxzzFwEuyfliL0JOWPWUN1RO20HPcr+CQfMqWvYlIKC6lu0cHGsTNueDOShU0Cu1 QT+CU/hsxQRtAv+CEhSb/m2MLmhA9MDgCR+5zcSNhPTrym0aFeu+fLak1dhFNhwJ 0rQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:23:11 2025 by rpki-client