$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/22d65c52-15d0-4b0e-a9e4-35cebf9f101f.roa File: 22d65c52-15d0-4b0e-a9e4-35cebf9f101f.roa (raw, json) Hash identifier: Uw2m5JUCpEDE6gW4e8/803o+TTZIdZqs6cL4mhI7I5M= Subject key identifier: C7:45:CC:D0:17:8B:4D:02:1B:B1:FF:29:CF:F4:38:F7:FF:91:04:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 164CD2C7F8CE12645EF97EB0C3A3945F06CDBE83 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/22d65c52-15d0-4b0e-a9e4-35cebf9f101f.roa Signing time: Fri 23 May 2025 00:00:08 +0000 ROA not before: Fri 23 May 2025 00:00:08 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4c:d2:c7:f8:ce:12:64:5e:f9:7e:b0:c3:a3:94:5f:06:cd:be:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 23 00:00:08 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=78cfc41817ac72c85e5e7b3b4aba224ef3a12bce5df7d88d85512cbab54f7c47, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:35:b8:d8:87:6f:52:b8:f7:97:00:4c:d5:9f: 7a:fe:3b:c6:09:86:0d:08:6d:19:8e:79:fa:7d:27: b6:e8:f9:bd:21:6f:38:7b:3b:1d:78:31:b3:5c:8a: 08:22:cc:85:a4:f9:f5:38:ae:b3:7d:22:45:60:b3: 36:c8:ed:88:5d:2a:1f:84:2a:43:e7:f1:df:dc:c9: 47:3e:9f:ac:92:b2:6d:ab:b3:1d:8b:b7:c5:35:eb: 33:d9:d9:f1:71:78:52:ec:41:fb:ca:3b:12:37:bb: 39:17:01:e7:fd:71:c0:52:9c:2a:86:81:5f:a1:b3: 52:e0:27:f8:80:1d:d6:b1:b8:e3:f1:93:ea:f8:b4: 1d:03:83:92:3e:11:ae:da:be:57:56:23:04:94:8d: 60:6e:7b:89:98:e8:29:24:82:63:aa:cd:50:72:e7: 81:be:f3:d5:03:ea:df:bc:28:71:4b:29:e6:c0:c3: dd:ad:f8:14:6e:2f:e2:6b:ef:09:a2:b1:6c:62:1e: 17:50:9b:6a:92:83:80:a3:6d:c8:89:5b:64:49:9e: 1b:70:f8:58:f9:8e:9c:63:94:88:f6:c8:2e:d6:24: 9a:ed:35:22:8f:3b:c6:9f:8f:0d:e3:7c:b8:6f:6e: 7c:14:7f:b4:e1:20:de:d7:f4:02:e0:df:e0:97:99: 9e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:45:CC:D0:17:8B:4D:02:1B:B1:FF:29:CF:F4:38:F7:FF:91:04:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/22d65c52-15d0-4b0e-a9e4-35cebf9f101f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:e000::/40 Signature Algorithm: sha256WithRSAEncryption 69:54:e0:88:ca:51:58:50:61:4f:2d:b4:67:d3:3c:a6:73:cf: f3:12:0a:53:20:b9:68:d5:3b:14:e2:c4:98:14:42:90:37:1f: e3:80:39:b0:5e:32:19:ca:09:6d:b8:f2:d8:63:4e:6a:c1:ca: 95:7c:3c:36:05:8b:16:0d:b8:a7:c5:5c:85:36:17:d5:ec:ff: a7:ec:c5:1d:5d:fc:09:1a:3a:a6:0c:4c:e2:f9:21:c1:a7:7b: 82:93:c4:9e:6f:21:f8:76:9f:9f:b3:c3:28:13:ef:a2:c3:25: 24:8b:40:27:3b:b6:fc:10:ce:52:10:c9:de:4a:17:5f:00:ad: 8e:27:02:bd:2e:07:eb:45:5f:cb:1e:5d:ab:51:91:f7:a7:98: 94:28:4e:0d:cc:4c:f9:24:3b:75:96:0b:30:76:c6:7a:8c:dc: 3c:13:a7:8f:f2:f3:fc:02:1e:9a:bb:98:81:dc:95:85:fd:ac: fb:e1:37:95:63:d2:77:88:30:99:62:48:d3:0c:0f:b3:77:da: 29:c5:9c:93:90:0e:93:e4:39:e9:7e:e0:d3:75:ae:ee:19:8b: f2:84:0b:3e:e5:5f:9f:63:18:d9:26:9f:fd:ed:f9:6b:24:6b: 20:89:11:63:37:85:55:84:6f:ca:75:09:44:de:15:0b:23:15: bc:86:83:39 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFkzSx/jOEmRe+X6ww6OUXwbNvoMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUyMzAwMDAwOFoX DTI1MDYyNzIzNTk1OVowejFJMEcGA1UEBRNANzhjZmM0MTgxN2FjNzJjODVlNWU3 YjNiNGFiYTIyNGVmM2ExMmJjZTVkZjdkODhkODU1MTJjYmFiNTRmN2M0NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jW42IdvUrj3lwBM1Z96/jvGCYYN CG0Zjnn6fSe26Pm9IW84ezsdeDGzXIoIIsyFpPn1OK6zfSJFYLM2yO2IXSofhCpD 5/Hf3MlHPp+skrJtq7Mdi7fFNesz2dnxcXhS7EH7yjsSN7s5FwHn/XHAUpwqhoFf obNS4Cf4gB3Wsbjj8ZPq+LQdA4OSPhGu2r5XViMElI1gbnuJmOgpJIJjqs1QcueB vvPVA+rfvChxSynmwMPdrfgUbi/ia+8JorFsYh4XUJtqkoOAo23IiVtkSZ4bcPhY +Y6cY5SI9sgu1iSa7TUijzvGn48N43y4b258FH+04SDe1/QC4N/gl5meswIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMdFzNAXi00CG7H/Kc/0OPf/kQTiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIyZDY1YzUyLTE1ZDAtNGIwZS1hOWU0LTM1Y2ViZjlmMTAxZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7+AwDQYJKoZIhvcNAQELBQADggEBAGlU4IjKUVhQYU8ttGfT PKZzz/MSClMguWjVOxTixJgUQpA3H+OAObBeMhnKCW248thjTmrBypV8PDYFixYN uKfFXIU2F9Xs/6fsxR1d/AkaOqYMTOL5IcGne4KTxJ5vIfh2n5+zwygT76LDJSSL QCc7tvwQzlIQyd5KF18ArY4nAr0uB+tFX8seXatRkfenmJQoTg3MTPkkO3WWCzB2 xnqM3DwTp4/y8/wCHpq7mIHclYX9rPvhN5Vj0neIMJliSNMMD7N32inFnJOQDpPk Oel+4NN1ru4Zi/KECz7lX59jGNkmn/3t+WskayCJEWM3hVWEb8p1CUTeFQsjFbyG gzk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:11:18 2025 by rpki-client