$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f22e1b8-adb1-42d2-8c89-7ceb3d7cecb8.roa File: 8f22e1b8-adb1-42d2-8c89-7ceb3d7cecb8.roa (raw, json) Hash identifier: KLAVWHI4zXc9suhkEoEq6Y0MPG4QP+mwQg8gGJt0dwA= Subject key identifier: EC:9D:8C:9E:F7:5B:5A:D5:9D:65:CF:EB:9E:C2:E1:90:61:8B:3A:50 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 39C23254E2E178D5D3E18853055E86BC8421879C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f22e1b8-adb1-42d2-8c89-7ceb3d7cecb8.roa Signing time: Fri 13 Jun 2025 00:00:10 +0000 ROA not before: Fri 13 Jun 2025 00:00:10 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 00:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c2:32:54:e2:e1:78:d5:d3:e1:88:53:05:5e:86:bc:84:21:87:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 13 00:00:10 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=ad62643344fa88fb13830d0db5084fd8f88fd859a34d54da1f47f13003d1b4a8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:00:2e:66:b4:75:c8:21:32:35:ac:af:6a: 76:1e:0d:75:9d:a2:dc:bf:14:5c:9e:f2:13:e8:b0: ed:06:6e:28:92:73:ab:a2:44:f3:2d:c9:f2:16:30: ea:27:50:30:ce:27:4b:20:65:3f:87:e9:bc:d6:83: 18:04:dc:f8:27:83:58:0d:95:24:d9:2b:d3:96:79: 19:d2:34:b4:98:ff:4b:4c:02:1f:62:c5:58:96:2f: ba:76:cf:33:1b:e2:53:56:d5:07:60:33:ee:47:08: 2e:8c:87:9b:85:65:cc:1e:6d:9c:37:f4:04:ed:79: eb:b3:02:1b:16:d0:6f:32:24:66:cc:1f:42:0e:6f: 95:17:eb:44:10:9e:3f:c5:4a:2f:7b:44:92:1a:6e: 55:18:90:9f:63:6e:7e:4e:06:3d:de:3e:61:cb:7f: 08:03:01:37:13:22:25:40:fe:a4:f0:81:e1:02:1d: 6d:83:45:8d:49:ac:d7:20:72:1c:65:13:80:f1:d8: 70:2f:73:46:e4:07:5d:81:3d:c1:37:36:ad:66:ff: ec:8c:ba:cb:bb:a2:fa:2d:ff:5b:ba:9a:51:df:33: 6f:06:69:08:a4:5c:e4:d5:db:06:3e:d5:d3:52:80: e6:08:6a:4b:81:21:87:72:74:d5:23:1f:0d:22:3d: 54:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9D:8C:9E:F7:5B:5A:D5:9D:65:CF:EB:9E:C2:E1:90:61:8B:3A:50 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f22e1b8-adb1-42d2-8c89-7ceb3d7cecb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:9000::/40 Signature Algorithm: sha256WithRSAEncryption b6:0f:ce:9d:d8:dd:87:4b:bd:8a:b5:92:d0:34:ac:f5:0a:6e: 1c:e1:97:76:d6:28:d8:37:d3:5e:80:6e:6c:00:73:35:f7:03: 58:5f:05:23:b4:7f:7a:29:67:0f:1d:c5:e1:fa:93:d4:3f:5c: 39:73:27:5f:fa:d0:95:c7:a5:ac:85:31:6f:ca:47:ec:2d:2a: 04:cc:74:af:17:4f:6b:5e:44:d9:a2:62:8d:a5:5e:6a:4c:44: a2:26:d3:b1:57:02:20:a6:7e:71:cf:e9:e6:85:34:8c:5e:f3: ec:ef:0b:e2:02:b6:3b:a9:21:7f:0d:57:bd:67:c7:86:40:7f: 0c:c2:d2:f5:cf:09:e2:4e:06:2f:e4:73:d7:79:27:f6:a5:5f: 30:62:a0:84:3a:9a:a5:b1:a4:c8:99:2c:63:fe:4e:db:7b:05: d9:5f:d6:1e:f2:2f:82:1d:80:78:71:ff:61:96:9d:f5:18:7c: 4e:4a:56:7b:f4:65:3f:92:d2:58:54:03:63:ee:73:e0:13:f0: 04:28:e3:9c:ab:0b:06:d7:39:e5:d8:f4:15:01:1a:75:40:3f: 05:20:98:6c:fb:23:55:a5:6d:d9:a8:5f:1d:6e:78:c3:d0:e8: a3:4c:dc:91:5d:05:36:f2:db:8c:90:28:27:cb:d5:df:f2:88: 2f:b9:48:e3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOcIyVOLheNXT4YhTBV6GvIQhh5wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMzAwMDAxMFoX DTI1MDcxODIzNTk1OVowejFJMEcGA1UEBRNAYWQ2MjY0MzM0NGZhODhmYjEzODMw ZDBkYjUwODRmZDhmODhmZDg1OWEzNGQ1NGRhMWY0N2YxMzAwM2QxYjRhODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWYALma0dcghMjWsr2p2Hg11naLc vxRcnvIT6LDtBm4oknOrokTzLcnyFjDqJ1AwzidLIGU/h+m81oMYBNz4J4NYDZUk 2SvTlnkZ0jS0mP9LTAIfYsVYli+6ds8zG+JTVtUHYDPuRwgujIebhWXMHm2cN/QE 7XnrswIbFtBvMiRmzB9CDm+VF+tEEJ4/xUove0SSGm5VGJCfY25+TgY93j5hy38I AwE3EyIlQP6k8IHhAh1tg0WNSazXIHIcZROA8dhwL3NG5AddgT3BNzatZv/sjLrL u6L6Lf9buppR3zNvBmkIpFzk1dsGPtXTUoDmCGpLgSGHcnTVIx8NIj1UGwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOydjJ73W1rVnWXP657C4ZBhizpQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhmMjJlMWI4LWFkYjEtNDJkMi04Yzg5LTdjZWIzZDdjZWNiOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaJAwDQYJKoZIhvcNAQELBQADggEBALYPzp3Y3YdLvYq1ktA0 rPUKbhzhl3bWKNg3016AbmwAczX3A1hfBSO0f3opZw8dxeH6k9Q/XDlzJ1/60JXH payFMW/KR+wtKgTMdK8XT2teRNmiYo2lXmpMRKIm07FXAiCmfnHP6eaFNIxe8+zv C+ICtjupIX8NV71nx4ZAfwzC0vXPCeJOBi/kc9d5J/alXzBioIQ6mqWxpMiZLGP+ Ttt7Bdlf1h7yL4IdgHhx/2GWnfUYfE5KVnv0ZT+S0lhUA2Puc+AT8AQo45yrCwbX OeXY9BUBGnVAPwUgmGz7I1WlbdmoXx1ueMPQ6KNM3JFdBTby24yQKCfL1d/yiC+5 SOM= -----END CERTIFICATE-----Generated at Tue Jul 1 23:17:45 2025 by rpki-client