$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e2e136b-477f-4612-b77c-bd80a6f77580.roa File: 3e2e136b-477f-4612-b77c-bd80a6f77580.roa (raw, json) Hash identifier: W98iNAJwFJFCCZVvCmMtA+x1TekyxcYmgOT1k8EcpGY= Subject key identifier: EE:26:2B:9D:03:02:6C:6F:01:0E:59:0E:F1:EB:2F:27:10:A9:14:31 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 75DF00BC2FA5A699C23B9A036D4DD9F4B6A959C9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e2e136b-477f-4612-b77c-bd80a6f77580.roa Signing time: Sat 10 May 2025 00:01:05 +0000 ROA not before: Sat 10 May 2025 00:01:05 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:df:00:bc:2f:a5:a6:99:c2:3b:9a:03:6d:4d:d9:f4:b6:a9:59:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 10 00:01:05 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=8849f06d09690a708d93d57fb65054f140d7463dd2d8606c925071c17a728c34, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9d:9f:61:41:9c:31:ff:45:54:a2:c5:7c:c1: 70:1b:f1:26:77:90:86:b1:9e:1e:49:e9:cc:7a:76: 1a:08:23:53:27:7f:bc:6d:da:a9:22:5f:e4:6b:18: d4:7c:8c:ef:d4:13:07:77:85:15:b2:e3:fd:49:70: d3:ee:cd:44:b0:9c:e2:02:5a:de:6e:43:91:83:2c: 5c:db:a6:16:1b:33:1c:37:6b:2c:5b:d7:3c:25:7c: 4d:97:d4:62:cf:d4:d0:b2:5b:e9:91:97:f5:a2:4c: 46:0a:90:b8:66:c0:31:07:8f:03:e9:f5:d8:a5:1c: 68:05:df:d8:73:7c:59:00:55:03:3b:d9:11:12:55: 24:4c:ad:3a:32:ff:d3:41:ef:56:ab:78:6d:e4:d1: 9b:69:c2:7f:20:42:9c:1a:40:1f:63:01:eb:68:1c: 4d:23:db:6c:ed:5d:5f:11:5f:e6:56:f2:7f:d7:6a: ba:0b:e1:24:6e:21:78:5e:6e:79:51:ab:ae:0c:fb: 54:86:59:31:d4:65:54:71:32:c4:46:00:93:92:f8: e7:f1:9d:37:22:c9:96:ef:4f:b3:ea:19:84:cd:27: 4f:db:e9:c7:9c:5c:94:e3:75:c8:c4:c2:89:4e:2d: 2a:e4:d9:9d:83:f9:33:91:37:f4:5b:fe:1c:ec:47: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:26:2B:9D:03:02:6C:6F:01:0E:59:0E:F1:EB:2F:27:10:A9:14:31 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e2e136b-477f-4612-b77c-bd80a6f77580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:a000::/40 Signature Algorithm: sha256WithRSAEncryption c7:b9:38:c3:00:e5:b2:3e:48:39:10:a5:3e:0b:84:1b:3f:ea: bd:10:3b:4e:e2:60:6c:b4:75:b2:ac:b4:cf:f7:b3:28:97:db: 15:fb:4b:21:fd:0d:e1:be:1f:c7:a7:a7:23:31:56:cd:a8:4d: 83:78:4f:1b:b8:cb:4d:76:83:04:7c:aa:b6:34:e6:5b:7b:d4: 45:12:1b:8e:08:70:d7:56:74:31:09:e6:34:04:4a:16:b0:1a: fa:3e:e9:65:f5:2d:3a:d1:43:0d:c6:f4:78:45:c2:69:b0:aa: d4:ad:91:18:ad:61:d7:5b:14:cf:4e:7f:ea:df:92:65:a6:6e: 27:35:29:f6:f0:33:bc:4c:0b:20:07:fe:08:ab:3f:cc:00:3a: 51:b1:e8:87:66:52:e1:2f:3a:70:3d:bc:7a:b2:92:c5:8b:54: e6:86:eb:07:e6:b0:4a:65:1d:02:85:42:cd:6b:d3:ff:30:30: 57:75:54:8f:d3:8d:80:1a:75:38:63:c8:58:80:8a:61:b7:fc: 6f:7f:f1:ee:eb:b7:d4:be:94:e9:66:5d:4c:88:12:e0:b2:be: 9f:82:07:32:3d:7a:c6:13:b5:b0:d7:48:fe:9d:6e:7f:2f:49: 27:79:39:a8:1b:d0:62:99:9d:28:a6:29:66:b1:80:f3:c6:d7: 05:b4:aa:2e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdd8AvC+lppnCO5oDbU3Z9LapWckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMDAwMDEwNVoX DTI1MDYxNDIzNTk1OVowejFJMEcGA1UEBRNAODg0OWYwNmQwOTY5MGE3MDhkOTNk NTdmYjY1MDU0ZjE0MGQ3NDYzZGQyZDg2MDZjOTI1MDcxYzE3YTcyOGMzNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp2fYUGcMf9FVKLFfMFwG/Emd5CG sZ4eSenMenYaCCNTJ3+8bdqpIl/kaxjUfIzv1BMHd4UVsuP9SXDT7s1EsJziAlre bkORgyxc26YWGzMcN2ssW9c8JXxNl9Riz9TQslvpkZf1okxGCpC4ZsAxB48D6fXY pRxoBd/Yc3xZAFUDO9kRElUkTK06Mv/TQe9Wq3ht5NGbacJ/IEKcGkAfYwHraBxN I9ts7V1fEV/mVvJ/12q6C+EkbiF4Xm55UauuDPtUhlkx1GVUcTLERgCTkvjn8Z03 IsmW70+z6hmEzSdP2+nHnFyU43XIxMKJTi0q5Nmdg/kzkTf0W/4c7Ecv8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO4mK50DAmxvAQ5ZDvHrLycQqRQxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNlMmUxMzZiLTQ3N2YtNDYxMi1iNzdjLWJkODBhNmY3NzU4MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYKAwDQYJKoZIhvcNAQELBQADggEBAMe5OMMA5bI+SDkQpT4L hBs/6r0QO07iYGy0dbKstM/3syiX2xX7SyH9DeG+H8enpyMxVs2oTYN4Txu4y012 gwR8qrY05lt71EUSG44IcNdWdDEJ5jQEShawGvo+6WX1LTrRQw3G9HhFwmmwqtSt kRitYddbFM9Of+rfkmWmbic1KfbwM7xMCyAH/girP8wAOlGx6IdmUuEvOnA9vHqy ksWLVOaG6wfmsEplHQKFQs1r0/8wMFd1VI/TjYAadThjyFiAimG3/G9/8e7rt9S+ lOlmXUyIEuCyvp+CBzI9esYTtbDXSP6dbn8vSSd5Oagb0GKZnSimKWaxgPPG1wW0 qi4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:11 2025 by rpki-client