$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1aaf6328-08de-4735-8d71-2cf6b53109d4.roa File: 1aaf6328-08de-4735-8d71-2cf6b53109d4.roa (raw, json) Hash identifier: bCO90KEdlbuk1E5x8TjXVxrqlATGm2RYq+54aRUzq3M= Subject key identifier: C4:8E:70:3D:47:F1:73:7E:04:12:67:F9:22:20:54:4D:8E:37:35:54 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69013419BE30D26785AE997DB82423708EFCC370 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1aaf6328-08de-4735-8d71-2cf6b53109d4.roa Signing time: Wed 14 May 2025 00:42:04 +0000 ROA not before: Wed 14 May 2025 00:42:04 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:01:34:19:be:30:d2:67:85:ae:99:7d:b8:24:23:70:8e:fc:c3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:42:04 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=9480a2e35d27b6a9879c47cf51943607f62c085b654f65bff3d229595c16c190, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:36:a6:de:86:ef:2b:2a:66:f3:b7:1c:12: 2d:f2:51:c1:82:5d:de:9b:9e:e7:2b:c1:f6:38:7b: 1c:c5:49:cd:40:01:28:b4:fa:75:f1:b3:b4:58:26: f3:07:97:ff:68:8f:26:f4:63:1e:e4:d0:42:61:88: 32:34:5b:01:32:ef:5e:32:6c:44:3b:df:d5:36:ca: 40:2d:c4:96:57:a6:cb:59:a8:9a:98:25:cb:f1:4a: 2a:fd:f8:14:06:f0:c7:ce:f7:35:db:60:b0:79:f0: f5:91:55:ee:5d:26:bf:97:6f:4d:ce:dd:d5:f9:6e: 05:63:90:b8:78:56:d7:bf:71:e6:38:14:84:da:48: ee:63:9d:f3:c1:a7:20:e1:d9:bd:d5:72:6e:4e:b2: 59:5b:38:7b:42:1a:cb:5f:39:57:5c:70:2f:bb:43: ee:11:e9:3e:cf:4c:01:ec:fc:11:10:4c:db:d8:48: d0:8a:b0:53:9b:f6:70:f7:50:78:59:62:d4:8e:c7: 20:36:27:86:ae:85:da:32:b3:fe:03:67:97:3c:3a: e9:a1:d3:0b:5c:3b:8a:4a:ec:01:62:e1:02:b4:fb: 0f:08:35:63:68:7e:51:9a:90:b3:4e:0a:dc:75:8d: 2d:58:65:4d:6a:1c:33:8c:8c:8a:1a:4e:2b:51:d3: fe:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8E:70:3D:47:F1:73:7E:04:12:67:F9:22:20:54:4D:8E:37:35:54 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1aaf6328-08de-4735-8d71-2cf6b53109d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2080::/48 Signature Algorithm: sha256WithRSAEncryption ad:5e:a1:de:ab:18:c3:2b:5e:9c:e9:ae:51:52:b4:97:f5:11: ad:c3:40:be:03:c2:6c:59:d7:94:56:9b:70:b0:03:f3:55:54: 1b:83:24:7b:ed:05:0c:2f:e9:6c:72:d9:8b:88:e6:b2:46:fa: 6d:6e:db:12:67:75:ff:13:73:5a:17:77:98:ed:31:bf:88:8f: 3f:2e:bb:51:67:64:ed:34:5c:d6:c6:71:ab:5c:b0:bb:39:e2: 6a:1c:5c:12:2b:c4:78:8e:03:79:01:02:1e:08:e6:f3:ae:1a: 54:ea:0a:64:d9:83:bc:db:f2:48:93:fd:a4:75:4c:c1:c4:6e: e5:c6:16:2b:32:02:fb:b3:f6:8a:08:ef:9e:f3:85:61:92:6d: d0:a1:63:c7:40:24:b3:af:55:26:c6:f7:d5:e3:77:ea:a2:a6: 4c:c5:b5:a0:7e:c5:5a:64:1f:1b:32:cd:92:d8:e1:3d:f9:c7: ff:cc:e9:98:0e:07:a4:ca:db:22:b0:87:58:00:9d:f7:85:f0: be:de:ae:34:09:b3:b3:b2:dd:1d:d1:6c:a5:75:aa:bd:2d:30: ef:0e:16:17:52:17:bf:47:87:c2:5a:65:2b:14:3e:b5:4e:fb: 3e:b8:5a:b6:20:44:41:0a:99:f8:c4:cf:12:e3:35:a4:c8:86: a4:71:5f:9a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaQE0Gb4w0meFrpl9uCQjcI78w3AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwNDIwNFoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAOTQ4MGEyZTM1ZDI3YjZhOTg3OWM0 N2NmNTE5NDM2MDdmNjJjMDg1YjY1NGY2NWJmZjNkMjI5NTk1YzE2YzE5MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQY2pt6G7ysqZvO3HBIt8lHBgl3e m57nK8H2OHscxUnNQAEotPp18bO0WCbzB5f/aI8m9GMe5NBCYYgyNFsBMu9eMmxE O9/VNspALcSWV6bLWaiamCXL8Uoq/fgUBvDHzvc122CwefD1kVXuXSa/l29Nzt3V +W4FY5C4eFbXv3HmOBSE2kjuY53zwacg4dm91XJuTrJZWzh7QhrLXzlXXHAvu0Pu Eek+z0wB7PwREEzb2EjQirBTm/Zw91B4WWLUjscgNieGroXaMrP+A2eXPDrpodML XDuKSuwBYuECtPsPCDVjaH5RmpCzTgrcdY0tWGVNahwzjIyKGk4rUdP+hwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMSOcD1H8XN+BBJn+SIgVE2ONzVUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFhYWY2MzI4LTA4ZGUtNDczNS04ZDcxLTJjZjZiNTMxMDlkNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaACCAMA0GCSqGSIb3DQEBCwUAA4IBAQCtXqHeqxjDK16c6a5R UrSX9RGtw0C+A8JsWdeUVptwsAPzVVQbgyR77QUML+lsctmLiOayRvptbtsSZ3X/ E3NaF3eY7TG/iI8/LrtRZ2TtNFzWxnGrXLC7OeJqHFwSK8R4jgN5AQIeCObzrhpU 6gpk2YO82/JIk/2kdUzBxG7lxhYrMgL7s/aKCO+e84Vhkm3QoWPHQCSzr1UmxvfV 43fqoqZMxbWgfsVaZB8bMs2S2OE9+cf/zOmYDgekytsisIdYAJ33hfC+3q40CbOz st0d0Wyldaq9LTDvDhYXUhe/R4fCWmUrFD61Tvs+uFq2IERBCpn4xM8S4zWkyIak cV+a -----END CERTIFICATE-----Generated at Mon Jun 2 06:33:04 2025 by rpki-client