$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2fa8e7a-5f8e-4d0e-901b-262d25f5dc1e.roa File: b2fa8e7a-5f8e-4d0e-901b-262d25f5dc1e.roa (raw, json) Hash identifier: VLcXVWgIfdRKwuy/fDmG9xLv0qA4vqZuf2PE031GHls= Subject key identifier: 4F:7E:3F:52:80:2C:F1:EC:6F:91:86:01:6F:EB:DA:30:8B:DB:B2:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 72FB58D1BEEA4154408891A833BB5C30716DE64B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2fa8e7a-5f8e-4d0e-901b-262d25f5dc1e.roa Signing time: Mon 23 Jun 2025 15:00:14 +0000 ROA not before: Mon 23 Jun 2025 15:00:14 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2406:da30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fb:58:d1:be:ea:41:54:40:88:91:a8:33:bb:5c:30:71:6d:e6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 23 15:00:14 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=4297171ae49ec76364dd6cb48a0be8ff007287ba3ec31d37320697ae1d3a39b0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:bc:aa:ed:74:d2:14:0f:f8:c1:e3:e5:cf:f7: 12:a5:39:f6:98:3b:cf:ad:56:4b:c9:d7:d0:22:6e: bd:87:33:13:44:ea:27:b5:72:45:b3:f1:46:4d:8b: db:b6:c5:9c:62:88:30:e6:d5:a2:59:f1:e1:fa:aa: 52:72:f2:ea:0f:86:e1:5a:3a:af:1f:5f:04:00:fb: 81:02:81:54:38:a4:54:cd:69:69:e7:8a:87:68:e4: 8b:da:f2:44:92:3f:37:b2:2c:4a:f4:fd:79:27:10: cd:c2:6c:d0:56:fc:9d:87:64:0a:ac:f4:78:31:18: fd:f3:93:90:a7:bf:8d:e4:75:3a:2b:05:a9:74:a3: 47:78:2f:eb:3b:7f:36:65:e4:97:38:f9:b4:01:f7: 9f:ac:f4:07:0b:1b:11:76:57:c9:ab:f1:26:95:7d: 7f:37:df:e9:59:e5:88:ac:98:23:3c:5d:03:5d:a1: b4:11:18:a0:19:b0:69:f0:ea:94:0e:dd:5c:f4:6a: b0:e5:b2:b6:32:8a:2a:14:8d:4f:e3:e9:c8:5e:a8: e1:f7:fa:09:06:77:4a:ad:c6:a5:0b:05:75:94:03: 6c:5e:9e:df:0a:44:46:93:9f:ec:91:d2:c7:27:9a: b5:c7:50:f5:21:0d:5e:08:80:75:9f:42:db:bf:b5: b8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7E:3F:52:80:2C:F1:EC:6F:91:86:01:6F:EB:DA:30:8B:DB:B2:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2fa8e7a-5f8e-4d0e-901b-262d25f5dc1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da30::/32 Signature Algorithm: sha256WithRSAEncryption b2:96:16:48:8d:46:a4:74:7b:1c:a9:42:61:2b:af:7f:4a:8e: b8:37:9c:27:85:49:a5:fd:e5:dd:9e:3f:33:8c:08:bd:9c:30: 83:8a:c8:61:71:07:55:6b:0a:e9:91:f2:5f:30:e9:a1:c5:0c: b7:81:76:08:89:d6:99:4a:39:d7:a0:e9:b2:2a:4c:92:f0:ef: b5:b4:62:1c:82:3d:52:39:f8:d7:14:7d:57:20:72:64:ee:67: e5:07:e4:f9:1f:43:c8:12:98:43:5f:0e:44:fe:6d:d5:74:26: 83:66:01:d2:ce:26:6a:7a:3b:1c:1f:5c:c5:5d:61:92:52:88: 4c:ae:f7:17:d0:af:a6:08:6c:f5:cd:8d:7f:70:bb:ca:fb:64: 22:43:5b:c8:1f:0a:77:af:dc:d4:2d:cb:4d:e6:cb:24:24:04: 36:11:2f:2a:f1:e8:8b:6d:da:03:9d:70:f1:63:c9:31:b1:37: a1:22:2c:fd:8d:f9:9c:d9:a0:fc:6b:0e:2e:61:94:b0:58:0d: a7:e4:d8:f3:4d:02:ec:72:67:6e:39:97:ec:30:de:ba:cb:01: 5c:69:00:24:74:12:fb:dd:96:94:67:d0:77:6d:33:41:4c:2f: 0d:69:b4:02:17:fd:8c:14:e4:3b:b7:4f:ec:0b:2c:14:97:b5: f5:7c:2e:89 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUcvtY0b7qQVRAiJGoM7tcMHFt5kswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyMzE1MDAxNFoX DTI1MDcyODIzNTk1OVowejFJMEcGA1UEBRNANDI5NzE3MWFlNDllYzc2MzY0ZGQ2 Y2I0OGEwYmU4ZmYwMDcyODdiYTNlYzMxZDM3MzIwNjk3YWUxZDNhMzliMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87yq7XTSFA/4wePlz/cSpTn2mDvP rVZLydfQIm69hzMTROontXJFs/FGTYvbtsWcYogw5tWiWfHh+qpScvLqD4bhWjqv H18EAPuBAoFUOKRUzWlp54qHaOSL2vJEkj83sixK9P15JxDNwmzQVvydh2QKrPR4 MRj985OQp7+N5HU6KwWpdKNHeC/rO382ZeSXOPm0AfefrPQHCxsRdlfJq/EmlX1/ N9/pWeWIrJgjPF0DXaG0ERigGbBp8OqUDt1c9Gqw5bK2MooqFI1P4+nIXqjh9/oJ BndKrcalCwV1lANsXp7fCkRGk5/skdLHJ5q1x1D1IQ1eCIB1n0Lbv7W4dQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFE9+P1KALPHsb5GGAW/r2jCL27IPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IyZmE4ZTdhLTVmOGUtNGQwZS05MDFiLTI2MmQyNWY1ZGMxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaMDANBgkqhkiG9w0BAQsFAAOCAQEAspYWSI1GpHR7HKlCYSuv f0qOuDecJ4VJpf3l3Z4/M4wIvZwwg4rIYXEHVWsK6ZHyXzDpocUMt4F2CInWmUo5 16DpsipMkvDvtbRiHII9Ujn41xR9VyByZO5n5Qfk+R9DyBKYQ18ORP5t1XQmg2YB 0s4mano7HB9cxV1hklKITK73F9Cvpghs9c2Nf3C7yvtkIkNbyB8Kd6/c1C3LTebL JCQENhEvKvHoi23aA51w8WPJMbE3oSIs/Y35nNmg/GsOLmGUsFgNp+TY800C7HJn bjmX7DDeussBXGkAJHQS+92WlGfQd20zQUwvDWm0Ahf9jBTkO7dP7AssFJe19Xwu iQ== -----END CERTIFICATE-----Generated at Sun Jun 29 14:51:43 2025 by rpki-client