$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d66763-ca3b-4f03-892a-534a85b8d01e.roa File: 02d66763-ca3b-4f03-892a-534a85b8d01e.roa (raw, json) Hash identifier: 3YV40oWp4iVvbKuX5GzhCS+MXwbAPWHKQSht/PxSpaA= Subject key identifier: E9:30:15:5C:EC:AE:AD:C1:61:CE:38:DD:0B:1C:E2:4F:54:BE:29:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C9A58D0D8A10FAD268FC0B266DCA50C8474727E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d66763-ca3b-4f03-892a-534a85b8d01e.roa Signing time: Fri 16 May 2025 00:40:59 +0000 ROA not before: Fri 16 May 2025 00:40:59 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:c840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9a:58:d0:d8:a1:0f:ad:26:8f:c0:b2:66:dc:a5:0c:84:74:72:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:40:59 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=e4c169fd49b6103fb849b4c5dd81205e3bab4f1308bba028df48ba47f654f665, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4d:33:d2:5f:39:9c:45:a4:6b:69:0e:bb:42: 77:c2:7c:bb:20:8b:4e:46:97:14:0e:b9:85:77:6a: 91:60:f0:7b:80:83:05:75:7b:95:78:cb:2b:d4:8c: 29:90:ca:7c:a5:18:74:27:d9:f5:c0:5c:85:06:05: 8c:36:a1:47:e4:d7:ca:af:87:6f:35:48:9b:53:3d: 77:47:87:51:89:45:15:31:0e:cc:6a:02:6f:e6:6d: cb:d6:75:e4:cd:ba:3a:7c:80:cf:d0:ad:f2:b0:b0: 9f:95:b5:83:4b:d4:d3:c6:72:0e:5b:4b:a7:8e:08: 17:a3:fe:33:9f:86:de:09:ed:70:0f:98:7a:2e:6f: 5b:d5:22:6e:75:3f:3c:62:77:46:91:b8:13:30:f3: ca:50:58:20:8c:6d:77:22:63:22:4d:c4:d3:5b:82: 93:f5:2f:c7:27:6f:25:1f:5b:04:0a:73:9b:d9:ab: 09:07:61:17:5c:5b:52:5a:49:32:54:0f:d4:4e:2e: 05:cd:cd:36:c2:54:cc:e2:60:be:c0:56:9b:37:97: 54:44:d7:04:3d:0e:a0:ab:3e:2e:bb:22:8d:c9:0e: 9d:58:50:52:bb:ad:c8:8c:e0:7d:83:1b:0e:a7:70: 95:9e:ff:0f:2c:3d:78:4d:f2:33:07:a3:2f:a6:dc: a4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:30:15:5C:EC:AE:AD:C1:61:CE:38:DD:0B:1C:E2:4F:54:BE:29:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d66763-ca3b-4f03-892a-534a85b8d01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:c840::/46 Signature Algorithm: sha256WithRSAEncryption 60:5d:00:7a:6f:32:f1:5c:6d:9f:4a:71:32:f6:ff:3d:e5:e0: a7:d9:d4:5e:19:3e:d2:3e:ee:dd:1d:43:70:11:76:68:84:32: 20:25:d4:86:ef:9c:86:5e:dd:7d:8b:03:db:e9:fb:b9:41:b3: be:77:00:db:b3:61:d8:76:06:72:d7:fd:24:21:03:53:f1:ce: b3:b8:6a:b7:ed:d0:75:d6:00:17:55:3f:73:38:b9:80:fa:96: a4:7e:35:1b:49:b5:43:3f:c7:92:8f:e6:55:42:26:82:d3:3f: df:98:08:cd:bb:8a:70:18:d7:b3:e7:90:43:d6:9c:c8:29:7b: 73:ac:3f:d0:72:fa:18:70:5c:f6:fc:84:0e:d7:b1:ea:cd:7d: 99:bd:3e:cd:9d:7c:9d:c9:95:4b:02:58:cc:72:dc:55:59:ae: f6:d2:3c:24:a1:60:3f:29:8e:9f:5a:6a:83:30:6a:8b:a7:25: 90:9b:1d:82:cf:b3:4f:7b:ac:59:6b:f6:c5:84:16:ab:88:a3: 63:38:39:83:85:6f:f4:9c:41:78:7a:54:e8:3d:99:41:83:9b: 2e:d2:5f:f6:4e:34:84:99:eb:ae:67:80:2a:b0:82:57:60:b1: fb:48:ff:35:75:b0:3c:88:1d:ef:9d:db:46:a5:b3:c5:08:86: 55:e3:a6:8e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTJpY0NihD60mj8CyZtylDIR0cn4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwNDA1OVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAZTRjMTY5ZmQ0OWI2MTAzZmI4NDli NGM1ZGQ4MTIwNWUzYmFiNGYxMzA4YmJhMDI4ZGY0OGJhNDdmNjU0ZjY2NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm00z0l85nEWka2kOu0J3wny7IItO RpcUDrmFd2qRYPB7gIMFdXuVeMsr1IwpkMp8pRh0J9n1wFyFBgWMNqFH5NfKr4dv NUibUz13R4dRiUUVMQ7MagJv5m3L1nXkzbo6fIDP0K3ysLCflbWDS9TTxnIOW0un jggXo/4zn4beCe1wD5h6Lm9b1SJudT88YndGkbgTMPPKUFggjG13ImMiTcTTW4KT 9S/HJ28lH1sECnOb2asJB2EXXFtSWkkyVA/UTi4Fzc02wlTM4mC+wFabN5dURNcE PQ6gqz4uuyKNyQ6dWFBSu63IjOB9gxsOp3CVnv8PLD14TfIzB6MvptyklQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOkwFVzsrq3BYc443Qsc4k9UvikUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAyZDY2NzYzLWNhM2ItNGYwMy04OTJhLTUzNGE4NWI4ZDAxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaachAMA0GCSqGSIb3DQEBCwUAA4IBAQBgXQB6bzLxXG2fSnEy 9v895eCn2dReGT7SPu7dHUNwEXZohDIgJdSG75yGXt19iwPb6fu5QbO+dwDbs2HY dgZy1/0kIQNT8c6zuGq37dB11gAXVT9zOLmA+pakfjUbSbVDP8eSj+ZVQiaC0z/f mAjNu4pwGNez55BD1pzIKXtzrD/QcvoYcFz2/IQO17HqzX2ZvT7NnXydyZVLAljM ctxVWa720jwkoWA/KY6fWmqDMGqLpyWQmx2Cz7NPe6xZa/bFhBariKNjODmDhW/0 nEF4elToPZlBg5su0l/2TjSEmeuuZ4AqsIJXYLH7SP81dbA8iB3vndtGpbPFCIZV 46aO -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:21 2025 by rpki-client