$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa File: 2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa (raw, json) Hash identifier: uoqpVwk57hw811I4zWpP3IclMw7odJXtOd6lpGHzCS4= Subject key identifier: 00:1F:75:2F:E3:80:52:14:DC:04:A7:C6:6F:EE:2F:DA:47:0F:33:19 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5DDB969F18920C94A7D9508662CD090D7B1ABDF1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa Signing time: Tue 13 May 2025 00:20:18 +0000 ROA not before: Tue 13 May 2025 00:20:18 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:db:96:9f:18:92:0c:94:a7:d9:50:86:62:cd:09:0d:7b:1a:bd:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:20:18 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=2b5af3f08aef8c3fd2def8ef2b38e6e2aaeae5d4d2ef6bf214d345a803d85c2d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a6:a7:ec:0a:4c:0b:e3:84:2f:f9:6a:2f:70: e0:dc:69:6b:5b:2b:cd:64:c5:e1:cf:f2:a5:d1:03: 4b:31:f6:41:a0:81:60:b0:53:2b:26:1a:5a:0c:5c: d0:76:8a:f3:b8:f6:74:9c:72:8b:aa:ca:56:ee:d9: f9:95:3f:ff:5b:24:bc:e8:8f:63:2e:81:02:4b:b5: c7:2a:0e:00:65:f4:0b:b1:86:60:96:b3:51:7c:44: dd:df:aa:c4:14:71:97:b1:11:ea:a7:f1:56:c1:de: 45:fb:46:8c:05:a7:40:a8:38:8a:e4:6e:2f:17:36: d2:9e:12:42:70:d9:e7:74:42:2a:12:0d:40:0a:e6: cb:0b:32:16:34:b7:1f:11:55:37:0b:30:a2:7f:a5: a1:81:07:6c:13:b0:c1:48:2d:2f:62:c4:14:2d:b5: c5:3f:2f:b5:1c:f9:48:fe:97:95:1b:f2:bb:e6:11: b2:d7:2d:65:5b:18:7d:37:6d:be:e5:0f:8d:e2:7e: 43:04:89:00:b9:af:7e:9e:cc:a0:10:bd:ce:f0:23: 72:0c:bf:79:89:6e:3c:66:bd:ce:9c:ba:ad:de:cf: 1e:33:1b:d7:13:9c:b8:f0:75:f8:67:98:83:33:a1: 1b:cc:1f:07:79:71:c5:db:20:5b:07:45:e5:83:be: b1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1F:75:2F:E3:80:52:14:DC:04:A7:C6:6F:EE:2F:DA:47:0F:33:19 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:a080::/48 Signature Algorithm: sha256WithRSAEncryption 67:02:61:25:37:3f:e0:80:95:f0:c9:98:99:dd:ba:60:b3:3a: 44:92:70:0f:4e:27:bd:39:48:14:aa:b4:f3:19:eb:f8:1a:f1: c7:ff:ef:23:49:98:04:2e:0b:1a:50:4b:19:fd:d5:8a:9b:9d: 08:3e:36:f7:c3:ab:fc:5e:2f:ef:ff:2f:60:9b:2e:bb:84:d3: 04:d7:81:c5:11:2b:c3:a9:96:ef:3a:af:e9:a6:c4:9f:ad:17: 87:f6:4a:bb:e0:23:b5:bc:8e:80:8b:9a:c3:85:3b:36:91:1d: c9:7f:fe:88:dd:87:5b:28:f2:b9:eb:26:01:25:6d:93:eb:8b: 18:cf:1d:26:04:0d:f5:fb:7e:42:e4:db:33:c1:29:a8:42:2b: b2:86:75:80:30:06:a8:61:09:1a:63:e3:fd:94:a3:d6:81:11: 85:bd:19:14:c3:29:44:5a:31:53:df:00:69:2d:f0:71:7f:6e: 6a:0c:1b:ac:59:1d:39:54:a9:d4:5c:c8:e1:df:bf:dd:fe:48: 41:7b:7f:4e:c8:5a:54:b3:ae:c7:7a:ff:71:de:04:cf:6a:19: bd:f7:15:f0:77:ab:37:6b:93:4d:e1:97:f8:69:c6:8c:21:19: fc:3a:77:6e:38:bb:51:ba:24:54:57:ad:30:b4:87:0b:4f:78: 9a:d6:4b:39 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXduWnxiSDJSn2VCGYs0JDXsavfEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMzAwMjAxOFoX DTI1MDYxNzIzNTk1OVowejFJMEcGA1UEBRNAMmI1YWYzZjA4YWVmOGMzZmQyZGVm OGVmMmIzOGU2ZTJhYWVhZTVkNGQyZWY2YmYyMTRkMzQ1YTgwM2Q4NWMyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aan7ApMC+OEL/lqL3Dg3GlrWyvN ZMXhz/Kl0QNLMfZBoIFgsFMrJhpaDFzQdorzuPZ0nHKLqspW7tn5lT//WyS86I9j LoECS7XHKg4AZfQLsYZglrNRfETd36rEFHGXsRHqp/FWwd5F+0aMBadAqDiK5G4v FzbSnhJCcNnndEIqEg1ACubLCzIWNLcfEVU3CzCif6WhgQdsE7DBSC0vYsQULbXF Py+1HPlI/peVG/K75hGy1y1lWxh9N22+5Q+N4n5DBIkAua9+nsygEL3O8CNyDL95 iW48Zr3OnLqt3s8eMxvXE5y48HX4Z5iDM6EbzB8HeXHF2yBbB0Xlg76xHwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAAfdS/jgFIU3ASnxm/uL9pHDzMZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlYmRjMWU5LTBlNGItNDJmZi05YTI3LTgwMGI3Mzk4OTdhNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAKCAMA0GCSqGSIb3DQEBCwUAA4IBAQBnAmElNz/ggJXwyZiZ 3bpgszpEknAPTie9OUgUqrTzGev4GvHH/+8jSZgELgsaUEsZ/dWKm50IPjb3w6v8 Xi/v/y9gmy67hNME14HFESvDqZbvOq/ppsSfrReH9kq74CO1vI6Ai5rDhTs2kR3J f/6I3YdbKPK56yYBJW2T64sYzx0mBA31+35C5NszwSmoQiuyhnWAMAaoYQkaY+P9 lKPWgRGFvRkUwylEWjFT3wBpLfBxf25qDBusWR05VKnUXMjh37/d/khBe39OyFpU s67Hev9x3gTPahm99xXwd6s3a5NN4Zf4acaMIRn8OnduOLtRuiRUV60wtIcLT3ia 1ks5 -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:55 2025 by rpki-client