$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ae9fa93-06f6-4e3f-b9ac-3cfc9933e9ec.roa File: 2ae9fa93-06f6-4e3f-b9ac-3cfc9933e9ec.roa (raw, json) Hash identifier: 6xklTKzO67LHh8fPDNJG6xSFJaZF8N2M38kfFjYQAto= Subject key identifier: 67:7D:8C:B5:E4:A3:1A:94:81:E9:FA:CB:F7:01:23:7D:2F:42:02:68 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4F63BD5FC93F36DBB255EE870E2FC0DAC569E6E1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ae9fa93-06f6-4e3f-b9ac-3cfc9933e9ec.roa Signing time: Fri 16 May 2025 00:31:05 +0000 ROA not before: Fri 16 May 2025 00:31:05 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:4020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:63:bd:5f:c9:3f:36:db:b2:55:ee:87:0e:2f:c0:da:c5:69:e6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:31:05 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=7f570cf7c0a4e6989b386b5334d7157ec59bb61c8d7feae0d405a39d096f8553, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:76:7f:af:5d:62:f2:b0:da:a9:9e:15:ce:8b: 8a:89:4f:6d:f6:55:7f:c4:05:0b:61:c7:b9:24:23: c9:77:2f:df:55:84:ee:a2:18:09:36:62:38:12:ce: 07:bf:96:8f:f1:2b:40:66:49:bf:cf:e1:f1:72:e3: 2a:c2:5a:92:65:5d:9b:84:4c:f8:b7:8d:11:de:b7: 5d:f1:8b:46:1e:69:74:d5:31:6b:5d:c6:3c:9b:28: 6f:92:72:b7:9b:74:cd:c4:10:df:4d:55:b4:77:b3: e9:25:a1:7e:e0:4f:e8:69:bb:6f:16:a1:4b:23:fb: 82:28:18:83:55:20:e1:2e:f5:4a:cb:77:a5:a5:4b: 9a:ba:5f:cc:05:4f:36:96:11:0a:9f:a1:1c:de:f0: 7c:41:72:96:d6:73:ff:46:ca:7b:4a:f3:ed:18:fb: 43:f5:b9:b6:69:2d:f5:3d:2b:22:77:9e:70:40:8c: d4:13:9e:dc:31:09:7f:15:f1:2d:76:27:e2:f5:53: 34:7f:a7:b6:8e:a8:5a:86:cb:85:37:8c:a6:98:2b: f6:2a:c7:1d:4a:83:cb:39:d5:65:3a:d8:79:de:58: ac:b7:14:97:c1:1e:b1:50:9a:50:98:94:30:57:f6: cc:f8:26:24:84:ec:3d:45:dd:53:31:99:54:aa:42: 45:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7D:8C:B5:E4:A3:1A:94:81:E9:FA:CB:F7:01:23:7D:2F:42:02:68 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ae9fa93-06f6-4e3f-b9ac-3cfc9933e9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:4020::/46 Signature Algorithm: sha256WithRSAEncryption 12:71:83:a3:13:cd:a1:72:2a:b4:42:22:f7:2d:de:bc:54:01: d1:dc:37:18:fd:6d:2c:72:c4:1e:f2:62:ac:14:27:9c:b3:c4: f9:42:62:bb:90:ce:f6:29:64:56:8c:be:8b:8b:71:c1:40:74: 5b:af:a1:88:6a:44:70:b2:00:fb:ce:66:c7:0b:4a:7e:10:34: 9c:a4:52:82:de:cc:24:aa:9e:52:93:47:2e:8b:8e:b1:9d:26: e1:5b:d0:96:3c:6b:41:ae:17:da:11:99:17:47:e6:32:b6:ce: f8:fb:f9:f4:e7:bb:f2:33:ac:82:fb:c6:e1:6f:07:0a:a1:76: 97:80:91:33:7b:1e:94:52:5f:7e:04:86:43:88:5e:e4:0e:67: f3:37:67:b3:61:c9:04:0f:eb:0f:9f:82:7e:a6:d0:4f:6a:4d: a4:3a:61:4e:be:c9:5f:23:0e:0d:75:a4:44:2f:3c:db:cb:5b: 20:6f:9b:6d:f8:0c:c2:d5:fb:0f:76:2b:47:b2:8f:51:de:9c: af:16:c7:f6:a5:a3:e2:d0:29:75:ac:4c:d9:f4:38:a0:bb:70: 6a:03:99:5a:4a:1e:e3:ea:35:8f:8b:c5:1d:08:b4:88:3c:ec: 33:7f:46:b4:40:1a:15:17:f8:7f:16:63:de:26:4b:c7:e4:85: 83:ad:38:a8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUT2O9X8k/NtuyVe6HDi/A2sVp5uEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMzEwNVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAN2Y1NzBjZjdjMGE0ZTY5ODliMzg2 YjUzMzRkNzE1N2VjNTliYjYxYzhkN2ZlYWUwZDQwNWEzOWQwOTZmODU1MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHZ/r11i8rDaqZ4VzouKiU9t9lV/ xAULYce5JCPJdy/fVYTuohgJNmI4Es4Hv5aP8StAZkm/z+HxcuMqwlqSZV2bhEz4 t40R3rdd8YtGHml01TFrXcY8myhvknK3m3TNxBDfTVW0d7PpJaF+4E/oabtvFqFL I/uCKBiDVSDhLvVKy3elpUuaul/MBU82lhEKn6Ec3vB8QXKW1nP/Rsp7SvPtGPtD 9bm2aS31PSsid55wQIzUE57cMQl/FfEtdifi9VM0f6e2jqhahsuFN4ymmCv2Kscd SoPLOdVlOth53listxSXwR6xUJpQmJQwV/bM+CYkhOw9Rd1TMZlUqkJFGwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGd9jLXkoxqUgen6y/cBI30vQgJoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJhZTlmYTkzLTA2ZjYtNGUzZi1iOWFjLTNjZmM5OTMzZTllYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+0AgMA0GCSqGSIb3DQEBCwUAA4IBAQAScYOjE82hciq0QiL3 Ld68VAHR3DcY/W0scsQe8mKsFCecs8T5QmK7kM72KWRWjL6Li3HBQHRbr6GIakRw sgD7zmbHC0p+EDScpFKC3swkqp5Sk0cui46xnSbhW9CWPGtBrhfaEZkXR+Yyts74 +/n057vyM6yC+8bhbwcKoXaXgJEzex6UUl9+BIZDiF7kDmfzN2ezYckED+sPn4J+ ptBPak2kOmFOvslfIw4NdaRELzzby1sgb5tt+AzC1fsPditHso9R3pyvFsf2paPi 0Cl1rEzZ9Digu3BqA5laSh7j6jWPi8UdCLSIPOwzf0a0QBoVF/h/FmPeJkvH5IWD rTio -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:29 2025 by rpki-client