$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05f722d1-1b22-44e3-a4a2-3835d7447d1c.roa File: 05f722d1-1b22-44e3-a4a2-3835d7447d1c.roa (raw, json) Hash identifier: wJ6irBqnREFxPgWCKK1hVNnpfL1ENlveSc+b3iJxdnk= Subject key identifier: E3:07:3A:FA:EB:F8:A8:73:04:6E:D9:1D:C3:5D:89:F8:B0:22:A3:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 05283F7A37EFB59EE8AEDB27C1D29CE59A15FC1F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05f722d1-1b22-44e3-a4a2-3835d7447d1c.roa Signing time: Fri 16 May 2025 15:11:09 +0000 ROA not before: Fri 16 May 2025 15:11:09 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:28:3f:7a:37:ef:b5:9e:e8:ae:db:27:c1:d2:9c:e5:9a:15:fc:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:11:09 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=0548de273f20c5ffa07f4a31b4be4c2febd6259ba29ca48082ca5f09f79aadaf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c8:6b:cc:7b:a2:88:8c:3f:40:f7:53:26:38: 75:b0:cb:4f:f2:8d:ba:24:20:8e:10:b0:50:4b:c4: bd:8c:d5:82:ab:8a:83:6d:c9:f5:5d:29:38:d9:b3: 7f:07:9c:da:c3:a1:e3:f5:8f:de:54:90:66:ee:e1: 39:8e:5e:41:ae:12:f3:c6:9f:c8:7e:e7:ec:2a:1b: 89:30:13:1e:b0:b8:35:72:50:d8:98:53:fe:31:15: 2a:67:ed:b6:ac:cd:fa:e5:23:8f:36:e3:b8:17:5d: 36:e8:ab:f6:85:57:11:8e:09:ac:4a:99:53:65:f5: 23:2b:a6:97:28:ac:4b:1e:1c:70:91:4c:08:b8:f3: 97:3f:11:40:f3:2a:7a:7b:2d:29:5a:01:21:ea:ea: 73:18:7e:3b:aa:ac:43:8f:4a:b4:79:95:ff:a7:c7: ae:df:d4:bf:22:44:f9:0e:1d:90:5f:1f:ac:31:5b: 5e:81:e2:46:14:ae:42:b1:75:b4:69:23:e1:63:dd: 0e:c2:fe:1e:09:01:f7:91:f5:59:77:ff:eb:c2:b9: d2:b9:67:b6:ce:8d:b4:2b:ba:9e:50:db:9f:05:e6: 7d:22:99:62:da:0b:99:1a:86:4d:09:1c:65:c5:bd: e5:8c:2b:a5:0e:26:9b:7b:ca:3d:e1:6d:e1:3e:91: 30:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:07:3A:FA:EB:F8:A8:73:04:6E:D9:1D:C3:5D:89:F8:B0:22:A3:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05f722d1-1b22-44e3-a4a2-3835d7447d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:c800::/40 Signature Algorithm: sha256WithRSAEncryption 29:09:dc:80:3f:90:83:ce:0a:15:1a:d0:5d:be:6e:6c:65:8e: dc:5e:8f:7d:a0:3b:34:08:ac:26:b4:e3:1f:4c:d5:b3:de:0b: bb:ed:77:88:4b:0a:b8:ef:77:74:80:c7:9d:bf:b1:a2:ca:af: c9:0c:85:ec:ed:61:aa:ce:ba:dc:e8:ba:fb:7a:9b:5c:f2:f1: 30:98:c9:d0:95:8f:3b:d4:dd:e5:bb:42:c9:0f:2d:c9:71:de: 58:37:86:6d:b2:e0:a9:7b:8a:22:d8:81:73:ce:f2:27:53:03: f9:cd:fb:ea:93:a8:d1:2d:82:22:91:b7:ed:e8:cd:32:73:fa: aa:90:fa:b5:93:94:af:d2:91:9b:ac:62:ff:b0:36:b5:af:0e: e3:81:87:76:f0:40:5e:09:4d:a7:f3:8f:1a:54:25:a8:36:11: 51:2c:8f:6f:d3:a2:a9:08:c0:28:82:36:32:17:ac:26:7c:70: af:70:c5:a1:bc:82:bc:bf:5f:50:d3:97:34:59:dd:22:9c:f5: 3a:94:ae:d0:c7:68:f1:4b:37:02:14:52:a1:e6:59:37:46:72: f5:2a:9a:b1:1f:06:96:0d:c3:cb:55:73:c8:8e:b8:8a:23:dc: 69:96:e5:1f:f7:ad:e0:21:06:37:0f:85:80:4a:01:08:1d:55: 55:53:2a:85 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBSg/ejfvtZ7ortsnwdKc5ZoV/B8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MTEwOVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAMDU0OGRlMjczZjIwYzVmZmEwN2Y0 YTMxYjRiZTRjMmZlYmQ2MjU5YmEyOWNhNDgwODJjYTVmMDlmNzlhYWRhZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjshrzHuiiIw/QPdTJjh1sMtP8o26 JCCOELBQS8S9jNWCq4qDbcn1XSk42bN/B5zaw6Hj9Y/eVJBm7uE5jl5BrhLzxp/I fufsKhuJMBMesLg1clDYmFP+MRUqZ+22rM365SOPNuO4F1026Kv2hVcRjgmsSplT ZfUjK6aXKKxLHhxwkUwIuPOXPxFA8yp6ey0pWgEh6upzGH47qqxDj0q0eZX/p8eu 39S/IkT5Dh2QXx+sMVtegeJGFK5CsXW0aSPhY90Owv4eCQH3kfVZd//rwrnSuWe2 zo20K7qeUNufBeZ9Ipli2guZGoZNCRxlxb3ljCulDiabe8o94W3hPpEwbwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOMHOvrr+KhzBG7ZHcNdifiwIqOZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA1ZjcyMmQxLTFiMjItNDRlMy1hNGEyLTM4MzVkNzQ0N2QxYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacMgwDQYJKoZIhvcNAQELBQADggEBACkJ3IA/kIPOChUa0F2+ bmxljtxej32gOzQIrCa04x9M1bPeC7vtd4hLCrjvd3SAx52/saLKr8kMheztYarO utzouvt6m1zy8TCYydCVjzvU3eW7QskPLclx3lg3hm2y4Kl7iiLYgXPO8idTA/nN ++qTqNEtgiKRt+3ozTJz+qqQ+rWTlK/SkZusYv+wNrWvDuOBh3bwQF4JTafzjxpU Jag2EVEsj2/ToqkIwCiCNjIXrCZ8cK9wxaG8gry/X1DTlzRZ3SKc9TqUrtDHaPFL NwIUUqHmWTdGcvUqmrEfBpYNw8tVc8iOuIoj3GmW5R/3reAhBjcPhYBKAQgdVVVT KoU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:10:37 2025 by rpki-client