$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/388cbd89-4c8e-4d67-99e2-dd53b6b7d2c6.roa File: 388cbd89-4c8e-4d67-99e2-dd53b6b7d2c6.roa (raw, json) Hash identifier: aB7vBgqnfmFBv0XOYXUnlq7ftMDnSz6flqxLpFE4HlI= Subject key identifier: 93:20:8E:B9:1B:88:B2:86:A6:EA:DB:A1:B8:B1:DB:1B:E5:26:22:0A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 72384B1F3F8C5F22474E939BCEEBF4B9D7E58FC7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/388cbd89-4c8e-4d67-99e2-dd53b6b7d2c6.roa Signing time: Tue 13 May 2025 00:00:54 +0000 ROA not before: Tue 13 May 2025 00:00:54 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:38:4b:1f:3f:8c:5f:22:47:4e:93:9b:ce:eb:f4:b9:d7:e5:8f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:00:54 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=d342b95a350ce4f9c9b2de450d790489d30a1b7b6913f0dff2a3082eecb264ee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:89:ce:84:ec:94:c6:76:89:9b:25:53:2a: 91:be:2e:99:13:e5:58:f5:cd:90:50:a3:d1:d8:da: e6:c4:a8:fa:2e:6a:6c:1d:d7:5f:e3:2e:5e:89:50: 75:fe:be:2f:3f:1e:3f:22:a4:f8:6e:e5:bb:41:b1: de:3b:1e:dc:54:68:5e:4d:3f:f9:04:dd:1d:79:ee: 88:04:e6:70:fa:08:39:24:95:54:e1:52:4c:80:70: 13:9a:8b:56:aa:77:ea:39:c6:e5:c4:94:06:d3:8d: 55:04:cb:cf:31:61:b6:99:e0:d5:6e:d4:40:3a:5c: 6c:f3:10:bb:bc:b0:e1:b4:a2:c4:99:cc:6b:7d:29: 47:08:18:05:81:15:fe:5b:67:ff:b0:b8:e2:80:f9: 93:0e:c1:ba:69:e2:0f:2a:bd:ba:6d:31:e5:0c:94: fe:1b:dc:3d:00:cb:5d:d7:d9:35:11:cc:e6:f7:28: b8:20:00:13:d3:d5:7a:a2:e4:e7:75:f6:1a:f9:6f: dc:f7:03:51:25:d1:d7:3b:aa:53:96:c0:da:46:32: 8f:f0:a5:57:b1:0a:71:87:58:c0:a6:da:91:d9:b4: 4c:a1:f2:d0:af:c1:46:1d:7b:7a:14:54:7d:1c:f6: a2:d8:c6:43:f1:49:19:a6:1a:4e:7f:10:51:3b:94: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:20:8E:B9:1B:88:B2:86:A6:EA:DB:A1:B8:B1:DB:1B:E5:26:22:0A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/388cbd89-4c8e-4d67-99e2-dd53b6b7d2c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:880::/48 Signature Algorithm: sha256WithRSAEncryption 38:f6:1d:91:24:75:82:57:52:09:d4:44:39:2c:75:bf:9b:ab: 68:6b:c6:f3:87:1f:5f:be:87:21:28:5d:3a:74:2a:65:fd:8d: 39:23:8f:06:99:aa:98:88:74:ad:1d:f2:f6:85:55:e7:4e:a2: 00:9d:ae:ea:ae:02:b2:8f:fa:c9:d0:50:e1:61:39:cb:21:bd: ee:20:32:5d:e2:9d:da:9f:d1:9a:0b:64:5a:0e:d4:67:79:a3: 77:94:91:f9:a5:7d:ec:7a:89:b9:08:f8:81:07:12:b8:b4:4e: da:12:43:fc:c6:bd:c7:4d:7c:76:ce:20:7a:e8:4d:30:b9:4e: f7:86:f4:2c:41:98:f0:88:c7:50:7d:35:2e:33:d7:c5:3f:ac: b2:3b:c5:77:9e:2d:ff:bb:78:f2:b9:5f:f9:78:a8:4e:b8:ab: e9:80:40:95:25:b8:b1:91:90:a2:8e:4d:5e:50:68:61:b5:cc: 83:67:70:6f:74:79:b5:4f:9e:8b:f6:f4:b9:fa:ff:35:e5:b1: 1b:55:62:76:d6:10:36:ff:14:93:52:a1:da:fb:1d:b7:f6:3e: b7:2f:ee:38:3f:6b:8c:7a:a4:e0:a1:2a:bf:51:4e:6d:b0:c6: 89:10:27:86:9d:b7:ce:40:7f:67:b5:f3:3d:db:50:f0:7e:ea: ce:9d:d3:b4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcjhLHz+MXyJHTpObzuv0udflj8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMzAwMDA1NFoX DTI1MDYxNzIzNTk1OVowejFJMEcGA1UEBRNAZDM0MmI5NWEzNTBjZTRmOWM5YjJk ZTQ1MGQ3OTA0ODlkMzBhMWI3YjY5MTNmMGRmZjJhMzA4MmVlY2IyNjRlZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhCJzoTslMZ2iZslUyqRvi6ZE+VY 9c2QUKPR2NrmxKj6LmpsHddf4y5eiVB1/r4vPx4/IqT4buW7QbHeOx7cVGheTT/5 BN0dee6IBOZw+gg5JJVU4VJMgHATmotWqnfqOcblxJQG041VBMvPMWG2meDVbtRA Olxs8xC7vLDhtKLEmcxrfSlHCBgFgRX+W2f/sLjigPmTDsG6aeIPKr26bTHlDJT+ G9w9AMtd19k1Eczm9yi4IAAT09V6ouTndfYa+W/c9wNRJdHXO6pTlsDaRjKP8KVX sQpxh1jAptqR2bRMofLQr8FGHXt6FFR9HPai2MZD8UkZphpOfxBRO5R+MQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJMgjrkbiLKGpurbobix2xvlJiIKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM4OGNiZDg5LTRjOGUtNGQ2Ny05OWUyLWRkNTNiNmI3ZDJjNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAAiAMA0GCSqGSIb3DQEBCwUAA4IBAQA49h2RJHWCV1IJ1EQ5 LHW/m6toa8bzhx9fvochKF06dCpl/Y05I48GmaqYiHStHfL2hVXnTqIAna7qrgKy j/rJ0FDhYTnLIb3uIDJd4p3an9GaC2RaDtRneaN3lJH5pX3seom5CPiBBxK4tE7a EkP8xr3HTXx2ziB66E0wuU73hvQsQZjwiMdQfTUuM9fFP6yyO8V3ni3/u3jyuV/5 eKhOuKvpgECVJbixkZCijk1eUGhhtcyDZ3BvdHm1T56L9vS5+v815bEbVWJ21hA2 /xSTUqHa+x239j63L+44P2uMeqTgoSq/UU5tsMaJECeGnbfOQH9ntfM921DwfurO ndO0 -----END CERTIFICATE-----Generated at Mon Jun 2 06:14:12 2025 by rpki-client