$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debc584f-82ae-4052-973f-96282869d7c9.roa File: debc584f-82ae-4052-973f-96282869d7c9.roa (raw, json) Hash identifier: CyKX4RsQffafAvmqfLvXhhFTJyjdRvSQeqqrICOudC4= Subject key identifier: B8:8C:EA:B6:0E:2E:0C:BF:EA:51:C2:6E:D1:F4:5B:CA:0B:3F:15:A2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 39D9337295736B795EB20FC3A22D202656294412 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debc584f-82ae-4052-973f-96282869d7c9.roa Signing time: Mon 09 Jun 2025 15:10:22 +0000 ROA not before: Mon 09 Jun 2025 15:10:22 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d9:33:72:95:73:6b:79:5e:b2:0f:c3:a2:2d:20:26:56:29:44:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:10:22 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=6159dbc98e62cd6596570055c21df379622755682a045984d2ddca78fd143722, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:36:a0:d9:e1:db:f7:e7:a0:e8:b5:f8:e8:e3: 19:d1:f5:64:5d:c6:b8:c7:a9:5c:60:cb:4b:a8:e3: c5:3f:63:c5:fc:ec:5f:af:b0:4a:17:c7:47:36:a7: 00:3c:89:47:c8:4b:69:5e:ca:07:62:2c:c6:b8:b0: 07:a5:32:92:69:6a:cd:fb:dd:ef:9f:69:65:fb:89: f8:77:b8:93:0d:4f:d9:6c:d2:9e:ff:11:78:fb:a4: d9:67:f7:19:d8:ad:17:26:bf:97:01:df:91:68:5e: 09:8a:96:00:c7:07:03:e8:71:79:95:6f:89:ac:79: 60:c4:65:c9:06:45:5a:c3:c5:2d:ea:88:d6:2a:5a: ac:a6:b3:a3:04:66:ff:e6:a2:05:58:3e:1e:a5:7d: cd:e8:0a:d3:b1:8a:58:6c:01:e1:55:ad:ec:26:4b: 30:0c:96:a4:c6:fc:03:88:67:05:a9:8f:77:35:a6: 24:99:7f:f9:51:f2:c8:f4:23:c6:b3:2c:33:37:e5: 66:55:21:d7:87:fa:79:b4:a3:8a:65:7f:45:ba:57: 8a:04:fa:d3:f9:e9:43:6c:cf:8c:e8:9a:10:09:d2: e2:51:f7:7d:bd:c7:4d:f4:8d:e7:c6:2f:6c:d8:fc: b3:3c:04:f8:4b:63:47:75:aa:40:e3:76:f9:fe:dd: 31:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8C:EA:B6:0E:2E:0C:BF:EA:51:C2:6E:D1:F4:5B:CA:0B:3F:15:A2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debc584f-82ae-4052-973f-96282869d7c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 92:3b:32:0b:9a:b8:27:50:52:46:43:b7:e9:cb:f5:a5:0b:e5: 58:2f:11:54:80:c6:a5:fb:e2:72:04:e2:e8:98:70:91:13:f3: ae:b0:fa:20:98:b0:c9:d2:79:6b:04:a8:58:18:66:9a:13:e0: cc:8c:93:c6:ac:99:75:c7:dd:cc:5b:fc:72:f7:27:3b:dd:1d: cd:9c:5e:a1:8f:bc:78:32:50:37:96:ef:88:0f:6a:ec:c1:aa: ed:8a:86:06:91:0a:3f:0d:f7:2b:7a:af:1e:c4:ad:91:41:9e: 9d:e2:7a:c4:d8:3d:4f:b0:d8:60:9f:f2:2b:af:b8:de:2d:7f: 1e:82:c8:e4:fc:eb:2b:48:cf:8d:fa:4e:a5:72:9c:2d:02:65: b3:6a:a7:b7:67:cd:68:9d:de:00:69:9c:64:6a:71:5a:af:75: ba:57:e7:18:25:63:46:ca:eb:d5:2c:dc:a8:20:80:d1:62:07: 62:d3:39:1a:a3:e3:9e:74:ab:8f:6c:4c:0d:b2:b3:1d:63:7a: 1b:b3:5d:e7:68:5f:3e:31:34:e0:c6:a3:0a:43:fb:b3:01:29: 10:da:31:d2:cb:46:0a:ce:da:68:97:f4:a2:2f:bc:78:96:2b: 2e:f2:d3:e6:f8:88:6e:0b:5a:1f:4f:26:f6:1a:10:d8:5a:bf: 2c:ee:ce:77 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOdkzcpVza3lesg/Doi0gJlYpRBIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MTAyMloX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNANjE1OWRiYzk4ZTYyY2Q2NTk2NTcw MDU1YzIxZGYzNzk2MjI3NTU2ODJhMDQ1OTg0ZDJkZGNhNzhmZDE0MzcyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizag2eHb9+eg6LX46OMZ0fVkXca4 x6lcYMtLqOPFP2PF/Oxfr7BKF8dHNqcAPIlHyEtpXsoHYizGuLAHpTKSaWrN+93v n2ll+4n4d7iTDU/ZbNKe/xF4+6TZZ/cZ2K0XJr+XAd+RaF4JipYAxwcD6HF5lW+J rHlgxGXJBkVaw8Ut6ojWKlqsprOjBGb/5qIFWD4epX3N6ArTsYpYbAHhVa3sJksw DJakxvwDiGcFqY93NaYkmX/5UfLI9CPGsywzN+VmVSHXh/p5tKOKZX9FuleKBPrT +elDbM+M6JoQCdLiUfd9vcdN9I3nxi9s2PyzPAT4S2NHdapA43b5/t0xWQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLiM6rYOLgy/6lHCbtH0W8oLPxWiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RlYmM1ODRmLTgyYWUtNDA1Mi05NzNmLTk2MjgyODY5ZDdjOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYSDAMA0GCSqGSIb3DQEBCwUAA4IBAQCSOzILmrgnUFJGQ7fp y/WlC+VYLxFUgMal++JyBOLomHCRE/OusPogmLDJ0nlrBKhYGGaaE+DMjJPGrJl1 x93MW/xy9yc73R3NnF6hj7x4MlA3lu+ID2rswartioYGkQo/Dfcreq8exK2RQZ6d 4nrE2D1PsNhgn/Irr7jeLX8egsjk/OsrSM+N+k6lcpwtAmWzaqe3Z81ond4AaZxk anFar3W6V+cYJWNGyuvVLNyoIIDRYgdi0zkao+OedKuPbEwNsrMdY3obs13naF8+ MTTgxqMKQ/uzASkQ2jHSy0YKztpol/SiL7x4lisu8tPm+IhuC1ofTyb2GhDYWr8s 7s53 -----END CERTIFICATE-----Generated at Sat Jun 14 06:38:26 2025 by rpki-client