$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a3cc8748-96a9-452c-8dd1-2c8700ec038b.roa File: a3cc8748-96a9-452c-8dd1-2c8700ec038b.roa (raw, json) Hash identifier: cL97k76Qzh7y6VO+KJ7ExueNCfeGcwpRU7lgVs926RM= Subject key identifier: AC:EC:9A:4A:3C:5A:BD:5B:F0:E8:30:31:2D:48:F0:82:93:30:AE:BD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 231DB42D10CF6A6B33A3576FD9B0495553BAA1C8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a3cc8748-96a9-452c-8dd1-2c8700ec038b.roa Signing time: Mon 09 Jun 2025 15:40:52 +0000 ROA not before: Mon 09 Jun 2025 15:40:52 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1d:b4:2d:10:cf:6a:6b:33:a3:57:6f:d9:b0:49:55:53:ba:a1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:40:52 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=fe21bb0cfb409d11988bb61b86791ef3e88413b5ebc304b64665cf538d46ed04, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:f2:21:ff:02:27:55:81:43:a6:8b:81:28: c9:17:0c:7d:86:14:aa:b5:ae:8b:76:15:18:e4:cc: cc:7c:13:e7:b6:6c:37:c9:f6:c1:d1:40:f9:f7:5f: a3:ec:e0:51:94:d1:c5:16:5d:e4:62:4e:23:ed:87: fa:a4:91:37:50:04:ee:b1:bc:45:00:86:92:ed:f1: fc:ba:7f:19:4c:85:f0:08:0a:09:55:b2:54:d1:70: 34:67:5e:c9:91:ea:99:ba:4f:df:2f:7e:f6:9e:70: 12:5b:18:52:40:51:6f:b1:25:48:50:8b:ab:37:47: 18:51:4f:56:8a:59:6b:f3:f6:98:84:a9:af:db:39: f9:a9:98:c5:9d:27:81:68:38:3a:af:cd:9c:5b:0b: 96:74:22:cf:16:75:22:ed:6f:1a:fd:13:51:46:7e: 86:4f:f2:d9:14:89:7d:f8:78:05:df:73:b4:1d:f2: bf:55:90:09:40:a1:2e:5c:fa:33:bf:25:f1:16:01: 5b:da:b6:a7:5d:97:51:5b:2f:e1:28:a2:7d:b6:a2: 3b:ea:f8:59:4e:3f:3e:a4:f9:4b:4d:79:71:99:db: 91:2d:29:9d:17:7e:ee:f4:9c:1f:4f:89:d9:88:cd: fd:71:a1:05:d2:3c:af:d3:da:c7:d3:f4:9e:42:1c: d8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:EC:9A:4A:3C:5A:BD:5B:F0:E8:30:31:2D:48:F0:82:93:30:AE:BD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a3cc8748-96a9-452c-8dd1-2c8700ec038b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4080::/48 Signature Algorithm: sha256WithRSAEncryption 39:1d:69:a0:49:04:d2:d1:78:b5:1f:cf:9b:c1:98:38:a5:24: 43:3e:01:5b:f0:9c:8e:2c:5c:5e:e8:2e:ce:84:89:09:7f:ad: f3:c8:0b:ec:d9:7b:f7:bd:45:94:9d:d3:83:d9:31:26:ed:40: 87:2f:1e:00:ff:d8:5d:ed:06:a9:f6:d8:09:d8:d9:af:d7:32: db:b6:e9:d7:2f:b1:c7:df:68:0e:26:17:37:28:69:dc:d0:35: a9:01:b9:68:ba:c0:ad:53:2b:4a:ce:47:57:7a:3c:bd:fb:a7: d5:a0:f5:72:84:1c:6c:74:23:8b:47:65:b5:55:02:b7:1f:10: 76:ff:8b:44:44:b0:fc:0c:27:ee:36:59:85:1a:d4:d4:08:03: e3:d8:23:4c:24:ed:87:78:1a:0f:19:92:70:ee:20:0a:86:60: bf:db:15:f1:75:ae:bc:89:07:bc:c2:d0:57:67:37:dc:69:e9: e7:63:72:90:c5:94:6e:b0:ab:21:ab:61:35:09:22:78:08:d2: 92:19:6e:96:4b:7a:6f:33:0e:0a:d9:de:8b:0f:48:58:df:8e: f7:95:56:79:0c:f6:ad:04:f4:5e:74:8b:4b:21:f8:95:90:ee: f8:b3:c2:9b:fa:6a:0b:20:50:4f:b0:59:58:20:57:a3:74:f5: e5:82:9b:af -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIx20LRDPamszo1dv2bBJVVO6ocgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1NDA1MloX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAZmUyMWJiMGNmYjQwOWQxMTk4OGJi NjFiODY3OTFlZjNlODg0MTNiNWViYzMwNGI2NDY2NWNmNTM4ZDQ2ZWQwNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0nyIf8CJ1WBQ6aLgSjJFwx9hhSq ta6LdhUY5MzMfBPntmw3yfbB0UD591+j7OBRlNHFFl3kYk4j7Yf6pJE3UATusbxF AIaS7fH8un8ZTIXwCAoJVbJU0XA0Z17JkeqZuk/fL372nnASWxhSQFFvsSVIUIur N0cYUU9Willr8/aYhKmv2zn5qZjFnSeBaDg6r82cWwuWdCLPFnUi7W8a/RNRRn6G T/LZFIl9+HgF33O0HfK/VZAJQKEuXPozvyXxFgFb2ranXZdRWy/hKKJ9tqI76vhZ Tj8+pPlLTXlxmduRLSmdF37u9JwfT4nZiM39caEF0jyv09rH0/SeQhzYGQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKzsmko8Wr1b8OgwMS1I8IKTMK69MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EzY2M4NzQ4LTk2YTktNDUyYy04ZGQxLTJjODcwMGVjMDM4Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUCAMA0GCSqGSIb3DQEBCwUAA4IBAQA5HWmgSQTS0Xi1H8+b wZg4pSRDPgFb8JyOLFxe6C7OhIkJf63zyAvs2Xv3vUWUndOD2TEm7UCHLx4A/9hd 7Qap9tgJ2Nmv1zLbtunXL7HH32gOJhc3KGnc0DWpAblousCtUytKzkdXejy9+6fV oPVyhBxsdCOLR2W1VQK3HxB2/4tERLD8DCfuNlmFGtTUCAPj2CNMJO2HeBoPGZJw 7iAKhmC/2xXxda68iQe8wtBXZzfcaennY3KQxZRusKshq2E1CSJ4CNKSGW6WS3pv Mw4K2d6LD0hY3473lVZ5DPatBPRedItLIfiVkO74s8Kb+moLIFBPsFlYIFejdPXl gpuv -----END CERTIFICATE-----Generated at Sun Jun 29 03:07:03 2025 by rpki-client