$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7fd07c-40bf-4d7b-af7c-043c20c75a6d.roa File: 2e7fd07c-40bf-4d7b-af7c-043c20c75a6d.roa (raw, json) Hash identifier: h1w8frOqr4oXeHcbbedvYdUdbIO0+ug72X7112xOOsM= Subject key identifier: 45:99:65:6A:AF:F9:C1:64:7F:40:71:37:85:48:A0:C1:56:F7:C6:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 359373C39B5882DAC59123DCA5847A44178190CC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7fd07c-40bf-4d7b-af7c-043c20c75a6d.roa Signing time: Tue 13 May 2025 00:00:05 +0000 ROA not before: Tue 13 May 2025 00:00:05 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:93:73:c3:9b:58:82:da:c5:91:23:dc:a5:84:7a:44:17:81:90:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:00:05 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=7badd6e2092e736edad0a40fa37c87343e1af6d8b31cbdfa0873ac46964c3d3c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:ad:2a:c7:9a:a3:b7:e9:f0:19:49:25:fc: 25:c8:e1:fd:f9:09:8d:4e:62:48:46:66:1b:94:8e: 5c:62:e7:f8:5d:33:69:4f:79:55:77:8e:dc:b9:9c: 86:2d:ab:ec:e9:06:f3:a3:12:63:73:ab:23:80:47: 58:7e:57:c6:05:a0:9c:30:f8:d6:54:44:85:39:e4: b6:e0:a6:13:50:e4:26:94:aa:25:60:1e:f5:90:7f: 7d:e0:ba:eb:8d:13:fe:6c:7b:b8:b7:9d:eb:06:67: ea:da:9e:cc:eb:ad:09:b5:4d:f5:b1:80:d2:ff:d5: 78:cb:55:81:14:bd:15:f0:26:cd:18:4c:95:cb:45: 9f:45:71:ee:00:ae:1a:c9:51:d1:6e:04:b9:64:09: c9:54:39:89:71:a8:62:ff:71:1b:d2:c5:fc:d6:0f: 2e:40:e1:78:b4:bf:1c:ef:59:38:a4:38:59:b4:b4: ed:83:34:32:fa:a6:82:2a:f6:34:2d:8d:bb:2c:25: 78:ff:bd:49:f1:e5:82:61:f4:4e:16:07:0e:cd:c0: d6:7e:a8:6a:a1:5c:e0:0c:40:60:4c:58:69:06:04: 3f:fc:c3:8f:44:cb:16:c9:a9:7c:6a:4e:72:9f:3e: 78:55:eb:0c:72:9f:e3:fd:35:fc:f3:ea:36:b2:e1: d0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:99:65:6A:AF:F9:C1:64:7F:40:71:37:85:48:A0:C1:56:F7:C6:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7fd07c-40bf-4d7b-af7c-043c20c75a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 0b:54:e7:26:73:5e:39:73:8c:fd:16:62:09:6c:13:7b:ba:35: aa:10:8d:89:f7:14:13:a3:b5:9c:00:b1:88:90:68:d5:3d:18: 6c:64:04:df:ab:4b:69:ac:ce:b8:5e:a7:5d:df:7f:1e:69:30: 0a:54:42:be:10:9b:b1:9b:40:ad:4c:51:48:22:4b:7e:83:e7: fb:73:5d:e6:e9:7c:30:0b:2f:3f:63:d3:06:ce:90:34:7d:93: 9f:29:99:9e:d9:a7:b0:e8:9f:ae:ed:ed:15:72:d5:35:4e:59: c1:e5:e0:3f:8b:3a:93:09:8f:ed:24:bd:54:8e:78:ed:cc:18: f4:97:3a:a3:b5:7e:b2:7f:fa:cd:de:df:8a:a9:39:d4:9d:68: 6b:58:20:f4:59:83:dd:1c:bf:0e:16:b5:66:82:b4:a8:e7:7f: 21:58:6a:5c:c8:b3:34:2d:4d:15:61:5d:61:67:4b:86:03:3a: c8:59:09:c9:83:e3:b8:2d:c4:20:e8:68:c6:6c:1f:49:ee:3e: 57:6f:b1:b9:c4:73:7b:10:30:90:73:9b:8e:39:26:21:53:f2: 3f:7c:cc:19:e4:57:10:74:c6:d8:d5:89:01:ea:0e:23:b7:19: 2a:69:61:0d:3f:b1:a0:e8:07:84:89:16:37:ff:46:fe:33:0e: 7f:02:cb:28 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNZNzw5tYgtrFkSPcpYR6RBeBkMwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMzAwMDAwNVoX DTI1MDYxNzIzNTk1OVowejFJMEcGA1UEBRNAN2JhZGQ2ZTIwOTJlNzM2ZWRhZDBh NDBmYTM3Yzg3MzQzZTFhZjZkOGIzMWNiZGZhMDg3M2FjNDY5NjRjM2QzYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoytKseao7fp8BlJJfwlyOH9+QmN TmJIRmYblI5cYuf4XTNpT3lVd47cuZyGLavs6QbzoxJjc6sjgEdYflfGBaCcMPjW VESFOeS24KYTUOQmlKolYB71kH994LrrjRP+bHu4t53rBmfq2p7M660JtU31sYDS /9V4y1WBFL0V8CbNGEyVy0WfRXHuAK4ayVHRbgS5ZAnJVDmJcahi/3Eb0sX81g8u QOF4tL8c71k4pDhZtLTtgzQy+qaCKvY0LY27LCV4/71J8eWCYfROFgcOzcDWfqhq oVzgDEBgTFhpBgQ//MOPRMsWyal8ak5ynz54VesMcp/j/TX88+o2suHQswIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEWZZWqv+cFkf0BxN4VIoMFW98bQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlN2ZkMDdjLTQwYmYtNGQ3Yi1hZjdjLTA0M2MyMGM3NWE2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8kDAMA0GCSqGSIb3DQEBCwUAA4IBAQALVOcmc145c4z9FmIJ bBN7ujWqEI2J9xQTo7WcALGIkGjVPRhsZATfq0tprM64Xqdd338eaTAKVEK+EJux m0CtTFFIIkt+g+f7c13m6XwwCy8/Y9MGzpA0fZOfKZme2aew6J+u7e0VctU1TlnB 5eA/izqTCY/tJL1UjnjtzBj0lzqjtX6yf/rN3t+KqTnUnWhrWCD0WYPdHL8OFrVm grSo538hWGpcyLM0LU0VYV1hZ0uGAzrIWQnJg+O4LcQg6GjGbB9J7j5Xb7G5xHN7 EDCQc5uOOSYhU/I/fMwZ5FcQdMbY1YkB6g4jtxkqaWENP7Gg6AeEiRY3/0b+Mw5/ Asso -----END CERTIFICATE-----Generated at Tue Jun 3 23:08:45 2025 by rpki-client