$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa File: b9e1c759-db10-4a48-b586-da1f1ff39287.roa (raw, json) Hash identifier: brgyFYnDIWcVVFWsEEArYEIHF9Dyo5tJQrTrW9kawHk= Subject key identifier: 3F:9E:8A:6C:5B:CF:3F:A8:0A:5B:98:A3:EE:8A:6F:ED:0D:D0:E5:68 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7695DFF4982C6489C11DA5D4FFC8E86201EE2E05 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa Signing time: Mon 16 Jun 2025 15:00:09 +0000 ROA not before: Mon 16 Jun 2025 15:00:09 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:95:df:f4:98:2c:64:89:c1:1d:a5:d4:ff:c8:e8:62:01:ee:2e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 16 15:00:09 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=7592994b6a9e3d0a20e4d4dff1ee2813c4910d940fd2eff28a661bc598735818, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:2c:90:a8:9f:19:ff:dc:3f:60:60:af:25: 15:11:8f:4a:64:fc:fd:c2:8b:c5:d8:4d:5a:0e:3b: 82:aa:f5:c3:39:60:ec:26:75:66:3e:2a:dc:35:32: 26:04:7d:e6:cb:8d:1d:e7:d2:ab:3d:cf:e9:55:60: 7f:e6:9d:08:3c:b0:e5:6a:d0:55:68:c6:bb:6f:43: fb:5d:b9:ed:86:1d:6a:55:0a:ca:3c:df:68:a6:b3: f5:ef:26:c2:3e:18:94:d8:62:31:d7:35:ff:ee:b4: c9:9b:7d:0a:71:a7:12:7a:0c:5b:d1:73:a5:eb:ae: fe:45:e1:00:82:52:7a:3b:a9:13:12:98:34:db:d7: 27:00:fe:5f:ed:ba:89:c4:58:c2:c3:df:a8:8a:ac: 2a:6e:cd:83:f3:4c:66:89:fb:f2:3c:cb:d1:73:3c: e1:84:a4:f5:ea:61:11:84:15:df:cc:42:12:9c:53: a4:bb:07:03:4d:10:de:25:be:3a:88:88:45:c8:16: 3b:23:30:88:34:8e:67:7c:57:cf:d6:88:a7:d0:2c: 45:06:48:02:6e:d6:51:4b:01:a4:6d:31:83:83:41: 3a:3f:c9:04:aa:0a:62:9f:f3:e7:e0:92:33:ab:c6: 29:c5:75:c4:6d:c9:5f:6a:ab:ad:23:a6:17:de:84: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9E:8A:6C:5B:CF:3F:A8:0A:5B:98:A3:EE:8A:6F:ED:0D:D0:E5:68 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:9000::/40 Signature Algorithm: sha256WithRSAEncryption 93:07:ec:e4:e6:ca:ce:17:95:8f:65:42:50:8d:4a:8c:e5:f7: 02:5e:a4:53:c5:1b:fa:b2:19:88:0c:a8:53:48:3e:e2:f4:cf: e3:40:5d:ed:fe:06:00:3a:bd:19:64:4a:ca:7d:b6:82:97:11: 18:67:8f:e0:56:dd:03:e5:64:0f:39:c8:4c:de:70:07:3e:b8: dc:45:4c:da:09:e6:55:49:15:1c:c9:a0:28:d5:25:7d:60:91: 0f:89:41:89:91:77:fe:9a:97:83:14:d0:e4:e3:36:40:4b:23: b7:57:19:5f:ea:56:7a:3a:b1:2a:9b:61:21:d2:3b:d9:3f:c5: 43:86:b0:f0:ad:bd:ef:cd:d0:0d:18:c2:9e:95:0b:74:fc:fc: 1a:16:1a:a9:68:88:cf:e9:2b:50:fb:ec:0f:73:2d:ce:0d:0f: 2b:37:b1:13:48:40:97:b5:1f:2e:45:bb:00:81:db:85:b2:c7: 4b:be:f0:94:0b:22:2d:c9:8b:a8:8d:0f:0f:83:dc:71:a1:06: ef:b0:c5:8f:c9:64:9a:34:4f:b7:64:ba:3f:84:ca:89:3d:16: e5:39:5d:b6:4a:c2:c1:7f:8c:ec:8c:c7:a2:aa:21:ea:4b:d9: bd:01:ac:db:03:f7:63:3f:68:16:ff:04:12:60:4a:e0:f6:97: 28:7b:14:db -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdpXf9JgsZInBHaXU/8joYgHuLgUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxNjE1MDAwOVoX DTI1MDcyMTIzNTk1OVowejFJMEcGA1UEBRNANzU5Mjk5NGI2YTllM2QwYTIwZTRk NGRmZjFlZTI4MTNjNDkxMGQ5NDBmZDJlZmYyOGE2NjFiYzU5ODczNTgxODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMEskKifGf/cP2BgryUVEY9KZPz9 wovF2E1aDjuCqvXDOWDsJnVmPircNTImBH3my40d59KrPc/pVWB/5p0IPLDlatBV aMa7b0P7Xbnthh1qVQrKPN9oprP17ybCPhiU2GIx1zX/7rTJm30KcacSegxb0XOl 667+ReEAglJ6O6kTEpg029cnAP5f7bqJxFjCw9+oiqwqbs2D80xmifvyPMvRczzh hKT16mERhBXfzEISnFOkuwcDTRDeJb46iIhFyBY7IzCINI5nfFfP1oin0CxFBkgC btZRSwGkbTGDg0E6P8kEqgpin/Pn4JIzq8YpxXXEbclfaqutI6YX3oTzYwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFD+eimxbzz+oCluYo+6Kb+0N0OVoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I5ZTFjNzU5LWRiMTAtNGE0OC1iNTg2LWRhMWYxZmYzOTI4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7ZAwDQYJKoZIhvcNAQELBQADggEBAJMH7OTmys4XlY9lQlCN Sozl9wJepFPFG/qyGYgMqFNIPuL0z+NAXe3+BgA6vRlkSsp9toKXERhnj+BW3QPl ZA85yEzecAc+uNxFTNoJ5lVJFRzJoCjVJX1gkQ+JQYmRd/6al4MU0OTjNkBLI7dX GV/qVno6sSqbYSHSO9k/xUOGsPCtve/N0A0Ywp6VC3T8/BoWGqloiM/pK1D77A9z Lc4NDys3sRNIQJe1Hy5FuwCB24Wyx0u+8JQLIi3Ji6iNDw+D3HGhBu+wxY/JZJo0 T7dkuj+Eyok9FuU5XbZKwsF/jOyMx6KqIepL2b0BrNsD92M/aBb/BBJgSuD2lyh7 FNs= -----END CERTIFICATE-----Generated at Sun Jun 29 03:59:17 2025 by rpki-client