$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7f9bf0b-3dbd-4ee6-84db-4390d3196fd3.roa File: f7f9bf0b-3dbd-4ee6-84db-4390d3196fd3.roa (raw, json) Hash identifier: ivbNXvlPRIhfuM/5NiPo1TwrePRpq96kCh02YUUJw6Y= Subject key identifier: 69:07:CD:4A:F8:23:8D:0E:42:67:F7:34:F1:FA:8A:C9:0C:CB:FF:B2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2BC43D085E413CDEEC5A1F44DF7B5E852AD33F9D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7f9bf0b-3dbd-4ee6-84db-4390d3196fd3.roa Signing time: Tue 10 Jun 2025 00:50:08 +0000 ROA not before: Tue 10 Jun 2025 00:50:08 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:9040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c4:3d:08:5e:41:3c:de:ec:5a:1f:44:df:7b:5e:85:2a:d3:3f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:50:08 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=016e47f0392a9c3e91d5cc4460f32393ddc455d3e0e20b9c99b0b8a2e30dc121, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:ef:54:3b:14:8e:53:d3:1a:e2:2f:10:81: 2d:0c:00:ab:a7:f1:51:8c:e6:ec:c2:21:cc:29:06: 30:95:52:cd:5c:d5:c6:1d:30:7e:41:cb:0b:0c:13: ec:be:5c:ee:94:bf:d6:91:53:8b:fb:c8:0b:66:c4: 51:d5:0b:8e:f2:48:f2:33:98:9b:4e:09:e3:d4:2b: 7d:b7:0d:9a:87:2d:e8:bb:a3:ef:d8:5b:10:95:93: a8:e6:e7:bb:6c:b5:71:18:c8:ab:26:9d:00:0e:cf: 30:b2:0d:70:f6:23:a2:12:60:65:31:31:22:9a:a9: 19:0f:15:9f:2a:b4:9d:36:2a:5f:8b:cb:3a:69:39: 85:fc:b3:d8:cb:17:b9:f9:02:10:68:05:f8:f5:a0: 7a:19:2a:fd:c9:25:b4:c8:3e:77:77:96:f2:e0:8c: b3:31:6c:37:d7:48:d2:35:14:ff:f7:fa:0c:b3:20: 1a:1c:6e:ae:f0:f9:19:ea:f2:ce:e5:58:95:6c:d8: 26:da:68:9c:99:13:a2:f1:cb:b8:fa:da:cd:e5:14: 33:7c:47:05:e7:4a:4f:38:a1:00:4f:fb:77:b8:ba: 49:23:22:b0:85:61:bc:54:a4:99:07:3e:41:fd:a7: 9f:3d:d0:a0:6e:3d:49:c0:95:ca:13:04:ff:9d:5c: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:07:CD:4A:F8:23:8D:0E:42:67:F7:34:F1:FA:8A:C9:0C:CB:FF:B2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7f9bf0b-3dbd-4ee6-84db-4390d3196fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:9040::/46 Signature Algorithm: sha256WithRSAEncryption 66:84:79:72:e4:cf:e6:6c:b6:a9:5b:81:3e:54:d6:00:e2:33: 69:7a:e6:49:ac:61:a1:6f:63:32:71:98:dc:ea:57:bf:27:58: b9:ff:a8:29:5b:6f:5b:bd:db:9c:81:55:a9:5f:0d:41:a5:11: bc:bc:62:1e:12:56:c6:71:9b:c9:8c:ba:eb:d3:ca:0a:78:5b: 62:ca:0d:1e:46:cd:b4:44:c0:8b:05:b9:b9:38:26:26:73:05: 27:ff:3a:6f:b0:9e:f1:2a:fb:f9:a3:01:e2:2b:fd:2c:38:ef: 63:15:c2:3a:ab:07:8b:2e:7c:61:7f:76:0b:ef:91:30:23:07: 34:f6:24:d9:23:c5:40:80:1e:6c:a3:02:46:05:ff:09:67:45: a0:d6:d5:1f:06:f3:a1:df:81:45:e3:0d:2e:1c:cb:46:de:ef: 38:d0:7a:da:80:34:32:71:a5:37:46:92:ab:cb:45:28:0a:f5: f9:ca:17:91:37:2a:ea:44:9f:91:25:74:d8:7f:21:16:df:dc: 4d:d8:f7:1b:3f:31:11:36:37:7c:5e:fa:5a:a8:7a:6d:09:d7: df:e3:5b:05:04:38:e0:50:4e:1e:e6:76:fb:74:33:f9:3f:d6: ea:69:98:14:8d:3a:b9:16:06:c9:7c:64:19:3b:23:58:7d:98: c7:b8:9f:fb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUK8Q9CF5BPN7sWh9E33tehSrTP50wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwNTAwOFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAMDE2ZTQ3ZjAzOTJhOWMzZTkxZDVj YzQ0NjBmMzIzOTNkZGM0NTVkM2UwZTIwYjljOTliMGI4YTJlMzBkYzEyMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzTvVDsUjlPTGuIvEIEtDACrp/FR jObswiHMKQYwlVLNXNXGHTB+QcsLDBPsvlzulL/WkVOL+8gLZsRR1QuO8kjyM5ib Tgnj1Ct9tw2ahy3ou6Pv2FsQlZOo5ue7bLVxGMirJp0ADs8wsg1w9iOiEmBlMTEi mqkZDxWfKrSdNipfi8s6aTmF/LPYyxe5+QIQaAX49aB6GSr9ySW0yD53d5by4Iyz MWw310jSNRT/9/oMsyAaHG6u8PkZ6vLO5ViVbNgm2micmROi8cu4+trN5RQzfEcF 50pPOKEAT/t3uLpJIyKwhWG8VKSZBz5B/aefPdCgbj1JwJXKEwT/nVy/lQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGkHzUr4I40OQmf3NPH6iskMy/+yMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3ZjliZjBiLTNkYmQtNGVlNi04NGRiLTQzOTBkMzE5NmZkMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba95BAMA0GCSqGSIb3DQEBCwUAA4IBAQBmhHly5M/mbLapW4E+ VNYA4jNpeuZJrGGhb2MycZjc6le/J1i5/6gpW29bvducgVWpXw1BpRG8vGIeElbG cZvJjLrr08oKeFtiyg0eRs20RMCLBbm5OCYmcwUn/zpvsJ7xKvv5owHiK/0sOO9j FcI6qweLLnxhf3YL75EwIwc09iTZI8VAgB5sowJGBf8JZ0Wg1tUfBvOh34FF4w0u HMtG3u840HragDQycaU3RpKry0UoCvX5yheRNyrqRJ+RJXTYfyEW39xN2PcbPzER Njd8XvpaqHptCdff41sFBDjgUE4e5nb7dDP5P9bqaZgUjTq5FgbJfGQZOyNYfZjH uJ/7 -----END CERTIFICATE-----Generated at Sat Jun 14 05:54:53 2025 by rpki-client