$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4386eec0-31bd-4fe0-a809-ab13a56325fb.roa File: 4386eec0-31bd-4fe0-a809-ab13a56325fb.roa (raw, json) Hash identifier: n7GwMv1V9ZTkkEq/Add+wzwaK1K4juS7Wi3UNAgjlgo= Subject key identifier: 2E:FB:4C:65:05:1F:24:8E:B0:55:B2:FF:1F:0A:D5:0F:13:9C:52:BD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3573B0A3F07D3383C15F8962063A0BD3250CA2AE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4386eec0-31bd-4fe0-a809-ab13a56325fb.roa Signing time: Fri 16 May 2025 15:21:38 +0000 ROA not before: Fri 16 May 2025 15:21:38 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:73:b0:a3:f0:7d:33:83:c1:5f:89:62:06:3a:0b:d3:25:0c:a2:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:21:38 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=538b7ab8cffe0820252015bc4a133aff74af11c140806eff29794ae96012b864, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e8:dd:51:e9:e4:53:ea:95:60:9c:46:cb:0d: 28:c5:16:e5:19:9a:88:28:c5:97:a8:72:13:d9:be: af:bf:7a:66:66:84:34:e1:1b:52:c2:0e:0d:03:79: 3b:51:8e:37:c7:5a:89:09:bb:b1:f1:89:b5:d6:76: 34:dc:48:bc:e6:35:c6:b8:70:04:54:81:bb:4f:63: 40:2e:02:80:c3:c7:2b:d1:5c:ee:ea:7d:ca:04:64: 97:bc:7b:24:d8:f2:88:55:dd:4d:a6:ea:7f:1f:e9: fb:44:bf:4e:13:c3:49:ac:eb:87:c8:7b:b8:ed:9b: cf:7d:d3:22:b0:af:d1:0d:53:70:9e:2b:9b:d2:43: 3b:f6:88:10:ba:15:7d:d1:01:b8:d8:fa:35:b3:c8: 6c:e1:26:2b:db:2e:2c:f9:dc:f1:13:ce:80:e1:8a: c9:40:77:4c:19:13:fa:9c:e6:04:d2:77:1f:cf:08: 9a:b8:23:eb:1f:40:73:de:37:62:a9:d7:ad:60:e5: c4:43:5f:4e:6e:de:4a:1b:53:57:44:1e:44:44:f6: 28:b4:74:df:24:12:b3:b1:f2:d7:88:cc:87:df:ab: ff:19:df:9e:88:53:3f:3a:28:ba:05:a4:58:8f:1e: 17:78:6d:5b:51:11:95:ca:62:99:50:e2:5e:64:e8: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FB:4C:65:05:1F:24:8E:B0:55:B2:FF:1F:0A:D5:0F:13:9C:52:BD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4386eec0-31bd-4fe0-a809-ab13a56325fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:2800::/40 Signature Algorithm: sha256WithRSAEncryption c1:cb:cd:1c:14:87:85:0d:58:ca:d5:de:aa:e8:ce:5a:9b:c8: c5:31:05:3f:4e:35:4a:11:d0:56:1a:5a:3e:ad:48:8c:07:60: 4b:f9:26:50:9a:85:a2:56:0e:cc:7b:61:db:b4:ea:f0:82:2a: 20:69:45:41:0f:99:3b:21:d3:58:2d:03:61:f3:a3:15:97:cb: 76:5b:46:2b:25:f3:fe:6e:46:eb:d8:76:ad:a7:ff:48:a0:a6: 42:1b:77:f2:b7:67:26:32:18:80:71:f8:93:57:3d:69:e8:44: d1:eb:f5:04:a0:66:76:af:34:f6:3b:80:8a:aa:32:30:26:72: 1e:02:c7:2f:35:c7:da:2e:6a:f2:0f:19:c2:04:0a:a8:1a:51: 20:3d:4d:12:65:09:61:10:fb:29:0e:fa:cb:ab:b5:d1:04:41: 82:d4:fc:9a:2d:a5:22:6c:c2:45:52:fe:81:be:33:1c:db:d0: 85:6e:c7:3d:fa:dc:8a:54:b7:c9:7d:d4:1a:f2:9b:62:aa:df: aa:51:27:f7:be:f3:22:bf:12:a9:58:12:65:61:c8:74:9c:8a: ae:33:b0:61:34:80:11:e6:4f:1a:9b:83:74:ea:bc:6c:9c:8d: e0:2b:f4:07:0c:aa:dc:f3:45:3d:95:32:e6:3c:df:07:56:95: ef:a7:78:83 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNXOwo/B9M4PBX4liBjoL0yUMoq4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MjEzOFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANTM4YjdhYjhjZmZlMDgyMDI1MjAx NWJjNGExMzNhZmY3NGFmMTFjMTQwODA2ZWZmMjk3OTRhZTk2MDEyYjg2NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+jdUenkU+qVYJxGyw0oxRblGZqI KMWXqHIT2b6vv3pmZoQ04RtSwg4NA3k7UY43x1qJCbux8Ym11nY03Ei85jXGuHAE VIG7T2NALgKAw8cr0Vzu6n3KBGSXvHsk2PKIVd1Npup/H+n7RL9OE8NJrOuHyHu4 7ZvPfdMisK/RDVNwniub0kM79ogQuhV90QG42Po1s8hs4SYr2y4s+dzxE86A4YrJ QHdMGRP6nOYE0ncfzwiauCPrH0Bz3jdiqdetYOXEQ19Obt5KG1NXRB5ERPYotHTf JBKzsfLXiMyH36v/Gd+eiFM/Oii6BaRYjx4XeG1bURGVymKZUOJeZOisQwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC77TGUFHySOsFWy/x8K1Q8TnFK9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzODZlZWMwLTMxYmQtNGZlMC1hODA5LWFiMTNhNTYzMjVmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauCgwDQYJKoZIhvcNAQELBQADggEBAMHLzRwUh4UNWMrV3qro zlqbyMUxBT9ONUoR0FYaWj6tSIwHYEv5JlCahaJWDsx7Ydu06vCCKiBpRUEPmTsh 01gtA2HzoxWXy3ZbRisl8/5uRuvYdq2n/0igpkIbd/K3ZyYyGIBx+JNXPWnoRNHr 9QSgZnavNPY7gIqqMjAmch4Cxy81x9ouavIPGcIECqgaUSA9TRJlCWEQ+ykO+sur tdEEQYLU/JotpSJswkVS/oG+Mxzb0IVuxz363IpUt8l91Brym2Kq36pRJ/e+8yK/ EqlYEmVhyHSciq4zsGE0gBHmTxqbg3TqvGycjeAr9AcMqtzzRT2VMuY83wdWle+n eIM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:22 2025 by rpki-client