$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca1499ac-e3ec-424c-96ee-5ed34b4df464.roa File: ca1499ac-e3ec-424c-96ee-5ed34b4df464.roa (raw, json) Hash identifier: jZ+e43XDuPpmnmxvNlr6RX5kEeYNzvVR01EO1VkHz60= Subject key identifier: 02:84:93:6D:FC:83:48:71:98:4E:94:4D:99:B1:34:15:EE:43:8A:73 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7BA83DC0696E266EEDC06E5CC1283D9AF438DBA8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca1499ac-e3ec-424c-96ee-5ed34b4df464.roa Signing time: Mon 09 Jun 2025 15:40:55 +0000 ROA not before: Mon 09 Jun 2025 15:40:55 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a8:3d:c0:69:6e:26:6e:ed:c0:6e:5c:c1:28:3d:9a:f4:38:db:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:40:55 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=d807de55a63d70ab4b1f5dc2ab15f53878d33c45bf2952d020e7de67bbfebaae, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:df:ad:9a:14:b2:f8:95:54:d4:2e:c1:e5: 5f:5a:2e:0d:98:2d:ec:5c:13:b4:30:52:87:e1:90: 56:c7:03:46:88:bc:7d:23:d8:ac:8b:60:08:61:7b: bd:d0:4c:27:ed:46:a4:8d:6f:35:49:46:69:98:d6: 90:a9:2e:4e:49:c6:7c:a3:e2:67:88:fd:9f:6c:3d: a5:5b:17:aa:24:7d:14:f2:3d:1f:60:c0:78:90:90: c9:cd:2d:76:df:a5:17:b9:a0:e5:5a:ac:c4:d3:7f: a3:db:7b:16:a7:b9:c7:b6:74:b1:15:8a:0d:cd:b5: 42:0f:0d:13:97:99:ea:db:00:50:60:fa:80:ef:26: 40:a4:4f:7b:bf:6c:ca:19:d7:df:66:2f:99:15:7d: 5d:fa:88:33:85:0b:5c:91:00:0a:22:d3:c2:80:73: 70:75:3c:2d:60:83:95:80:bf:2f:82:86:c8:ae:6d: a1:12:ab:c0:d0:12:4d:d5:f6:43:f7:b2:29:04:9e: d9:5b:08:85:3f:f1:f4:c5:b5:7a:61:63:0d:63:52: 9f:30:2b:f3:3e:62:59:45:91:ec:53:5d:69:86:67: 80:71:8f:0c:f9:f2:ed:ad:26:e1:f6:99:77:06:e2: 48:85:fa:87:f1:5d:a9:a1:e1:fa:a4:fa:8c:c2:45: 81:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:84:93:6D:FC:83:48:71:98:4E:94:4D:99:B1:34:15:EE:43:8A:73 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca1499ac-e3ec-424c-96ee-5ed34b4df464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4000::/40 Signature Algorithm: sha256WithRSAEncryption 54:4a:89:e6:10:b9:0e:58:dc:6f:48:89:05:f9:09:b3:9c:bb: 22:1b:06:47:e6:86:2d:37:8c:d5:df:a4:54:3d:f8:b9:d0:9c: 9d:c3:73:6c:f3:15:3b:ab:aa:5f:09:d8:19:5f:1e:44:35:29: 6e:8a:d0:f9:a1:66:00:46:fd:d4:4a:61:72:5a:f6:d3:b0:8e: f4:22:4f:fb:43:30:22:23:d6:f3:ff:a8:e0:af:13:c8:bf:3c: 11:bd:42:55:42:c9:c5:48:76:cf:71:1c:03:15:09:28:d6:60: 15:7e:2c:d4:c0:80:a9:44:69:ee:a5:84:90:6d:e6:e9:b5:81: 4c:22:b4:8a:a0:4b:4c:29:88:05:b4:da:b0:8a:80:b1:a1:6b: f1:94:4c:3c:b6:a0:03:be:38:c2:cd:a5:0d:56:f0:78:d6:56: 8d:0c:cc:f3:e7:f1:41:31:9d:c1:84:22:c8:f3:01:60:a3:f3: b3:f5:37:ff:a5:d7:f3:6e:43:40:d3:25:6b:c8:4c:66:65:3f: 25:4c:06:af:7f:f4:e1:c6:8a:ba:2d:37:6d:5f:96:da:8d:5f: 78:63:f0:35:2b:49:11:f2:42:33:d5:50:fd:8a:ed:f5:d5:14: 1b:8e:19:a9:ca:58:6f:f1:5c:c7:e5:2c:c2:91:56:7d:62:18: 8b:85:1b:ca -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUe6g9wGluJm7twG5cwSg9mvQ426gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1NDA1NVoX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAZDgwN2RlNTVhNjNkNzBhYjRiMWY1 ZGMyYWIxNWY1Mzg3OGQzM2M0NWJmMjk1MmQwMjBlN2RlNjdiYmZlYmFhZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaXfrZoUsviVVNQuweVfWi4NmC3s XBO0MFKH4ZBWxwNGiLx9I9isi2AIYXu90Ewn7UakjW81SUZpmNaQqS5OScZ8o+Jn iP2fbD2lWxeqJH0U8j0fYMB4kJDJzS1236UXuaDlWqzE03+j23sWp7nHtnSxFYoN zbVCDw0Tl5nq2wBQYPqA7yZApE97v2zKGdffZi+ZFX1d+ogzhQtckQAKItPCgHNw dTwtYIOVgL8vgobIrm2hEqvA0BJN1fZD97IpBJ7ZWwiFP/H0xbV6YWMNY1KfMCvz PmJZRZHsU11phmeAcY8M+fLtrSbh9pl3BuJIhfqH8V2poeH6pPqMwkWBRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAKEk238g0hxmE6UTZmxNBXuQ4pzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NhMTQ5OWFjLWUzZWMtNDI0Yy05NmVlLTVlZDM0YjRkZjQ2NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYUAwDQYJKoZIhvcNAQELBQADggEBAFRKieYQuQ5Y3G9IiQX5 CbOcuyIbBkfmhi03jNXfpFQ9+LnQnJ3Dc2zzFTurql8J2BlfHkQ1KW6K0PmhZgBG /dRKYXJa9tOwjvQiT/tDMCIj1vP/qOCvE8i/PBG9QlVCycVIds9xHAMVCSjWYBV+ LNTAgKlEae6lhJBt5um1gUwitIqgS0wpiAW02rCKgLGha/GUTDy2oAO+OMLNpQ1W 8HjWVo0MzPPn8UExncGEIsjzAWCj87P1N/+l1/NuQ0DTJWvITGZlPyVMBq9/9OHG irotN21fltqNX3hj8DUrSRHyQjPVUP2K7fXVFBuOGanKWG/xXMflLMKRVn1iGIuF G8o= -----END CERTIFICATE-----Generated at Sat Jun 14 06:15:06 2025 by rpki-client