$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa File: 2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa (raw, json) Hash identifier: PBctIikDRPXoDFOdyIBbhbMB9j2Gfc1roHeTq5GtYeM= Subject key identifier: E7:B7:B5:E8:8F:A3:9C:5D:7B:7A:9B:0A:CE:7B:07:C0:B0:AC:EA:15 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 758A795EC299996D97A0DA1B832A4694742F77A0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa Signing time: Fri 16 May 2025 00:40:12 +0000 ROA not before: Fri 16 May 2025 00:40:12 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8a:79:5e:c2:99:99:6d:97:a0:da:1b:83:2a:46:94:74:2f:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:40:12 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=932a638b65ce49ec2c386933d6b7b833dec03ad5c72da19365ad8050ed385447, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:16:80:6c:75:a1:0a:5b:56:72:ef:8e:bb:43: 38:42:85:4f:77:26:5e:24:ea:ac:7f:77:62:d5:09: d1:7c:b5:dc:47:dd:68:f9:59:f7:4a:a8:41:f8:e7: 10:46:80:26:e4:dd:af:29:6a:81:80:f3:c7:a0:4e: 0e:1b:4b:53:fc:5b:82:91:fb:e2:22:48:0a:52:d8: 77:68:a1:5f:37:2e:8f:39:0f:85:b9:12:13:73:55: 4d:b2:be:a8:53:6f:af:a0:ba:e3:48:9d:d2:79:3e: c8:e1:e4:83:b4:f7:da:7e:ba:6b:6c:32:af:3f:6e: ad:02:a7:3b:47:c8:30:c7:43:35:5d:48:ca:8b:ea: 43:46:46:80:15:4d:88:43:db:a2:ae:32:f0:1b:6b: 40:34:f1:36:72:ef:2d:06:0f:66:4a:40:61:2e:21: 28:0e:83:d8:93:4f:89:29:c1:e5:0d:21:09:8d:2d: c4:c2:bf:21:31:55:08:28:ea:40:31:76:1e:80:aa: 51:7a:c0:1e:9a:0a:a2:70:26:45:55:d0:ad:21:91: 2e:0f:b4:14:ef:a8:b9:28:52:13:8d:e6:6a:e1:a7: c7:b9:60:42:5b:79:ab:ae:78:78:b7:45:01:15:01: 1f:fb:25:4c:74:b2:c1:63:aa:5d:9c:5e:20:fa:eb: 0d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B7:B5:E8:8F:A3:9C:5D:7B:7A:9B:0A:CE:7B:07:C0:B0:AC:EA:15 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:4000::/40 Signature Algorithm: sha256WithRSAEncryption 82:88:9e:83:36:26:20:1e:19:a1:12:cb:ed:4e:49:b7:e5:4b: 27:d4:0b:8f:2b:82:e0:0d:7f:56:ca:20:17:c7:b1:f3:70:37: 70:98:db:1d:42:4a:86:52:d9:82:e1:21:19:0f:61:24:12:af: bb:52:1d:92:7c:e7:e0:ee:9c:d1:53:61:b1:ee:d1:bf:f6:01: ba:ab:c9:64:99:cc:ca:86:d9:d8:4f:e9:f8:03:de:cd:5d:b6: 64:61:b2:c2:2b:bd:04:3a:56:87:35:5d:93:ce:06:a9:c1:cb: 0f:44:bb:96:9b:3c:fb:ee:f0:d4:90:aa:74:7f:f1:f9:2b:8e: de:6d:91:17:23:a8:a3:d1:12:02:9b:60:ef:7f:d2:9b:79:73: 01:50:a8:fa:d8:41:b5:5b:9c:56:2d:c1:66:67:4b:65:83:6d: e5:3e:eb:a3:27:ac:10:89:6a:58:1b:8e:a7:85:ff:84:8f:c0: 14:4b:ee:d2:ba:5b:54:be:0d:c2:5b:b4:f4:9b:0a:0e:47:ea: 56:16:62:23:a8:08:a1:66:38:87:d6:01:e9:ca:77:59:73:d8: 70:ac:c2:6d:52:c3:33:59:ae:a4:04:8e:56:8d:e1:82:5a:47: 26:17:f6:85:fb:b1:0f:81:4a:04:cb:8a:5a:65:57:03:20:03: a8:2b:b9:a8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdYp5XsKZmW2XoNobgypGlHQvd6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwNDAxMloX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAOTMyYTYzOGI2NWNlNDllYzJjMzg2 OTMzZDZiN2I4MzNkZWMwM2FkNWM3MmRhMTkzNjVhZDgwNTBlZDM4NTQ0NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7haAbHWhCltWcu+Ou0M4QoVPdyZe JOqsf3di1QnRfLXcR91o+Vn3SqhB+OcQRoAm5N2vKWqBgPPHoE4OG0tT/FuCkfvi IkgKUth3aKFfNy6POQ+FuRITc1VNsr6oU2+voLrjSJ3SeT7I4eSDtPfafrprbDKv P26tAqc7R8gwx0M1XUjKi+pDRkaAFU2IQ9uirjLwG2tANPE2cu8tBg9mSkBhLiEo DoPYk0+JKcHlDSEJjS3Ewr8hMVUIKOpAMXYegKpResAemgqicCZFVdCtIZEuD7QU 76i5KFITjeZq4afHuWBCW3mrrnh4t0UBFQEf+yVMdLLBY6pdnF4g+usN7QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOe3teiPo5xde3qbCs57B8CwrOoVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJhODg2YTZjLTIyMzktNGYyYi1iNTI3LTUxOWNmNWE0YmFiNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaUAwDQYJKoZIhvcNAQELBQADggEBAIKInoM2JiAeGaESy+1O SbflSyfUC48rguANf1bKIBfHsfNwN3CY2x1CSoZS2YLhIRkPYSQSr7tSHZJ85+Du nNFTYbHu0b/2AbqryWSZzMqG2dhP6fgD3s1dtmRhssIrvQQ6Voc1XZPOBqnByw9E u5abPPvu8NSQqnR/8fkrjt5tkRcjqKPREgKbYO9/0pt5cwFQqPrYQbVbnFYtwWZn S2WDbeU+66MnrBCJalgbjqeF/4SPwBRL7tK6W1S+DcJbtPSbCg5H6lYWYiOoCKFm OIfWAenKd1lz2HCswm1SwzNZrqQEjlaN4YJaRyYX9oX7sQ+BSgTLilplVwMgA6gr uag= -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:37 2025 by rpki-client