$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524bbb59-fe5b-477a-80a0-854f6932264e.roa File: 524bbb59-fe5b-477a-80a0-854f6932264e.roa (raw, json) Hash identifier: PwkWLN5PRoliFrbWJ1d9FziRHGxiOP2QC62jlQCBZCg= Subject key identifier: 39:EC:3A:E5:AB:F5:9B:62:8D:0B:6E:A7:33:66:FE:3B:31:93:09:97 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 55C04EC278FAA7E7016C06D4311943136BE68357 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524bbb59-fe5b-477a-80a0-854f6932264e.roa Signing time: Fri 16 May 2025 00:20:51 +0000 ROA not before: Fri 16 May 2025 00:20:51 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c0:4e:c2:78:fa:a7:e7:01:6c:06:d4:31:19:43:13:6b:e6:83:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:20:51 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=294c6e76d5aa45be1c3f01216e2c1a5b8d544959e420ddb255dcdbf10e2128c2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:88:dd:b0:c7:cd:f2:f0:0f:0c:48:72:56:ab: 6e:a7:b5:c5:5b:36:9c:70:52:52:e3:88:71:f8:64: e8:c7:fb:6a:34:6d:93:52:e3:29:e7:22:7f:fe:33: 49:b0:05:3d:a8:f1:95:6a:88:ad:27:ee:15:32:6d: a8:fe:31:7b:52:84:2e:63:3d:44:8c:94:d6:f1:6c: 04:04:9e:55:82:d1:03:89:06:ff:05:51:9d:95:ac: e5:43:12:cf:bd:b2:20:32:d1:8f:2a:8e:c1:53:43: 6d:bb:ae:28:e0:dd:a3:ec:7f:26:29:e6:7b:a1:2f: 13:a0:09:25:bf:f3:b7:b1:ea:96:0b:f5:7d:58:e9: 38:db:bc:0b:6a:85:e7:95:70:53:4c:c1:53:ae:ae: 3e:d1:f6:ab:b8:7c:80:d8:7d:04:28:22:16:fb:96: 12:98:2c:82:7e:1f:f5:5a:bd:da:f5:9e:7b:87:ca: 45:88:ed:d2:10:b1:13:04:d1:7a:00:2a:9b:56:f0: cd:4a:23:85:74:e8:41:91:d5:20:f9:b2:49:7b:32: 70:b8:46:91:36:d5:0f:06:1f:57:c7:8c:92:a9:62: bd:b4:54:28:52:96:79:03:aa:de:9a:13:ef:4f:dd: 67:d3:1e:2c:fd:14:b5:53:72:36:85:e8:a1:e6:49: 7b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EC:3A:E5:AB:F5:9B:62:8D:0B:6E:A7:33:66:FE:3B:31:93:09:97 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524bbb59-fe5b-477a-80a0-854f6932264e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c060::/48 Signature Algorithm: sha256WithRSAEncryption 43:11:2a:90:6f:96:a6:f1:7c:54:c4:5a:40:70:d5:83:85:a5: d0:55:29:9e:2d:67:50:05:1c:84:78:c2:d5:9f:90:85:68:71: 6f:c4:ed:43:95:8d:4a:61:b5:6c:50:00:d1:be:76:3e:19:30: 9b:e1:3c:72:9e:b5:8d:c3:23:30:b2:7d:26:0f:5b:77:24:9e: 13:e8:67:4d:fa:8b:fe:6b:0b:c6:e5:d7:3f:97:1b:74:27:ac: af:39:c4:5d:bb:79:bf:16:66:ae:75:97:0a:f5:fe:29:f2:d6: 29:44:5f:e8:6d:93:22:94:db:7f:72:77:69:2a:4e:86:fa:0f: 20:91:04:f0:82:35:bf:77:c7:b6:37:5a:a3:d0:9c:06:c6:df: cf:ff:ba:a8:63:0e:f9:87:77:fa:5c:3a:1b:cb:50:ca:98:af: 0f:cf:58:35:26:6d:c2:85:ef:3f:0c:8c:86:83:3b:b9:11:a9: 06:7d:56:da:e8:01:26:c1:ac:e0:11:a8:fe:7e:40:46:cb:f3: 48:f1:ea:7f:81:43:a4:1a:ff:87:72:d9:5e:6b:00:84:c5:89: f0:8c:cd:52:1b:9a:af:26:13:f8:7d:da:e9:85:5c:a0:98:de: f9:65:1e:ef:ec:13:47:4b:bb:7a:82:20:6d:bb:a8:cd:f5:cc: 9c:90:cd:cf -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVcBOwnj6p+cBbAbUMRlDE2vmg1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMjA1MVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAMjk0YzZlNzZkNWFhNDViZTFjM2Yw MTIxNmUyYzFhNWI4ZDU0NDk1OWU0MjBkZGIyNTVkY2RiZjEwZTIxMjhjMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+YjdsMfN8vAPDEhyVqtup7XFWzac cFJS44hx+GTox/tqNG2TUuMp5yJ//jNJsAU9qPGVaoitJ+4VMm2o/jF7UoQuYz1E jJTW8WwEBJ5VgtEDiQb/BVGdlazlQxLPvbIgMtGPKo7BU0Ntu64o4N2j7H8mKeZ7 oS8ToAklv/O3seqWC/V9WOk427wLaoXnlXBTTMFTrq4+0faruHyA2H0EKCIW+5YS mCyCfh/1Wr3a9Z57h8pFiO3SELETBNF6ACqbVvDNSiOFdOhBkdUg+bJJezJwuEaR NtUPBh9Xx4ySqWK9tFQoUpZ5A6remhPvT91n0x4s/RS1U3I2heih5kl7EQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDnsOuWr9ZtijQtupzNm/jsxkwmXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyNGJiYjU5LWZlNWItNDc3YS04MGEwLTg1NGY2OTMyMjY0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8BgMA0GCSqGSIb3DQEBCwUAA4IBAQBDESqQb5am8XxUxFpA cNWDhaXQVSmeLWdQBRyEeMLVn5CFaHFvxO1DlY1KYbVsUADRvnY+GTCb4TxynrWN wyMwsn0mD1t3JJ4T6GdN+ov+awvG5dc/lxt0J6yvOcRdu3m/FmaudZcK9f4p8tYp RF/obZMilNt/cndpKk6G+g8gkQTwgjW/d8e2N1qj0JwGxt/P/7qoYw75h3f6XDob y1DKmK8Pz1g1Jm3Che8/DIyGgzu5EakGfVba6AEmwazgEaj+fkBGy/NI8ep/gUOk Gv+HctleawCExYnwjM1SG5qvJhP4fdrphVygmN75ZR7v7BNHS7t6giBtu6jN9cyc kM3P -----END CERTIFICATE-----Generated at Mon Jun 2 06:28:13 2025 by rpki-client