$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa File: f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa (raw, json) Hash identifier: mZVrbsY6jwDiYQ7nHONoqmuB6/Ms8Z3NIL4qs1d28dI= Subject key identifier: E2:8D:D9:D7:E2:EC:B2:A2:5B:56:3F:80:84:7E:F4:4F:64:68:A8:B2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 128111D79ADA09D96EC3D0EBE0721CEE986D504C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa Signing time: Fri 13 Jun 2025 00:00:11 +0000 ROA not before: Fri 13 Jun 2025 00:00:11 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:81:11:d7:9a:da:09:d9:6e:c3:d0:eb:e0:72:1c:ee:98:6d:50:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 13 00:00:11 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=df142d04bfce35465fccd7b203cbba453bcff72042160fb2b0be78c4c150a9eb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:2e:57:65:8b:43:b0:37:d0:8f:cc:20:7d: d0:e6:a8:52:12:e6:8d:71:f5:b8:61:08:af:4e:8c: d5:8f:38:6e:63:f1:a4:9b:97:51:0d:ad:f1:6d:2c: 4b:1f:86:83:40:16:42:f6:f0:2a:c7:0c:20:02:e1: 17:98:26:43:2b:99:c6:e7:a4:fe:e8:93:1a:00:ef: c8:d9:0e:d5:bd:85:52:16:d7:27:4d:7c:51:0e:b0: f7:85:5f:aa:1b:fd:31:fb:fd:89:38:e0:49:6d:89: a1:d3:ae:fe:d9:06:cb:3b:d0:9b:3d:65:95:ca:5d: fe:3e:dd:68:ab:07:fc:c1:32:57:c3:e0:9a:17:cf: d3:22:9c:0f:16:21:59:7a:72:24:3e:33:cc:6c:02: a2:ee:66:fc:32:bc:2d:a3:6a:eb:9d:27:04:0e:3b: f7:dc:6e:d1:9f:7f:d7:53:88:4f:ef:52:cd:4b:12: a8:26:33:4a:90:6d:93:69:37:f5:5c:a9:c7:8a:37: f6:24:02:ca:aa:10:17:9d:87:fd:47:1c:88:d1:31: 42:ae:33:71:71:67:03:53:17:7a:98:54:0b:cd:f7: 68:2f:56:2b:33:1e:9f:d5:8a:32:ad:63:d4:32:bf: 00:f1:cc:85:54:df:c0:1b:c1:d4:31:90:91:a1:d1: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8D:D9:D7:E2:EC:B2:A2:5B:56:3F:80:84:7E:F4:4F:64:68:A8:B2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:8000::/40 Signature Algorithm: sha256WithRSAEncryption 61:7b:f0:8e:41:4b:dc:42:c8:fc:10:6a:eb:fe:97:ea:ce:50: 5d:1f:4f:6f:34:75:51:a5:46:5c:3b:b0:22:8b:5e:2b:44:d4: e4:52:97:03:94:63:ae:44:22:97:61:a8:00:62:b4:93:46:ac: 82:00:13:1f:65:21:01:ed:c5:9c:90:31:dc:db:35:d0:d1:8d: 18:7e:1e:06:29:a8:d4:cd:c8:b3:eb:87:a4:68:4e:07:ce:61: c1:57:24:d4:03:a1:31:e6:c0:f1:23:79:ff:1b:a4:e1:17:99: e9:00:2f:83:6a:d1:17:ff:54:29:19:18:5c:5e:4b:90:7f:ec: 83:bb:04:83:66:28:99:9e:b3:f4:66:75:c5:f4:37:4a:e0:d3: 8f:9b:21:b5:24:2f:1c:12:0d:4c:78:9d:f3:de:e9:54:23:04: fd:bb:b9:55:6c:a0:b7:05:fc:e1:d7:64:e2:86:58:92:6c:18: ee:07:c5:af:b2:0e:9b:9b:1c:e2:77:56:5e:34:7d:76:75:38: 26:f3:57:10:a4:6a:e0:64:46:1e:62:81:7f:71:a5:55:70:44: 61:49:83:0f:64:15:00:28:9b:6a:c0:c9:26:e9:26:e0:ee:3b: f8:9e:29:10:32:f4:8e:81:2b:07:7d:57:42:59:09:2c:2b:8e: e0:ae:ff:62 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEoER15raCdluw9Dr4HIc7phtUEwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMzAwMDAxMVoX DTI1MDcxODIzNTk1OVowejFJMEcGA1UEBRNAZGYxNDJkMDRiZmNlMzU0NjVmY2Nk N2IyMDNjYmJhNDUzYmNmZjcyMDQyMTYwZmIyYjBiZTc4YzRjMTUwYTllYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOEuV2WLQ7A30I/MIH3Q5qhSEuaN cfW4YQivTozVjzhuY/Gkm5dRDa3xbSxLH4aDQBZC9vAqxwwgAuEXmCZDK5nG56T+ 6JMaAO/I2Q7VvYVSFtcnTXxRDrD3hV+qG/0x+/2JOOBJbYmh067+2QbLO9CbPWWV yl3+Pt1oqwf8wTJXw+CaF8/TIpwPFiFZenIkPjPMbAKi7mb8Mrwto2rrnScEDjv3 3G7Rn3/XU4hP71LNSxKoJjNKkG2TaTf1XKnHijf2JALKqhAXnYf9RxyI0TFCrjNx cWcDUxd6mFQLzfdoL1YrMx6f1YoyrWPUMr8A8cyFVN/AG8HUMZCRodGEqwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOKN2dfi7LKiW1Y/gIR+9E9kaKiyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y1YjU3YmViLTAzZGQtNDNhOC05YTA2LTA3ZjNmMTZhM2Y0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+oAwDQYJKoZIhvcNAQELBQADggEBAGF78I5BS9xCyPwQauv+ l+rOUF0fT280dVGlRlw7sCKLXitE1ORSlwOUY65EIpdhqABitJNGrIIAEx9lIQHt xZyQMdzbNdDRjRh+HgYpqNTNyLPrh6RoTgfOYcFXJNQDoTHmwPEjef8bpOEXmekA L4Nq0Rf/VCkZGFxeS5B/7IO7BINmKJmes/RmdcX0N0rg04+bIbUkLxwSDUx4nfPe 6VQjBP27uVVsoLcF/OHXZOKGWJJsGO4Hxa+yDpubHOJ3Vl40fXZ1OCbzVxCkauBk Rh5igX9xpVVwRGFJgw9kFQAom2rAySbpJuDuO/ieKRAy9I6BKwd9V0JZCSwrjuCu /2I= -----END CERTIFICATE-----Generated at Sat Jun 14 05:48:29 2025 by rpki-client