$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/250aee42-8373-4f7b-a0b1-07e5f25f04f5.roa File: 250aee42-8373-4f7b-a0b1-07e5f25f04f5.roa (raw, json) Hash identifier: NyZAEw3atsLhLZaPig5k0cv8/TFV8YY9LEzMJKOB8PM= Subject key identifier: B4:EE:3E:6D:7D:F5:4C:DB:CC:36:0C:AF:11:87:1E:5C:BD:BD:9A:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B5BAC4C2129651217A69FFBC29A7048F6DDB0A5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/250aee42-8373-4f7b-a0b1-07e5f25f04f5.roa Signing time: Fri 16 May 2025 00:30:10 +0000 ROA not before: Fri 16 May 2025 00:30:10 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5b:ac:4c:21:29:65:12:17:a6:9f:fb:c2:9a:70:48:f6:dd:b0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:30:10 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=85929eb17803811360127fc303e42a3280f8c98c78a995538aa3b084a96badcd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:29:f8:3e:8a:6a:e8:3f:ab:6c:fa:96:da: b6:59:3a:4d:ee:99:5f:38:70:59:5f:4a:2e:be:24: 66:32:3c:d1:b5:ce:06:47:58:6b:43:45:b7:16:d3: 4d:19:0e:3c:33:10:da:36:b6:ce:43:8b:de:e8:60: 79:a8:0d:86:68:d8:db:04:38:e3:fa:58:6b:f6:14: e5:b3:ca:2a:2f:e3:5a:37:cc:b2:68:a5:fe:b1:86: 9a:2f:bf:62:24:d8:2b:b7:4e:33:b9:77:22:07:24: 60:92:0d:79:52:94:e9:bf:22:f1:a2:5d:47:9e:22: 99:52:99:37:95:c8:63:00:f1:b0:1d:bf:43:ab:04: b7:9c:ca:c7:7f:18:3e:46:1c:92:c8:33:22:1e:86: d3:24:ea:2e:08:c1:1f:d4:c6:d2:b4:ce:8d:f1:0c: f7:fb:f4:f0:24:71:91:11:73:70:ee:a9:fb:38:d8: af:78:59:ec:89:6b:c2:d6:1c:b0:b4:8e:5b:59:4f: 65:75:83:f7:3f:54:a3:46:fc:a6:65:01:5f:7f:e6: 85:25:6d:f4:d1:e3:43:95:3e:4b:b8:23:a0:63:0f: 66:f6:28:62:e4:d0:7a:61:82:4f:59:a4:c1:46:8b: e3:b8:5d:f6:84:0d:6d:64:73:6e:59:71:25:44:93: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EE:3E:6D:7D:F5:4C:DB:CC:36:0C:AF:11:87:1E:5C:BD:BD:9A:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/250aee42-8373-4f7b-a0b1-07e5f25f04f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8000::/40 Signature Algorithm: sha256WithRSAEncryption 1c:8f:c2:9a:96:c9:10:da:ba:b3:7b:1e:a3:a8:fb:2e:08:ad: d7:93:46:3a:73:9a:5a:f9:3e:e7:aa:15:55:89:18:9d:86:47: 23:46:3b:8a:c0:c5:8b:31:e1:4c:aa:19:34:97:db:b6:32:47: 75:e6:32:7a:24:b0:9d:ad:6b:1e:6f:81:11:51:3f:10:ea:da: 10:95:c6:d9:40:af:30:90:6b:96:2c:29:6f:43:bf:05:f8:53: f0:44:59:33:29:34:36:02:a1:56:82:6a:a3:48:6c:58:1c:bf: 5f:ef:51:12:32:37:bc:9a:0d:cf:c3:84:86:ed:78:10:b3:65: df:08:7d:ca:13:40:68:ef:fa:fc:98:80:81:8d:1b:7e:d6:0a: dc:a2:12:01:f6:60:59:c0:c8:77:35:c5:2a:be:56:23:3e:f6: d8:78:18:0f:04:e4:64:42:09:45:27:a8:ea:12:df:39:ec:b1: fc:63:b3:2d:8e:9a:e9:1a:19:29:f5:82:47:44:96:0c:bc:ac: c1:1b:e6:fc:44:77:db:65:a7:25:f2:87:9b:9d:c7:40:9c:2d: 95:f4:d3:1b:45:f6:84:9a:61:7d:cb:56:39:0c:b4:da:cd:27: 08:17:71:3d:8f:30:cb:0a:3b:97:95:c9:b1:e1:7d:e1:69:82: b3:cb:3b:83 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUa1usTCEpZRIXpp/7wppwSPbdsKUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMzAxMFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAODU5MjllYjE3ODAzODExMzYwMTI3 ZmMzMDNlNDJhMzI4MGY4Yzk4Yzc4YTk5NTUzOGFhM2IwODRhOTZiYWRjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGQp+D6Kaug/q2z6ltq2WTpN7plf OHBZX0ouviRmMjzRtc4GR1hrQ0W3FtNNGQ48MxDaNrbOQ4ve6GB5qA2GaNjbBDjj +lhr9hTls8oqL+NaN8yyaKX+sYaaL79iJNgrt04zuXciByRgkg15UpTpvyLxol1H niKZUpk3lchjAPGwHb9DqwS3nMrHfxg+RhySyDMiHobTJOouCMEf1MbStM6N8Qz3 +/TwJHGREXNw7qn7ONiveFnsiWvC1hywtI5bWU9ldYP3P1SjRvymZQFff+aFJW30 0eNDlT5LuCOgYw9m9ihi5NB6YYJPWaTBRovjuF32hA1tZHNuWXElRJNMBwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLTuPm199UzbzDYMrxGHHly9vZriMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI1MGFlZTQyLTgzNzMtNGY3Yi1hMGIxLTA3ZTVmMjVmMDRmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8oAwDQYJKoZIhvcNAQELBQADggEBAByPwpqWyRDaurN7HqOo +y4IrdeTRjpzmlr5PueqFVWJGJ2GRyNGO4rAxYsx4UyqGTSX27YyR3XmMnoksJ2t ax5vgRFRPxDq2hCVxtlArzCQa5YsKW9DvwX4U/BEWTMpNDYCoVaCaqNIbFgcv1/v URIyN7yaDc/DhIbteBCzZd8IfcoTQGjv+vyYgIGNG37WCtyiEgH2YFnAyHc1xSq+ ViM+9th4GA8E5GRCCUUnqOoS3znssfxjsy2OmukaGSn1gkdElgy8rMEb5vxEd9tl pyXyh5udx0CcLZX00xtF9oSaYX3LVjkMtNrNJwgXcT2PMMsKO5eVybHhfeFpgrPL O4M= -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:32 2025 by rpki-client