$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2fe581f4-7980-4419-b5e3-20febc635f17.roa File: 2fe581f4-7980-4419-b5e3-20febc635f17.roa (raw, json) Hash identifier: IkivTfiBTykrkoJklLMnDttrx0vOlg8rRCW1xCjjxzA= Subject key identifier: A7:0F:75:9A:7B:0C:CF:A7:B3:2C:D7:3A:72:60:24:B4:04:5A:DD:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5B7ADC89BA3D0A45C058FE486069873CAD946232 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2fe581f4-7980-4419-b5e3-20febc635f17.roa Signing time: Fri 16 May 2025 15:11:21 +0000 ROA not before: Fri 16 May 2025 15:11:21 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7a:dc:89:ba:3d:0a:45:c0:58:fe:48:60:69:87:3c:ad:94:62:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:11:21 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=1bd61e737c2fe8faccbbd8f42d097b5c9ce4aaea1f7a65bf5e207fb52391411d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b4:59:19:99:d7:bd:67:8b:0a:88:32:44:db: ac:76:e3:de:5e:f1:ac:33:92:06:7f:61:8a:6c:fb: 99:3e:fb:30:11:83:5c:0a:af:66:a1:14:45:09:83: 10:56:5e:bf:10:fd:1d:56:a6:82:cf:c4:dd:29:d0: 7b:39:4c:bc:10:2d:63:73:95:57:2e:5e:ff:4a:c5: 18:b1:de:b1:23:d1:73:9c:32:6f:79:92:3e:e2:7c: 16:bc:c5:be:1d:70:d2:14:f6:2f:04:d2:95:e8:3e: 5f:8f:27:7a:18:be:a1:50:e8:2e:04:43:3c:61:e3: ad:24:e6:9d:2f:9e:e1:ca:25:0c:96:14:d5:b2:bb: 60:17:e9:fd:fa:fa:97:cb:c7:5a:01:b9:f5:05:10: b9:00:16:df:88:c9:3e:1a:f5:12:a0:66:7b:ea:64: f4:70:85:8c:99:be:2e:5a:cb:12:d4:b6:c2:f9:ea: b6:99:10:80:29:78:13:c3:e8:41:00:aa:4b:36:6a: 27:6f:f2:14:b2:0b:43:bb:bb:bf:31:cf:70:cc:c2: df:84:28:5f:d2:1d:73:be:d3:96:fc:b8:14:3e:8d: e5:7e:0f:6c:93:b6:24:a6:6d:b3:f1:7d:d8:9d:24: 2f:3a:51:8f:cf:a6:f0:d5:9e:f7:06:b6:93:9d:8c: 3e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0F:75:9A:7B:0C:CF:A7:B3:2C:D7:3A:72:60:24:B4:04:5A:DD:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2fe581f4-7980-4419-b5e3-20febc635f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:c800::/40 Signature Algorithm: sha256WithRSAEncryption 29:bf:40:60:a2:f3:62:c8:35:f0:2f:51:6a:e2:e3:14:d4:65: 70:65:02:70:26:05:0c:ba:d1:06:7e:3b:3b:ad:e9:b1:68:62: 86:7f:28:e7:bc:e1:75:59:d0:17:77:35:f7:e6:41:03:98:47: 99:68:28:07:d6:53:9e:3e:d4:4e:d2:47:19:58:b2:e2:d9:d4: 9b:fa:65:18:e1:98:0c:66:dd:36:e8:e5:35:54:26:7f:19:9e: 69:69:c3:79:83:e8:0b:6c:99:a6:72:96:c8:27:ee:b9:31:6c: f9:42:18:81:c9:1a:3d:cd:14:3b:e6:7f:29:fb:1d:bd:85:3a: 8e:52:1d:b2:a3:4e:21:27:f8:53:57:eb:7f:8a:68:68:b2:c2: b7:7a:93:2f:fc:bd:36:30:bc:68:9c:c3:70:84:09:43:33:f9: ae:1c:0e:7d:26:e1:a1:a8:23:48:01:90:a2:6d:0e:2a:9a:c7: cc:4e:69:2f:49:50:ff:f2:7e:13:09:58:32:aa:58:43:00:2f: e7:34:ce:9c:ae:40:bd:2e:9f:7e:4f:d8:98:c1:3d:7b:c3:95: 27:9a:ba:7f:d5:0c:61:01:fb:92:45:5c:a4:52:3c:1d:73:1b: 0c:49:37:14:8a:3e:b0:31:48:d1:05:3e:14:dc:c5:7e:be:c8: f6:48:2c:31 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUW3rcibo9CkXAWP5IYGmHPK2UYjIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MTEyMVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAMWJkNjFlNzM3YzJmZThmYWNjYmJk OGY0MmQwOTdiNWM5Y2U0YWFlYTFmN2E2NWJmNWUyMDdmYjUyMzkxNDExZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37RZGZnXvWeLCogyRNusduPeXvGs M5IGf2GKbPuZPvswEYNcCq9moRRFCYMQVl6/EP0dVqaCz8TdKdB7OUy8EC1jc5VX Ll7/SsUYsd6xI9FznDJveZI+4nwWvMW+HXDSFPYvBNKV6D5fjyd6GL6hUOguBEM8 YeOtJOadL57hyiUMlhTVsrtgF+n9+vqXy8daAbn1BRC5ABbfiMk+GvUSoGZ76mT0 cIWMmb4uWssS1LbC+eq2mRCAKXgTw+hBAKpLNmonb/IUsgtDu7u/Mc9wzMLfhChf 0h1zvtOW/LgUPo3lfg9sk7Ykpm2z8X3YnSQvOlGPz6bw1Z73BraTnYw+FQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKcPdZp7DM+nsyzXOnJgJLQEWt3LMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmZTU4MWY0LTc5ODAtNDQxOS1iNWUzLTIwZmViYzYzNWYxNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMsgwDQYJKoZIhvcNAQELBQADggEBACm/QGCi82LINfAvUWri 4xTUZXBlAnAmBQy60QZ+Ozut6bFoYoZ/KOe84XVZ0Bd3NffmQQOYR5loKAfWU54+ 1E7SRxlYsuLZ1Jv6ZRjhmAxm3Tbo5TVUJn8Znmlpw3mD6AtsmaZylsgn7rkxbPlC GIHJGj3NFDvmfyn7Hb2FOo5SHbKjTiEn+FNX63+KaGiywrd6ky/8vTYwvGicw3CE CUMz+a4cDn0m4aGoI0gBkKJtDiqax8xOaS9JUP/yfhMJWDKqWEMAL+c0zpyuQL0u n35P2JjBPXvDlSeaun/VDGEB+5JFXKRSPB1zGwxJNxSKPrAxSNEFPhTcxX6+yPZI LDE= -----END CERTIFICATE-----Generated at Mon Jun 2 06:28:33 2025 by rpki-client