$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a75b627d-5e8e-43ef-b339-c430dc1dc703.roa File: a75b627d-5e8e-43ef-b339-c430dc1dc703.roa (raw, json) Hash identifier: wghNO/me333ArSKLuEwFtKaDr2X3U9iHWyvYoUj58Hk= Subject key identifier: A1:E5:F0:AB:35:5F:68:A6:A5:9D:6A:23:AA:18:67:D1:34:E3:CA:D6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7688111C035253F6CC930985F39F621AD4011E29 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a75b627d-5e8e-43ef-b339-c430dc1dc703.roa Signing time: Tue 17 Jun 2025 00:00:14 +0000 ROA not before: Tue 17 Jun 2025 00:00:14 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:88:11:1c:03:52:53:f6:cc:93:09:85:f3:9f:62:1a:d4:01:1e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 17 00:00:14 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=c2795099c7b19e8b495fad9163fe8156af249426af41be45f28e999eb85536bb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:b2:7a:f7:1b:3c:3d:c5:78:23:e4:f8:3b: c0:3d:a3:b7:34:04:99:56:38:14:b0:8b:fc:fa:6d: 46:63:18:60:85:d5:44:5c:5e:37:77:8d:09:51:ac: d3:33:29:43:2a:0f:3a:22:b0:2f:34:b2:ee:90:f8: c1:14:9c:73:73:e3:6c:3b:3f:28:88:7c:52:52:6c: 4c:36:78:71:30:7e:8c:42:f9:df:43:24:0c:3c:d0: 98:71:c8:b9:54:93:bb:90:24:11:c0:3c:8d:eb:9b: 8b:6a:05:06:f9:14:32:f0:fc:79:48:bf:f3:e0:9c: a1:ed:7c:d2:1c:34:72:46:0f:f1:90:5b:0b:58:7b: d5:c4:c1:8e:85:55:a8:e5:c5:e5:73:af:3c:99:be: 9d:3e:4f:60:7c:c7:37:23:0f:66:e9:10:8c:47:10: 29:aa:68:1e:a1:72:bc:fe:a0:40:f5:00:38:77:97: fa:d4:c8:42:e7:69:13:f6:f0:24:9d:98:4c:27:39: 79:cd:91:50:37:94:15:68:9b:6b:c0:97:c1:28:23: 6e:2a:8c:0b:3b:a7:87:bd:63:fb:57:4a:10:c7:52: 82:a2:72:16:1f:76:16:b2:a6:8d:c5:9e:62:c6:5e: 6b:3d:2a:37:39:58:14:b5:7d:42:86:2c:34:c2:b3: 93:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E5:F0:AB:35:5F:68:A6:A5:9D:6A:23:AA:18:67:D1:34:E3:CA:D6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a75b627d-5e8e-43ef-b339-c430dc1dc703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:800::/40 Signature Algorithm: sha256WithRSAEncryption 43:29:d0:12:2b:0b:38:45:64:03:35:26:da:de:b6:91:08:6a: 03:05:73:c1:c3:9a:0b:37:76:53:33:3e:e8:61:19:92:1b:ac: f8:56:5e:24:07:a0:83:5a:58:b4:5f:b1:fc:7a:44:67:07:fb: 53:ee:0c:16:e1:a3:8d:9a:76:fe:a8:c9:d9:f6:7d:12:7b:99: 98:90:1b:19:32:29:c1:d6:ee:fe:47:61:07:05:34:55:f4:f2: e0:62:f2:e2:31:ad:95:09:fe:04:89:e4:bc:0c:67:48:0c:53: df:84:fa:06:0f:08:5c:9c:f4:44:07:bd:94:c6:63:0d:f8:af: db:d3:57:18:62:07:0d:5a:ce:c2:10:84:40:57:23:66:64:6f: 0f:05:ce:2c:a5:f0:36:57:18:2a:60:cb:69:01:22:f6:2f:89: 8d:e8:de:eb:b7:3f:84:74:85:62:c2:57:d9:cb:71:e8:d1:6f: 5a:95:6e:f1:5a:ad:c8:36:6a:6c:24:ae:17:7b:78:58:6d:1f: bd:a1:e4:06:e5:4e:3d:b0:af:b8:0b:e3:16:90:af:7f:94:36: c4:5f:92:37:78:41:2a:3a:a4:fa:38:e0:27:99:64:bd:e0:9e: 83:a5:da:af:2e:10:e6:cc:a8:91:cc:be:d3:08:21:10:57:24: 35:1e:a4:a6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdogRHANSU/bMkwmF859iGtQBHikwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxNzAwMDAxNFoX DTI1MDcyMjIzNTk1OVowejFJMEcGA1UEBRNAYzI3OTUwOTljN2IxOWU4YjQ5NWZh ZDkxNjNmZTgxNTZhZjI0OTQyNmFmNDFiZTQ1ZjI4ZTk5OWViODU1MzZiYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEqyevcbPD3FeCPk+DvAPaO3NASZ VjgUsIv8+m1GYxhghdVEXF43d40JUazTMylDKg86IrAvNLLukPjBFJxzc+NsOz8o iHxSUmxMNnhxMH6MQvnfQyQMPNCYcci5VJO7kCQRwDyN65uLagUG+RQy8Px5SL/z 4Jyh7XzSHDRyRg/xkFsLWHvVxMGOhVWo5cXlc688mb6dPk9gfMc3Iw9m6RCMRxAp qmgeoXK8/qBA9QA4d5f61MhC52kT9vAknZhMJzl5zZFQN5QVaJtrwJfBKCNuKowL O6eHvWP7V0oQx1KConIWH3YWsqaNxZ5ixl5rPSo3OVgUtX1Chiw0wrOThQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKHl8Ks1X2impZ1qI6oYZ9E048rWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3NWI2MjdkLTVlOGUtNDNlZi1iMzM5LWM0MzBkYzFkYzcwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7wgwDQYJKoZIhvcNAQELBQADggEBAEMp0BIrCzhFZAM1Jtre tpEIagMFc8HDmgs3dlMzPuhhGZIbrPhWXiQHoINaWLRfsfx6RGcH+1PuDBbho42a dv6oydn2fRJ7mZiQGxkyKcHW7v5HYQcFNFX08uBi8uIxrZUJ/gSJ5LwMZ0gMU9+E +gYPCFyc9EQHvZTGYw34r9vTVxhiBw1azsIQhEBXI2Zkbw8Fziyl8DZXGCpgy2kB IvYviY3o3uu3P4R0hWLCV9nLcejRb1qVbvFarcg2amwkrhd7eFhtH72h5AblTj2w r7gL4xaQr3+UNsRfkjd4QSo6pPo44CeZZL3gnoOl2q8uEObMqJHMvtMIIRBXJDUe pKY= -----END CERTIFICATE-----Generated at Sun Jun 29 07:26:03 2025 by rpki-client