$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/533d7691-49c8-4d0c-8bdc-2cf9aadb320e.roa File: 533d7691-49c8-4d0c-8bdc-2cf9aadb320e.roa (raw, json) Hash identifier: y9vddHVGC0vhLyin6AxEHGun2IIpYYkABDoIYG+oeq4= Subject key identifier: 9B:7E:8C:CA:BF:7A:A6:E7:EF:0E:7C:FE:4C:84:57:7F:BC:74:D1:42 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E98113BB797E42D69299281B7969F52EA573D6C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/533d7691-49c8-4d0c-8bdc-2cf9aadb320e.roa Signing time: Fri 16 May 2025 15:01:40 +0000 ROA not before: Fri 16 May 2025 15:01:40 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:98:11:3b:b7:97:e4:2d:69:29:92:81:b7:96:9f:52:ea:57:3d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:01:40 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=63ec72387f8fdc47f0d83dbb8b4ad4474f3f76d058ce3a9c6e88c79718bbb2f9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:84:87:f3:64:01:b8:a2:3e:12:3b:15:ec:f0: a5:79:2e:d2:e8:3e:39:01:f7:27:f9:5c:94:f2:54: c9:94:da:f0:5c:03:41:e3:c2:fd:24:3f:2c:da:c2: f5:f7:51:bc:bc:bb:44:98:93:99:39:77:35:e4:6c: a0:81:e0:4b:03:b9:33:94:f4:d9:4d:af:41:47:5b: c2:ec:76:4f:f7:d8:78:bf:ed:2b:f7:69:59:6a:1a: b0:70:68:f5:16:9b:9e:74:25:44:ad:cd:c5:04:26: f1:a0:27:5b:89:a9:72:e9:7a:24:b4:43:a7:2d:7a: af:1c:5c:44:f8:67:b8:12:f2:31:83:0c:88:4d:a6: 29:4b:f3:4a:b4:de:58:33:b0:f2:bb:dd:28:24:e0: 51:40:3b:5c:5c:1b:0d:dc:c7:c5:d9:ee:36:82:ef: 39:05:e7:f9:51:29:88:6b:ac:72:4d:03:07:69:da: d6:0b:b2:8c:dc:25:1b:51:7d:b3:b3:62:f8:96:11: 0e:93:c6:db:9f:9e:0e:ff:06:36:45:a0:5c:bd:c8: 24:96:a4:94:99:a1:01:60:3c:04:5f:4d:65:4d:29: 32:2f:b5:99:44:bd:5c:ae:c6:b4:70:5b:c7:37:a2: c1:d7:4d:72:01:c5:8b:2b:e6:51:09:17:45:41:aa: f6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7E:8C:CA:BF:7A:A6:E7:EF:0E:7C:FE:4C:84:57:7F:BC:74:D1:42 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/533d7691-49c8-4d0c-8bdc-2cf9aadb320e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:a000::/40 Signature Algorithm: sha256WithRSAEncryption 83:26:a3:08:14:11:bd:e9:67:8a:c8:bf:df:6e:4a:bf:09:11: c4:ee:0d:ba:2a:cb:4a:43:1f:4e:d1:ea:f3:b1:74:e9:0b:94: c6:93:f5:4b:6b:f0:22:3b:4f:c7:af:e3:54:e2:24:3e:22:6a: 47:aa:88:9b:16:a8:0c:61:08:c1:3f:d5:96:02:49:69:e5:6c: 53:c1:ad:55:59:9d:64:46:46:25:66:7d:b0:18:b6:52:94:61: a2:56:61:db:af:f4:9c:d6:dd:44:dd:8d:ac:8e:de:64:b3:29: 2c:55:e6:56:88:7c:b8:b2:62:49:5e:42:62:2e:14:83:d0:36: d9:54:fb:ec:17:27:a9:29:05:48:6d:9e:6b:7d:c5:5e:e3:89: 49:a0:a7:bf:d4:a3:d3:14:f8:6b:a5:4f:99:eb:25:f4:e5:02: 41:1c:d9:11:29:33:28:67:1d:40:6d:83:91:67:4e:92:66:d9: ab:a4:95:8c:c1:36:a5:9a:8b:a2:82:40:c3:8a:d0:6f:a8:2b: e6:cd:39:f7:2a:ca:9d:4d:6a:39:63:b2:b7:f1:bc:d1:d9:73: 8d:84:c2:28:27:bb:1f:f5:3d:90:b9:1c:01:3c:e1:74:fd:9f: 60:e9:7d:9b:19:a4:46:f1:d1:50:4c:79:24:e8:54:ae:30:7d: 0b:23:d9:ed -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULpgRO7eX5C1pKZKBt5afUupXPWwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MDE0MFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANjNlYzcyMzg3ZjhmZGM0N2YwZDgz ZGJiOGI0YWQ0NDc0ZjNmNzZkMDU4Y2UzYTljNmU4OGM3OTcxOGJiYjJmOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oSH82QBuKI+EjsV7PCleS7S6D45 Afcn+VyU8lTJlNrwXANB48L9JD8s2sL191G8vLtEmJOZOXc15GyggeBLA7kzlPTZ Ta9BR1vC7HZP99h4v+0r92lZahqwcGj1FpuedCVErc3FBCbxoCdbialy6XoktEOn LXqvHFxE+Ge4EvIxgwyITaYpS/NKtN5YM7Dyu90oJOBRQDtcXBsN3MfF2e42gu85 Bef5USmIa6xyTQMHadrWC7KM3CUbUX2zs2L4lhEOk8bbn54O/wY2RaBcvcgklqSU maEBYDwEX01lTSkyL7WZRL1crsa0cFvHN6LB101yAcWLK+ZRCRdFQar2ywIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJt+jMq/eqbn7w58/kyEV3+8dNFCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUzM2Q3NjkxLTQ5YzgtNGQwYy04YmRjLTJjZjlhYWRiMzIwZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+6AwDQYJKoZIhvcNAQELBQADggEBAIMmowgUEb3pZ4rIv99u Sr8JEcTuDboqy0pDH07R6vOxdOkLlMaT9Utr8CI7T8ev41TiJD4iakeqiJsWqAxh CME/1ZYCSWnlbFPBrVVZnWRGRiVmfbAYtlKUYaJWYduv9JzW3UTdjayO3mSzKSxV 5laIfLiyYkleQmIuFIPQNtlU++wXJ6kpBUhtnmt9xV7jiUmgp7/Uo9MU+GulT5nr JfTlAkEc2REpMyhnHUBtg5FnTpJm2auklYzBNqWai6KCQMOK0G+oK+bNOfcqyp1N ajljsrfxvNHZc42Ewignux/1PZC5HAE84XT9n2DpfZsZpEbx0VBMeSToVK4wfQsj 2e0= -----END CERTIFICATE-----Generated at Mon Jun 2 06:13:51 2025 by rpki-client