$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa File: 4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa (raw, json) Hash identifier: g8tvXKm/HXSHNL4lXvcV6zLLNRgIP2a6ifSBfDXcHoc= Subject key identifier: 03:8B:33:B5:F3:5B:96:DB:F5:63:00:D9:D5:37:BF:4D:93:CF:A9:A4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A41085ED59C580B21A89239E98F2B793F05E0DC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa Signing time: Sat 31 May 2025 00:01:00 +0000 ROA not before: Sat 31 May 2025 00:01:00 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:41:08:5e:d5:9c:58:0b:21:a8:92:39:e9:8f:2b:79:3f:05:e0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:01:00 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=3098e28b46209c2b71c75346ad1cb8cd79e090cb83a6d75c934479c7a5402120, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:99:3f:cf:63:bd:46:a4:66:a0:04:58:c9: 57:2b:e1:6c:7e:cf:4d:46:f1:e1:58:8f:91:15:e5: 5b:e4:46:5e:ef:6a:84:d2:07:13:3d:d8:9d:75:6f: d5:80:e7:5b:41:c8:f5:d1:e5:3e:7a:86:e7:50:a5: bd:61:8e:8b:1c:ce:51:ad:7b:14:ce:5a:4f:1f:38: 1b:52:1d:9b:a1:a7:52:0f:c6:b2:8c:d3:5c:f4:70: d6:ec:32:98:53:86:ee:f4:d1:81:17:2f:4a:9b:aa: 37:36:92:25:b0:5a:5b:5c:12:48:e7:74:af:a6:05: 57:be:6e:da:a3:76:3e:74:70:82:2f:4c:50:b4:82: 8d:9c:38:67:bb:dc:35:99:04:cc:45:af:81:a2:ce: 39:73:ab:f8:ac:58:36:a2:c7:5b:b0:99:ab:71:b4: d9:c3:6c:d9:11:ae:79:1d:bb:cc:12:c4:c2:10:29: 55:76:58:f8:7a:72:09:95:db:76:c0:ab:54:40:9a: a9:41:8e:c6:9e:3a:1d:82:7e:8b:ed:9d:2d:be:0c: d1:e3:32:f8:ce:17:3b:2b:5c:87:34:f0:70:71:ab: a9:04:3e:72:d9:3b:53:84:94:54:f5:ff:cc:fc:1c: d9:c2:d2:95:b3:e2:c7:0c:22:e0:b0:1c:46:d0:65: 25:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8B:33:B5:F3:5B:96:DB:F5:63:00:D9:D5:37:BF:4D:93:CF:A9:A4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:e000::/40 Signature Algorithm: sha256WithRSAEncryption 98:f7:f8:48:27:22:fa:af:ca:8e:21:5a:39:53:0d:e1:01:c0: 1f:36:10:86:2d:c6:d2:1e:81:25:18:83:2b:a3:7e:b3:40:11: c9:52:0b:4d:4f:47:ff:37:8e:8b:33:be:64:fd:58:6f:52:aa: f3:8c:e1:3c:d1:07:29:55:f5:54:cf:7d:48:b9:d2:6e:b5:2f: f6:8d:61:d1:13:a2:76:bc:7b:dd:4e:71:2b:fd:f5:18:98:7b: 21:89:d6:f7:29:6f:ca:0a:e5:c2:0a:fb:55:95:0f:80:46:29: 20:ec:a4:f0:15:8e:c4:4d:b7:29:6a:98:67:fb:1a:87:89:e3: 0e:36:94:53:5c:8b:bf:ce:88:6e:e8:9e:3c:ad:f8:e8:2c:1a: 56:1a:cb:08:eb:69:39:79:61:46:1a:30:da:e3:cb:b2:cc:64: 00:5e:8f:85:05:c4:3c:02:81:b1:c3:41:a3:b9:4e:18:21:dd: c8:cb:d3:b7:a4:50:92:2b:1f:af:fb:7d:5b:d5:d0:34:e9:b1: 13:c5:d2:7b:75:4d:10:6a:bb:83:3c:07:4f:b3:02:39:e3:28: 00:2a:27:57:55:5e:e6:84:1c:79:9e:39:ee:f3:bb:b7:9c:86: 94:be:8d:76:34:cd:88:cd:d7:c7:40:2f:6f:54:07:bd:1c:48: 85:b3:9c:dd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOkEIXtWcWAshqJI56Y8reT8F4NwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUzMTAwMDEwMFoX DTI1MDcwNTIzNTk1OVowejFJMEcGA1UEBRNAMzA5OGUyOGI0NjIwOWMyYjcxYzc1 MzQ2YWQxY2I4Y2Q3OWUwOTBjYjgzYTZkNzVjOTM0NDc5YzdhNTQwMjEyMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N2ZP89jvUakZqAEWMlXK+Fsfs9N RvHhWI+RFeVb5EZe72qE0gcTPdiddW/VgOdbQcj10eU+eobnUKW9YY6LHM5RrXsU zlpPHzgbUh2boadSD8ayjNNc9HDW7DKYU4bu9NGBFy9Km6o3NpIlsFpbXBJI53Sv pgVXvm7ao3Y+dHCCL0xQtIKNnDhnu9w1mQTMRa+Bos45c6v4rFg2osdbsJmrcbTZ w2zZEa55HbvMEsTCEClVdlj4enIJldt2wKtUQJqpQY7Gnjodgn6L7Z0tvgzR4zL4 zhc7K1yHNPBwcaupBD5y2TtThJRU9f/M/BzZwtKVs+LHDCLgsBxG0GUlZQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAOLM7XzW5bb9WMA2dU3v02Tz6mkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRlMjRlYmFiLTVmMzEtNGViNS05OWRkLWU1ZmUxMTNmMjFmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauOAwDQYJKoZIhvcNAQELBQADggEBAJj3+EgnIvqvyo4hWjlT DeEBwB82EIYtxtIegSUYgyujfrNAEclSC01PR/83joszvmT9WG9SqvOM4TzRBylV 9VTPfUi50m61L/aNYdETona8e91OcSv99RiYeyGJ1vcpb8oK5cIK+1WVD4BGKSDs pPAVjsRNtylqmGf7GoeJ4w42lFNci7/OiG7onjyt+OgsGlYaywjraTl5YUYaMNrj y7LMZABej4UFxDwCgbHDQaO5Thgh3cjL07ekUJIrH6/7fVvV0DTpsRPF0nt1TRBq u4M8B0+zAjnjKAAqJ1dVXuaEHHmeOe7zu7echpS+jXY0zYjN18dAL29UB70cSIWz nN0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:38 2025 by rpki-client