$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38953cd-42bb-4366-8bc6-17e1a01d2f4a.roa File: f38953cd-42bb-4366-8bc6-17e1a01d2f4a.roa (raw, json) Hash identifier: 0HWyMN9g0WA6q+XNSk55PzNxev5lWjci+DuKfwIUbGM= Subject key identifier: C3:07:5C:34:79:D1:8D:F3:25:EB:C9:E3:AE:23:BA:63:DE:0B:C5:AE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 690142F1151CEEF7583BC702508A8C5C75F65696 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38953cd-42bb-4366-8bc6-17e1a01d2f4a.roa Signing time: Wed 04 Jun 2025 00:01:30 +0000 ROA not before: Wed 04 Jun 2025 00:01:30 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:01:42:f1:15:1c:ee:f7:58:3b:c7:02:50:8a:8c:5c:75:f6:56:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 4 00:01:30 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=9b8972efcf884baaa57dc2e7491780d05ef87f317f524737b2844cdfda66e691, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:5f:cf:c1:8f:8f:fc:fb:b0:50:ad:cb:8e: ec:51:ab:51:13:30:70:b3:c2:67:70:e1:27:26:7d: a5:4a:3b:97:51:ed:c9:fc:8b:76:88:1c:9d:b9:99: 86:52:4a:14:ce:c1:d5:85:43:de:39:63:4b:45:18: 20:f7:c6:31:cd:66:f7:2e:f4:53:c0:f7:d2:e7:2c: 3f:be:c5:01:ec:67:9a:31:5e:43:c3:8e:77:bd:13: 50:2a:74:09:c9:f2:5b:4e:3a:58:91:7c:b5:a9:6e: 73:d0:98:83:71:b5:a7:1d:8f:b4:82:92:11:17:20: fa:bc:c4:2d:de:41:fd:b1:0e:0f:d8:ca:a9:49:78: fe:d3:38:52:b8:c5:92:92:d4:36:6f:a0:bc:cc:40: 0c:87:13:eb:c1:e9:73:d2:57:63:39:9c:08:99:61: 12:cc:dd:16:7d:b3:ab:c7:c6:57:e5:86:7b:d3:aa: 4a:2a:b0:79:75:61:54:05:4f:d9:31:25:0c:f6:77: a4:22:d4:56:e7:4f:64:ef:9d:aa:5b:e3:eb:81:20: 92:ad:52:60:ce:5a:59:fd:77:d3:a5:14:4e:5c:c1: 7d:b2:73:57:fa:c1:50:cd:8e:72:a8:5e:d8:95:64: 75:f8:54:c6:b8:1b:50:64:06:93:04:a5:58:d7:a7: 8b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:07:5C:34:79:D1:8D:F3:25:EB:C9:E3:AE:23:BA:63:DE:0B:C5:AE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38953cd-42bb-4366-8bc6-17e1a01d2f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:7000::/40 Signature Algorithm: sha256WithRSAEncryption ac:25:20:ef:79:28:b7:45:d9:62:b1:e9:8c:13:ee:88:0e:a0: d8:b4:52:02:a4:27:10:dd:85:23:66:52:f5:42:fd:19:98:00: cf:8a:ec:83:42:23:43:64:c2:b8:b1:0b:31:e7:14:69:59:27: 2a:d3:37:51:9e:fa:25:55:63:e7:58:35:cb:5f:6f:6b:ee:2f: f3:56:6b:aa:de:52:4b:ab:de:b1:2b:a5:83:fc:6f:dd:2c:ad: 46:08:44:70:b1:c4:8d:6e:6f:de:02:80:b5:43:1f:24:63:80: c7:52:d9:36:ea:6d:17:31:a2:cd:c3:a6:c3:1b:db:2c:14:a4: 30:e1:6e:1f:41:50:72:92:c3:f5:5f:a3:28:6d:8b:78:f3:a0: f7:11:f4:33:91:07:22:a9:2e:ba:39:28:28:81:d1:1f:e7:f7: b7:71:e6:73:1c:a2:0c:6c:49:6e:ae:3c:49:b4:34:7c:97:78: 30:3b:c8:35:bc:15:76:89:22:83:04:22:1f:3f:14:0b:a2:a3: 5c:fa:41:8d:8e:af:af:7b:7d:6f:59:f5:9a:0d:f9:54:46:9f: 73:81:fd:8d:ff:a5:ce:b1:5c:92:42:2e:1c:0d:5b:de:4c:f4: d2:ad:96:c2:b2:0f:01:1c:ba:c0:92:64:42:c9:31:fb:a4:58: 5a:2a:d0:a5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaQFC8RUc7vdYO8cCUIqMXHX2VpYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNDAwMDEzMFoX DTI1MDcwOTIzNTk1OVowejFJMEcGA1UEBRNAOWI4OTcyZWZjZjg4NGJhYWE1N2Rj MmU3NDkxNzgwZDA1ZWY4N2YzMTdmNTI0NzM3YjI4NDRjZGZkYTY2ZTY5MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Bfz8GPj/z7sFCty47sUatREzBw s8JncOEnJn2lSjuXUe3J/It2iByduZmGUkoUzsHVhUPeOWNLRRgg98YxzWb3LvRT wPfS5yw/vsUB7GeaMV5Dw453vRNQKnQJyfJbTjpYkXy1qW5z0JiDcbWnHY+0gpIR FyD6vMQt3kH9sQ4P2MqpSXj+0zhSuMWSktQ2b6C8zEAMhxPrwelz0ldjOZwImWES zN0WfbOrx8ZX5YZ706pKKrB5dWFUBU/ZMSUM9nekItRW509k752qW+PrgSCSrVJg zlpZ/XfTpRROXMF9snNX+sFQzY5yqF7YlWR1+FTGuBtQZAaTBKVY16eLzQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMMHXDR50Y3zJevJ464jumPeC8WuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YzODk1M2NkLTQyYmItNDM2Ni04YmM2LTE3ZTFhMDFkMmY0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYHAwDQYJKoZIhvcNAQELBQADggEBAKwlIO95KLdF2WKx6YwT 7ogOoNi0UgKkJxDdhSNmUvVC/RmYAM+K7INCI0NkwrixCzHnFGlZJyrTN1Ge+iVV Y+dYNctfb2vuL/NWa6reUkur3rErpYP8b90srUYIRHCxxI1ub94CgLVDHyRjgMdS 2TbqbRcxos3DpsMb2ywUpDDhbh9BUHKSw/Vfoyhti3jzoPcR9DORByKpLro5KCiB 0R/n97dx5nMcogxsSW6uPEm0NHyXeDA7yDW8FXaJIoMEIh8/FAuio1z6QY2Or697 fW9Z9ZoN+VRGn3OB/Y3/pc6xXJJCLhwNW95M9NKtlsKyDwEcusCSZELJMfukWFoq 0KU= -----END CERTIFICATE-----Generated at Sun Jun 15 00:34:24 2025 by rpki-client