$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83c3c4a9-7960-4c3c-b720-6247e5c54fc1.roa File: 83c3c4a9-7960-4c3c-b720-6247e5c54fc1.roa (raw, json) Hash identifier: muiO0vZMcE2kMVs7xMLajZTVXtMspuguJbSyjmidf+s= Subject key identifier: 86:C4:07:11:4D:10:B7:14:69:A5:A0:F7:EC:10:29:3E:54:A7:41:D5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 70F1AAB14BF508C72CA147EBE93041F72DC99B0C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83c3c4a9-7960-4c3c-b720-6247e5c54fc1.roa Signing time: Thu 26 Jun 2025 20:09:29 +0000 ROA not before: Thu 26 Jun 2025 20:09:29 +0000 ROA not after: Thu 31 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:f0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f1:aa:b1:4b:f5:08:c7:2c:a1:47:eb:e9:30:41:f7:2d:c9:9b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 26 20:09:29 2025 GMT Not After : Jul 31 23:59:59 2025 GMT Subject: serialNumber=81c50365e4489b528acb86f613cdf8a29a761261005cd8fcf7fb4e6e408c800e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3b:db:b3:79:98:93:98:b3:cf:5a:91:e8:dc: 9d:44:02:86:18:fd:30:54:82:b1:14:45:26:a0:11: 23:9b:10:6e:61:b7:a4:31:64:b0:65:64:f9:1d:3d: 82:ba:49:19:f2:68:3b:b1:81:de:6e:cb:45:1e:83: 97:a0:6c:fe:c8:3e:74:6c:1c:78:df:2e:8d:03:b5: 79:c2:cd:b6:69:5c:cc:3f:a8:97:21:77:0a:2e:26: 46:c6:75:da:05:39:14:10:c6:6d:65:9c:df:e5:33: 45:12:a4:93:4d:b5:bb:c0:89:b8:8d:66:d4:7d:a5: 31:2a:7c:1d:49:3e:8d:ff:bf:d1:c6:d6:21:17:c2: f5:f6:2c:49:7c:59:f6:ed:fe:3e:7d:48:06:5d:e3: 55:69:b2:bd:a7:7a:93:ff:2c:73:b1:28:8e:db:5b: 8d:75:8c:ca:97:bf:e1:36:a0:f2:20:a7:61:4d:78: 70:08:73:af:67:10:50:16:37:bb:55:89:14:57:c7: 77:49:ee:0d:5e:28:2d:a0:d0:84:26:82:d7:0d:61: e2:c1:96:5d:09:b8:d1:a6:bc:60:3d:89:5b:83:44: 45:fa:ab:92:1f:df:7b:54:19:3b:e5:5f:f9:30:37: 2f:f5:56:c6:00:d1:a3:98:f1:67:41:44:c6:42:16: 41:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C4:07:11:4D:10:B7:14:69:A5:A0:F7:EC:10:29:3E:54:A7:41:D5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83c3c4a9-7960-4c3c-b720-6247e5c54fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:f0c0::/46 Signature Algorithm: sha256WithRSAEncryption 54:39:b9:d4:7c:dd:98:3e:3d:ee:06:45:a0:77:43:4a:89:9c: 5e:fa:ed:4b:4a:33:ef:ba:36:5e:3b:35:40:97:ad:af:90:b8: 13:bf:07:2b:ab:60:0a:25:72:40:36:31:3c:8d:55:d5:90:a8: 19:4f:79:b1:8d:7c:b4:5d:9c:42:3a:e5:e2:67:2f:82:7d:45: 4a:45:61:f6:47:b7:3d:cb:74:9e:04:96:02:55:da:fe:d1:2a: 8a:7d:85:df:8d:1a:50:c2:cd:00:2a:7f:b1:8d:a6:b1:0d:b6: bb:15:8a:79:6d:a9:4f:58:da:ec:ca:c4:d4:e2:32:17:68:4b: 00:a4:4e:99:34:a9:db:86:c9:f0:ea:a1:c4:24:49:b6:85:27: 4d:4a:88:39:50:4d:fd:89:01:41:b3:1e:78:30:8c:d9:0d:6a: f4:7f:ce:43:90:2e:98:8a:e7:40:36:8d:6c:90:2f:b2:71:73: 05:40:c0:fd:03:2c:9e:3b:8d:65:e6:e3:b0:e7:e0:d2:e5:e4: 44:d8:54:6c:b3:72:1f:97:f3:a7:d5:7f:1e:be:56:d3:42:45: 55:a2:06:53:27:72:2d:69:53:15:90:fe:86:ce:7b:8c:51:0b: cf:9a:92:9e:73:d2:5f:aa:b0:ec:a8:29:49:92:5d:f7:d6:be: 60:02:d8:5e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcPGqsUv1CMcsoUfr6TBB9y3JmwwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNjIwMDkyOVoX DTI1MDczMTIzNTk1OVowejFJMEcGA1UEBRNAODFjNTAzNjVlNDQ4OWI1MjhhY2I4 NmY2MTNjZGY4YTI5YTc2MTI2MTAwNWNkOGZjZjdmYjRlNmU0MDhjODAwZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zvbs3mYk5izz1qR6NydRAKGGP0w VIKxFEUmoBEjmxBuYbekMWSwZWT5HT2CukkZ8mg7sYHebstFHoOXoGz+yD50bBx4 3y6NA7V5ws22aVzMP6iXIXcKLiZGxnXaBTkUEMZtZZzf5TNFEqSTTbW7wIm4jWbU faUxKnwdST6N/7/RxtYhF8L19ixJfFn27f4+fUgGXeNVabK9p3qT/yxzsSiO21uN dYzKl7/hNqDyIKdhTXhwCHOvZxBQFje7VYkUV8d3Se4NXigtoNCEJoLXDWHiwZZd CbjRprxgPYlbg0RF+quSH997VBk75V/5MDcv9VbGANGjmPFnQUTGQhZB8wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIbEBxFNELcUaaWg9+wQKT5Up0HVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzYzNjNGE5LTc5NjAtNGMzYy1iNzIwLTYyNDdlNWM1NGZjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8/DAMA0GCSqGSIb3DQEBCwUAA4IBAQBUObnUfN2YPj3uBkWg d0NKiZxe+u1LSjPvujZeOzVAl62vkLgTvwcrq2AKJXJANjE8jVXVkKgZT3mxjXy0 XZxCOuXiZy+CfUVKRWH2R7c9y3SeBJYCVdr+0SqKfYXfjRpQws0AKn+xjaaxDba7 FYp5balPWNrsysTU4jIXaEsApE6ZNKnbhsnw6qHEJEm2hSdNSog5UE39iQFBsx54 MIzZDWr0f85DkC6YiudANo1skC+ycXMFQMD9AyyeO41l5uOw5+DS5eRE2FRss3If l/On1X8evlbTQkVVogZTJ3ItaVMVkP6GznuMUQvPmpKec9JfqrDsqClJkl331r5g Athe -----END CERTIFICATE-----Generated at Sun Jun 29 04:21:34 2025 by rpki-client