$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/535d0c09-610a-4f9b-bf98-e73787d01ce8.roa File: 535d0c09-610a-4f9b-bf98-e73787d01ce8.roa (raw, json) Hash identifier: z+Ohb3AQscyuxWNrwCPwjczFOXGG5yU/YtWw5vPjnhE= Subject key identifier: 5C:E0:BD:7E:3D:A7:70:70:36:3C:AB:D3:E4:22:8B:4B:3B:AF:5D:06 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14C464402A378A8BBFED5C4E6E1C1135DC702FEF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/535d0c09-610a-4f9b-bf98-e73787d01ce8.roa Signing time: Sat 28 Jun 2025 00:00:56 +0000 ROA not before: Sat 28 Jun 2025 00:00:56 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c4:64:40:2a:37:8a:8b:bf:ed:5c:4e:6e:1c:11:35:dc:70:2f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 28 00:00:56 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=aecd51ed030445422e962ef25755eca7d7ba7e617642ef935907ba2aaa775781, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:1b:ad:8a:2f:5f:2b:51:74:2b:48:32:ef: bb:ed:fa:9c:8f:c4:da:f9:39:90:e8:29:7d:be:bc: 53:b3:50:62:96:cb:a6:f8:8c:b8:df:48:45:ff:8e: bf:9f:2d:ee:cd:e7:13:78:16:56:7f:05:55:e2:0d: 02:3f:e5:a5:fa:73:e6:1f:43:ed:b1:20:f4:71:8b: ba:6f:82:39:ce:87:77:df:cd:0f:97:62:93:d1:c1: e4:a7:d0:46:41:b8:d9:56:77:ae:63:27:d3:bb:65: 29:00:02:97:48:5e:22:2a:b8:62:d0:79:c3:e2:55: ba:28:79:95:98:0f:aa:cd:96:fc:71:8f:84:9e:a8: 24:a8:44:36:8e:2b:aa:21:5d:5f:73:15:b7:ea:41: b7:88:99:bf:04:75:4a:d0:39:52:b6:a3:8a:ba:ad: 6b:43:02:1d:50:16:42:a9:44:7d:dc:59:7d:97:0a: 1b:b4:b6:c6:9e:f2:de:be:aa:f4:83:ce:8b:cb:ee: aa:63:36:02:8e:44:35:9f:c0:a0:46:66:30:65:e8: 83:95:a5:51:eb:ff:6f:e3:73:3a:eb:07:9c:bd:54: 72:ee:ea:4f:9a:24:60:08:c4:62:2f:cc:fc:f3:3d: 3f:ad:cd:dc:ea:7a:b6:46:20:7a:e5:bf:02:fd:ae: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E0:BD:7E:3D:A7:70:70:36:3C:AB:D3:E4:22:8B:4B:3B:AF:5D:06 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/535d0c09-610a-4f9b-bf98-e73787d01ce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:800::/40 Signature Algorithm: sha256WithRSAEncryption 14:7b:92:63:c7:94:3d:74:bf:4f:f0:db:34:c2:7a:09:63:15: e5:46:69:0c:a4:cb:85:35:89:e3:73:39:8b:35:cb:56:ed:23: a7:03:e4:6a:ad:7b:94:bb:bc:a9:53:00:74:32:fc:e2:ac:35: 10:8f:0c:8c:64:57:19:97:4a:63:d1:e4:8a:bf:ea:8b:30:d2: f0:1f:a8:83:a0:2c:d1:9d:5e:de:47:b4:44:5f:02:0e:15:e6: 36:61:70:31:9c:b5:20:53:56:50:da:ab:0b:71:70:6d:12:73: 15:dc:02:f6:f4:42:2a:30:9d:6f:a2:76:6b:9f:d8:f1:e0:cd: 13:f3:d7:cb:c7:19:9a:95:d1:69:d1:9c:b0:a7:d4:7d:3c:94: 8d:84:d6:25:c1:cf:00:02:86:92:11:55:aa:ee:44:35:80:82: f2:33:83:37:d7:80:84:2c:f9:ea:02:c7:09:e9:3e:db:ef:bc: 66:ce:61:c4:78:6d:0e:93:b9:f0:de:15:5e:6c:02:65:b6:ab: df:24:7e:72:62:c7:0d:d2:85:05:f2:06:bf:bb:45:a4:43:8e: 18:97:a7:72:b7:95:b5:75:02:b6:78:36:41:d7:6a:dc:c6:7e: 4d:d7:74:97:5f:89:72:13:6d:1c:cf:74:04:79:b3:44:99:6d: 24:b5:ae:74 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFMRkQCo3iou/7VxObhwRNdxwL+8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyODAwMDA1NloX DTI1MDgwMjIzNTk1OVowejFJMEcGA1UEBRNAYWVjZDUxZWQwMzA0NDU0MjJlOTYy ZWYyNTc1NWVjYTdkN2JhN2U2MTc2NDJlZjkzNTkwN2JhMmFhYTc3NTc4MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+MbrYovXytRdCtIMu+77fqcj8Ta +TmQ6Cl9vrxTs1Bilsum+Iy430hF/46/ny3uzecTeBZWfwVV4g0CP+Wl+nPmH0Pt sSD0cYu6b4I5zod3380Pl2KT0cHkp9BGQbjZVneuYyfTu2UpAAKXSF4iKrhi0HnD 4lW6KHmVmA+qzZb8cY+EnqgkqEQ2jiuqIV1fcxW36kG3iJm/BHVK0DlStqOKuq1r QwIdUBZCqUR93Fl9lwobtLbGnvLevqr0g86Ly+6qYzYCjkQ1n8CgRmYwZeiDlaVR 6/9v43M66wecvVRy7upPmiRgCMRiL8z88z0/rc3c6nq2RiB65b8C/a7i4QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFzgvX49p3BwNjyr0+Qii0s7r10GMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUzNWQwYzA5LTYxMGEtNGY5Yi1iZjk4LWU3Mzc4N2QwMWNlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9AgwDQYJKoZIhvcNAQELBQADggEBABR7kmPHlD10v0/w2zTC egljFeVGaQyky4U1ieNzOYs1y1btI6cD5Gqte5S7vKlTAHQy/OKsNRCPDIxkVxmX SmPR5Iq/6osw0vAfqIOgLNGdXt5HtERfAg4V5jZhcDGctSBTVlDaqwtxcG0ScxXc Avb0QiownW+idmuf2PHgzRPz18vHGZqV0WnRnLCn1H08lI2E1iXBzwAChpIRVaru RDWAgvIzgzfXgIQs+eoCxwnpPtvvvGbOYcR4bQ6TufDeFV5sAmW2q98kfnJixw3S hQXyBr+7RaRDjhiXp3K3lbV1ArZ4NkHXatzGfk3XdJdfiXITbRzPdAR5s0SZbSS1 rnQ= -----END CERTIFICATE-----Generated at Sun Jun 29 16:48:46 2025 by rpki-client