$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/18c0c353-8021-483e-a98b-44dbaff4b805.roa File: 18c0c353-8021-483e-a98b-44dbaff4b805.roa (raw, json) Hash identifier: KBtWkepbRYXXuvMsjv2SuCRb5Q11fKmLsli8joEpoDY= Subject key identifier: 97:43:3C:CC:50:3B:A6:68:5D:CD:0D:1C:A7:B6:AE:85:02:E6:54:B9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4E99BC6C74A36EF4C639A5E41E532DFBB348DE27 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/18c0c353-8021-483e-a98b-44dbaff4b805.roa Signing time: Wed 14 May 2025 00:10:15 +0000 ROA not before: Wed 14 May 2025 00:10:15 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:99:bc:6c:74:a3:6e:f4:c6:39:a5:e4:1e:53:2d:fb:b3:48:de:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:10:15 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=1f6cde9fd8e0f170c17713f01b6a9ddc58a4db65308774249efa575b8c1f8d0b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:02:01:f4:7b:2d:da:c4:3f:15:85:db:3c: a4:07:30:f9:8d:b8:57:09:eb:b8:69:65:8b:21:8c: df:63:03:2d:93:ef:23:05:ba:7d:cd:bc:e9:0d:76: ce:6d:a7:59:8f:7f:6d:ac:da:f0:a2:b1:fa:bf:22: e3:1d:01:b5:1d:d7:46:e3:47:58:6f:c4:20:b1:80: e9:57:e4:08:eb:9f:13:52:90:3a:5c:ae:fe:8f:2d: 33:b8:18:99:50:37:33:3f:52:e6:b8:a4:4f:6d:5c: 24:4d:fe:40:e6:c6:ac:f5:3c:d3:6e:da:43:ce:94: 9d:68:90:34:76:cd:c2:a9:1b:e3:c4:6b:5f:80:b6: fd:77:f1:96:35:bc:bf:7e:bf:1a:75:30:bd:3f:c2: 29:5e:8d:3a:0b:ee:ef:47:49:0d:c3:2c:e5:5b:8c: c4:73:47:f3:55:cd:95:5b:2b:9e:7e:e3:23:5a:02: 87:47:c9:7d:8f:b7:b6:f4:ad:ab:47:a4:2c:24:09: c6:02:2b:a7:1d:d0:f5:33:b3:38:f4:3f:8c:fe:3e: 0d:e7:34:15:76:f7:52:06:a8:c2:9f:2a:87:f2:eb: 4a:a8:03:11:be:bf:a7:dd:89:8a:ae:a8:64:51:d1: ed:3f:8e:e5:ee:41:4c:c9:dd:63:b6:3b:0f:10:57: e4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:43:3C:CC:50:3B:A6:68:5D:CD:0D:1C:A7:B6:AE:85:02:E6:54:B9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/18c0c353-8021-483e-a98b-44dbaff4b805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:6080::/48 Signature Algorithm: sha256WithRSAEncryption 99:0c:2b:1e:b7:67:ea:18:2b:18:d5:28:b9:f6:98:e3:1d:ec: 73:05:53:9b:33:5e:12:e6:8a:b5:15:5a:44:3d:f9:b8:28:d9: 71:68:54:4d:7c:a2:13:bc:93:58:70:f2:43:57:ce:a9:ba:71: e9:83:80:1d:11:91:db:fb:db:7d:85:96:95:de:15:ff:6d:5e: dc:74:a0:ca:83:b2:98:4a:f0:5e:fa:76:0e:1e:b1:aa:fc:35: 4d:ce:57:d0:84:f3:91:72:ae:31:63:f8:86:46:37:7f:06:53: b8:79:a0:41:a5:90:2b:ec:c0:bf:3e:c5:77:6c:a7:56:b0:b4: eb:60:61:f0:a2:3e:1e:84:77:c3:b5:bc:fc:53:11:ef:6b:b4: 14:c4:ce:3b:14:0d:f6:16:e8:08:87:06:1d:00:99:c8:19:e7: 89:8b:85:85:7b:f7:c3:48:51:23:c3:8e:fd:0f:0e:f9:6b:a5: 37:ec:25:d7:05:bf:b3:0a:f0:a0:20:8c:f4:9f:cd:8e:80:96: 89:f5:59:3f:ee:ba:0d:41:70:08:4e:ca:c1:1d:50:8e:1e:0e: e6:be:42:fe:fb:11:c8:0a:12:b3:1a:02:81:17:d7:d7:28:dc: c8:db:af:8d:f4:bf:45:76:48:d8:91:ab:5f:9c:52:b3:f1:7b: 1e:a3:e3:6a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTpm8bHSjbvTGOaXkHlMt+7NI3icwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMTAxNVoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAMWY2Y2RlOWZkOGUwZjE3MGMxNzcx M2YwMWI2YTlkZGM1OGE0ZGI2NTMwODc3NDI0OWVmYTU3NWI4YzFmOGQwYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSsCAfR7LdrEPxWF2zykBzD5jbhX Ceu4aWWLIYzfYwMtk+8jBbp9zbzpDXbObadZj39trNrworH6vyLjHQG1HddG40dY b8QgsYDpV+QI658TUpA6XK7+jy0zuBiZUDczP1LmuKRPbVwkTf5A5sas9TzTbtpD zpSdaJA0ds3CqRvjxGtfgLb9d/GWNby/fr8adTC9P8IpXo06C+7vR0kNwyzlW4zE c0fzVc2VWyuefuMjWgKHR8l9j7e29K2rR6QsJAnGAiunHdD1M7M49D+M/j4N5zQV dvdSBqjCnyqH8utKqAMRvr+n3YmKrqhkUdHtP47l7kFMyd1jtjsPEFfkgwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJdDPMxQO6ZoXc0NHKe2roUC5lS5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE4YzBjMzUzLTgwMjEtNDgzZS1hOThiLTQ0ZGJhZmY0YjgwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8mCAMA0GCSqGSIb3DQEBCwUAA4IBAQCZDCset2fqGCsY1Si5 9pjjHexzBVObM14S5oq1FVpEPfm4KNlxaFRNfKITvJNYcPJDV86punHpg4AdEZHb +9t9hZaV3hX/bV7cdKDKg7KYSvBe+nYOHrGq/DVNzlfQhPORcq4xY/iGRjd/BlO4 eaBBpZAr7MC/PsV3bKdWsLTrYGHwoj4ehHfDtbz8UxHva7QUxM47FA32FugIhwYd AJnIGeeJi4WFe/fDSFEjw479Dw75a6U37CXXBb+zCvCgIIz0n82OgJaJ9Vk/7roN QXAITsrBHVCOHg7mvkL++xHIChKzGgKBF9fXKNzI26+N9L9FdkjYkatfnFKz8Xse o+Nq -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:00 2025 by rpki-client