$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa File: 32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa (raw, json) Hash identifier: 0+sIZLs2UnfIVNEf1tWQGdQJknxzkcBG0JkYNo0pg5M= Subject key identifier: 00:A8:0D:34:2F:21:1B:17:FC:93:01:7D:43:24:41:2D:02:F5:5D:93 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5096E9E30FA55FBE9949E13B9C04B0C262B1AD0B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa Signing time: Sat 10 May 2025 00:01:06 +0000 ROA not before: Sat 10 May 2025 00:01:06 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:96:e9:e3:0f:a5:5f:be:99:49:e1:3b:9c:04:b0:c2:62:b1:ad:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 10 00:01:06 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=5709dcee9237e7374ff23659d432fd029e7cd88cfc9f53cab08b34c4b1e34c6c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:11:fc:16:0e:ff:23:75:65:1b:31:76:2f: 28:3a:a3:f4:f6:7f:f1:2b:39:60:f6:d8:e7:57:43: 5f:9b:92:52:f6:e7:59:8c:d1:cd:c8:05:8b:54:f7: 17:6d:31:15:e7:37:d9:39:6a:01:38:3a:e0:e2:97: ca:50:de:c2:e1:4b:31:05:9d:db:07:2a:77:a5:13: a8:52:ce:2d:a9:7a:77:e9:5d:af:7c:20:f5:49:2b: 92:85:04:6f:dc:6e:fa:82:65:19:f4:f8:c2:85:d9: 40:d0:3d:1d:04:39:5f:d6:83:61:bc:67:62:bb:b5: 31:3f:9c:14:b4:6b:01:8f:c3:40:3c:3a:24:a3:01: 05:3d:ed:c5:88:33:fc:2a:81:1b:1e:f6:50:2e:a1: 21:6b:d9:a9:1d:64:17:cf:66:05:00:2a:89:bc:4f: 9d:d0:7d:0d:e5:6a:d4:57:56:90:c2:3d:aa:ea:b0: d2:cc:6f:d7:0c:9e:50:16:30:3d:64:47:c8:70:43: 48:b9:75:90:2d:5a:36:11:5c:24:77:94:4e:57:47: b5:54:3a:d9:c7:a6:74:ad:cf:2e:62:4c:9d:11:ab: 10:c3:1f:13:93:cf:86:9e:18:5e:73:27:d5:4a:7c: 14:da:0e:96:55:67:49:e1:cc:c5:33:18:3b:dc:e8: a7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A8:0D:34:2F:21:1B:17:FC:93:01:7D:43:24:41:2D:02:F5:5D:93 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:a000::/40 Signature Algorithm: sha256WithRSAEncryption 0e:82:3b:fd:7a:e3:79:c0:48:ed:d4:d6:b2:4d:57:d8:49:12: 07:8f:93:5c:e9:9b:72:57:3b:81:05:ba:82:53:b3:c9:9b:a8: 63:f4:7e:bf:b8:82:a3:ac:c5:1b:46:79:bf:11:98:36:c8:d2: fb:47:aa:d4:3f:dc:25:28:17:3d:ca:82:0b:52:8a:8f:4b:57: fc:fa:8e:f0:0e:b8:cb:46:84:0c:a3:d1:32:74:0b:4c:ca:48: e3:41:16:41:4c:ed:50:53:a2:6c:1f:65:95:95:20:16:e6:af: 3e:08:aa:7d:8c:08:5a:06:4e:6e:96:0c:92:d7:9f:17:da:8d: a4:5f:ea:4c:b5:c8:d0:21:28:35:95:2a:ff:9d:1e:3b:63:f8: bb:ed:c4:c8:ff:7e:88:2b:4d:32:40:b3:60:20:ca:44:10:f3: 16:5e:ab:ed:f1:f4:43:c3:d1:63:df:af:e4:d8:ee:02:81:2d: 9d:0c:d4:6c:c9:5f:4d:c6:c3:95:25:19:52:f3:13:bf:7e:a9: 3d:47:d8:4a:8f:ed:8a:62:49:b3:05:58:b5:e1:68:96:3d:56: 76:76:25:f9:b9:d0:fc:90:da:f1:12:90:a5:79:80:ab:bc:f1: 98:81:3e:34:1f:9f:84:99:c7:54:8e:64:d5:b5:4c:1a:54:3c: ea:59:a5:33 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUJbp4w+lX76ZSeE7nASwwmKxrQswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMDAwMDEwNloX DTI1MDYxNDIzNTk1OVowejFJMEcGA1UEBRNANTcwOWRjZWU5MjM3ZTczNzRmZjIz NjU5ZDQzMmZkMDI5ZTdjZDg4Y2ZjOWY1M2NhYjA4YjM0YzRiMWUzNGM2YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXoR/BYO/yN1ZRsxdi8oOqP09n/x Kzlg9tjnV0Nfm5JS9udZjNHNyAWLVPcXbTEV5zfZOWoBODrg4pfKUN7C4UsxBZ3b Byp3pROoUs4tqXp36V2vfCD1SSuShQRv3G76gmUZ9PjChdlA0D0dBDlf1oNhvGdi u7UxP5wUtGsBj8NAPDokowEFPe3FiDP8KoEbHvZQLqEha9mpHWQXz2YFACqJvE+d 0H0N5WrUV1aQwj2q6rDSzG/XDJ5QFjA9ZEfIcENIuXWQLVo2EVwkd5ROV0e1VDrZ x6Z0rc8uYkydEasQwx8Tk8+GnhhecyfVSnwU2g6WVWdJ4czFMxg73OinLwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFACoDTQvIRsX/JMBfUMkQS0C9V2TMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyZTRlY2U2LWQzNWUtNDFjZi04ZGExLTNiNzczM2U0NmU2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYKAwDQYJKoZIhvcNAQELBQADggEBAA6CO/1643nASO3U1rJN V9hJEgePk1zpm3JXO4EFuoJTs8mbqGP0fr+4gqOsxRtGeb8RmDbI0vtHqtQ/3CUo Fz3KggtSio9LV/z6jvAOuMtGhAyj0TJ0C0zKSONBFkFM7VBTomwfZZWVIBbmrz4I qn2MCFoGTm6WDJLXnxfajaRf6ky1yNAhKDWVKv+dHjtj+LvtxMj/fogrTTJAs2Ag ykQQ8xZeq+3x9EPD0WPfr+TY7gKBLZ0M1GzJX03Gw5UlGVLzE79+qT1H2EqP7Ypi SbMFWLXhaJY9VnZ2Jfm50PyQ2vESkKV5gKu88ZiBPjQfn4SZx1SOZNW1TBpUPOpZ pTM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:09:34 2025 by rpki-client