$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5418b4d0-7480-41be-a568-008f76efc155.roa File: 5418b4d0-7480-41be-a568-008f76efc155.roa (raw, json) Hash identifier: 12vic4vre8vcBBG0iYIN2D4PaXI/obkW8D7fD0sQihA= Subject key identifier: B7:F3:4E:58:E3:C4:0E:3A:58:FE:26:7F:10:FA:11:7D:45:40:8D:FD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 190A40FC3B3C8219D60276094632CC09D965D7BE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5418b4d0-7480-41be-a568-008f76efc155.roa Signing time: Fri 16 May 2025 00:20:06 +0000 ROA not before: Fri 16 May 2025 00:20:06 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0a:40:fc:3b:3c:82:19:d6:02:76:09:46:32:cc:09:d9:65:d7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:20:06 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=26a95308868a02f5a8585f89e1f9052abc9e115fff61d26723661056eb8d555c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:aa:2f:01:4f:70:a6:c8:a5:eb:86:ab:72:91: cb:26:2e:bb:90:25:92:15:16:92:ec:09:b3:ce:77: 8d:05:9a:54:4a:15:f9:0e:39:84:02:de:57:8c:d6: a2:d8:28:21:be:b6:75:dc:2e:ab:94:cc:0e:bc:d8: d7:5f:be:aa:f7:cf:82:48:de:5a:04:7b:0b:d4:dd: f8:a7:cb:01:a7:08:2c:06:bd:b2:68:e8:ab:d9:52: 7c:3d:54:76:ad:e5:60:0f:f7:4a:b4:86:90:7d:8a: 9c:e3:43:45:4d:2e:c2:e9:0f:ce:f3:6f:c4:95:26: a8:73:75:48:07:5f:70:b1:72:23:5b:f9:d6:6f:5e: 0a:9e:db:5b:3f:aa:15:e2:39:70:98:90:6b:71:8f: db:63:5f:a7:c8:73:d4:83:d8:cc:fa:ac:7d:22:ae: 10:c6:8e:b9:71:27:a2:48:ba:8f:a0:57:18:a5:0a: 7f:52:5a:db:d5:da:b0:6c:49:21:3a:d8:14:8b:f0: b4:1d:2d:30:23:51:e3:ec:04:2c:b0:08:41:ed:ae: c1:ae:30:c7:1e:b5:17:79:dd:51:8b:ca:35:0d:71: 07:e0:b6:12:27:e9:5c:14:d1:c6:d0:c8:7a:05:0d: cb:2a:07:b3:72:93:c0:a0:7d:aa:bc:60:86:75:14: 45:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F3:4E:58:E3:C4:0E:3A:58:FE:26:7F:10:FA:11:7D:45:40:8D:FD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5418b4d0-7480-41be-a568-008f76efc155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:e040::/48 Signature Algorithm: sha256WithRSAEncryption 55:ea:16:47:94:0e:ed:24:de:9a:d7:9e:20:88:4a:fe:98:07: 3d:ec:de:59:37:6a:2e:9d:bf:7d:3b:a4:17:08:4e:8a:28:9a: 97:ce:ad:12:fd:3a:04:9c:e4:47:5f:71:d4:fb:3d:44:25:07: a9:e6:51:78:ff:d5:3b:9d:56:1b:b0:b2:2a:c2:31:db:f0:78: 7b:68:57:51:bc:3c:b0:ae:ee:ee:70:69:ad:cf:45:87:e6:eb: c7:91:c1:f8:93:8a:81:40:46:3d:7d:88:a3:2f:89:93:83:b4: 50:89:6c:14:cc:fc:33:5d:1f:cb:6e:b7:0b:37:15:38:3d:3d: 69:83:02:ef:93:9a:19:8d:58:2f:2b:61:67:f4:ff:09:5c:f3: 96:ca:c2:81:9f:1d:52:e4:d1:15:27:81:66:92:a9:36:13:76: 34:3f:2d:e6:82:35:95:5f:00:9f:07:2c:e2:c7:f7:72:89:db: d0:5c:3f:0e:70:03:7c:fd:d9:d5:19:c9:89:21:18:4b:e2:7a: e7:8b:a6:0c:7a:63:2a:67:28:a9:c9:d0:b5:7a:9c:b1:2d:09: fb:cf:91:57:cd:9f:2a:7c:85:cd:42:7b:76:3c:58:fe:6e:9e: b4:f1:4c:69:9c:1a:76:79:01:f4:37:e5:3a:e2:35:91:e5:fb: ed:49:48:76 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGQpA/Ds8ghnWAnYJRjLMCdll174wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMjAwNloX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAMjZhOTUzMDg4NjhhMDJmNWE4NTg1 Zjg5ZTFmOTA1MmFiYzllMTE1ZmZmNjFkMjY3MjM2NjEwNTZlYjhkNTU1YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qovAU9wpsil64arcpHLJi67kCWS FRaS7AmzzneNBZpUShX5DjmEAt5XjNai2CghvrZ13C6rlMwOvNjXX76q98+CSN5a BHsL1N34p8sBpwgsBr2yaOir2VJ8PVR2reVgD/dKtIaQfYqc40NFTS7C6Q/O82/E lSaoc3VIB19wsXIjW/nWb14KnttbP6oV4jlwmJBrcY/bY1+nyHPUg9jM+qx9Iq4Q xo65cSeiSLqPoFcYpQp/Ulrb1dqwbEkhOtgUi/C0HS0wI1Hj7AQssAhB7a7BrjDH HrUXed1Ri8o1DXEH4LYSJ+lcFNHG0Mh6BQ3LKgezcpPAoH2qvGCGdRRFTQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLfzTljjxA46WP4mfxD6EX1FQI39MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0MThiNGQwLTc0ODAtNDFiZS1hNTY4LTAwOGY3NmVmYzE1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAOBAMA0GCSqGSIb3DQEBCwUAA4IBAQBV6hZHlA7tJN6a154g iEr+mAc97N5ZN2ounb99O6QXCE6KKJqXzq0S/ToEnORHX3HU+z1EJQep5lF4/9U7 nVYbsLIqwjHb8Hh7aFdRvDywru7ucGmtz0WH5uvHkcH4k4qBQEY9fYijL4mTg7RQ iWwUzPwzXR/LbrcLNxU4PT1pgwLvk5oZjVgvK2Fn9P8JXPOWysKBnx1S5NEVJ4Fm kqk2E3Y0Py3mgjWVXwCfByzix/dyidvQXD8OcAN8/dnVGcmJIRhL4nrni6YMemMq ZyipydC1epyxLQn7z5FXzZ8qfIXNQnt2PFj+bp608UxpnBp2eQH0N+U64jWR5fvt SUh2 -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:29 2025 by rpki-client