$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf6f6e75-6bab-4bc1-8822-1b7ec1fc148d.roa File: cf6f6e75-6bab-4bc1-8822-1b7ec1fc148d.roa (raw, json) Hash identifier: tz9ARDuFE8k/NGOH9E1nuSnoFqq27iAyT8ZrJC0mOpE= Subject key identifier: 66:E2:72:94:EA:8A:68:23:D6:C5:27:F1:69:EC:F0:F6:87:93:19:A2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3AFD6B2D613D471FB5821AB5DFA491CEF084CA84 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf6f6e75-6bab-4bc1-8822-1b7ec1fc148d.roa Signing time: Sat 07 Jun 2025 00:00:07 +0000 ROA not before: Sat 07 Jun 2025 00:00:07 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:fd:6b:2d:61:3d:47:1f:b5:82:1a:b5:df:a4:91:ce:f0:84:ca:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 7 00:00:07 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=3b7aed157633ab0cef49a9c802639ee5d869f5414f174997b9a6018c0f3c5875, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:8c:40:21:72:6d:72:34:05:40:d2:a2:4c: 10:84:61:4d:b0:18:c9:45:95:3c:c5:5e:41:e2:f8: c2:71:c6:e2:20:3e:2a:b9:70:4a:4d:09:e0:21:2e: 39:f2:68:6a:f3:0d:79:5f:10:6a:18:08:26:6c:73: 95:b3:47:9a:33:36:f7:85:9e:cc:c2:38:b5:cb:19: b7:92:eb:b2:86:f6:03:54:02:36:58:d1:45:39:09: a6:67:97:91:65:89:31:2e:c0:04:1b:51:58:34:b1: 8f:bb:58:7f:85:92:ea:94:e4:ff:4c:de:cf:e4:bc: a3:33:c1:2b:36:1e:a9:50:d9:bf:a7:10:6a:01:fc: 6b:9b:d3:31:b2:36:fa:df:36:49:80:c5:2f:83:4d: 5f:77:09:a9:41:68:35:94:5b:e2:eb:4a:f0:4d:23: 52:d8:cd:b8:2a:a6:68:c7:df:e6:bd:a0:25:11:50: 4e:51:c3:d5:15:63:c1:0e:27:a8:21:d3:05:6c:2f: d8:cd:c2:ba:da:0b:d7:fa:56:de:63:46:b8:5c:66: e0:06:fa:a7:c0:be:1a:85:96:75:29:3d:d7:ce:52: 48:5d:c1:89:5a:1e:a4:c3:42:ec:ba:c0:91:b9:f6: 85:77:6e:94:2c:b5:e7:79:0e:c3:96:a1:12:84:bb: 33:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E2:72:94:EA:8A:68:23:D6:C5:27:F1:69:EC:F0:F6:87:93:19:A2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf6f6e75-6bab-4bc1-8822-1b7ec1fc148d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:60c0::/48 Signature Algorithm: sha256WithRSAEncryption ad:d9:0e:80:36:be:2d:1e:8b:f1:af:bc:95:d4:95:f7:61:d1: d9:07:97:3c:fa:39:a8:f5:0e:72:ce:79:76:81:1a:d1:26:3f: 30:03:33:5f:63:38:ad:1e:1f:f8:88:39:53:35:e5:4e:31:56: ad:88:80:a1:c4:7d:f2:11:5d:59:a2:af:01:cb:5e:84:0c:a3: 65:24:64:49:60:35:8c:41:51:d4:bb:17:ec:0b:0a:70:19:c1: 0a:17:f7:4c:c4:ea:16:76:6e:1d:26:0c:a4:0b:bf:80:35:a1: c7:8d:17:c0:13:99:a0:98:c8:85:a8:df:d3:1c:e8:4d:71:24: ef:62:a5:14:7c:80:e0:35:a1:54:2d:29:d3:01:e0:c1:5e:a0: 62:c0:75:d6:85:7f:46:c0:62:35:ed:d3:ef:7c:6c:92:c2:97: 5d:fb:6a:bf:3b:c9:b5:6b:64:1c:e9:86:cd:48:6b:d2:12:6a: 77:1d:8f:89:d8:66:53:86:88:6b:1a:9a:36:01:32:d2:4a:f8: 0a:74:b7:6b:6e:84:6d:d7:9b:13:17:4a:42:4f:d7:20:c2:06: db:ea:9e:82:91:93:e6:7b:d9:14:44:2b:a8:ae:1d:55:4c:56: f2:df:1c:2d:c5:49:26:7c:93:67:2f:fd:e1:eb:2f:da:17:f2: ad:f5:0d:56 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOv1rLWE9Rx+1ghq136SRzvCEyoQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNzAwMDAwN1oX DTI1MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAM2I3YWVkMTU3NjMzYWIwY2VmNDlh OWM4MDI2MzllZTVkODY5ZjU0MTRmMTc0OTk3YjlhNjAxOGMwZjNjNTg3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj+MQCFybXI0BUDSokwQhGFNsBjJ RZU8xV5B4vjCccbiID4quXBKTQngIS458mhq8w15XxBqGAgmbHOVs0eaMzb3hZ7M wji1yxm3kuuyhvYDVAI2WNFFOQmmZ5eRZYkxLsAEG1FYNLGPu1h/hZLqlOT/TN7P 5LyjM8ErNh6pUNm/pxBqAfxrm9Mxsjb63zZJgMUvg01fdwmpQWg1lFvi60rwTSNS 2M24KqZox9/mvaAlEVBOUcPVFWPBDieoIdMFbC/YzcK62gvX+lbeY0a4XGbgBvqn wL4ahZZ1KT3XzlJIXcGJWh6kw0LsusCRufaFd26ULLXneQ7DlqEShLszpwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGbicpTqimgj1sUn8Wns8PaHkxmiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NmNmY2ZTc1LTZiYWItNGJjMS04ODIyLTFiN2VjMWZjMTQ4ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8mDAMA0GCSqGSIb3DQEBCwUAA4IBAQCt2Q6ANr4tHovxr7yV 1JX3YdHZB5c8+jmo9Q5yznl2gRrRJj8wAzNfYzitHh/4iDlTNeVOMVatiIChxH3y EV1Zoq8By16EDKNlJGRJYDWMQVHUuxfsCwpwGcEKF/dMxOoWdm4dJgykC7+ANaHH jRfAE5mgmMiFqN/THOhNcSTvYqUUfIDgNaFULSnTAeDBXqBiwHXWhX9GwGI17dPv fGySwpdd+2q/O8m1a2Qc6YbNSGvSEmp3HY+J2GZThohrGpo2ATLSSvgKdLdrboRt 15sTF0pCT9cgwgbb6p6CkZPme9kURCuorh1VTFby3xwtxUkmfJNnL/3h6y/aF/Kt 9Q1W -----END CERTIFICATE-----Generated at Sat Jun 14 06:09:44 2025 by rpki-client