$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4456e0d3-b82d-4583-bca5-67fb811dbd9c.roa File: 4456e0d3-b82d-4583-bca5-67fb811dbd9c.roa (raw, json) Hash identifier: 526nm13l/SfQTgdUrTKMN7DWgWAJqyCcjjnOBOFZ2OQ= Subject key identifier: A8:37:85:93:A9:CC:A6:53:FC:AB:30:DF:08:E7:57:F2:3A:AD:C5:DE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 304CF3BB22F224FCEB768CBABEDEF8EA8F230712 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4456e0d3-b82d-4583-bca5-67fb811dbd9c.roa Signing time: Fri 16 May 2025 15:01:46 +0000 ROA not before: Fri 16 May 2025 15:01:46 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4c:f3:bb:22:f2:24:fc:eb:76:8c:ba:be:de:f8:ea:8f:23:07:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:01:46 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=c9b8f94e0b669fa1aca8b5686608def384053b930e79fff7a3cce18e13e3ddda, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:d6:d1:e3:98:12:c3:61:d3:34:a9:98:c0: 45:74:89:1a:41:8e:80:a9:32:57:cd:d9:82:a7:16: 3c:0b:09:97:92:c3:85:e4:c4:37:a3:c5:6d:9e:a2: 04:44:a3:d8:28:25:eb:bc:e9:b0:12:9c:48:4b:df: 12:d3:d4:19:e1:2a:00:38:f9:b3:c6:5f:32:77:dc: 9e:c5:8e:ec:d2:65:f3:94:1d:d5:69:34:98:da:f7: f3:e0:df:84:10:a6:7b:ac:9f:24:19:42:27:e8:19: 74:52:81:e1:a1:37:a2:49:88:a6:34:d9:b9:ba:77: 41:ea:71:ad:51:8d:2f:ac:3e:1e:d1:12:5c:c4:69: d4:72:c6:6e:71:f9:38:3e:ef:a0:3f:eb:11:75:62: 4f:e7:4a:77:c8:6b:a7:2f:83:bc:32:6f:33:9f:e8: a7:9a:8c:f7:eb:a9:24:4a:c7:eb:94:b9:c2:11:1f: ae:fc:fe:53:fe:08:a1:d0:42:22:a6:65:aa:72:ea: 8e:94:53:36:90:0e:9f:af:74:77:cc:98:8f:ce:80: 40:2f:12:37:93:95:27:af:97:76:39:8b:fc:8e:fd: a5:80:d8:54:70:f5:26:50:2b:6e:98:fd:f5:fd:89: 6a:3e:b8:ce:eb:c7:44:c2:be:4e:48:87:d5:35:08: 2d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:37:85:93:A9:CC:A6:53:FC:AB:30:DF:08:E7:57:F2:3A:AD:C5:DE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4456e0d3-b82d-4583-bca5-67fb811dbd9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8040::/46 Signature Algorithm: sha256WithRSAEncryption 79:57:c5:ef:bb:8f:b8:59:e5:71:41:c5:75:5b:01:eb:04:22: d8:64:e3:b8:fe:00:19:4c:4d:bf:19:8e:09:30:29:22:75:43: d8:0b:d5:7d:68:00:ef:64:f7:a3:67:e1:7d:5d:df:9f:39:4e: 03:d4:43:96:3d:84:97:1c:80:7d:61:fd:c8:5d:e3:fd:18:56: a0:42:a8:cd:f8:45:50:01:8a:83:92:cf:8a:aa:f3:c0:8b:d5: 79:d7:20:d7:0f:39:3e:f5:79:1c:f4:38:da:00:78:b2:30:05: 2c:dd:9f:ad:b2:b9:f7:e7:96:1c:bd:ec:f8:d1:c3:f8:32:55: f5:57:f6:a9:00:6a:bc:6e:26:94:6a:f9:f5:f4:31:6f:e1:52: 7b:70:37:3b:79:05:7c:40:4f:4e:57:bf:5a:a6:4b:6f:39:01: 4d:3b:eb:68:61:60:b5:32:ec:14:11:ab:65:bc:1a:8f:d8:b4: 52:8a:52:0e:fa:2e:36:42:da:a0:81:94:76:de:91:c6:36:77: 57:47:9c:fa:5e:e2:d0:68:14:5a:7e:ae:a8:2f:6e:07:96:60: 99:0a:ef:a8:d4:a1:06:a8:b9:b2:8e:a0:aa:c9:df:b2:e8:d3: 06:e9:dc:67:37:5e:2c:eb:70:9c:c3:e5:60:ea:f8:d0:e0:19: b0:fd:20:0a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMEzzuyLyJPzrdoy6vt746o8jBxIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MDE0NloX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAYzliOGY5NGUwYjY2OWZhMWFjYThi NTY4NjYwOGRlZjM4NDA1M2I5MzBlNzlmZmY3YTNjY2UxOGUxM2UzZGRkYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6jW0eOYEsNh0zSpmMBFdIkaQY6A qTJXzdmCpxY8CwmXksOF5MQ3o8VtnqIERKPYKCXrvOmwEpxIS98S09QZ4SoAOPmz xl8yd9yexY7s0mXzlB3VaTSY2vfz4N+EEKZ7rJ8kGUIn6Bl0UoHhoTeiSYimNNm5 undB6nGtUY0vrD4e0RJcxGnUcsZucfk4Pu+gP+sRdWJP50p3yGunL4O8Mm8zn+in moz366kkSsfrlLnCER+u/P5T/gih0EIipmWqcuqOlFM2kA6fr3R3zJiPzoBALxI3 k5Unr5d2OYv8jv2lgNhUcPUmUCtumP31/YlqPrjO68dEwr5OSIfVNQgtkQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKg3hZOpzKZT/Ksw3wjnV/I6rcXeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0NTZlMGQzLWI4MmQtNDU4My1iY2E1LTY3ZmI4MTFkYmQ5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaYBAMA0GCSqGSIb3DQEBCwUAA4IBAQB5V8Xvu4+4WeVxQcV1 WwHrBCLYZOO4/gAZTE2/GY4JMCkidUPYC9V9aADvZPejZ+F9Xd+fOU4D1EOWPYSX HIB9Yf3IXeP9GFagQqjN+EVQAYqDks+KqvPAi9V51yDXDzk+9Xkc9DjaAHiyMAUs 3Z+tsrn355Ycvez40cP4MlX1V/apAGq8biaUavn19DFv4VJ7cDc7eQV8QE9OV79a pktvOQFNO+toYWC1MuwUEatlvBqP2LRSilIO+i42QtqggZR23pHGNndXR5z6XuLQ aBRafq6oL24HlmCZCu+o1KEGqLmyjqCqyd+y6NMG6dxnN14s63Ccw+Vg6vjQ4Bmw /SAK -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:57 2025 by rpki-client