$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326b5e17-ace3-4579-8ae9-5219c81c9034.roa File: 326b5e17-ace3-4579-8ae9-5219c81c9034.roa (raw, json) Hash identifier: sK0f/b8kzifUUY/3PB5D9TXO3XUZkdOpLsh4eh+6cw0= Subject key identifier: 44:52:6F:23:BD:5D:0C:DA:24:FB:C2:4C:2B:1B:7D:A6:7E:80:E3:E8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 220182202A6D0724A363585EDBAB0DFA3CF7FA78 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326b5e17-ace3-4579-8ae9-5219c81c9034.roa Signing time: Tue 03 Jun 2025 00:00:09 +0000 ROA not before: Tue 03 Jun 2025 00:00:09 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:01:82:20:2a:6d:07:24:a3:63:58:5e:db:ab:0d:fa:3c:f7:fa:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 3 00:00:09 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=c4b8486928f312e15c3f236046919dffdd358dafd9dde1ad0990ea7fd3d55e2e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:12:51:9f:f1:b1:5d:4d:1f:b9:fa:26:06:f0: 16:ff:ba:03:de:45:74:77:3e:d9:fa:1b:24:87:2d: a5:8d:06:04:34:0c:4a:ee:67:03:b2:9e:6a:66:dd: 3c:1e:7d:7d:a2:0b:b9:7e:c0:3a:16:ec:2b:c1:f7: 26:65:77:8e:ba:f4:ed:6c:a9:f8:1d:ac:70:7a:24: 56:4d:a9:8a:0a:74:38:a5:ea:25:c7:f6:e3:c1:57: 05:7b:ca:07:24:03:3b:a2:ad:d5:bb:e1:4d:e4:d4: fc:16:f4:a8:8c:32:82:20:3f:0d:a8:5c:d8:ca:b7: 42:4e:7a:7d:01:d1:49:14:81:4d:05:e7:d1:a5:eb: 20:11:84:d9:db:9f:60:c0:81:74:03:1d:ba:cc:c4: 86:20:87:78:c3:2c:4f:8b:7f:33:40:7c:b7:ab:99: bf:b2:4e:e9:d6:f1:67:83:31:60:41:24:ef:ac:c0: 53:e3:74:9d:ce:fd:9c:15:16:ae:65:7a:05:24:ac: 7f:46:94:0d:74:19:61:47:14:5a:a7:46:1b:49:00: 41:1c:50:96:8d:4f:b4:13:ee:80:23:bc:9c:b5:66: 4c:8a:5d:14:3f:27:73:7d:71:d6:04:05:ef:76:e7: de:14:14:bd:ac:70:fb:db:75:54:bd:63:f7:2d:d8: 6e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:52:6F:23:BD:5D:0C:DA:24:FB:C2:4C:2B:1B:7D:A6:7E:80:E3:E8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326b5e17-ace3-4579-8ae9-5219c81c9034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2e::/36 Signature Algorithm: sha256WithRSAEncryption 5c:0e:99:e0:50:2a:a0:13:06:ea:d4:bc:fe:01:ac:3d:c6:0d: 97:24:ed:47:10:64:dc:c1:7c:0d:d6:d7:f2:5a:c8:69:4c:dd: cd:db:f5:45:b9:fa:c1:f9:9b:bb:27:2a:71:bc:e6:ae:d9:ec: 7f:ff:7a:2f:d3:20:a5:ac:31:bf:e9:07:79:1a:88:1c:fe:c1: 59:e1:1b:84:e5:6e:ce:fb:31:5d:b4:9a:03:55:b3:84:d4:d0: b2:d5:25:3a:66:67:60:63:bf:eb:91:b5:21:18:6a:f2:1f:86: 2c:0f:e5:5b:b8:c3:40:8e:1c:b1:c1:2c:b6:33:7e:6e:97:ac: 50:31:13:17:f0:17:51:ab:8c:29:34:2c:4b:52:1e:b3:15:96: 68:e5:ca:73:06:60:62:b1:77:5c:ff:c0:74:97:ce:0e:cc:59: b8:cf:f0:15:c2:cd:fc:cb:91:42:47:6e:5e:fe:0c:34:96:f5: fb:69:05:8b:75:37:e8:b1:37:6b:4b:c8:b2:68:d0:1d:e9:1e: 66:54:e5:4c:ff:45:d1:f1:64:4d:56:32:ff:bd:49:00:2a:4f: 2a:44:9c:d0:3c:a1:a3:55:46:25:26:88:b2:22:24:b2:c0:fb: f9:53:85:91:2b:3b:5d:b8:bc:4d:d7:76:84:1c:67:b3:bc:e6: 21:8e:e8:46 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIgGCICptBySjY1he26sN+jz3+ngwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwMzAwMDAwOVoX DTI1MDcwODIzNTk1OVowejFJMEcGA1UEBRNAYzRiODQ4NjkyOGYzMTJlMTVjM2Yy MzYwNDY5MTlkZmZkZDM1OGRhZmQ5ZGRlMWFkMDk5MGVhN2ZkM2Q1NWUyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRJRn/GxXU0fufomBvAW/7oD3kV0 dz7Z+hskhy2ljQYENAxK7mcDsp5qZt08Hn19ogu5fsA6FuwrwfcmZXeOuvTtbKn4 HaxweiRWTamKCnQ4peolx/bjwVcFe8oHJAM7oq3Vu+FN5NT8FvSojDKCID8NqFzY yrdCTnp9AdFJFIFNBefRpesgEYTZ259gwIF0Ax26zMSGIId4wyxPi38zQHy3q5m/ sk7p1vFngzFgQSTvrMBT43Sdzv2cFRauZXoFJKx/RpQNdBlhRxRap0YbSQBBHFCW jU+0E+6AI7yctWZMil0UPydzfXHWBAXvdufeFBS9rHD723VUvWP3LdhupwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFERSbyO9XQzaJPvCTCsbfaZ+gOPoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyNmI1ZTE3LWFjZTMtNDU3OS04YWU5LTUyMTljODFjOTAzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLgAwDQYJKoZIhvcNAQELBQADggEBAFwOmeBQKqATBurUvP4B rD3GDZck7UcQZNzBfA3W1/JayGlM3c3b9UW5+sH5m7snKnG85q7Z7H//ei/TIKWs Mb/pB3kaiBz+wVnhG4Tlbs77MV20mgNVs4TU0LLVJTpmZ2Bjv+uRtSEYavIfhiwP 5Vu4w0COHLHBLLYzfm6XrFAxExfwF1GrjCk0LEtSHrMVlmjlynMGYGKxd1z/wHSX zg7MWbjP8BXCzfzLkUJHbl7+DDSW9ftpBYt1N+ixN2tLyLJo0B3pHmZU5Uz/RdHx ZE1WMv+9SQAqTypEnNA8oaNVRiUmiLIiJLLA+/lThZErO124vE3XdoQcZ7O85iGO 6EY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:40 2025 by rpki-client