$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/062af51c-5367-4b3a-91ca-65f4ac95ee74.roa File: 062af51c-5367-4b3a-91ca-65f4ac95ee74.roa (raw, json) Hash identifier: Jiyr4UMuztXjzie3prj0+2Cwa2wd3t0FLgAvZAR4Lk8= Subject key identifier: 93:00:4A:A6:40:3D:AF:EB:F8:46:E1:BB:ED:B8:D0:1D:B8:EE:C3:CD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3906F850B837129C1179F15C23176713DB824D4D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/062af51c-5367-4b3a-91ca-65f4ac95ee74.roa Signing time: Wed 14 May 2025 00:11:08 +0000 ROA not before: Wed 14 May 2025 00:11:08 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:2880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:06:f8:50:b8:37:12:9c:11:79:f1:5c:23:17:67:13:db:82:4d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:11:08 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=d334f1ec038c55a8a49e710f92c6e1bb76c94e143871dc052a45251c8056aedb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0c:7f:cd:12:d7:ea:55:4d:1a:8b:46:29:e1: 73:97:ee:83:64:05:d1:30:86:35:30:74:aa:bd:c5: 7c:8e:ad:35:7e:ec:77:9c:7a:7c:75:9a:eb:7f:5c: be:d5:08:47:88:7b:3a:1b:0e:8c:b4:22:13:b5:29: 5d:8c:08:9e:f5:39:26:0c:7e:a7:d1:c9:a6:8b:c2: 53:e2:11:a0:08:73:84:e1:80:14:e8:a0:3a:19:3b: da:5f:05:1d:0e:bb:31:e0:63:24:cb:a6:9c:2a:da: ca:08:19:82:f7:25:d5:af:29:d0:d0:92:49:f3:09: a4:6f:ba:ed:6b:63:61:70:c7:ac:bd:f1:e2:71:8d: 34:89:f5:c4:4e:af:c1:d3:d2:ce:a5:7a:fe:b4:2d: e4:01:c1:af:ef:f1:bf:58:1a:fb:11:c8:18:6c:b6: 76:b2:03:86:23:88:eb:69:10:5a:6b:b8:44:c6:ad: 33:e5:97:55:f4:bd:88:64:b9:af:34:7c:c8:f5:e4: 8e:ef:49:aa:a0:33:1d:20:13:c1:ee:ce:5c:e8:07: 4d:95:ad:2a:7b:2f:85:7a:fb:09:68:20:18:75:32: a5:04:c9:c6:58:97:c9:59:52:b2:4b:cc:50:3a:38: a7:d1:4d:24:20:57:6c:3b:c1:1d:0b:88:c5:46:6e: 1b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:00:4A:A6:40:3D:AF:EB:F8:46:E1:BB:ED:B8:D0:1D:B8:EE:C3:CD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/062af51c-5367-4b3a-91ca-65f4ac95ee74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:2880::/48 Signature Algorithm: sha256WithRSAEncryption 2a:f6:16:eb:fa:3c:8d:dd:40:c7:7e:d4:bd:fc:e5:8e:ba:72: 49:fb:ce:c4:bc:15:81:af:39:07:03:b2:e4:6f:c7:dd:87:10: 69:eb:af:42:87:b5:35:03:d9:f5:d3:3b:8f:03:68:30:59:c1: df:d6:69:6c:2f:f8:cd:e8:5f:40:76:0d:cc:02:41:c5:33:ff: 7b:ad:7e:c8:8d:5b:7f:96:b4:79:e8:a8:07:5d:28:6e:20:54: 6f:8b:8c:a1:95:0c:e9:2d:91:62:c3:58:bc:14:11:c0:b8:4a: b7:19:d3:71:54:46:e9:f5:1a:1e:32:43:a8:cc:f8:d3:77:09: b1:ee:b7:b1:57:56:c2:f9:3e:5f:58:51:e3:82:a0:84:4b:79: 54:97:2e:b3:37:0c:d4:4f:2c:b7:a9:9c:49:f6:a9:35:bc:15: 65:10:c9:97:9b:8b:c3:00:bd:f7:79:d3:16:f8:dc:28:03:d1: 3a:75:85:5e:66:bb:28:1f:56:95:23:50:3c:54:3b:b2:f9:be: 32:a2:35:25:65:ee:bd:28:ba:85:91:13:6e:d9:b5:c7:0c:fc: aa:57:8c:2f:a6:07:50:39:44:5a:bd:50:fd:c3:bb:9e:a7:2e: 9b:cf:a0:98:d9:ba:b1:3a:9c:ed:85:0d:2f:cb:bb:6d:c4:6c: fa:8b:1d:2d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOQb4ULg3EpwRefFcIxdnE9uCTU0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMTEwOFoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAZDMzNGYxZWMwMzhjNTVhOGE0OWU3 MTBmOTJjNmUxYmI3NmM5NGUxNDM4NzFkYzA1MmE0NTI1MWM4MDU2YWVkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgx/zRLX6lVNGotGKeFzl+6DZAXR MIY1MHSqvcV8jq01fux3nHp8dZrrf1y+1QhHiHs6Gw6MtCITtSldjAie9TkmDH6n 0cmmi8JT4hGgCHOE4YAU6KA6GTvaXwUdDrsx4GMky6acKtrKCBmC9yXVrynQ0JJJ 8wmkb7rta2NhcMesvfHicY00ifXETq/B09LOpXr+tC3kAcGv7/G/WBr7EcgYbLZ2 sgOGI4jraRBaa7hExq0z5ZdV9L2IZLmvNHzI9eSO70mqoDMdIBPB7s5c6AdNla0q ey+FevsJaCAYdTKlBMnGWJfJWVKyS8xQOjin0U0kIFdsO8EdC4jFRm4bewIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJMASqZAPa/r+Ebhu+240B247sPNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA2MmFmNTFjLTUzNjctNGIzYS05MWNhLTY1ZjRhYzk1ZWU3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOCiAMA0GCSqGSIb3DQEBCwUAA4IBAQAq9hbr+jyN3UDHftS9 /OWOunJJ+87EvBWBrzkHA7Lkb8fdhxBp669Ch7U1A9n10zuPA2gwWcHf1mlsL/jN 6F9Adg3MAkHFM/97rX7IjVt/lrR56KgHXShuIFRvi4yhlQzpLZFiw1i8FBHAuEq3 GdNxVEbp9RoeMkOozPjTdwmx7rexV1bC+T5fWFHjgqCES3lUly6zNwzUTyy3qZxJ 9qk1vBVlEMmXm4vDAL33edMW+NwoA9E6dYVeZrsoH1aVI1A8VDuy+b4yojUlZe69 KLqFkRNu2bXHDPyqV4wvpgdQOURavVD9w7uepy6bz6CY2bqxOpzthQ0vy7ttxGz6 ix0t -----END CERTIFICATE-----Generated at Tue Jun 3 23:37:30 2025 by rpki-client