$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f695f86c-1862-4357-8961-1e5b809c4811.roa File: f695f86c-1862-4357-8961-1e5b809c4811.roa (raw, json) Hash identifier: TuaFqBRWOS9+0i5xswQOvxNOqmo9zplCeJxF1bdZVkY= Subject key identifier: 36:F1:51:8B:85:78:29:1B:52:E8:2C:83:A5:6A:73:E2:2C:CF:C7:64 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 11506EC193B874CAB1FCEEB8AFCA7D9E2BB10977 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f695f86c-1862-4357-8961-1e5b809c4811.roa Signing time: Mon 09 Jun 2025 15:41:50 +0000 ROA not before: Mon 09 Jun 2025 15:41:50 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:50:6e:c1:93:b8:74:ca:b1:fc:ee:b8:af:ca:7d:9e:2b:b1:09:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:41:50 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=937f8a8c1cf785afc6cd7ed2ba2c5d2f19510a0881bb4d549f46e68a3d866691, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:2f:a1:65:29:5b:82:a1:af:f2:cc:b6:eb: 94:84:fd:c7:2d:ae:3a:46:42:40:2d:6e:76:d4:43: 31:30:94:a0:44:ba:2e:aa:22:e6:e3:1d:5a:15:77: 48:5d:53:6b:89:73:de:35:2d:f2:c2:6b:9d:cb:5d: 33:be:02:8c:03:5b:20:14:9b:16:b5:e8:57:79:a2: 9d:1a:f2:88:65:f8:cc:ba:88:c8:16:85:a5:21:e4: 3c:67:8d:68:d2:fe:c5:67:07:04:65:7e:48:b9:2f: 46:6b:d5:02:a3:86:6a:89:cc:fd:b4:68:d3:93:25: c0:6f:19:b8:81:b4:f0:5e:c1:82:49:04:77:8a:7a: ed:f9:30:72:2e:78:65:d5:7b:8b:95:18:2e:1f:45: 11:c6:85:9d:61:61:81:df:b5:e0:fd:47:94:c8:04: 77:75:17:ec:d1:26:e3:ef:2b:d0:8a:f7:8a:aa:f9: 40:2b:4b:05:68:cb:25:eb:67:a0:bb:79:b8:10:1c: 3b:80:bf:08:4e:a7:70:f1:82:71:1c:5a:31:82:8e: 31:93:08:31:fb:25:9a:9f:35:b5:27:70:4f:e1:7a: 11:29:6a:80:a7:fc:8a:82:33:69:34:4d:29:76:97: 95:8f:f9:98:9c:6c:d4:ff:1c:db:c8:62:a4:ca:1f: 20:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F1:51:8B:85:78:29:1B:52:E8:2C:83:A5:6A:73:E2:2C:CF:C7:64 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f695f86c-1862-4357-8961-1e5b809c4811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:a000::/40 Signature Algorithm: sha256WithRSAEncryption b2:2f:c1:b2:d8:c5:df:6d:e8:fe:4c:7f:f4:9b:63:81:97:36: 3a:b2:b8:96:a4:d9:33:1f:70:c3:5b:81:be:06:6d:7d:14:89: e3:9c:f1:dd:d2:30:ca:1b:dd:ca:16:f1:8b:58:5d:05:96:65: fb:6a:a8:15:43:36:a0:a7:40:8d:9a:31:69:47:44:00:af:0f: 92:6d:5e:ae:2f:36:79:92:63:0a:a4:fd:d5:f6:24:5e:69:88: 56:56:8e:8c:31:d0:4c:c2:08:0e:51:73:6d:b6:ca:ec:30:4e: 58:00:d5:3f:e0:30:8a:62:eb:5f:4f:fb:06:1c:ef:90:a2:3c: b7:d9:a2:46:3b:71:cf:96:0b:7b:bc:0d:5f:73:15:58:5d:0e: 17:30:74:39:b0:84:0f:0a:6b:cb:34:f1:14:25:35:ab:6c:48: 00:fe:17:b1:1c:90:d6:e1:8f:0d:4f:55:4f:06:5e:65:97:70: 0e:71:de:33:87:db:1e:e4:c2:09:7c:79:4b:ad:30:cb:34:52: cb:4e:cf:91:39:d5:ac:b9:8d:97:df:6f:a7:8b:f7:4d:61:10: 34:5a:79:40:3d:06:bc:d7:b1:06:31:7c:5b:b3:1f:19:1b:f2: 6d:75:78:ca:48:21:51:38:d6:7c:49:d4:8d:4c:ae:2d:40:89: 51:78:4a:eb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEVBuwZO4dMqx/O64r8p9niuxCXcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1NDE1MFoX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAOTM3ZjhhOGMxY2Y3ODVhZmM2Y2Q3 ZWQyYmEyYzVkMmYxOTUxMGEwODgxYmI0ZDU0OWY0NmU2OGEzZDg2NjY5MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBcvoWUpW4Khr/LMtuuUhP3HLa46 RkJALW521EMxMJSgRLouqiLm4x1aFXdIXVNriXPeNS3ywmudy10zvgKMA1sgFJsW tehXeaKdGvKIZfjMuojIFoWlIeQ8Z41o0v7FZwcEZX5IuS9Ga9UCo4Zqicz9tGjT kyXAbxm4gbTwXsGCSQR3inrt+TByLnhl1XuLlRguH0URxoWdYWGB37Xg/UeUyAR3 dRfs0Sbj7yvQiveKqvlAK0sFaMsl62egu3m4EBw7gL8ITqdw8YJxHFoxgo4xkwgx +yWanzW1J3BP4XoRKWqAp/yKgjNpNE0pdpeVj/mYnGzU/xzbyGKkyh8gdwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDbxUYuFeCkbUugsg6Vqc+Isz8dkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2OTVmODZjLTE4NjItNDM1Ny04OTYxLTFlNWI4MDljNDgxMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAKAwDQYJKoZIhvcNAQELBQADggEBALIvwbLYxd9t6P5Mf/Sb Y4GXNjqyuJak2TMfcMNbgb4GbX0UieOc8d3SMMob3coW8YtYXQWWZftqqBVDNqCn QI2aMWlHRACvD5JtXq4vNnmSYwqk/dX2JF5piFZWjowx0EzCCA5Rc222yuwwTlgA 1T/gMIpi619P+wYc75CiPLfZokY7cc+WC3u8DV9zFVhdDhcwdDmwhA8Ka8s08RQl NatsSAD+F7EckNbhjw1PVU8GXmWXcA5x3jOH2x7kwgl8eUutMMs0UstOz5E51ay5 jZffb6eL901hEDRaeUA9BrzXsQYxfFuzHxkb8m11eMpIIVE41nxJ1I1Mri1AiVF4 Sus= -----END CERTIFICATE-----Generated at Sat Jun 14 06:22:06 2025 by rpki-client