$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38aee75-1c20-4c34-b0d4-c226c1afc502.roa File: f38aee75-1c20-4c34-b0d4-c226c1afc502.roa (raw, json) Hash identifier: 0F4Qq1bYq+LPYgIMRyBSNorsLsQueedEnaEhXtBlgzs= Subject key identifier: D6:1F:CB:84:65:C4:1D:45:23:FC:DF:22:0F:2F:4F:59:46:25:96:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41AC4CCAEAE760A24E69693D574987FC19B162F0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38aee75-1c20-4c34-b0d4-c226c1afc502.roa Signing time: Mon 09 Jun 2025 15:00:55 +0000 ROA not before: Mon 09 Jun 2025 15:00:55 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ac:4c:ca:ea:e7:60:a2:4e:69:69:3d:57:49:87:fc:19:b1:62:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:00:55 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=1af6ab28594a302f982d65cdabea1179f0b833beb70ced61969980bc8e1d1e68, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0f:b5:cf:4b:88:93:d5:dc:ba:82:44:69:e9: 02:e2:af:de:09:ca:db:b3:64:8b:03:b5:8a:22:cd: 1d:38:df:76:9f:17:91:8b:33:a1:f6:ee:b6:b7:2a: 58:b1:af:95:bb:cb:19:da:aa:24:79:d0:1a:59:f7: 83:9e:32:17:96:19:88:2f:bc:fc:50:81:c6:7c:ce: 87:6b:51:5a:62:68:a6:83:2f:5f:a8:8d:41:e3:f0: 6e:55:2e:9d:0d:cf:d5:12:54:87:92:5b:07:93:27: 44:e6:fb:f8:c7:ad:4d:41:08:3a:99:ae:53:6c:2b: 45:ce:2b:14:49:46:3d:71:e2:43:38:7b:d3:a6:a1: af:3c:53:91:71:01:f2:1c:05:00:12:82:6f:d7:af: 56:7f:f9:63:9d:76:12:c6:66:bc:e0:e0:32:9c:d8: 67:38:22:3a:ac:97:bc:72:cf:60:2b:c6:80:7f:c3: 27:e0:6d:aa:41:61:41:68:25:88:b0:09:11:96:a0: 7a:91:e2:05:6b:73:e7:5b:c1:89:b8:83:cc:d7:d0: ef:cd:1f:f8:82:0e:c2:f9:fb:d1:b5:6b:6d:06:ea: 8b:95:06:06:69:47:be:26:89:f2:79:b8:d1:aa:4e: 9c:6c:19:e7:31:4d:5e:82:d9:e8:46:8b:0b:65:51: ef:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1F:CB:84:65:C4:1D:45:23:FC:DF:22:0F:2F:4F:59:46:25:96:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38aee75-1c20-4c34-b0d4-c226c1afc502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9040::/48 Signature Algorithm: sha256WithRSAEncryption 69:44:4e:49:c9:72:08:96:c5:a0:c0:94:e6:af:9d:85:66:18: 9c:c9:0d:40:46:0d:82:74:6b:70:45:25:5c:1b:6c:8e:78:e6: 1b:2f:8a:2d:f2:d0:62:14:86:05:0e:21:86:2f:83:b2:b7:47: 8a:0d:ef:c8:b7:28:f9:45:87:36:7d:59:24:44:3f:e2:cd:78: 37:44:ba:4e:c4:09:d8:3a:0c:d9:2c:85:6e:63:58:3f:c2:dc: d1:ad:ae:52:9d:06:ca:12:b6:62:a2:e9:e6:3a:38:31:1f:26: 8c:34:1f:14:d4:44:ba:e2:6a:01:16:54:e7:cd:55:ca:4d:73: e8:36:5b:b1:59:75:b3:73:b7:5a:3f:b1:54:35:5c:55:77:4e: e3:19:61:d8:17:ee:12:ff:12:82:fb:2a:6e:42:54:c4:33:85: 7e:58:5f:88:53:95:b7:a1:6e:ff:2c:89:9f:16:95:0b:a8:ea: a3:f6:46:48:e5:7c:f9:a8:af:20:16:a9:dc:a0:b7:dd:b4:5d: 9b:5c:32:2e:cc:a7:32:b4:2f:5d:fc:64:a5:75:59:69:28:31: f6:72:cb:52:c3:74:0f:02:07:2e:b8:a6:db:37:5d:bc:b6:b6: 3d:79:3f:cd:8e:57:58:d0:0b:40:38:69:51:e4:f0:12:56:82: 66:d9:67:1c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQaxMyurnYKJOaWk9V0mH/BmxYvAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MDA1NVoX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAMWFmNmFiMjg1OTRhMzAyZjk4MmQ2 NWNkYWJlYTExNzlmMGI4MzNiZWI3MGNlZDYxOTY5OTgwYmM4ZTFkMWU2ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw+1z0uIk9XcuoJEaekC4q/eCcrb s2SLA7WKIs0dON92nxeRizOh9u62typYsa+Vu8sZ2qokedAaWfeDnjIXlhmIL7z8 UIHGfM6Ha1FaYmimgy9fqI1B4/BuVS6dDc/VElSHklsHkydE5vv4x61NQQg6ma5T bCtFzisUSUY9ceJDOHvTpqGvPFORcQHyHAUAEoJv169Wf/ljnXYSxma84OAynNhn OCI6rJe8cs9gK8aAf8Mn4G2qQWFBaCWIsAkRlqB6keIFa3PnW8GJuIPM19DvzR/4 gg7C+fvRtWttBuqLlQYGaUe+JonyebjRqk6cbBnnMU1egtnoRosLZVHvPQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNYfy4RlxB1FI/zfIg8vT1lGJZZBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YzOGFlZTc1LTFjMjAtNGMzNC1iMGQ0LWMyMjZjMWFmYzUwMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/5BAMA0GCSqGSIb3DQEBCwUAA4IBAQBpRE5JyXIIlsWgwJTm r52FZhicyQ1ARg2CdGtwRSVcG2yOeOYbL4ot8tBiFIYFDiGGL4Oyt0eKDe/Ityj5 RYc2fVkkRD/izXg3RLpOxAnYOgzZLIVuY1g/wtzRra5SnQbKErZiounmOjgxHyaM NB8U1ES64moBFlTnzVXKTXPoNluxWXWzc7daP7FUNVxVd07jGWHYF+4S/xKC+ypu QlTEM4V+WF+IU5W3oW7/LImfFpULqOqj9kZI5Xz5qK8gFqncoLfdtF2bXDIuzKcy tC9d/GSldVlpKDH2cstSw3QPAgcuuKbbN128trY9eT/NjldY0AtAOGlR5PASVoJm 2Wcc -----END CERTIFICATE-----Generated at Sat Jun 14 06:05:13 2025 by rpki-client