$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/277a57c1-1931-4159-95d2-a3aaf2098a82.roa File: 277a57c1-1931-4159-95d2-a3aaf2098a82.roa (raw, json) Hash identifier: igv1nfjFVdBsgW7CUPYYbcdcCG5SGHOJSuvneCrLsSc= Subject key identifier: CF:6C:AB:EA:46:66:E8:75:A3:1F:CF:0C:ED:71:72:E7:63:DE:1D:96 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 67136646D335DBF1F1C63BE3DFB72C46F38E4C9F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/277a57c1-1931-4159-95d2-a3aaf2098a82.roa Signing time: Fri 16 May 2025 00:30:52 +0000 ROA not before: Fri 16 May 2025 00:30:52 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:1040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:13:66:46:d3:35:db:f1:f1:c6:3b:e3:df:b7:2c:46:f3:8e:4c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:30:52 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=d730a041f2a61854e36bb30ae1a51ed9a3b9b7bc16f6caf7fe056bcfee249fc0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:09:0d:69:41:98:9f:54:e2:66:5c:ed:0a: 52:76:98:82:cd:ed:c5:d7:7a:f2:fc:53:48:7e:47: c3:5f:37:0c:ce:1a:13:b5:a4:2f:5f:5c:9a:94:99: d6:5a:19:69:9a:2e:ea:65:64:3b:80:4e:c9:80:9e: bf:67:b7:10:92:ee:21:af:94:c1:30:d7:bd:23:5d: 17:f7:32:f7:87:cb:43:ed:86:c2:2b:a1:d9:8b:39: cc:fb:80:98:60:9c:0c:d3:32:86:6c:af:3c:1b:ea: 99:74:d8:5f:a7:b2:2d:40:22:3a:fb:99:2a:65:a6: 73:a9:86:5f:49:c3:1c:51:ad:b4:d8:76:98:b1:22: 27:bc:6e:a9:e2:cc:9c:6c:02:a8:e4:2b:a8:3f:8f: 83:56:ad:b5:39:5b:48:e2:b9:a8:97:88:88:e2:db: 03:87:c4:45:af:54:57:a8:c7:76:a5:22:11:9a:11: 30:3e:40:7a:71:f2:f4:bb:6e:14:c8:ae:af:59:33: c4:8e:41:d1:81:91:9f:02:fd:72:5e:a4:da:45:b0: df:2c:90:bc:7f:d7:c7:4d:ab:7d:13:42:49:e7:e3: 52:1e:95:96:5e:60:11:28:dd:90:e3:c0:43:62:fd: 9f:ac:cc:b7:17:ff:37:fe:5b:38:4f:2a:93:0a:05: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6C:AB:EA:46:66:E8:75:A3:1F:CF:0C:ED:71:72:E7:63:DE:1D:96 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/277a57c1-1931-4159-95d2-a3aaf2098a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:1040::/46 Signature Algorithm: sha256WithRSAEncryption c8:fb:60:88:e4:e1:c7:89:29:ad:50:e3:40:ea:c0:03:fe:80: 61:de:9d:94:fb:a9:03:1c:15:ad:1d:4f:d2:02:05:9c:7c:fc: 1a:49:e7:7a:3e:41:d8:d7:93:86:31:62:30:1c:71:5e:3b:30: ab:36:b1:b9:1c:66:9e:db:42:a3:75:39:98:46:66:93:6e:5b: 4a:d8:4d:07:bf:fb:90:f2:ca:41:bf:10:9f:e0:f1:76:e6:40: 6f:6f:3d:bc:94:09:43:1d:2c:27:94:02:b5:1b:0b:1e:bf:f0: a3:e5:3f:ff:79:97:ef:c4:37:ab:21:9b:eb:c0:35:b4:eb:cd: 80:22:19:b5:c7:ba:5d:12:bb:54:a9:af:93:75:69:09:60:2b: 55:23:81:06:eb:27:b5:7c:6a:1b:00:12:0c:ab:47:e5:a5:27: d0:65:42:1a:de:18:41:4e:77:35:8c:4a:62:43:83:de:24:6f: 30:8e:97:6a:dd:84:c9:33:66:0c:3a:0b:b6:63:de:77:3e:6d: 4b:ef:19:54:3f:ab:c6:b8:46:81:3c:8d:d0:d3:a0:d5:2e:18: 87:73:1d:07:cb:6a:b9:77:9c:31:0b:d5:c4:b2:22:df:89:6a: f2:39:c2:10:25:1e:32:a3:9a:b8:53:77:c2:55:92:8a:15:77: 90:62:c4:24 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZxNmRtM12/Hxxjvj37csRvOOTJ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMzA1MloX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAZDczMGEwNDFmMmE2MTg1NGUzNmJi MzBhZTFhNTFlZDlhM2I5YjdiYzE2ZjZjYWY3ZmUwNTZiY2ZlZTI0OWZjMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCsJDWlBmJ9U4mZc7QpSdpiCze3F 13ry/FNIfkfDXzcMzhoTtaQvX1yalJnWWhlpmi7qZWQ7gE7JgJ6/Z7cQku4hr5TB MNe9I10X9zL3h8tD7YbCK6HZiznM+4CYYJwM0zKGbK88G+qZdNhfp7ItQCI6+5kq ZaZzqYZfScMcUa202HaYsSInvG6p4sycbAKo5CuoP4+DVq21OVtI4rmol4iI4tsD h8RFr1RXqMd2pSIRmhEwPkB6cfL0u24UyK6vWTPEjkHRgZGfAv1yXqTaRbDfLJC8 f9fHTat9E0JJ5+NSHpWWXmARKN2Q48BDYv2frMy3F/83/ls4TyqTCgVECwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFM9sq+pGZuh1ox/PDO1xcudj3h2WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI3N2E1N2MxLTE5MzEtNDE1OS05NWQyLWEzYWFmMjA5OGE4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+xBAMA0GCSqGSIb3DQEBCwUAA4IBAQDI+2CI5OHHiSmtUONA 6sAD/oBh3p2U+6kDHBWtHU/SAgWcfPwaSed6PkHY15OGMWIwHHFeOzCrNrG5HGae 20KjdTmYRmaTbltK2E0Hv/uQ8spBvxCf4PF25kBvbz28lAlDHSwnlAK1Gwsev/Cj 5T//eZfvxDerIZvrwDW0682AIhm1x7pdErtUqa+TdWkJYCtVI4EG6ye1fGobABIM q0flpSfQZUIa3hhBTnc1jEpiQ4PeJG8wjpdq3YTJM2YMOgu2Y953Pm1L7xlUP6vG uEaBPI3Q06DVLhiHcx0Hy2q5d5wxC9XEsiLfiWryOcIQJR4yo5q4U3fCVZKKFXeQ YsQk -----END CERTIFICATE-----Generated at Tue Jun 3 23:39:33 2025 by rpki-client