$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa File: 124c546b-d995-4fdf-978d-19217a16b0c7.roa (raw, json) Hash identifier: 9e3AcjUYydwFiw9reSwc58zjgSbGeffrm578XFchBio= Subject key identifier: 8F:4A:67:6A:0C:5C:97:45:4A:CB:DE:AC:38:2B:C1:B1:16:A2:CF:8C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7DF9F93264F6A6B15C80B8649CC54150C4410E9B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa Signing time: Fri 16 May 2025 15:50:50 +0000 ROA not before: Fri 16 May 2025 15:50:50 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da10:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f9:f9:32:64:f6:a6:b1:5c:80:b8:64:9c:c5:41:50:c4:41:0e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:50:50 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=e089c53eff30923a71c3f5ae7e17a58e55b405890368a6bc78c99313e24792ca, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:c5:09:e8:02:74:dd:00:2b:f6:c0:19:82: af:4a:8c:38:54:52:ac:a1:d7:00:17:af:2a:cf:48: c7:e1:80:de:51:bf:3e:0d:51:b8:e1:61:20:be:77: 3b:11:ab:fe:70:e2:2e:06:31:0b:2a:ff:9c:43:53: 78:16:de:23:11:06:af:bd:09:47:ce:3f:ad:43:b5: bc:3e:97:3b:c7:db:0e:d4:af:51:41:0d:c7:c7:a4: 0c:c4:8f:6a:72:8c:02:a3:8b:3f:9e:e1:bc:d2:05: 63:83:72:a9:5d:30:5b:80:30:ac:5e:aa:83:dd:72: c9:0f:59:6a:dd:64:c0:8c:f9:4e:11:d3:1f:e2:4f: 38:20:7f:6e:e9:b9:34:82:db:54:9a:e5:14:7a:6d: b5:f2:5a:27:19:c5:95:7a:0c:9b:60:ce:95:d8:06: ec:86:ad:77:93:88:5e:f1:b0:4c:40:f0:00:c7:85: 57:74:c3:48:3f:11:29:6a:e5:53:f8:84:8e:cf:e8: 57:e5:43:77:22:0d:82:f6:12:47:44:32:9e:d5:14: 7f:6d:10:56:60:e3:87:2e:10:b6:53:d9:70:ff:e7: c9:21:50:d7:ad:f3:f6:3e:64:c2:bc:46:b6:3a:ba: 24:53:77:18:e9:68:51:1e:27:6c:20:59:03:a3:29: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4A:67:6A:0C:5C:97:45:4A:CB:DE:AC:38:2B:C1:B1:16:A2:CF:8C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da10:8000::/38 Signature Algorithm: sha256WithRSAEncryption 34:f3:93:24:43:78:77:b5:78:ca:93:18:94:53:43:a3:16:25: a5:50:e0:16:a1:0e:2e:22:9a:b8:58:15:b9:fd:99:ff:eb:e7: 84:e8:f9:5e:cd:d5:c0:6e:5e:70:74:b5:c0:70:ce:de:f8:4e: 86:41:eb:8f:f5:94:11:11:a0:c3:10:83:2f:5f:8f:f1:de:a0: f3:c4:6a:2d:96:3e:b3:97:6c:7f:81:c5:b7:f4:83:1b:df:77: 0f:2b:98:90:34:b2:ea:da:31:d1:2c:e2:27:4d:8a:ca:ab:2e: 58:b2:3a:2e:b3:fe:70:a6:c4:91:d6:21:fa:7d:b2:9b:f6:ab: e1:67:60:6a:ce:04:07:a4:5f:c8:1c:2b:d0:88:ec:97:c5:19: 92:81:63:c1:07:7b:f4:f7:d1:7a:c4:58:bc:7b:e3:09:f0:c9: 5e:e4:8e:3d:6c:a5:13:95:16:a5:bd:11:3e:95:85:12:40:3a: 24:53:e3:9a:eb:81:06:0a:5a:b1:e8:01:03:56:5c:f7:61:1c: 5b:ec:68:0e:5f:2a:62:84:45:45:0d:3a:0c:ce:00:c2:47:d5: 9a:63:ab:6c:a9:96:69:95:cd:49:54:28:c5:2f:9b:55:f4:cb: 0c:0b:d3:2d:3f:99:46:54:ab:8f:82:ba:3b:c6:66:16:7f:3c: 14:c3:45:75 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUffn5MmT2prFcgLhknMVBUMRBDpswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1NTA1MFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAZTA4OWM1M2VmZjMwOTIzYTcxYzNm NWFlN2UxN2E1OGU1NWI0MDU4OTAzNjhhNmJjNzhjOTkzMTNlMjQ3OTJjYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1nFCegCdN0AK/bAGYKvSow4VFKs odcAF68qz0jH4YDeUb8+DVG44WEgvnc7Eav+cOIuBjELKv+cQ1N4Ft4jEQavvQlH zj+tQ7W8Ppc7x9sO1K9RQQ3Hx6QMxI9qcowCo4s/nuG80gVjg3KpXTBbgDCsXqqD 3XLJD1lq3WTAjPlOEdMf4k84IH9u6bk0gttUmuUUem218lonGcWVegybYM6V2Abs hq13k4he8bBMQPAAx4VXdMNIPxEpauVT+ISOz+hX5UN3Ig2C9hJHRDKe1RR/bRBW YOOHLhC2U9lw/+fJIVDXrfP2PmTCvEa2OrokU3cY6WhRHidsIFkDoymxQwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI9KZ2oMXJdFSsverDgrwbEWos+MMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEyNGM1NDZiLWQ5OTUtNGZkZi05NzhkLTE5MjE3YTE2YjBjNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEIAwDQYJKoZIhvcNAQELBQADggEBADTzkyRDeHe1eMqTGJRT Q6MWJaVQ4BahDi4imrhYFbn9mf/r54To+V7N1cBuXnB0tcBwzt74ToZB64/1lBER oMMQgy9fj/HeoPPEai2WPrOXbH+Bxbf0gxvfdw8rmJA0suraMdEs4idNisqrLliy Oi6z/nCmxJHWIfp9spv2q+FnYGrOBAekX8gcK9CI7JfFGZKBY8EHe/T30XrEWLx7 4wnwyV7kjj1spROVFqW9ET6VhRJAOiRT45rrgQYKWrHoAQNWXPdhHFvsaA5fKmKE RUUNOgzOAMJH1Zpjq2yplmmVzUlUKMUvm1X0ywwL0y0/mUZUq4+CujvGZhZ/PBTD RXU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:10:44 2025 by rpki-client