$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524c65cc-d022-4b07-863e-495ad7b730c6.roa File: 524c65cc-d022-4b07-863e-495ad7b730c6.roa (raw, json) Hash identifier: HjJ41FKV71hnDS4cDrvwXRTCDoLuDq0EIl5d7E/aGB8= Subject key identifier: BA:90:A3:FF:DC:C0:C6:65:B5:AC:DD:37:FB:90:1C:C6:26:E9:E1:9B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77AE3F5B94F04F97FD146030DA43F7416A138CE7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524c65cc-d022-4b07-863e-495ad7b730c6.roa Signing time: Fri 16 May 2025 15:21:02 +0000 ROA not before: Fri 16 May 2025 15:21:02 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ae:3f:5b:94:f0:4f:97:fd:14:60:30:da:43:f7:41:6a:13:8c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:21:02 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=bc5469eea9c3158e7b024b06679137e1038d807eb5bc725e07989ff26b4a79b1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:4b:c9:d7:d4:f7:6d:85:ae:72:ff:3c:c6: d8:0f:7c:ec:5f:e7:33:a4:8d:64:7a:e4:72:7d:45: c2:71:bc:ab:54:2d:52:6b:46:27:30:e9:dc:89:90: ab:23:79:a1:41:44:b8:6f:b7:03:b4:43:5e:d4:c4: 09:ab:7d:0b:83:2b:cd:af:50:d1:21:4b:59:ae:49: 28:03:6c:d7:63:b8:a0:fb:e2:a1:84:d2:13:9c:20: dd:c4:37:d5:f1:51:66:68:7a:cd:3c:9c:af:fb:62: 35:2e:52:4a:bf:a5:ca:8c:bd:1a:39:3e:0d:6b:92: 88:67:95:9e:89:a3:15:2f:46:d6:e2:88:36:f4:14: 5d:28:36:41:9d:20:51:a3:2b:a4:f7:c4:9d:c3:9b: 10:68:2d:24:3f:4e:d4:37:59:6e:66:b2:84:5a:3b: 98:24:da:20:c4:66:50:2a:64:57:da:70:38:26:b2: e6:86:65:95:de:ee:1d:0f:35:c8:c2:78:9b:b6:60: 05:a7:95:3d:65:5e:d6:a9:63:8a:a6:2c:8e:3c:57: 2a:6f:85:87:e4:11:6b:6f:b1:b9:47:fc:34:64:9b: 18:80:85:11:f0:fc:02:fa:41:d4:80:24:a7:b4:a1: eb:0e:55:99:b5:10:f5:60:ba:13:b6:a7:7e:89:e3: 96:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:90:A3:FF:DC:C0:C6:65:B5:AC:DD:37:FB:90:1C:C6:26:E9:E1:9B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524c65cc-d022-4b07-863e-495ad7b730c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:2800::/40 Signature Algorithm: sha256WithRSAEncryption b4:eb:fd:16:90:f9:e3:44:98:6e:fe:7c:44:0f:4a:03:a1:95: 60:ec:22:ee:eb:37:36:9c:7a:e0:fe:2a:cb:9c:2c:ee:63:30: 52:3b:75:3f:27:ce:8c:e6:8c:aa:57:21:cf:34:33:18:af:8c: f6:f4:ad:3d:5d:77:44:37:37:9e:2b:64:79:c2:27:41:fa:87: 34:d7:03:aa:4c:b4:94:ad:be:ed:49:65:4c:70:47:e9:54:f5: 93:70:05:4e:6e:d7:e0:f1:e1:3d:d4:46:e0:91:5d:23:dd:0f: 29:04:32:61:aa:11:ef:58:5c:dc:b0:b1:10:5e:c5:9a:12:15: 9c:09:c7:6c:bf:a3:b9:51:c1:0b:6b:1b:78:13:91:81:54:4e: 31:b9:e4:da:31:0b:6d:d2:35:20:77:3c:ad:c9:88:e7:a3:af: 0e:61:96:21:58:85:82:40:3b:3b:c9:e9:f0:48:14:dd:0d:bd: 3f:fb:03:3e:c7:ec:8d:08:22:bf:04:fe:dd:eb:34:13:a8:4a: 98:7b:eb:8a:3d:3e:85:3c:b2:9d:14:9a:b0:8b:8c:f2:91:72: 9c:9b:0c:b5:4a:19:6f:04:3c:5b:d0:0f:e8:db:25:e6:f1:0f: 0d:51:06:de:3d:7b:54:64:55:97:57:bb:9b:f6:09:ed:8c:ba: 06:7c:a8:6b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUd64/W5TwT5f9FGAw2kP3QWoTjOcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MjEwMloX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAYmM1NDY5ZWVhOWMzMTU4ZTdiMDI0 YjA2Njc5MTM3ZTEwMzhkODA3ZWI1YmM3MjVlMDc5ODlmZjI2YjRhNzliMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/pLydfU922FrnL/PMbYD3zsX+cz pI1keuRyfUXCcbyrVC1Sa0YnMOnciZCrI3mhQUS4b7cDtENe1MQJq30LgyvNr1DR IUtZrkkoA2zXY7ig++KhhNITnCDdxDfV8VFmaHrNPJyv+2I1LlJKv6XKjL0aOT4N a5KIZ5WeiaMVL0bW4og29BRdKDZBnSBRoyuk98Sdw5sQaC0kP07UN1luZrKEWjuY JNogxGZQKmRX2nA4JrLmhmWV3u4dDzXIwnibtmAFp5U9ZV7WqWOKpiyOPFcqb4WH 5BFrb7G5R/w0ZJsYgIUR8PwC+kHUgCSntKHrDlWZtRD1YLoTtqd+ieOWnwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLqQo//cwMZltazdN/uQHMYm6eGbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyNGM2NWNjLWQwMjItNGIwNy04NjNlLTQ5NWFkN2I3MzBjNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaCgwDQYJKoZIhvcNAQELBQADggEBALTr/RaQ+eNEmG7+fEQP SgOhlWDsIu7rNzaceuD+KsucLO5jMFI7dT8nzozmjKpXIc80MxivjPb0rT1dd0Q3 N54rZHnCJ0H6hzTXA6pMtJStvu1JZUxwR+lU9ZNwBU5u1+Dx4T3URuCRXSPdDykE MmGqEe9YXNywsRBexZoSFZwJx2y/o7lRwQtrG3gTkYFUTjG55NoxC23SNSB3PK3J iOejrw5hliFYhYJAOzvJ6fBIFN0NvT/7Az7H7I0IIr8E/t3rNBOoSph764o9PoU8 sp0UmrCLjPKRcpybDLVKGW8EPFvQD+jbJebxDw1RBt49e1RkVZdXu5v2Ce2MugZ8 qGs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:16:53 2025 by rpki-client