$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a214fb-fd3b-42e4-bc36-09523d6390f5.roa File: 26a214fb-fd3b-42e4-bc36-09523d6390f5.roa (raw, json) Hash identifier: WjLKF16MB6T3kkscWbl2FAHPgbdDWBzKG/RUKePCpKA= Subject key identifier: 35:0C:4B:FC:F0:71:98:26:80:AC:04:5C:E7:FC:91:10:B6:B2:C3:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 08C1837BF5DDA1891907FFCF6B2D633929BE7924 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a214fb-fd3b-42e4-bc36-09523d6390f5.roa Signing time: Wed 14 May 2025 00:00:18 +0000 ROA not before: Wed 14 May 2025 00:00:18 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c1:83:7b:f5:dd:a1:89:19:07:ff:cf:6b:2d:63:39:29:be:79:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:00:18 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=e4cfaf03bfede646fb2ab2e42de0347a0c673f4f08ddea7216e18a2d37719076, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:5b:68:c1:b8:87:85:43:ac:47:c7:1a:22: ab:f1:f1:3f:3a:d7:f0:33:bf:de:e9:c3:e6:b9:a0: aa:6e:cc:b1:3e:66:0c:66:c4:f6:3c:22:1a:02:7c: 07:af:e3:dd:da:cf:b1:bd:1f:37:9e:0c:04:39:4c: e8:ca:52:50:a4:47:0f:12:92:cc:ff:aa:50:84:ac: 51:02:b3:45:17:6f:cb:32:26:af:a3:82:a4:6e:1b: 03:b0:d0:f3:d8:3e:3c:05:ef:06:35:a9:e7:dc:77: bf:43:26:a7:1b:08:c2:9c:bc:e6:ca:93:9a:c3:b4: 06:c0:50:7b:00:18:ff:d5:70:6a:6b:1f:26:51:1b: 59:c5:a2:e4:b4:ae:3f:dd:5f:45:bf:4d:03:05:77: 05:b4:4c:4e:16:aa:d4:8f:ee:f7:92:73:57:bc:f4: c3:3d:ae:40:15:71:e1:c7:a0:a1:8c:d4:23:b1:98: 49:0a:9c:30:04:86:43:85:10:ef:33:d2:4c:de:c5: 45:2a:2b:e7:04:aa:07:92:7f:bf:cd:40:ae:0f:d4: 6b:57:60:77:57:cd:66:04:b0:24:12:1d:4c:e3:02: 5e:a4:20:de:0d:1f:2c:c5:4b:31:af:28:53:3d:d3: 86:4d:a8:56:8c:7b:fa:27:f9:8b:0b:f4:d1:29:e7: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0C:4B:FC:F0:71:98:26:80:AC:04:5C:E7:FC:91:10:B6:B2:C3:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a214fb-fd3b-42e4-bc36-09523d6390f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption 34:b7:81:ab:37:a6:57:3c:f1:9f:f5:97:44:34:46:93:27:af: da:dc:89:23:17:1e:50:37:6a:9e:a1:e2:a6:11:62:ff:b5:7a: 8e:76:8b:94:b5:fd:33:86:81:e3:b6:2f:69:4e:f6:16:b7:6a: e0:4c:53:b8:e7:68:2c:ab:9c:81:17:f4:3f:2e:ef:2f:11:03: 1e:5b:8f:81:85:65:45:59:9e:4c:45:5e:76:71:d4:2d:6b:bb: 11:9a:f0:54:2a:a2:40:92:48:88:22:d3:82:ac:ee:71:cd:5d: 7f:2a:c9:e4:30:48:b7:de:7f:a6:47:9b:4f:e2:19:12:6c:f5: 0c:dc:7b:94:81:20:19:98:75:cd:1e:66:93:60:9f:9b:e2:b9: ef:a0:12:13:54:5b:4f:18:98:39:ea:cd:99:87:b7:33:fd:2a: f7:da:a7:64:d8:85:5d:ac:9e:88:60:46:b3:54:2b:95:f0:aa: 27:b3:6d:54:ad:92:8f:24:6d:64:49:f4:87:3b:19:81:2a:d8: 09:6c:d2:31:65:92:d9:7f:dd:1b:3d:a7:6e:cd:f5:d5:86:5b: ed:99:5a:38:44:a9:68:cd:fa:ec:04:7a:77:30:20:cf:f6:c5: f4:9a:ab:8b:ed:dc:4b:8d:b4:5b:7c:96:3d:43:39:6d:a1:74: 64:0f:7f:72 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCMGDe/XdoYkZB//Pay1jOSm+eSQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMDAxOFoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAZTRjZmFmMDNiZmVkZTY0NmZiMmFi MmU0MmRlMDM0N2EwYzY3M2Y0ZjA4ZGRlYTcyMTZlMThhMmQzNzcxOTA3NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM5baMG4h4VDrEfHGiKr8fE/Otfw M7/e6cPmuaCqbsyxPmYMZsT2PCIaAnwHr+Pd2s+xvR83ngwEOUzoylJQpEcPEpLM /6pQhKxRArNFF2/LMiavo4KkbhsDsNDz2D48Be8GNann3He/QyanGwjCnLzmypOa w7QGwFB7ABj/1XBqax8mURtZxaLktK4/3V9Fv00DBXcFtExOFqrUj+73knNXvPTD Pa5AFXHhx6ChjNQjsZhJCpwwBIZDhRDvM9JM3sVFKivnBKoHkn+/zUCuD9RrV2B3 V81mBLAkEh1M4wJepCDeDR8sxUsxryhTPdOGTahWjHv6J/mLC/TRKed8tQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDUMS/zwcZgmgKwEXOf8kRC2ssPvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI2YTIxNGZiLWZkM2ItNDJlNC1iYzM2LTA5NTIzZDYzOTBmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMjAMA0GCSqGSIb3DQEBCwUAA4IBAQA0t4GrN6ZXPPGf9ZdE NEaTJ6/a3IkjFx5QN2qeoeKmEWL/tXqOdouUtf0zhoHjti9pTvYWt2rgTFO452gs q5yBF/Q/Lu8vEQMeW4+BhWVFWZ5MRV52cdQta7sRmvBUKqJAkkiIItOCrO5xzV1/ KsnkMEi33n+mR5tP4hkSbPUM3HuUgSAZmHXNHmaTYJ+b4rnvoBITVFtPGJg56s2Z h7cz/Sr32qdk2IVdrJ6IYEazVCuV8Kons21UrZKPJG1kSfSHOxmBKtgJbNIxZZLZ f90bPaduzfXVhlvtmVo4RKlozfrsBHp3MCDP9sX0mquL7dxLjbRbfJY9QzltoXRk D39y -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:10 2025 by rpki-client