$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa File: c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa (raw, json) Hash identifier: Vutnk6ldRuhc/TT1aCTnnQp4SSMYo+KXZAGku6yvBCk= Subject key identifier: 00:A5:B6:DE:FA:56:53:15:DC:6E:88:32:5C:5C:DF:39:97:37:5E:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 379B55D547B9743F62173EE46B4C63D9F83FE4FA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa Signing time: Tue 10 Jun 2025 15:11:10 +0000 ROA not before: Tue 10 Jun 2025 15:11:10 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9b:55:d5:47:b9:74:3f:62:17:3e:e4:6b:4c:63:d9:f8:3f:e4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:11:10 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=c4293bfcccb248782a7dbd845d9416f518300e6a79c601a8550fbc700b850e53, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:58:50:99:78:6c:77:8e:29:3b:b5:8e:b4: b6:4f:2b:ce:87:54:1c:62:4e:1c:76:db:7a:a7:d0: 11:f6:52:98:fe:40:3d:cc:91:d1:44:51:d7:2d:4e: 5d:90:80:a2:3d:60:4e:2b:03:09:db:1f:74:cd:48: 34:a2:b5:4a:87:0d:ab:5c:db:04:4d:6f:ae:e4:8a: ef:06:53:13:90:42:7d:37:1d:f1:b9:3b:8b:2a:46: f9:ad:82:17:fb:8c:c2:22:ab:f5:fd:1e:11:ca:9d: 55:75:41:97:39:a8:99:98:11:b3:a3:b6:25:18:ec: 41:32:e6:f3:08:51:0d:bb:a4:d4:b2:c9:59:b7:99: c6:bd:40:af:0a:13:7f:42:ad:9e:e8:1a:54:5b:eb: 24:ec:1a:4f:8d:05:f7:32:b1:e9:0e:05:18:56:2c: 8d:c1:0d:c6:1e:a4:ce:56:b2:5c:40:63:37:c6:60: 9d:ef:f1:96:e4:f8:5b:7e:67:d9:83:11:03:41:c7: ad:1a:97:53:89:47:85:c6:f6:46:b0:97:95:eb:c9: 1c:5e:21:b4:95:f8:88:90:72:74:c3:14:4a:7c:c9: 79:62:08:07:d4:7a:7c:c9:b1:3a:2b:99:01:15:24: 65:c4:84:71:db:3d:33:d5:42:5d:d1:c8:48:87:6c: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A5:B6:DE:FA:56:53:15:DC:6E:88:32:5C:5C:DF:39:97:37:5E:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:c800::/40 Signature Algorithm: sha256WithRSAEncryption 81:23:24:ed:bc:bd:bf:b9:40:14:d5:a1:58:76:68:68:07:d1: ea:74:40:6c:44:89:00:ee:58:58:15:3a:83:84:2e:0f:04:0b: 92:d5:38:61:36:fb:db:4c:71:5e:51:fe:75:ac:8a:87:aa:48: bc:f4:f2:eb:78:1b:71:d8:7c:17:78:2b:63:74:41:cc:78:ac: 7b:f0:6c:7b:94:12:e9:d5:05:fc:85:00:9d:a8:02:a8:3b:29: 56:54:af:b1:fe:9f:2c:d7:7d:21:98:a8:69:10:5e:ae:95:31: 74:7c:02:43:cb:42:ec:ba:b2:57:ae:6d:d9:0c:db:33:08:74: 65:7e:39:11:61:48:ea:81:d0:97:ce:04:d2:b7:48:cb:32:2b: 02:7f:4b:a4:1f:25:02:65:19:3d:17:69:f7:10:b5:32:47:e3: 78:27:37:03:7a:f5:72:e3:9d:c1:44:17:d1:b4:62:16:e0:a9: e2:16:d1:b0:6f:41:b1:b3:5a:1d:93:af:02:77:a6:03:df:79: f6:8b:08:7a:c7:52:c6:4c:8c:d3:6b:aa:56:43:29:bb:26:c5: d2:a2:2a:d0:1c:57:e2:c0:a6:6a:fe:fe:0f:9f:40:fb:d9:75: 0b:58:40:3e:f1:81:86:0c:0c:56:cd:a8:97:90:b4:c1:be:1f: e0:10:59:62 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUN5tV1Ue5dD9iFz7ka0xj2fg/5PowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MTExMFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYzQyOTNiZmNjY2IyNDg3ODJhN2Ri ZDg0NWQ5NDE2ZjUxODMwMGU2YTc5YzYwMWE4NTUwZmJjNzAwYjg1MGU1MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHFYUJl4bHeOKTu1jrS2TyvOh1Qc Yk4cdtt6p9AR9lKY/kA9zJHRRFHXLU5dkICiPWBOKwMJ2x90zUg0orVKhw2rXNsE TW+u5IrvBlMTkEJ9Nx3xuTuLKkb5rYIX+4zCIqv1/R4Ryp1VdUGXOaiZmBGzo7Yl GOxBMubzCFENu6TUsslZt5nGvUCvChN/Qq2e6BpUW+sk7BpPjQX3MrHpDgUYViyN wQ3GHqTOVrJcQGM3xmCd7/GW5PhbfmfZgxEDQcetGpdTiUeFxvZGsJeV68kcXiG0 lfiIkHJ0wxRKfMl5YggH1Hp8ybE6K5kBFSRlxIRx2z0z1UJd0chIh2xUKwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFACltt76VlMV3G6IMlxc3zmXN14PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5YmM5NzZhLTliYmItNDAxZC05YTU4LWJjZmE2ZGM3ODE3MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9sgwDQYJKoZIhvcNAQELBQADggEBAIEjJO28vb+5QBTVoVh2 aGgH0ep0QGxEiQDuWFgVOoOELg8EC5LVOGE2+9tMcV5R/nWsioeqSLz08ut4G3HY fBd4K2N0Qcx4rHvwbHuUEunVBfyFAJ2oAqg7KVZUr7H+nyzXfSGYqGkQXq6VMXR8 AkPLQuy6sleubdkM2zMIdGV+ORFhSOqB0JfOBNK3SMsyKwJ/S6QfJQJlGT0XafcQ tTJH43gnNwN69XLjncFEF9G0YhbgqeIW0bBvQbGzWh2TrwJ3pgPfefaLCHrHUsZM jNNrqlZDKbsmxdKiKtAcV+LApmr+/g+fQPvZdQtYQD7xgYYMDFbNqJeQtMG+H+AQ WWI= -----END CERTIFICATE-----Generated at Sat Jun 14 06:33:16 2025 by rpki-client