$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c83247b-ea4f-4a4c-b63a-ebae9574dde8.roa File: 3c83247b-ea4f-4a4c-b63a-ebae9574dde8.roa (raw, json) Hash identifier: wiXCdGyEpz+/uVBHE8YJ4vPzGAGjXnNW/XTiA9iZwOM= Subject key identifier: 8B:1D:00:5C:C6:49:33:6E:E3:26:CB:42:67:7E:DF:3A:66:43:14:9B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0AA5654E433EAE0DAC181E4E2EFFDF11B01BD1B9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c83247b-ea4f-4a4c-b63a-ebae9574dde8.roa Signing time: Fri 16 May 2025 00:01:05 +0000 ROA not before: Fri 16 May 2025 00:01:05 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:8880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a5:65:4e:43:3e:ae:0d:ac:18:1e:4e:2e:ff:df:11:b0:1b:d1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:01:05 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=d7d9b988959cd2cfff7dcc6a3f66e97102b0855ab53e440501c88529261a450d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:65:a4:71:51:fe:ef:1b:24:c6:51:0e:40: 77:b6:08:30:9d:15:e7:4d:fc:78:d0:4e:a0:e8:2d: 59:c8:e0:0f:03:17:94:a5:a0:3b:b7:e1:ce:94:0d: 1a:ef:f7:db:1a:ff:3c:37:1c:a3:fb:e0:b7:ec:1b: 90:fc:e2:24:4c:1d:23:c0:7d:11:82:48:1d:5d:d1: ab:9b:f3:56:32:89:ae:06:d0:c6:71:a0:29:35:db: a5:d9:6f:b3:43:d2:06:6c:e2:db:ca:30:98:c1:18: 3b:73:2f:d1:f0:ea:e0:c5:7b:ff:46:b6:bc:a7:27: 4a:4c:5d:3e:5e:81:cb:7e:49:d4:a3:68:57:f7:df: fe:25:8d:57:47:83:7d:5e:47:0c:55:e9:cf:66:d5: f9:51:a9:21:5b:39:7b:28:13:2e:b0:f3:29:3f:62: 87:1e:89:a0:4a:66:85:10:59:d7:bd:1b:ec:a4:bf: cc:7d:26:af:f9:fa:e2:ff:64:9b:d8:33:08:93:60: 90:9a:1d:37:dd:91:cf:04:d9:9c:5c:91:a0:41:20: 2d:ba:d6:f7:4e:e3:f9:b0:26:b6:a7:5d:85:f0:de: 6f:20:09:20:75:6d:b2:1e:97:cc:a5:b5:94:89:b3: 02:db:21:22:87:fb:20:fe:53:a9:6c:36:bc:50:5b: 27:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1D:00:5C:C6:49:33:6E:E3:26:CB:42:67:7E:DF:3A:66:43:14:9B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c83247b-ea4f-4a4c-b63a-ebae9574dde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:8880::/46 Signature Algorithm: sha256WithRSAEncryption 45:16:ae:14:ff:7f:ed:1b:34:fe:9d:23:90:88:9f:21:21:34: 15:f9:51:2a:f0:ce:57:04:d8:a5:98:9d:c0:63:5e:ca:93:e1: d7:29:4e:db:2c:5b:db:96:4f:27:60:9a:c1:ca:20:e7:76:05: 84:d0:42:e9:91:90:52:ce:4f:6a:3b:65:30:74:57:86:9d:79: 99:af:3d:30:62:c9:70:85:3f:e6:17:5a:de:d1:25:16:8f:7f: aa:54:fd:a3:42:76:69:03:f8:32:71:25:de:e7:01:53:96:7b: 44:4d:58:49:3b:e9:b7:3f:a8:5d:ea:de:cf:da:78:d5:05:2b: 3d:11:dc:2e:46:e6:70:5b:71:c8:bd:99:9e:c3:f0:10:15:2e: ad:03:6f:6a:f9:13:72:24:51:53:fc:e8:68:8b:28:fb:b3:7f: 5b:1f:37:f9:3b:c1:01:f9:07:81:b9:55:8b:61:4a:a0:45:76: a2:de:7f:62:9e:da:ba:9b:f4:75:6c:a1:1f:97:36:a0:5d:ba: 64:00:5b:a7:dc:8e:af:6a:04:72:97:4c:75:36:2c:7e:5b:1c: 6b:d1:a3:39:5a:bc:e4:2e:a2:6e:db:17:c9:9c:4a:51:09:fd: 85:0c:95:89:5e:c1:d7:ec:86:4d:58:d4:d2:8d:cf:44:06:62: d3:27:22:28 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCqVlTkM+rg2sGB5OLv/fEbAb0bkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMDEwNVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAZDdkOWI5ODg5NTljZDJjZmZmN2Rj YzZhM2Y2NmU5NzEwMmIwODU1YWI1M2U0NDA1MDFjODg1MjkyNjFhNDUwZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVxlpHFR/u8bJMZRDkB3tggwnRXn Tfx40E6g6C1ZyOAPAxeUpaA7t+HOlA0a7/fbGv88Nxyj++C37BuQ/OIkTB0jwH0R gkgdXdGrm/NWMomuBtDGcaApNdul2W+zQ9IGbOLbyjCYwRg7cy/R8OrgxXv/Rra8 pydKTF0+XoHLfknUo2hX99/+JY1XR4N9XkcMVenPZtX5UakhWzl7KBMusPMpP2KH HomgSmaFEFnXvRvspL/MfSav+fri/2Sb2DMIk2CQmh033ZHPBNmcXJGgQSAtutb3 TuP5sCa2p12F8N5vIAkgdW2yHpfMpbWUibMC2yEih/sg/lOpbDa8UFsnYQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIsdAFzGSTNu4ybLQmd+3zpmQxSbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNjODMyNDdiLWVhNGYtNGE0Yy1iNjNhLWViYWU5NTc0ZGRlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+4iAMA0GCSqGSIb3DQEBCwUAA4IBAQBFFq4U/3/tGzT+nSOQ iJ8hITQV+VEq8M5XBNilmJ3AY17Kk+HXKU7bLFvblk8nYJrByiDndgWE0ELpkZBS zk9qO2UwdFeGnXmZrz0wYslwhT/mF1re0SUWj3+qVP2jQnZpA/gycSXe5wFTlntE TVhJO+m3P6hd6t7P2njVBSs9EdwuRuZwW3HIvZmew/AQFS6tA29q+RNyJFFT/Oho iyj7s39bHzf5O8EB+QeBuVWLYUqgRXai3n9intq6m/R1bKEflzagXbpkAFun3I6v agRyl0x1Nix+Wxxr0aM5WrzkLqJu2xfJnEpRCf2FDJWJXsHX7IZNWNTSjc9EBmLT JyIo -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:47 2025 by rpki-client