$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8ec6c99-ca91-484d-ab88-05d1d618b206.roa File: c8ec6c99-ca91-484d-ab88-05d1d618b206.roa (raw, json) Hash identifier: 6vTc7vjK5V+M/GoMK5UJYMrrfZ2H97+x6SUvBt529T4= Subject key identifier: 25:C2:18:FE:CB:D5:29:9F:9A:8F:5D:A0:87:27:41:40:81:47:30:AF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E475FE8BEFA2FA464BC361E67322E76BF0AF452 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8ec6c99-ca91-484d-ab88-05d1d618b206.roa Signing time: Sat 07 Jun 2025 00:20:57 +0000 ROA not before: Sat 07 Jun 2025 00:20:57 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:47:5f:e8:be:fa:2f:a4:64:bc:36:1e:67:32:2e:76:bf:0a:f4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 7 00:20:57 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=041be5a280b59564eda55cd0e55e7152382e1d2b893f460474d4d1ed04565015, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:80:d7:7d:28:1b:e8:c4:52:17:11:bb:c2:6f: 99:9f:4f:07:c1:61:6c:26:23:0d:a3:7d:09:ff:ed: 0b:32:6d:a7:b8:3b:3c:87:d3:58:a3:5b:f8:9d:5e: b6:37:09:61:6b:13:ce:ec:45:66:c6:9d:78:06:2c: 23:76:77:45:f3:3d:b3:74:63:67:f5:2f:49:b1:46: 95:fe:e7:ac:47:4d:d8:57:ca:35:c1:47:85:a9:a0: c2:17:fd:fa:4a:9f:02:aa:6d:b3:95:10:42:88:4d: ef:26:44:7c:fd:67:39:5b:7f:2d:d9:54:d3:f8:63: 9c:3d:cb:8a:b7:23:8c:91:a5:a0:36:96:1a:ec:26: 8a:20:da:f7:14:d3:11:58:8a:32:9e:40:e5:7a:e0: 80:46:b0:da:b3:f3:63:13:11:79:02:2c:65:93:02: 9a:22:04:93:c6:27:57:dd:31:6a:0a:e4:09:b1:47: af:5b:79:55:8e:3b:8b:60:c9:75:1c:79:41:ed:29: 9f:a0:b9:08:a8:22:d5:85:3b:8d:ad:62:2e:32:d1: c7:da:f9:5d:99:e6:ec:18:d7:e7:95:33:f6:fa:ce: a1:a8:de:95:e1:ac:e5:d6:98:58:fb:32:b7:37:ee: 18:8d:dd:ea:52:16:5f:02:52:ad:23:83:61:18:fd: 93:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C2:18:FE:CB:D5:29:9F:9A:8F:5D:A0:87:27:41:40:81:47:30:AF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8ec6c99-ca91-484d-ab88-05d1d618b206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:6080::/48 Signature Algorithm: sha256WithRSAEncryption b0:b7:4e:21:f9:11:82:e8:8d:a2:32:2e:a8:e2:5d:0d:da:2f: 8e:c7:5c:62:f6:f2:b2:36:1f:0c:d5:8f:a3:d4:f9:8e:ae:e2: 5e:a7:0f:bb:49:87:a1:5a:64:1d:c6:91:48:10:fa:10:5e:a6: c9:b2:65:08:e9:b6:a2:00:4c:9f:1b:53:8f:50:95:08:02:ec: ac:00:18:c2:7a:c7:fb:62:85:1b:74:41:af:29:02:db:bc:64: e6:76:e4:90:f5:0e:3f:76:ac:1c:b2:61:06:5e:f3:16:0c:43: 03:ce:04:bd:55:97:a6:28:f1:f4:6e:e5:fd:81:ec:29:be:7b: 47:64:88:f5:b9:00:d8:f4:5a:9d:3f:ab:83:ad:82:06:f2:5f: 66:27:fe:a7:20:2a:69:57:3a:89:7f:81:db:e3:d8:bf:b2:88: 0d:bf:96:49:9d:68:51:e4:35:ab:81:4e:ba:87:d6:b8:75:f5: 56:33:d5:95:31:b9:0a:de:0c:a8:ed:9d:30:fd:75:d6:de:90: 4f:77:6b:4a:dc:e3:b8:8c:7f:14:28:1e:6f:59:35:c4:c3:a8: db:67:c1:2b:1f:8c:c8:65:de:97:b8:b5:6e:f7:5c:a5:9c:97: 42:b8:d7:84:07:3f:08:bf:43:cb:aa:e8:c3:2b:04:86:2b:5b: 4d:fa:ec:de -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULkdf6L76L6RkvDYeZzIudr8K9FIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNzAwMjA1N1oX DTI1MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAMDQxYmU1YTI4MGI1OTU2NGVkYTU1 Y2QwZTU1ZTcxNTIzODJlMWQyYjg5M2Y0NjA0NzRkNGQxZWQwNDU2NTAxNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IDXfSgb6MRSFxG7wm+Zn08HwWFs JiMNo30J/+0LMm2nuDs8h9NYo1v4nV62NwlhaxPO7EVmxp14BiwjdndF8z2zdGNn 9S9JsUaV/uesR03YV8o1wUeFqaDCF/36Sp8Cqm2zlRBCiE3vJkR8/Wc5W38t2VTT +GOcPcuKtyOMkaWgNpYa7CaKINr3FNMRWIoynkDleuCARrDas/NjExF5AixlkwKa IgSTxidX3TFqCuQJsUevW3lVjjuLYMl1HHlB7SmfoLkIqCLVhTuNrWIuMtHH2vld mebsGNfnlTP2+s6hqN6V4azl1phY+zK3N+4Yjd3qUhZfAlKtI4NhGP2TSwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCXCGP7L1Smfmo9doIcnQUCBRzCvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M4ZWM2Yzk5LWNhOTEtNDg0ZC1hYjg4LTA1ZDFkNjE4YjIwNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYWCAMA0GCSqGSIb3DQEBCwUAA4IBAQCwt04h+RGC6I2iMi6o 4l0N2i+Ox1xi9vKyNh8M1Y+j1PmOruJepw+7SYehWmQdxpFIEPoQXqbJsmUI6bai AEyfG1OPUJUIAuysABjCesf7YoUbdEGvKQLbvGTmduSQ9Q4/dqwcsmEGXvMWDEMD zgS9VZemKPH0buX9gewpvntHZIj1uQDY9FqdP6uDrYIG8l9mJ/6nICppVzqJf4Hb 49i/sogNv5ZJnWhR5DWrgU66h9a4dfVWM9WVMbkK3gyo7Z0w/XXW3pBPd2tK3OO4 jH8UKB5vWTXEw6jbZ8ErH4zIZd6XuLVu91ylnJdCuNeEBz8Iv0PLqujDKwSGK1tN +uze -----END CERTIFICATE-----Generated at Sat Jun 14 06:25:23 2025 by rpki-client