$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/54b90195-351e-449b-8720-119c4baa2b80.roa File: 54b90195-351e-449b-8720-119c4baa2b80.roa (raw, json) Hash identifier: Pi1JmsGk6k4NGYbWy0v8x+DIQpG+oIUWapxvXH1bCog= Subject key identifier: FA:43:1F:B4:1C:F8:CC:80:89:73:89:C4:CF:AC:76:A5:1F:D7:D7:98 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5486817CCE17F89917583F9305D2447164F53702 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/54b90195-351e-449b-8720-119c4baa2b80.roa Signing time: Thu 26 Jun 2025 20:07:24 +0000 ROA not before: Thu 26 Jun 2025 20:07:24 +0000 ROA not after: Thu 31 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:70c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 00:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:86:81:7c:ce:17:f8:99:17:58:3f:93:05:d2:44:71:64:f5:37:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 26 20:07:24 2025 GMT Not After : Jul 31 23:59:59 2025 GMT Subject: serialNumber=df679917eefce5d163a67860d9ca1e95b9779ce860b9f08d7676e259caf8dcbb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d0:7e:a4:68:94:54:a4:fb:ad:a8:10:2a:74: dc:46:10:81:54:13:1c:44:bc:a6:99:66:fa:eb:cb: 32:a7:cc:fb:df:02:a1:74:35:0c:01:8a:7d:8f:fb: a2:cd:2b:01:83:b5:9d:02:0d:c5:c6:d9:5f:d0:71: 57:32:0d:68:d2:48:7f:37:55:f3:ea:3a:04:dd:de: e0:33:5d:fa:ad:63:4d:53:16:7d:68:e3:90:43:ef: fa:de:df:34:3f:bf:4d:db:63:0c:6e:e8:33:36:f7: 27:e9:ae:63:3b:1c:66:bf:68:c9:cb:68:8b:45:5e: b4:ad:72:d3:3b:fa:a8:2b:36:d1:f9:f8:0f:59:a5: 9c:06:75:7d:f3:a1:b5:bd:64:c7:86:d5:2e:a6:49: ef:2f:66:bc:70:76:1b:7b:ed:c1:32:e2:ad:46:84: 6d:d2:6e:7a:51:dd:f9:6e:f4:ac:1b:50:23:fb:95: 89:f4:d3:33:a4:b4:10:0b:2f:03:95:a1:76:ed:83: 0f:17:c3:fc:88:af:1e:99:0c:bc:e4:28:9f:5a:1a: 8f:ea:f8:fb:72:dc:bd:16:fc:ed:bf:43:1e:03:00: ad:55:f8:27:aa:ab:ec:b2:84:15:c1:fa:a1:1c:38: 9a:c0:df:1f:b0:e6:c3:be:ce:34:7f:64:c0:c4:80: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:43:1F:B4:1C:F8:CC:80:89:73:89:C4:CF:AC:76:A5:1F:D7:D7:98 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/54b90195-351e-449b-8720-119c4baa2b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:70c0::/46 Signature Algorithm: sha256WithRSAEncryption 09:21:9a:d5:c9:74:5b:b1:c5:61:6d:c8:75:11:09:3d:a5:1c: 0a:79:48:1d:7f:0d:5a:bb:7c:b0:bb:66:9d:dc:93:88:8e:ce: ce:16:e5:e6:81:5c:f5:88:f3:9b:e6:b5:da:e6:7a:63:0d:40: 1c:0e:05:3f:e2:3c:54:72:a3:1c:0b:ab:69:d0:33:89:55:e1: 3f:a3:ab:06:b5:a0:4c:61:da:55:33:84:cc:b4:c0:cf:36:17: b6:29:24:82:cc:d1:be:be:04:5e:92:a5:58:5e:c1:75:d7:c8: 5c:93:84:fb:13:f9:38:e0:4f:fa:78:35:75:a0:d2:de:c2:98: 63:d1:22:16:01:ad:9b:7d:4e:45:b2:e9:b2:e0:81:76:56:6c: 36:c1:d1:c8:3a:6d:2e:85:b8:5a:3b:48:5d:99:dc:39:bd:8c: 58:62:00:4b:dc:34:32:00:c9:cb:44:76:0d:94:29:33:28:b3: 37:7c:39:87:71:49:5f:1b:bd:5b:4e:1e:84:69:aa:34:65:d3: 6c:e3:4f:ff:9c:6a:50:93:71:c3:0a:53:4b:2f:4d:85:1d:64: 8c:27:f3:c7:18:4d:94:57:c0:fc:c8:d3:0b:38:ce:f1:31:49: 26:f2:e7:db:61:84:ae:9f:85:25:4d:15:4c:34:56:87:0a:42: e7:c7:3e:98 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVIaBfM4X+JkXWD+TBdJEcWT1NwIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNjIwMDcyNFoX DTI1MDczMTIzNTk1OVowejFJMEcGA1UEBRNAZGY2Nzk5MTdlZWZjZTVkMTYzYTY3 ODYwZDljYTFlOTViOTc3OWNlODYwYjlmMDhkNzY3NmUyNTljYWY4ZGNiYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NB+pGiUVKT7ragQKnTcRhCBVBMc RLymmWb668syp8z73wKhdDUMAYp9j/uizSsBg7WdAg3Fxtlf0HFXMg1o0kh/N1Xz 6joE3d7gM136rWNNUxZ9aOOQQ+/63t80P79N22MMbugzNvcn6a5jOxxmv2jJy2iL RV60rXLTO/qoKzbR+fgPWaWcBnV986G1vWTHhtUupknvL2a8cHYbe+3BMuKtRoRt 0m56Ud35bvSsG1Aj+5WJ9NMzpLQQCy8DlaF27YMPF8P8iK8emQy85CifWhqP6vj7 cty9Fvztv0MeAwCtVfgnqqvssoQVwfqhHDiawN8fsObDvs40f2TAxIB60wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPpDH7Qc+MyAiXOJxM+sdqUf19eYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0YjkwMTk1LTM1MWUtNDQ5Yi04NzIwLTExOWM0YmFhMmI4MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba83DAMA0GCSqGSIb3DQEBCwUAA4IBAQAJIZrVyXRbscVhbch1 EQk9pRwKeUgdfw1au3ywu2ad3JOIjs7OFuXmgVz1iPOb5rXa5npjDUAcDgU/4jxU cqMcC6tp0DOJVeE/o6sGtaBMYdpVM4TMtMDPNhe2KSSCzNG+vgRekqVYXsF118hc k4T7E/k44E/6eDV1oNLewphj0SIWAa2bfU5Fsumy4IF2Vmw2wdHIOm0uhbhaO0hd mdw5vYxYYgBL3DQyAMnLRHYNlCkzKLM3fDmHcUlfG71bTh6Eaao0ZdNs40//nGpQ k3HDClNLL02FHWSMJ/PHGE2UV8D8yNMLOM7xMUkm8ufbYYSun4UlTRVMNFaHCkLn xz6Y -----END CERTIFICATE-----Generated at Mon Jun 30 14:53:30 2025 by rpki-client