$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa File: 612ca3c6-0251-4029-8118-ab1be2a61379.roa (raw, json) Hash identifier: mxNqkR9W2nPznc5w+d0Ow5Gybp0+4EJV3x8yxDZfZns= Subject key identifier: C5:59:45:43:AA:02:BE:E7:0C:79:DB:B2:E6:B5:D4:32:97:1F:E1:70 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 086FEC0FAD8178503B88E6A53C5EDE8B84E0DD82 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa Signing time: Tue 13 May 2025 00:01:32 +0000 ROA not before: Tue 13 May 2025 00:01:32 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6f:ec:0f:ad:81:78:50:3b:88:e6:a5:3c:5e:de:8b:84:e0:dd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:01:32 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=3ade6c4c11e3bd48271e2a22ef865e859e708123e933b00a5bb929dc2da82c62, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:38:b9:c4:a8:31:29:bc:72:33:00:21:73: 82:c0:be:8b:c2:27:69:b1:b1:bd:0f:74:71:a6:bf: 28:63:e1:f4:a6:01:f7:01:34:a9:9f:09:fd:3f:44: f4:47:d9:cf:27:14:65:bd:9e:2a:58:3f:b8:2c:b2: 87:1e:54:93:03:d3:56:94:bf:ab:81:76:b3:25:77: 57:b7:e3:43:91:b7:1d:01:e1:e5:2d:9b:df:7b:1b: 9f:e1:10:f7:e4:88:56:86:9a:cd:e9:f6:52:aa:7f: 3c:3c:b5:81:e2:51:28:37:9f:5c:63:e4:65:f8:be: 69:e6:b7:82:0e:c5:1a:7a:af:d5:a7:e9:51:5d:16: ea:27:48:25:28:37:f8:c3:ca:55:8c:6e:1d:58:ee: bc:88:35:fc:d3:87:b1:69:4b:1d:a0:55:f4:97:a7: 51:8c:4e:2a:e3:a1:72:db:d8:ec:8e:d9:c4:c0:10: 40:1d:d9:e4:fa:df:68:59:90:ce:9a:51:10:b5:f5: 33:8c:c1:2f:70:38:2b:10:04:a6:23:04:3c:fc:bf: 9b:08:19:43:61:ef:69:a1:26:6f:04:71:48:54:39: 29:b8:51:17:e4:14:e8:56:ee:99:7e:40:09:5b:8b: 36:86:ba:40:1d:81:7a:fb:74:c0:7c:0a:44:d8:0f: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:59:45:43:AA:02:BE:E7:0C:79:DB:B2:E6:B5:D4:32:97:1F:E1:70 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4040::/48 Signature Algorithm: sha256WithRSAEncryption 02:7d:eb:58:f4:b6:fa:48:e9:15:b1:d7:36:8d:1f:ed:54:be: bc:09:08:ee:f0:b4:3a:21:73:c3:94:d1:2f:b1:fc:74:85:5a: eb:61:a4:5b:10:a7:81:5c:6e:6d:c9:0f:6a:90:6d:f4:26:f3: 15:06:7d:3d:e5:9b:62:22:43:54:9f:c4:4c:0f:b0:b5:59:04: 90:2d:ee:94:c8:f8:25:78:31:c4:06:5d:07:c9:01:cb:2d:59: f8:f6:7a:1d:f0:cd:0e:40:87:d3:35:77:fa:56:ce:71:4a:2b: 90:38:54:2f:c8:3f:cb:2b:34:c2:ba:72:7a:7a:fe:1e:69:b5: 55:14:67:02:de:62:2c:9b:71:f8:3d:ab:51:10:0d:45:1b:66: ab:0a:2b:cf:dd:b1:a2:be:d7:b5:5e:fc:95:06:1a:42:2e:42: 91:82:95:d0:97:ff:1c:ed:3d:84:61:4b:95:64:57:b1:37:9d: 9a:3f:ca:f0:ea:9c:36:27:2e:df:e6:68:21:47:21:2b:82:fe: 49:74:56:4b:ee:4b:ad:08:09:30:92:ac:e4:9e:9a:a4:02:ab: 1f:1e:57:94:a2:1b:ca:4e:d6:78:5c:d7:f8:f9:9b:45:0c:c8: 9d:ff:5f:7a:16:ea:6a:ab:76:06:c5:23:ed:d7:65:1c:2b:af: 8d:44:b0:10 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCG/sD62BeFA7iOalPF7ei4Tg3YIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMzAwMDEzMloX DTI1MDYxNzIzNTk1OVowejFJMEcGA1UEBRNAM2FkZTZjNGMxMWUzYmQ0ODI3MWUy YTIyZWY4NjVlODU5ZTcwODEyM2U5MzNiMDBhNWJiOTI5ZGMyZGE4MmM2MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V04ucSoMSm8cjMAIXOCwL6Lwidp sbG9D3Rxpr8oY+H0pgH3ATSpnwn9P0T0R9nPJxRlvZ4qWD+4LLKHHlSTA9NWlL+r gXazJXdXt+NDkbcdAeHlLZvfexuf4RD35IhWhprN6fZSqn88PLWB4lEoN59cY+Rl +L5p5reCDsUaeq/Vp+lRXRbqJ0glKDf4w8pVjG4dWO68iDX804exaUsdoFX0l6dR jE4q46Fy29jsjtnEwBBAHdnk+t9oWZDOmlEQtfUzjMEvcDgrEASmIwQ8/L+bCBlD Ye9poSZvBHFIVDkpuFEX5BToVu6ZfkAJW4s2hrpAHYF6+3TAfApE2A9BcQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMVZRUOqAr7nDHnbsua11DKXH+FwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxMmNhM2M2LTAyNTEtNDAyOS04MTE4LWFiMWJlMmE2MTM3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0BAMA0GCSqGSIb3DQEBCwUAA4IBAQACfetY9Lb6SOkVsdc2 jR/tVL68CQju8LQ6IXPDlNEvsfx0hVrrYaRbEKeBXG5tyQ9qkG30JvMVBn095Zti IkNUn8RMD7C1WQSQLe6UyPgleDHEBl0HyQHLLVn49nod8M0OQIfTNXf6Vs5xSiuQ OFQvyD/LKzTCunJ6ev4eabVVFGcC3mIsm3H4PatREA1FG2arCivP3bGivte1XvyV BhpCLkKRgpXQl/8c7T2EYUuVZFexN52aP8rw6pw2Jy7f5mghRyErgv5JdFZL7kut CAkwkqzknpqkAqsfHleUohvKTtZ4XNf4+ZtFDMid/196Fupqq3YGxSPt12UcK6+N RLAQ -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:37 2025 by rpki-client