$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e15e0f8b-7883-42c9-bc67-a15e702594e3.roa File: e15e0f8b-7883-42c9-bc67-a15e702594e3.roa (raw, json) Hash identifier: iOAfTRYKkVY6tjSq0FzDApGO58rCYdm0pQCxNeJEPuY= Subject key identifier: 3C:F2:75:36:81:21:E0:51:D4:25:E5:2D:53:C9:78:39:FD:CA:7C:32 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6C1975B4993BD5CC34AEABB4942BD30993ECC6CA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e15e0f8b-7883-42c9-bc67-a15e702594e3.roa Signing time: Tue 10 Jun 2025 00:21:27 +0000 ROA not before: Tue 10 Jun 2025 00:21:27 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:19:75:b4:99:3b:d5:cc:34:ae:ab:b4:94:2b:d3:09:93:ec:c6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:21:27 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=fa857f53f1bd4bc68ef60f7b9c562d2779a09dd9d9d7f31cf21c9a7194e2b2b5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:6b:ed:8b:c1:9b:09:ef:b4:2c:8b:8b:79: 8b:55:f1:d5:60:e2:ea:a4:49:d3:14:ce:f6:6f:ae: b6:46:86:f9:0a:b3:16:bb:4b:e5:4e:d9:b8:bc:5d: 6c:3a:ac:35:ac:ed:aa:78:65:22:a5:84:66:41:8b: c5:90:95:d1:d5:75:7f:45:36:7d:bc:8b:5e:6e:24: 59:ff:8e:5a:da:12:50:c7:af:e9:97:62:80:ff:b4: 81:29:f6:03:4c:eb:bd:78:9c:b6:25:e5:75:10:f4: 89:6c:c2:12:6d:2c:5b:0c:7e:82:4d:b8:a3:7b:85: fb:3d:2f:be:38:2a:a5:60:76:fe:56:82:d0:e7:fb: b4:c0:24:45:67:23:6d:2e:a2:78:7f:8d:02:10:bb: 83:90:83:e4:c5:24:5c:94:0b:7e:e3:75:7f:6f:2c: 5b:f9:86:c3:b5:73:ac:8b:f8:53:d5:85:83:9d:2c: ed:d0:17:9f:ff:09:4c:2a:32:92:d2:c5:e5:17:01: b3:fc:bf:0b:17:44:31:8d:13:1e:a2:8c:cc:c3:51: 19:46:1e:6b:46:c8:a5:04:80:f0:77:31:0f:e4:5e: 59:08:7e:41:f5:82:86:cd:a5:a5:51:46:32:41:c9: f9:63:54:69:e6:21:dc:28:6b:9f:a4:38:f3:ea:22: 16:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F2:75:36:81:21:E0:51:D4:25:E5:2D:53:C9:78:39:FD:CA:7C:32 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e15e0f8b-7883-42c9-bc67-a15e702594e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:8080::/48 Signature Algorithm: sha256WithRSAEncryption 85:92:7b:ac:ba:72:e7:95:4b:80:40:ea:91:e2:22:06:bf:af: 11:cf:44:dc:10:66:4a:09:6f:13:d6:fe:19:22:d7:ee:fc:78: 0a:74:7d:3c:c3:42:24:f0:af:ea:81:3c:83:fc:9f:dd:81:9d: 0d:0c:f4:48:86:fc:57:8b:12:0b:63:5a:fc:fc:39:5c:ec:cc: ab:45:11:f4:dc:d7:c8:38:38:aa:6f:40:f5:74:53:c0:ff:2b: 89:a6:b1:b2:1e:04:48:77:44:ef:2d:5c:89:5b:b3:03:9f:3a: 3a:ed:0d:e2:a5:f7:f1:1c:60:7a:d6:64:69:34:ab:6c:91:9e: db:67:a7:83:80:73:63:2f:7b:ed:a0:a8:89:23:a5:12:a2:6f: 0d:28:bc:7f:2d:d6:bb:71:8e:38:f1:f4:25:02:d2:ec:f6:95: 89:45:fc:27:84:c5:58:37:c9:fa:db:3a:1f:26:46:b9:de:0f: 21:04:a2:54:a7:ed:1d:ff:80:1a:9c:70:d8:19:9d:e6:bf:db: 9a:fd:9c:69:e0:a2:80:da:6e:e5:11:06:63:05:1e:b8:e5:24: 8d:07:51:84:f6:c4:d3:8c:43:ad:3d:73:92:09:e8:3e:1e:25: b1:8b:03:5d:72:3c:af:1b:5e:a4:ec:91:61:f6:e9:68:b8:73: 91:6e:b8:da -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbBl1tJk71cw0rqu0lCvTCZPsxsowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMjEyN1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZmE4NTdmNTNmMWJkNGJjNjhlZjYw ZjdiOWM1NjJkMjc3OWEwOWRkOWQ5ZDdmMzFjZjIxYzlhNzE5NGUyYjJiNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DBr7YvBmwnvtCyLi3mLVfHVYOLq pEnTFM72b662Rob5CrMWu0vlTtm4vF1sOqw1rO2qeGUipYRmQYvFkJXR1XV/RTZ9 vItebiRZ/45a2hJQx6/pl2KA/7SBKfYDTOu9eJy2JeV1EPSJbMISbSxbDH6CTbij e4X7PS++OCqlYHb+VoLQ5/u0wCRFZyNtLqJ4f40CELuDkIPkxSRclAt+43V/byxb +YbDtXOsi/hT1YWDnSzt0Bef/wlMKjKS0sXlFwGz/L8LF0QxjRMeoozMw1EZRh5r RsilBIDwdzEP5F5ZCH5B9YKGzaWlUUYyQcn5Y1Rp5iHcKGufpDjz6iIW3wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDzydTaBIeBR1CXlLVPJeDn9ynwyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxNWUwZjhiLTc4ODMtNDJjOS1iYzY3LWExNWU3MDI1OTRlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOICAMA0GCSqGSIb3DQEBCwUAA4IBAQCFknusunLnlUuAQOqR 4iIGv68Rz0TcEGZKCW8T1v4ZItfu/HgKdH08w0Ik8K/qgTyD/J/dgZ0NDPRIhvxX ixILY1r8/Dlc7MyrRRH03NfIODiqb0D1dFPA/yuJprGyHgRId0TvLVyJW7MDnzo6 7Q3ipffxHGB61mRpNKtskZ7bZ6eDgHNjL3vtoKiJI6USom8NKLx/Lda7cY448fQl AtLs9pWJRfwnhMVYN8n62zofJka53g8hBKJUp+0d/4AanHDYGZ3mv9ua/Zxp4KKA 2m7lEQZjBR645SSNB1GE9sTTjEOtPXOSCeg+HiWxiwNdcjyvG16k7JFh9ulouHOR brja -----END CERTIFICATE-----Generated at Sat Jun 14 05:42:29 2025 by rpki-client