$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa File: deebf2b8-e915-45af-9266-cecda7c6e2e4.roa (raw, json) Hash identifier: zewsc5+VONOB2NInBof4t8JdEdUaSoqxoww5GvX+LOk= Subject key identifier: EB:D0:D6:96:C9:1C:3D:B6:C2:3F:C2:23:50:5F:66:F3:A1:EE:8C:77 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A4143F53E61457CF5AA88D7306334D836229EA3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa Signing time: Tue 10 Jun 2025 15:31:39 +0000 ROA not before: Tue 10 Jun 2025 15:31:39 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:41:43:f5:3e:61:45:7c:f5:aa:88:d7:30:63:34:d8:36:22:9e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:31:39 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=bcefe8ba1257c61f17f798382ac435e4aa09b1063a0447a53c7ca142f9827fdd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:4e:e4:44:4b:53:c2:1d:ca:0f:10:0f:11: c2:fd:f8:d6:ee:a0:8b:ea:bb:3f:74:0c:6a:0a:8a: e3:89:87:d4:35:4e:e7:be:79:c0:f8:e9:5e:4a:71: 38:c6:8b:2d:20:6c:bc:ef:97:ec:1a:5a:06:e5:b2: 92:a9:9b:7b:f7:d2:f2:73:4b:74:36:f7:6e:8c:f5: 8c:3f:3f:29:ba:5b:82:71:4b:9e:d5:cb:41:91:cb: 40:2d:2c:ae:2f:2b:19:a6:35:e3:90:2d:05:6e:22: 5c:cd:c6:38:32:79:41:ec:7a:b1:c6:a9:ad:a5:ff: 16:cf:c2:af:6a:af:c0:74:fb:e4:e1:6c:4f:5e:22: d0:36:7a:69:88:76:68:ab:b2:19:61:83:3b:12:cc: 2e:c7:4b:ba:9f:5d:63:62:81:90:f4:bc:dc:17:29: 09:30:6e:ae:35:e2:90:5b:d9:92:65:a0:23:b3:c4: ef:f4:89:c9:da:46:b9:fc:dc:7a:49:22:95:e7:0c: 52:d6:9e:1f:88:2a:1e:90:ee:39:d1:96:a2:fe:b8: 30:cf:0c:1e:23:f5:ed:18:6a:c2:ea:2a:3d:20:6a: 33:02:c7:04:78:84:50:e5:fb:6e:cd:92:1f:e8:43: c2:2d:bb:16:4d:1b:df:35:49:4f:5c:22:05:68:66: c3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D0:D6:96:C9:1C:3D:B6:C2:3F:C2:23:50:5F:66:F3:A1:EE:8C:77 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:800::/40 Signature Algorithm: sha256WithRSAEncryption 39:b4:b1:7f:bd:c1:53:58:39:37:66:6e:35:15:ff:f9:9e:d0: 77:30:a9:f1:8f:43:75:9b:c9:1e:47:d0:3c:5f:b6:33:ef:26: 37:be:3b:1a:64:52:68:7a:b5:67:dc:7a:83:d6:cf:d3:7d:19: 38:5e:75:9e:7e:08:e7:c9:26:c0:5c:61:6a:bf:db:1c:cb:8c: 6c:1d:f4:cf:4c:21:d5:7e:6f:0d:ee:34:25:10:80:3c:74:18: eb:ec:44:e4:f9:eb:8e:30:72:b4:7f:c5:8f:b7:5c:1b:04:dd: d0:b2:e7:8e:1e:00:d7:bc:04:c6:a7:94:99:f3:d9:eb:87:aa: 9f:47:2d:7a:df:da:ab:74:fa:ef:1d:32:2b:51:7f:c8:66:8d: 35:c1:7a:77:50:5b:e4:f4:49:d2:5e:ed:7d:ee:d9:0d:cb:9f: 74:62:ef:dc:b9:b8:b9:1f:76:49:b6:ea:f7:ed:45:ca:bd:5c: f3:fe:19:b3:5e:79:bc:fd:7e:5b:d5:cc:3d:2c:f8:c7:8f:11: dd:79:64:92:50:03:9b:72:49:0c:97:3b:48:35:3f:3f:2e:32: 3f:38:f0:95:84:76:31:90:8c:c8:a3:ef:71:e6:28:18:11:26: 69:2c:f3:5b:b7:c0:6d:17:b1:60:f9:fa:27:85:6f:33:36:24: ea:90:9c:2a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSkFD9T5hRXz1qojXMGM02DYinqMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MzEzOVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYmNlZmU4YmExMjU3YzYxZjE3Zjc5 ODM4MmFjNDM1ZTRhYTA5YjEwNjNhMDQ0N2E1M2M3Y2ExNDJmOTgyN2ZkZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohZO5ERLU8Idyg8QDxHC/fjW7qCL 6rs/dAxqCorjiYfUNU7nvnnA+OleSnE4xostIGy875fsGloG5bKSqZt799Lyc0t0 NvdujPWMPz8puluCcUue1ctBkctALSyuLysZpjXjkC0FbiJczcY4MnlB7Hqxxqmt pf8Wz8Kvaq/AdPvk4WxPXiLQNnppiHZoq7IZYYM7Eswux0u6n11jYoGQ9LzcFykJ MG6uNeKQW9mSZaAjs8Tv9InJ2ka5/Nx6SSKV5wxS1p4fiCoekO450Zai/rgwzwwe I/XtGGrC6io9IGozAscEeIRQ5ftuzZIf6EPCLbsWTRvfNUlPXCIFaGbDVwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOvQ1pbJHD22wj/CI1BfZvOh7ox3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RlZWJmMmI4LWU5MTUtNDVhZi05MjY2LWNlY2RhN2M2ZTJlNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOAgwDQYJKoZIhvcNAQELBQADggEBADm0sX+9wVNYOTdmbjUV //me0HcwqfGPQ3WbyR5H0DxftjPvJje+OxpkUmh6tWfceoPWz9N9GThedZ5+COfJ JsBcYWq/2xzLjGwd9M9MIdV+bw3uNCUQgDx0GOvsROT5644wcrR/xY+3XBsE3dCy 544eANe8BManlJnz2euHqp9HLXrf2qt0+u8dMitRf8hmjTXBendQW+T0SdJe7X3u 2Q3Ln3Ri79y5uLkfdkm26vftRcq9XPP+GbNeebz9flvVzD0s+MePEd15ZJJQA5ty SQyXO0g1Pz8uMj848JWEdjGQjMij73HmKBgRJmks81u3wG0XsWD5+ieFbzM2JOqQ nCo= -----END CERTIFICATE-----Generated at Sat Jun 14 06:41:32 2025 by rpki-client