$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bab15d0-0790-4926-9ad7-aeff0d400b50.roa File: 3bab15d0-0790-4926-9ad7-aeff0d400b50.roa (raw, json) Hash identifier: 9HE0DzHS+4HOXJrDI3Jajnqzfrtdvt/cciLnuIN1Nfk= Subject key identifier: A5:4B:0E:17:1C:C1:97:F8:69:D2:31:BD:12:BC:CC:4B:D1:EE:EC:FC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7BB0287CE9C46E71342CFBC0F2CF9B09D896F549 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bab15d0-0790-4926-9ad7-aeff0d400b50.roa Signing time: Fri 16 May 2025 00:51:07 +0000 ROA not before: Fri 16 May 2025 00:51:07 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b0:28:7c:e9:c4:6e:71:34:2c:fb:c0:f2:cf:9b:09:d8:96:f5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:51:07 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=18c4c45b641df2208148d2ae5310bc4d9bc720ca7a41d7a0151e2e01b9e7d01f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cc:f5:1c:76:4b:09:df:c4:be:32:8d:9b:1e: 47:f2:75:9a:1d:ed:67:a2:f4:92:a3:43:ec:1f:79: fa:79:bc:0f:7d:c9:02:b2:99:45:26:68:dc:e0:d7: 40:ab:5c:8d:f9:2a:ad:0d:1d:95:21:0a:48:31:37: 80:5c:f2:f7:e2:ef:47:5d:7c:23:30:6e:85:0b:42: e7:5b:96:73:78:97:02:f8:fe:9a:4f:1f:b9:73:f3: 60:35:0e:5b:1f:37:34:3f:25:59:00:ac:cd:0e:fe: 07:f3:31:03:8b:b2:49:40:3f:ff:8b:59:15:9f:a0: 38:e4:e2:5f:d2:f7:dd:ba:15:bc:83:94:26:63:98: a7:1f:54:cd:8c:5c:3c:e5:a5:8c:26:41:28:19:79: 49:36:8d:19:06:87:90:77:58:41:d9:fd:2a:6f:f0: c8:fc:c5:34:3b:9e:2e:fe:03:f2:8e:94:bd:62:46: e3:66:c6:25:85:e8:9e:2a:2d:bc:a9:95:cd:cc:60: ba:30:79:2f:e3:59:e0:6f:72:ab:90:5c:d6:64:2f: 9e:05:c5:00:3a:58:35:1c:21:84:62:02:bd:81:d6: e3:45:9d:79:45:2d:eb:0a:c7:5c:ef:83:e1:5a:09: 57:dd:22:76:c3:24:da:82:8a:b7:86:0a:b5:db:6a: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4B:0E:17:1C:C1:97:F8:69:D2:31:BD:12:BC:CC:4B:D1:EE:EC:FC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bab15d0-0790-4926-9ad7-aeff0d400b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:b000::/40 Signature Algorithm: sha256WithRSAEncryption 63:cd:74:32:f4:06:b3:7c:40:50:20:ce:bf:75:72:51:d2:d7: e3:5b:3a:0e:7e:5b:f7:6b:3d:bc:51:c2:ed:ab:95:1e:4e:0e: c8:24:13:88:8e:dd:eb:88:a5:a6:53:3a:6f:9b:4b:10:78:60: 75:c7:99:13:65:f7:ee:a6:81:3c:be:60:a8:cb:74:03:08:bb: 52:da:77:f3:ae:6a:b4:ac:bb:a3:2f:cb:92:a0:04:83:2a:91: 8f:a0:de:9a:af:db:14:60:f5:81:85:f0:10:9c:7f:6c:10:d1: 26:14:85:22:68:25:83:c7:fe:2a:86:9c:be:b5:e8:6a:6a:a9: 58:42:ac:d6:12:81:6d:4a:0d:fa:6e:d3:96:e4:54:cf:53:4f: 10:95:14:46:d4:43:ee:00:11:5e:a8:c3:72:70:48:52:55:e7: 18:66:38:21:c2:a2:5a:dc:b7:b5:74:88:0e:40:e1:e2:30:8e: 15:9b:71:5d:bd:01:3c:44:49:22:d6:ae:07:2d:ea:98:0e:81: 5d:72:1e:5c:05:fa:56:7a:05:0f:ab:ea:08:1a:c2:cf:90:41: 4e:d1:f8:c3:13:1b:8a:4c:eb:46:4a:08:3b:5c:c4:b3:01:e2: f3:d9:d5:6d:73:fd:80:5e:39:68:7c:b1:c4:07:28:a5:92:44: 47:a8:d5:aa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUe7AofOnEbnE0LPvA8s+bCdiW9UkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwNTEwN1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAMThjNGM0NWI2NDFkZjIyMDgxNDhk MmFlNTMxMGJjNGQ5YmM3MjBjYTdhNDFkN2EwMTUxZTJlMDFiOWU3ZDAxZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycz1HHZLCd/EvjKNmx5H8nWaHe1n ovSSo0PsH3n6ebwPfckCsplFJmjc4NdAq1yN+SqtDR2VIQpIMTeAXPL34u9HXXwj MG6FC0LnW5ZzeJcC+P6aTx+5c/NgNQ5bHzc0PyVZAKzNDv4H8zEDi7JJQD//i1kV n6A45OJf0vfduhW8g5QmY5inH1TNjFw85aWMJkEoGXlJNo0ZBoeQd1hB2f0qb/DI /MU0O54u/gPyjpS9YkbjZsYlheieKi28qZXNzGC6MHkv41ngb3KrkFzWZC+eBcUA Olg1HCGEYgK9gdbjRZ15RS3rCsdc74PhWglX3SJ2wyTagoq3hgq122opHQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKVLDhccwZf4adIxvRK8zEvR7uz8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNiYWIxNWQwLTA3OTAtNDkyNi05YWQ3LWFlZmYwZDQwMGI1MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaabAwDQYJKoZIhvcNAQELBQADggEBAGPNdDL0BrN8QFAgzr91 clHS1+NbOg5+W/drPbxRwu2rlR5ODsgkE4iO3euIpaZTOm+bSxB4YHXHmRNl9+6m gTy+YKjLdAMIu1Lad/OuarSsu6Mvy5KgBIMqkY+g3pqv2xRg9YGF8BCcf2wQ0SYU hSJoJYPH/iqGnL616GpqqVhCrNYSgW1KDfpu05bkVM9TTxCVFEbUQ+4AEV6ow3Jw SFJV5xhmOCHColrct7V0iA5A4eIwjhWbcV29ATxESSLWrgct6pgOgV1yHlwF+lZ6 BQ+r6ggaws+QQU7R+MMTG4pM60ZKCDtcxLMB4vPZ1W1z/YBeOWh8scQHKKWSREeo 1ao= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:21 2025 by rpki-client